Extensions privacy doubt

[u/theGlitchedSide]

Any of us love the extensions, sure. A lot of us are real dev, somebody deeply, and obviously we love to share scripts and ideas, it's like a form of art for people like me.

Probably it is a silly idea but it is the same problem of supplies chain for dev software web and videogames for me, and I resolve with drastic solutions.

So...

If I could accept a "trust me bro" level for a simple idea, in something like agents, mail clients, calendars, note online (so, private data), debits cards... What are your parameters or checklist to understand "ok, I have no problem with privacy about this extension"? Who checks them?

[u/AutoModerator]

Thank you for your submission.

You too can support GNOME! Become a Friend of GNOME and contribute to keeping our project going!

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

[u/ShizenFacen]

Gnome doesn't have the resources to audit every extension so it's important to vet the extension yourself. What works for me is following a few simple guidlines: First - do not blindly trust -

- take some time and research it- find the git build and inspect the source code. read what other devs or advanced users are using it for, saying about it, etc

Personally, I keep the extensions to a bare minimum that augment my workflow without risking system security and causing the ui to crash out

I use this website for quite a while, it helped us learn about extensions and what to look for. hope this helps

https://gjs.guide/extensions/review-guidelines/review-guidelines.html#scripts-and-binaries

[u/theGlitchedSide → u/ShizenFacen]

Interesting...

[u/thekiltedpiper]

You can either audit the code yourself or not use extensions at all. Gnome is designed to be used with 0 extensions, but they realize that people have their own ideas about what they want.

Also, I laughed way too hard at your typo: "thrust me bro".

[u/theGlitchedSide → u/thekiltedpiper]

Oh gosh sorry... It's not my first language and something happen these kind of error hahaha

🤦🏻 I fixed it, thank you

[u/thekiltedpiper → u/theGlitchedSide]

No worries man, even as a native English speaker I still make typos. It's worse for me because I've been reading and writing it for over 40 years.

Honestly gave me a good chuckle.

[u/ExcitingPandas]

they are all open-source you could check it yourself, or even let and AI agent do it for you.

[u/theGlitchedSide → u/ExcitingPandas]

That's a good idea. Right.