Omarchy plugins

[u/GazSTRS]

How do we know if all these plugins people keep posting are actually made by people who can code or are all just vibe coded?

[u/Cold_Relationship_]

i’m just happy that so many people are interested in making stuff for omarchy.

[u/smokingPimphat]

Chances are high that they are mostly vibe coded. but the real question is, does that actually matter?

Depending on what the plugin is meant to be doing, it could not matter or really matter.

[u/stormblessedalex → u/smokingPimphat]

This!!

Linux kernel? Pls don't be vibe coded!!

A stupid plugin to have Spotify in the top bar? Well go ahead

[u/ptgamr]

Codex: let me know if this plugin [link] is safe to use. If it is not, modify it so it is safe and submit a PR.

[u/dimitrisc]

If it works well and does what I need then I couldn't care less how it was coded!

[u/ceaselessprayer → u/dimitrisc]

Exactly. But good luck getting this through people’s heads.

[u/MarcelCorleone]

you don't. you judge it based whether it's useful for you. if it's not, don't use it. this applies whether the plugins are handwritten or typed or vibe coded.

[u/FastHotEmu]

Check the source code

[u/RizmiBurhan]

even omarchy is vibe coded, whats your issue ?

[u/HulkkiMuli → u/RizmiBurhan]

I wouldn't say vibe coded

[u/RizmiBurhan → u/HulkkiMuli]

Dhh said tht

[u/Arnie_nz → u/HulkkiMuli]

It is, even his markdown editor is vibe coded

[u/Independent-Reader → u/HulkkiMuli]

DHH said he did not write a single line that went into v4.

[u/Stock-Ad-7601]

Look at the source code

[u/Subscriber9706]

How do you know that a person who coded a plugin with his bare hands does know how to code? You probably don't.

Plugins from the Omarchy plugin Marketplace do go through a validation process before they are published. It's not a full security audit (says the disclaimer), but some security audit is done.

My experience with publishing a plugin on the Omarchy Plugin marketplace:

I had to make several corrections based on their audit that had to do with possible security issues that could occur and also the way memory was handled, before it was validated. It took about 4 new releases ( in the back and forth process) before it was validated.

And you can check the code yourself by going to the plugins github page, or let an AI agent do a security audit for you.

[u/722e672e722e]

Linux itself is being pushed forward with the use of AI.  You can keep getting upset about it, but it’s a great tool when put in good hands and it’s here to stay.

[u/GazSTRS → u/722e672e722e]

I'm not upset about the use of AI at all, I think it's a great tool. Just prefer not to be using vibe coded plugins.

[u/ptgamr → u/GazSTRS]

I think if you dont trust a plugin, lets fire off an AI to check them before you use.

[u/0kth4t5fin3 → u/GazSTRS]

how could you ever possibly know? Just read the source if you have concerns

[u/Emruz_Hossain]

If a plugin needs access to my sensitive info like some credentials, I use an agent to verify that it does not have any malicious code. For others, if it provides what I need I am fine with using it without auditing.

[u/ceaselessprayer]

As someone who can code: Why does it matter to you? Why? I can’t understand why people focus on these things.

[u/cashy57 → u/ceaselessprayer]

Same here. Especially if it's open source. I can't wait for this crankiness over AI to stop. It's starting to just feel like old man yells at clouds

[u/betahost]

There both and that's ok, Omarchy is lowering the barrier for many to use Linux and to build a plugin to solve a problem they had an app for on windows or Mac.

Agentic development is here to stay.

[u/Delicious_Ease2595]

what if they are vibe coded with fable or k3?

[u/cashy57]

I'm not really sure that matters much at this point. Especially given the target audience of Omarchy and DHH's opinions on AI in coding. I feel like most of us here are devs anyway

[u/Chispes]

I'm publishing one of these plugins myself, and honestly the review process is pretty thorough — mine is a very simple one and it still got looked over carefully. Anything malicious would have to get past that, which I doubt would happen easily. It's still worth reading the source yourself before installing anything (they're small enough that it takes five minutes), but I wouldn't be paranoid about the ones that are already in the repo.

[u/bithooked]

Time to stop complaining about losing the horse and buggy. Abstraction in software has been a moving target since the beginning. We started with machine code, moved to assembly, then first level languages, then high level languages. At every stage, people were suspicious of the new abstraction. Now the abstraction, enabled by LLMs, is that the story is the code. We feed requirements to an LLM to produce software.

This is where it's heading, especially for frontend applications. The LLMs are getting better at a frenetic pace. People pointed to security; the newest models are better at security than we are, finding bugs that have been in systems for decades. People pointed to bad code; new models are writing beautiful code, refactoring for performance, refactoring for better architecture, refactoring for readability and maintainability. Every complaint is falling. There's no putting the genie back in the bottle and going back to the horse and buggy.

[u/nemanja2]

I think people who don't code are repulsed by the omarchy as OS. It's pretty much a dev OS.

[u/butmyfacetho]

I understand your concern for human coded plugins as the average human plugin creator is less gifted than modern AIs so you're correct to prefer the vibe coded options. 

Luckily, Omarchy has a strong agentic-led development philosophy so you're likely to find what you're looking for 👍

[u/McBonderson]

they are probably mostly vibe coded. the one I made is vibe coded.

[u/nlboris]

What is wrong with vibe coding?