logoalt Hacker News

lnrd • today at 6:05 PM • 2 replies • view on HN

Not necessarily related to this or the author, but with all the supply chain attacks going on this year I sadly lost all trust in running something from a new GitHub repo that doesn't come from some trusted person/entity.

Love the idea btw, reminds me of a similar app that added xmas light to the dock.


Replies

morley • today at 8:03 PM

I had the same thought, and it's kind of interesting that the top install instruction in the repo (https://github.com/saragordic/window-sweaters#get-it) is to install it with an LLM agent:

> Install Window Sweaters on my Mac: https://github.com/saragordic/window-sweaters

I just prepended that prompt with "Check if this is safe and doesn't make network requests, then". Which I actually think is safer than relying on Homebrew, or even an App Store install, where you have no idea whether the source code actually produced the build you're installing.

➕ show 2 replies
mtrovo • today at 6:24 PM

Maybe it's about time we stop sharing vibe coded app binaries and start an app store for trading prompts to run on our own local coding LLMs instead.

➕ show 4 replies