How secure is the new KDE Plasma Tiling Extension "Bismuth" due to npm?

• bismuth

  138 2,352 0.0 TypeScript

  KDE Plasma add-on, that tiles your windows automatically and lets you manage them via keyboard, similarly to i3, Sway or dwm.

  

It's great that there's a new tiling extension for KDE Plasma developed, called Bismuth. However, it makes use of `npm` and installs dependencies from it, which may have dependencies, which have dependencies, ... you got it: It's hard to keep track what in the end is pulled into your project and if it has flaws.

• sway

  613 13,813 9.2 C

  i3-compatible Wayland compositor

  

Thus, after reading Drew DeVault (the guy who develops Sway) blog post I wonder if it opens security wholes when I start using Bismuth?

• InfluxDB

  www.influxdata.com featured

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

• Grid-Tiling-Kwin

  21 868 8.3 JavaScript

  A kwin script that automatically tiles windows

Note that there are at least other alternative. Maybe not as powerful as I imagine Bismuth/Krohnite is, the one I use, [Grid-tiling-kwin](https://github.com/lingtjien/Grid-Tiling-Kwin) (though it's being funny lately with Wayland and not sure why)

Suggest a related project