omachest / plugins
Submit
All plugins

@ericvrp/omarchy-bar-autohide

Bar Autohide v1.3.0

Event-driven auto-hide for the Omarchy bar

Unverified

Start with the source

Version 1.3.0

Read the code and installation instructions at this exact commit.

Inspect source
Source commit514d6fc353f5b88b7c159edc7d3cab74d60506ce

The standard Omarchy install command follows upstream code and may install a different commit. Check the repository’s instructions before installing.

Release history

1 release
Published versions of Bar Autohide
VersionPublishedPublisherRecord
v1.3.0Sep 9, 2026Upstream monitorReceipt ↗

What was checked

Manifest structure, declared files, QML parsing, repository identity and bounded source analysis passed at this commit.

PENDING REVIEW

Waiting for human review. No verification has been granted.

Security capabilities

Last scan: Sep 9, 2026

Automated security analysis is not a guarantee that a plugin is safe. “No match” means the scanner did not recognize a pattern; it is not proof of absence.

network · No match
shell · 4 matches

Service.qml:15 ↗property var shell: null

Service.qml:93 ↗command: ["bash", "-c", "[[ -f " + Util.shellQuote(root.barOffFile)

scripts/dev-install.sh:1 ↗#!/bin/bash

scripts/dev-uninstall.sh:1 ↗#!/bin/bash

process · 1 matches

Service.qml:89 ↗Process {

filesystemRead · No match
filesystemWrite · 11 matches

Service.qml:85 ↗Util.execDetached("rm -f " + Util.shellQuote(barOffFile))

Service.qml:103 ↗Util.execDetached("mkdir -p " + Util.shellQuote(root.toggleDir)

Service.qml:188 ↗Util.execDetached("mkdir -p " + Util.shellQuote(toggleDir)

Service.qml:191 ↗Util.execDetached("rm -f " + Util.shellQuote(barOffFile))

scripts/dev-install.sh:24 ↗mkdir -p "$plugin_dir" "$(dirname -- "$shell_config")"

scripts/dev-install.sh:30 ↗rm -f "$plugin_dir/cursor_poll.py"

scripts/dev-install.sh:31 ↗rm -rf "$legacy_plugin_dir"

scripts/dev-install.sh:78 ↗os.unlink(temporary)

scripts/dev-uninstall.sh:58 ↗os.unlink(temporary)

scripts/dev-uninstall.sh:66 ↗rm -rf "$plugin_dir"

scripts/dev-uninstall.sh:67 ↗rm -rf "$legacy_plugin_dir"

environment · 29 matches

Service.qml:13 ↗property string toggleDir: Quickshell.env("HOME") + "/.local/state/omarchy/toggles"

scripts/dev-install.sh:16 ↗repo_dir=$(cd -- "$(dirname -- "${BASH_SOURCE[0]}")/.." && pwd)

scripts/dev-install.sh:17 ↗config_home=${XDG_CONFIG_HOME:-$HOME/.config}

scripts/dev-install.sh:19 ↗plugin_dir="$config_home/omarchy/plugins/$plugin_id"

scripts/dev-install.sh:20 ↗legacy_plugin_dir="$config_home/omarchy/plugins/autohide"

scripts/dev-install.sh:21 ↗shell_config="$config_home/omarchy/shell.json"

scripts/dev-install.sh:22 ↗defaults="${OMARCHY_PATH:-/usr/share/omarchy}/config/omarchy/shell.json"

scripts/dev-install.sh:24 ↗mkdir -p "$plugin_dir" "$(dirname -- "$shell_config")"

scripts/dev-install.sh:26 ↗if [[ $repo_dir != "$plugin_dir" ]]; then

scripts/dev-install.sh:27 ↗install -m 0644 "$repo_dir/manifest.json" "$plugin_dir/manifest.json"

scripts/dev-install.sh:28 ↗install -m 0644 "$repo_dir/Service.qml" "$plugin_dir/Service.qml"

scripts/dev-install.sh:30 ↗rm -f "$plugin_dir/cursor_poll.py"

downloads · No match
downloadExecution · No match
obfuscation · No match
credentials · No match
Automated validation details

Static pattern analysis and qmllint parsing. Up to 12 evidence samples per capability; all matching lines counted. Absence of a match does not establish absence of a capability.

  • Service.qml: parsed, 134 diagnostics. Static parser only; Omarchy imports may be unavailable.
Manifest at this commit
{
  "schemaVersion": 1,
  "id": "ericvrp.bar-autohide",
  "name": "Bar Autohide",
  "version": "1.3.0",
  "author": "Eric van Riet Paap",
  "description": "Event-driven auto-hide for the Omarchy bar",
  "license": "MIT",
  "kinds": [
    "service"
  ],
  "entryPoints": {
    "service": "Service.qml"
  }
}

Review history

No human review recorded.

Report this plugin

A report requests a rescan and moderation. It does not remove a plugin automatically.

For authorized reviewers

Review this plugin

Inspect the source and scan above, choose a decision, then submit the prepared issue on GitHub. Only configured reviewer accounts can record a decision.

Reviewing commit 514d6fc353f5b88b7c159edc7d3cab74d60506ce. GitHub identity is checked by the registry before any decision is recorded.

Code review checklist

All notes are public. Do not include credentials or private vulnerability details.

Next: sign in with your reviewer account and submit the GitHub issue. Opening the draft does not record your decision.

  • Service.qml: process execution, privilege escalation, or network access; inspect source

These checks do not include runtime testing or a full dependency audit. Plugins run with your user permissions. Read the verification policy.

Manifest SHA-256 digest
920b19cb7ab8c7cab721753ee1d954e07d3cf557e274379021e23ef3aad419b7