z-shell/zi
View on GitHub ↗ ★ 916 Shell
✨ A high-performance plugin manager and toolkit for Zsh.
3 mentions on Hacker News by 3 people: 0 stories, 3 comments · first 2024-04-08 · latest 2024-04-09
20082026
-
…means nothing - a malicious person would of course try to make all their actions seem as such. [0]: https://github.com/z-shell/zi/issues/287 , though it doesn't notice the double-curl in "verified" being a massive security issue which…
comment by dzaima · 2024-04-09 · in Looking into an apparently scammy looking zsh plugin manager called “zi” -
…-p "$HOME/.zi" && command chmod go-rwX "$HOME/.zi" command git clone -q --depth=1 --branch "main" https://github.com/z-shell/zi "$HOME/.zi/bin" && \ print -P "%F{33} %F{34}Installation successful.%f%b" || \ print -P "%F{160} The clone has…
comment by tronicdude · 2024-04-08 · in Looking into an apparently scammy looking zsh plugin manager called “zi” -
https://github.com/z-shell/zi?tab=readme-ov-file#%E2%84%B9%E... Well, it appears they do acknowledge it's a fork at least, but agreed I wouldn't want this on my computer. The toctou issue is ... Bleh.
comment by hughesjj · 2024-04-08 · in Looking into an apparently scammy looking zsh plugin manager called “zi”