Omahub
← All plugins
O

Equalizer

by Omarchy community

A native six-band PipeWire equalizer for the Omarchy bar.

GitHub

Security review

No obvious issues detected

Deterministic scan — not a security guarantee

None
Risk level
None
Analyzed commit
e4742a9
Scanned
3 weeks ago

No potentially dangerous behavior detected in the analyzed commit.

Automated analysis only — not a security guarantee.

AI advisory review

No obvious issues detected

Language-model assessment · ~deepseek/deepseek-v4-flash-latest — advisory only

None
AI risk level
None
Recommendation
install
Model
~deepseek/deepseek-v4-flash-latest
Analyzed commit
e4742a9
Reviewed
3 weeks ago

The plugin is a well-structured PipeWire equalizer with a Python backend that validates all inputs, uses argument arrays (no shell injection), and only writes to user config directories. The install/remove scripts are safe and only affect the user's own configuration. No malicious or obfuscated code found.

  • The plugin restarts WirePlumber via systemctl --user, which may briefly interrupt audio, but this is expected functionality and clearly documented.
  • The plugin runs unsandboxed inside Quickshell, so any future vulnerability could be exploited, but the current code is carefully validated and bounded.
How this check works

This review combines the deterministic scan (the rule-based results above) with an independent look at the plugin's code by a language model. The model reads a trimmed sample of the repository's files, the manifest, and the README, then gives a plain-language risk level and a recommendation: install (no notable danger), review (look closer first), or avoid (clearly dangerous).

It runs on the same analyzed commit as the deterministic scan and is strictly advisory — it is not a security guarantee and never blocks a plugin by itself. A human moderator still reviews plugins before they are listed.

AI advisory only — automated analysis, not a security guarantee.

Install
$ omarchy plugin add https://github.com/ParvvOK/equalizer --enable
Other #media

Omarchy Equalizer

equalizer is a native Quickshell/Quattro bar widget backed by one WirePlumber-managed PipeWire filter-chain smart sink. It provides six bands at 60 Hz, 250 Hz, 1 kHz, 4 kHz, 8 kHz and 16 kHz, persistent state, built-in/user presets, and recovery-friendly diagnostics.

preview

Install and enable

Install this directory with the current Omarchy plugin manager, then add omarchy.equalizer to the bar layout (or use the plugin manager’s Enable action). Restart/reload the Omarchy shell using the current supported command. No second Quickshell instance, root access, system config, network access, or daemon installation is required.

The QML entry point invokes the bundled backend/eqctl directly, so a separate system installation of eqctl is not required.

Architecture

Widget.qml / EqualizerPanel.qml
          ↓ validated, debounced arguments
       eqctl
          ↓ state + live Props.params update
WirePlumber smart sink: input.omarchy.equalizer
          ↓ filter-chain DSP
  omarchy_equalizer_output
          ↓
   physical PipeWire sink

The UI owns presentation and sends only a fixed command vocabulary. eqctl owns schema validation, atomic persistence, preset data, device snapshots, graph creation, runtime control updates, and diagnostics. The six-band UI is a view over an N-filter model; the JSON format already carries frequency, Q and filter type for future parametric/AutoEQ support.

State is explicit in the controller (ready, enabled/bypassed, device, preset, graph and route status). QML never parses human-readable command output. Runtime updates discover the smart filter node from structured pw-dump, locate its named eq_band_N:* and preamp:* controls in Props.params, and send {"params":[name,value]} with pw-cli set-param. Graph creation/recovery writes the plugin-owned WirePlumber fragment and restarts only WirePlumber; it never starts a second PipeWire daemon.

The current Quattro contract is the installed schemaVersion: 1 manifest, WidgetButton, Panel, KeyboardPanel, BorderSurface, Button, and qs.Commons theme tokens. The bar widget owns its anchored panel instance, which is the live bar-widget pattern used by current first-party-compatible plugins.

CLI

eqctl status [--json]       eqctl get [--json]
eqctl enable|disable|toggle eqctl reset
eqctl set-band INDEX GAIN   eqctl set-preamp GAIN
eqctl auto-preamp
eqctl preset list|apply NAME|save NAME|delete NAME
eqctl device list|current|profile ID
eqctl diagnostics --json

All values are bounded and finite. --json is intended for QML and automation. Preset names are data, never shell fragments.

Presets and profiles

Built-ins are immutable JSON data in presets/. User presets and state live below ~/.config/omarchy/equalizer/, separate from plugin code. The controller also owns ~/.config/wireplumber/wireplumber.conf.d/omarchy-equalizer.conf; it contains only the graph definition and is regenerated when the graph is missing or its shape changes. State is versioned and written through a flushed temporary file followed by atomic rename. Invalid state is preserved as state.invalid.TIMESTAMP.json and replaced with safe defaults.

The default mode is per-device; stable PipeWire node names are used for device profile keys when available. A missing device never deletes its profile.

Audio design

The backend creates one smart sink with a real filter-chain containing a 20 Hz low-shelf preamp plus bq_lowshelf, four bq_peaking filters, and bq_highshelf. Applications link to the smart sink and its output links to the physical default sink. Slider changes update the filter node’s named Props.params in place via pw-cli set-param; normal controls do not restart PipeWire, WirePlumber, Quickshell, or the shell. WirePlumber is restarted only when the EQ graph must be created or recovered.

Auto-preamp is the negative maximum positive EQ gain. Reset means zero band gain and zero preamp and disables auto-preamp. Disable keeps the graph and route usable but applies flat filter gains; enable reapplies the saved live gains.

Troubleshooting

Run eqctl diagnostics --json, verify pw-dump and wpctl are available, and check that the user PipeWire session is running. After a PipeWire restart, reopen the panel; the controller retries the status path and reapplies saved values. If the device is unplugged, its saved profile remains.

removing the plugin using the inbuilt omarchy plugin remove doesnt clear the config files and the equalizer will still show up in the audio widget in the shell as a source if causing any problem, run remove.sh and all the orphaned config files shall be pruned.

Security

The plugin runs unsandboxed inside Quickshell, so the backend is intentionally narrow. It uses direct executable argument arrays, never sh -c, eval, privilege escalation, network access, telemetry, or arbitrary PipeWire command forwarding. Inputs, JSON, preset names, frequencies, gains, Q values, and profile sizes are bounded. It writes only the equalizer state/preset directory and its own WirePlumber fragment.

Personal Note

The plugin is completely vibecoded, other than this line.