Omahub
← All plugins
S

WakaTime

by salimhabeshawi

WakaTime coding activity tracker for Omarchy Quattro

GitHub

Security review

No obvious issues detected

Deterministic scan — not a security guarantee

None
Risk level
None
Analyzed commit
87ef279
Scanned
1 month ago

No potentially dangerous behavior detected in the analyzed commit.

Automated analysis only — not a security guarantee.

AI advisory review

No obvious issues detected

Language-model assessment · ~deepseek/deepseek-v4-flash-latest — advisory only

None
AI risk level
None
Recommendation
install
Model
~deepseek/deepseek-v4-flash-latest
Analyzed commit
87ef279
Reviewed
1 month ago

The plugin is a straightforward WakaTime tracker that reads and writes the standard ~/.wakatime.cfg file and invokes the official wakatime-cli. All subprocess calls use argument arrays with no shell interpolation, and the config write path uses a temp file with 0600 permissions and an atomic rename. No obfuscation, destructive commands, or credential exfiltration were found.

How this check works

This review combines the deterministic scan (the rule-based results above) with an independent look at the plugin's code by a language model. The model reads a trimmed sample of the repository's files, the manifest, and the README, then gives a plain-language risk level and a recommendation: install (no notable danger), review (look closer first), or avoid (clearly dangerous).

It runs on the same analyzed commit as the deterministic scan and is strictly advisory — it is not a security guarantee and never blocks a plugin by itself. A human moderator still reviews plugins before they are listed.

AI advisory only — automated analysis, not a security guarantee.

Install
$ omarchy plugin add https://github.com/salimhabeshawi/wakatime-omarchy-plugin --enable
Productivity #bar #quickshell #launcher

WakaTime for Omarchy Quattro

Preview

WakaTime coding-time tracker for the Omarchy Quattro bar, showing today's time spent coding and surfacing your daily stats in a popup panel.

Requirements

  • Omarchy Quattro (omarchy-shell)
  • wakatime-cli — the command-line client used to fetch coding stats. Install it from the WakaTime CLI releases and make sure wakatime-cli is on your PATH.
  • A WakaTime API key — sign up at https://wakatime.com, then copy your key from your account settings (waka_...). Your editors (VS Code, Neovim, etc.) keep sending heartbeats on their own — this plugin only reads and displays the stats.

Install

omarchy plugin add https://github.com/salimhabeshawi/wakatime-omarchy-plugin.git --enable

The plugin appears as a WakaTime widget in the bar, showing today's coding time. Left-click it to open the panel.

Usage

  • If you have not set an API key yet, the panel shows the setup form: paste your waka_... key and click Save API Key.
  • Once configured, the panel shows a Today's Time dashboard with a Sync Now button, and the bar widget refreshes automatically every 5 minutes.

Configure

The API key and settings live in ~/.wakatime.cfg (the standard WakaTime config). Saving a key from the panel merges it into the existing file without wiping any other entries. You can also set the key manually:

[settings]
api_key = waka_xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx

The bar widget only appears in the bar if it is present in your shell layout; move it like any other widget with omarchy bar move. Toggle it on/off with omarchy plugin <enable|disable> io.github.salimhabeshawi.wakatime.

Remove

omarchy plugin remove io.github.salimhabeshawi.wakatime