Repository navigation
Security policy? #990
Description
Although I'm impressed by the capabilities of flyline I was concerned seeing
Downloaded 151 crates (14.9MiB) in 1.35s (largest was `linux-raw-sys` at 2.1MiB)
Considering the sensitive nature of the commands, data, and operations performed it would be good to know how security and privacy is maintained.
I noticed that it adds four unix stream sockets to the bash process but so far not been able to identify how they are used.
Reacted by pallaswept
Activity
HalFrgrd commentedon Sep 6, 2026
Funny you should bring this up because this was one reason I wanted to make flyline. I used to use oh my zsh but I didnt like it would alert me of new updates (i.e. it was phoning home).
Flyline is fully offline and I intend to keep it that way. The
flyline upgradecommand just gives you the same command that you use to install it instead of actually trying to download an upgrade itself.The unix sockets come from using termina: https://github.com/HalFrgrd/termina/blob/5b67693f2c5173c61a13d18517e2cebfc96a6a9d/src/event/source/unix.rs#L28. It seems to be their mechanism of interrupting polling when the terminal changes size or another wakeup event arrives.
As for the crates sizes, flyline does have a few dependencies. I dont think its anything crazy for a multi faceted project of this size. I have tried to keep them under control. e.g. switching to regex lite since that shaved 1mb off the output binary.
HalFrgrd commentedon Sep 6, 2026
If you have ideas on how to make it more secure and trustworthy, let me know!