A prompt sees every command you run, and the picker keeps them. That is a lot to hand a small tool, so here is exactly what whetuu does and does not do. No networkThere is no socket, no HTTP client and no sync anywhere in the binary. No telemetry and no update check. There is no account and no server to opt out of. Two filesRunning, whetuu writes exactly two. The history store, created with mode 600 and reset to it on every write, so one left readable by an older version corrects itself. And a cache of toolchain version strings at ~/.cache/whetuu/versions, which holds nothing else and can be deleted whenever you like. Data outside itBoth files follow the XDG base directory spec, so neither lives in the install directory. Removing whetuu with rm -rf ~/.whetuu cannot take your history with it. whetuu paths prints both locations. One install editThe installer appends two lines to the config of the shell in $SHELL, and nothing else. Not the config of a shell you do not use, and never twice. WHETUU_NO_MODIFY=1 makes it print them instead. Everything lands in ~/.whetuu, so removing it is one directory. Skip a commandStart a command with a space and it is never recorded. Use it for the ones carrying a token. Only successful commands are stored at all. No shell, everwhetuu runs two subprocesses: git and the toolchain version probe. Both get a fixed list of arguments rather than a command line, so nothing you type is ever interpreted as a command. State like a rebase in progress is read straight out of .git with no subprocess at all. Escapes defangedEvery control byte in a command, a branch name or a directory becomes a ? before it reaches your terminal. A repository you just cloned cannot repaint your screen or move your cursor through whetuu. Nothing to configureNo config file means no config parser, no theme format and nothing of yours being executed at startup. The attack surface is the binary and the two commands above. One caveatThe language module picks which toolchai...
First seen: 2026-07-23 16:06
Last seen: 2026-07-23 19:09