Is visualJJ safe?

[rbtcollins]

https://www.visualjj.com/ looks shiny but its hard to tell whether its a legitimate IDE plugin from a shy person, or a long-play supply chain attack. Proprietary code, no public repo, no place for people to discuss with the developer(s).

Does anyone here have more insight?

[martinvonz]

It's written by @sheremetyev. I'm sure they're willing to answer questions here. They're also available on the jj Discord chat.

[sheremetyev]

Hi Robert,

Thanks for checking out VisualJJ - I'm the "shy person" behind it 😊. I’m on the Jujutsu Discord as @shrmtv and just sent you a LinkedIn invite - happy to chat in either place.

The repo isn't public yet while I nail down a sustainable model (likely free for personal use, paid for companies). If you'd like to go deeper on security, feel free to DM me on Discord or LinkedIn.

Cheers,
Fedor

[evmar]

FWIW I independently found this site and it also tickled my sense of it being some sort of scam, so take this as a second friendly data point that you might want to change something.

Thinking back, I think it's a combination of it looking very professional (good work!) while also having no information about the current status or funding behind it, which makes it feel AI generated. Like the copyright just says "visualjj.com", no humans, and there's nothing about the funding model. Even a small "about us" or a "currently in beta" blurb of paragraph or two would probably have helped a lot.

[sheremetyev]

Thanks for the feedback Evan - really appreciate you sharing your thought process! I see what you mean. Haven't had time to add more content to the site yet, but I will. The "beta" label was on some pages, but not the homepage - fixed that now. And I can't take credit for the professional look - it's all thanks to the kind folks at Cruip and their excellent template :)