GitHub

What it shows

Three things, gathered into one quiet list: the pull requests you have open, the ones waiting on your review, and the issues assigned to you. Most recently updated first, seven at most — enough to know whether the morning starts with a review or with your own branch.

Each line is a title and the repository it belongs to. It isn’t a feed to scroll or a board to tend; it’s the short answer to “what’s on me right now”, sitting in a corner until you look.

You choose the repositories

This is where MofTab differs from most extensions that read your GitHub, and it’s worth understanding why.

The usual approach is an OAuth app, and for private repositories GitHub offers those exactly one permission: a scope that grants full read and write access to every repository you can see. The consent screen says as much — full control of private repositories. For something whose job is to show you a list, that is an absurd amount of power to be handed.

So MofTab is a GitHub App instead. Apps take fine-grained permissions — pull requests: read, issues: read — and, more importantly, you pick which repositories the App can see. One, a few, or all of them; your decision, and changeable afterwards. MofTab sees those and nothing else: not your other repositories, not your code, not the rest of your account.

How it connects

Two steps, kept deliberately separate. First you authorise MofTab — a standard GitHub sign-in, where your password is only ever typed on GitHub’s own page. Then you choose the repositories, on GitHub’s installation screen, picking specific ones or granting all of them.

Separating them means granting access is something you decide explicitly, on GitHub’s page, rather than something bundled into a sign-in you clicked past. You can revisit it whenever you like — add a repository, remove one, or revoke the whole thing from your GitHub settings. Read-only, one account, and off until you switch it on.

What it doesn’t do

Read-only is the whole posture. MofTab never opens, closes, comments on, reviews, merges, or edits anything; it can’t push code or touch an issue. That isn’t a promise about good behaviour — the permissions it holds simply don’t allow it, and GitHub is the one enforcing that.

It reads one account. There is no organisation dashboard and no team view — this is your own work, not a management surface. Alerts for new pull requests exist, but separately, and only if you turn them on.

Your items are cached on your device so the tab opens instantly, and cleared when you disconnect. The pull requests and issues themselves travel straight from GitHub to your browser. The only piece Moftly operates is a small relay used during sign-in — GitHub requires a secret at that step, and it cannot live inside an extension — and it never sees your repositories, your code, or your work.