sysinfo@paul163-ai: Initial submission

[Paul163-ai]

Comprehensive system monitor desklet showing CPU, RAM, Swap, GPU,
Disk, Network, Battery and Uptime with a fully transparent background.
Requires Cinnamon 5.0+. nvidia-smi optional for GPU section.

[github-actions]

Best-practices scanner

This is a regex-based check for API usage that can pose security, performance or
maintainability issues, or that may already be provided by Cinnamon. Most findings
are advisory and do not automatically disqualify a pull request.

This check is not perfect and will not replace a normal review.

---

Found 2 potential issue(s):

⚠️ WARNING

⚠️ sync_file_load_contents

sysinfo@paul163-ai/files/sysinfo@paul163-ai/desklet.js:284

let [ok, c] = pidFile.load_contents(null);

Synchronous load_contents() blocks the main loop.
Use load_contents_async() instead.

ℹ️ INFO

ℹ️ shell_string_spawn

sysinfo@paul163-ai/files/sysinfo@paul163-ai/desklet.js:287

if (pid) GLib.spawn_command_line_async("kill " + pid);

Prefer argument vector spawn functions over shell command strings.
This is especially important when arguments include untrusted input (user data,
filenames, settings values, etc.) as shell strings are vulnerable to injection.
Static command strings are generally fine, but argv is always safer.
Use Util.spawn(["cmd", "arg1", "arg2"]) or Util.trySpawn() instead.

---

Automated pattern check.