Flatsonar

Livestream List (Qt)

by Livestream List Contributors

Monitor your favorite livestreams (Qt version)

Dangerous permissions Unverified publisher GPL-2.0 v1.5.4
Install Source code

About

Livestream List (Qt) is a PySide6/Qt6 application for monitoring livestreams on Twitch, YouTube, and Kick. Get notified when your favorite streamers go live and launch streams directly in your preferred video player. Features include: - Monitor Twitch, YouTube, and Kick channels for live status - Desktop notifications when streams go live - Streamlink integration for launching streams in mpv/VLC - Import your followed channels from Twitch - Filter and sort your channel list - System tray support

Permissions

4 permissions weaken the sandbox. Flatsonar asks before installing.

  • access to a sensitive location (~/.config/autostart): credentials or autostart
    --filesystem=~/.config/autostart:create
  • sandbox escape: can run commands on the host via flatpak-spawn
    --talk-name=org.freedesktop.Flatpak
  • owns desktop name org.kde.StatusNotifierItem-2-1: can impersonate a desktop component
    --own-name=org.kde.StatusNotifierItem-2-1
  • your keyring / saved passwords
    --talk-name=org.freedesktop.secrets
  • inter-process communication (needed for X11)
    --share=ipc
  • X11 display, only when Wayland is unavailable
    --socket=fallback-x11
  • Wayland display
    --socket=wayland
  • network
    --share=network
  • notifications
    --talk-name=org.freedesktop.Notifications
  • system tray
    --talk-name=org.kde.StatusNotifierWatcher
  • talks to org.kde.KWin
    --talk-name=org.kde.KWin
  • owns bus name app.livestreamlist.Placement.*
    --own-name=app.livestreamlist.Placement.*
  • portal OpenURI
    --talk-name=org.freedesktop.portal.OpenURI
  • portal Desktop
    --talk-name=org.freedesktop.portal.Desktop
  • access to ~/.config/livestream-list-qt
    --filesystem=~/.config/livestream-list-qt:create

Who publishes this

Nobody has confirmed that the publisher controls this app id. Flatsonar warns before installing.

  • app.livestreamlist.LivestreamListQt claims the domain livestreamlist.app; only its owner can prove that
    publisher:namespace
  • the build has network access: it can download things the manifest does not list
    build-options:--share=network
  • fetches from the network during the build (nothing to audit beforehand): pip3 install --prefix=${FLATPAK_DEST} --no-cache-dir .
    livestream-list-qt:build-commands

Maintenance

Recent activity on the upstream repository, or built and reviewed by Flathub.

No staleness signals: recent activity, or built and reviewed by Flathub.