Flatsonar

Brave Origin

by Brave Software

Web browser

Dangerous permissions Suspicious publisher MPL-2.0 v1.93.134
Install Source code

About

Brave Origin is the Brave variant without the optional services (Rewards, Wallet, VPN, Leo), aimed at policy-managed deployments. Unofficial packaging: this Flatpak is maintained by a third party and repackages the binaries published by Brave Software, Inc.

Permissions

2 permissions weaken the sandbox. Flatsonar asks before installing.

  • all devices (/dev): webcams, disks, raw hardware
    --device=all
  • your keyring / saved passwords
    --talk-name=org.freedesktop.secrets
  • inter-process communication (needed for X11)
    --share=ipc
  • Wayland display
    --socket=wayland
  • X11 display, only when Wayland is unavailable
    --socket=fallback-x11
  • network
    --share=network
  • audio
    --socket=pulseaudio
  • access to xdg-run/pipewire-0
    --filesystem=xdg-run/pipewire-0
  • access to your download folder
    --filesystem=xdg-download
  • notifications
    --talk-name=org.freedesktop.Notifications
  • screensaver inhibit
    --talk-name=org.freedesktop.ScreenSaver
  • talks to org.freedesktop.FileManager1
    --talk-name=org.freedesktop.FileManager1
  • system tray
    --talk-name=org.kde.StatusNotifierWatcher
  • battery status
    --system-talk-name=org.freedesktop.UPower
  • talks to org.kde.kwalletd5
    --talk-name=org.kde.kwalletd5
  • talks to org.kde.kwalletd6
    --talk-name=org.kde.kwalletd6
  • registers as a media player (MPRIS)
    --own-name=org.mpris.MediaPlayer2.brave.*
  • sets environment variable TMPDIR
    --env=TMPDIR=/var/tmp

Who publishes this

Something concrete is wrong: the id claims a namespace this repository does not own, or the build does things a build should not. Flatsonar warns twice.

  • com.brave.Origin claims the com.brave namespace but is hosted by github.com/jfrmorales and does not build the owner's code
    publisher:namespace
  • repository is 41 day(s) old with 1 star(s): no track record yet
    publisher:new-repo
  • installs a prebuilt binary instead of building from source
    source:prebuilt

Maintenance

Recent activity on the upstream repository, or built and reviewed by Flathub.

No staleness signals: recent activity, or built and reviewed by Flathub.