logistics

Permissions

2 permissions weaken the sandbox. Flatsonar asks before installing.

• access to a sensitive location (/run/docker.sock): credentials or autostart

  --filesystem=/run/docker.sock
• access to a sensitive location (xdg-run/docker.sock): credentials or autostart

  --filesystem=xdg-run/docker.sock
• network

  --share=network
• inter-process communication (needed for X11)

  --share=ipc
• X11 display, only when Wayland is unavailable

  --socket=fallback-x11
• GPU acceleration

  --device=dri
• Wayland display

  --socket=wayland

Who publishes this

Nobody has confirmed that the publisher controls this app id. Flatsonar warns before installing.

• com.camerondahl.Logistics claims the domain camerondahl.com; only its owner can prove that

  publisher:namespace
• git source tracks a moving branch: what gets built can change without the manifest changing (x2)

  source:unpinned
• the build has network access: it can download things the manifest does not list

  build-options:--share=network
• the build has network access: it can download things the manifest does not list

  docker-gobject:build-options:--share=network
• fetches from the network during the build (nothing to audit beforehand): pip3 install --prefix=${FLATPAK_DEST} "docker_gobject"

  docker-gobject:build-commands

Maintenance

Recent activity on the upstream repository, or built and reviewed by Flathub.

No staleness signals: recent activity, or built and reviewed by Flathub.