Flatsonar

cosmic-flatpak

by pop-os

COSMIC Flatpak Repository

Dangerous permissions Suspicious publisher GPL-3.0
Install Source code

About

COSMIC Flatpak Repository

Permissions

2 permissions weaken the sandbox. Flatsonar asks before installing.

  • unrestricted access to the session D-Bus (all your running apps)
    --socket=session-bus
  • access to your whole cache directory (other apps' settings and data)
    --filesystem=xdg-cache:ro
  • Wayland display
    --socket=wayland
  • media player controls (MPRIS)
    --talk-name=org.mpris.MediaPlayer2.*
  • access to ~/.var/app
    --filesystem=~/.var/app:ro
  • access to xdg-config/cosmic
    --filesystem=xdg-config/cosmic:rw

Who publishes this

Something concrete is wrong: the id claims a namespace this repository does not own, or the build does things a build should not. Flatsonar warns twice.

  • com.github.DiegoMMR.CosmicExtAppletNowPlaying claims the com.github.DiegoMMR namespace but is hosted by github.com/pop-os and does not build the owner's code
    publisher:namespace

Maintenance

Recent activity on the upstream repository, or built and reviewed by Flathub.

No staleness signals: recent activity, or built and reviewed by Flathub.