Flatsonar

cosmic-flatpak

by pop-os

COSMIC Flatpak Repository

Broad permissions Suspicious publisher GPL-3.0

About

COSMIC Flatpak Repository

Permissions

2 permissions weaken the sandbox. Flatsonar asks before installing.

  • talks to system service net.hadess.PowerProfiles
    --system-talk-name=net.hadess.PowerProfiles
  • session management (logout, suspend)
    --system-talk-name=org.freedesktop.login1
  • Wayland display
    --socket=wayland
  • inter-process communication (needed for X11)
    --share=ipc
  • GPU acceleration
    --device=dri
  • access to xdg-config/cosmic
    --filesystem=xdg-config/cosmic:rw
  • access to /sys/class/power_supply
    --filesystem=/sys/class/power_supply:ro
  • access to /sys/class/backlight
    --filesystem=/sys/class/backlight:ro
  • talks to com.system76.CosmicSettingsDaemon
    --talk-name=com.system76.CosmicSettingsDaemon

Who publishes this

Something concrete is wrong: the id claims a namespace this repository does not own, or the build does things a build should not. Flatsonar warns twice.

  • com.github.pewmoe.cosmic-ext-ASCII-dot-battery claims the com.github.pewmoe namespace but is hosted by github.com/pop-os and does not build the owner's code
    publisher:namespace

Maintenance

Recent activity on the upstream repository, or built and reviewed by Flathub.

No staleness signals: recent activity, or built and reviewed by Flathub.