Flatsonar

Spotty

by Spotty

Fast launcher for apps, files, clipboard history, and system actions

Extensive permissions
Install Source code

About

Spotty is a keyboard-driven launcher for GNOME desktops. It runs in the background and provides quick access to applications, indexed files, clipboard history, calculations, web searches, settings panels, and power actions.

Permissions

5 permissions weaken the sandbox. Flatsonar asks before installing.

  • sandbox escape: can run commands on the host via flatpak-spawn
    --talk-name=org.freedesktop.Flatpak
  • full access to your home folder
    --filesystem=home
  • GNOME Shell: screenshots, keybindings
    --talk-name=org.gnome.Shell
  • talks to system service org.rpm.dnf.v0
    --system-talk-name=org.rpm.dnf.v0
  • package management
    --system-talk-name=org.freedesktop.PackageKit
  • Wayland display
    --socket=wayland
  • X11 display, only when Wayland is unavailable
    --socket=fallback-x11
  • GPU acceleration
    --device=dri
  • access to xdg-cache/thumbnails
    --filesystem=xdg-cache/thumbnails:create
  • access to /usr/share/applications
    --filesystem=/usr/share/applications:ro
  • access to /usr/local/share/applications
    --filesystem=/usr/local/share/applications:ro
  • access to /var/lib/flatpak/exports/share/applications
    --filesystem=/var/lib/flatpak/exports/share/applications:ro
  • access to /var/lib/snapd/desktop/applications
    --filesystem=/var/lib/snapd/desktop/applications:ro
  • talks to org.gnome.Shell.Extensions
    --talk-name=org.gnome.Shell.Extensions
  • notifications
    --talk-name=org.freedesktop.Notifications
  • owns its own bus name
    --own-name=com.spotty.Spotty

Who publishes this

Nobody has confirmed that the publisher controls this app id. Flatsonar warns before installing.

  • com.spotty.Spotty claims the domain spotty.com; only its owner can prove that
    publisher:namespace
  • the build has network access: it can download things the manifest does not list
    spotty:build-options:--share=network

Maintenance

Recent activity on the upstream repository, or built and reviewed by Flathub.

No staleness signals: recent activity, or built and reviewed by Flathub.