Flatsonar

VSCodium

by The VSCodium team

Telemetry-less code editing

Dangerous permissions Verified creator MIT v1.135.06055
Install Source code
Screenshot 1 of VSCodium Screenshot 2 of VSCodium Screenshot 3 of VSCodium Screenshot 4 of VSCodium Screenshot 5 of VSCodium

About

VSCodium combines the simplicity of a code editor with what developers need for the core edit-build-debug cycle.

This is the telemetry-less version of Visual Studio Code, packaged into a Flatpak.

This repackaging is not supported by Microsoft.

Note: To use certain features in this flatpak version, please see Readme file.

Permissions

7 permissions weaken the sandbox. Flatsonar asks before installing.

  • all devices (/dev): webcams, disks, raw hardware
    --device=all
  • full access to your entire file system
    --filesystem=host
  • sandbox escape: can run commands on the host via flatpak-spawn
    --talk-name=org.freedesktop.Flatpak
  • your SSH agent (can sign with your SSH keys)
    --socket=ssh-auth
  • development features (ptrace, can inspect other processes in its sandbox)
    --allow=devel
  • your keyring / saved passwords
    --talk-name=org.freedesktop.secrets
  • session management (logout, suspend)
    --system-talk-name=org.freedesktop.login1
  • inter-process communication (needed for X11)
    --share=ipc
  • network
    --share=network
  • X11 display, only when Wayland is unavailable
    --socket=fallback-x11
  • audio
    --socket=pulseaudio
  • Wayland display
    --socket=wayland
  • access to xdg-run/gnupg
    --filesystem=xdg-run/gnupg:ro
  • access to xdg-config/kdeglobals
    --filesystem=xdg-config/kdeglobals:ro
  • talks to org.kde.kwalletd5
    --talk-name=org.kde.kwalletd5
  • talks to com.canonical.AppMenu.Registrar
    --talk-name=com.canonical.AppMenu.Registrar

Who publishes this

The creator demonstrably controls this app id: Flathub verification, the hosting account owns the namespace, or a well-known file on their domain.

  • installs a prebuilt binary instead of building from source (x2)
    source:prebuilt
  • verified on Flathub: the developer proved they control this app id
    publisher:flathub

Maintenance

Recent activity on the upstream repository, or built and reviewed by Flathub.

No staleness signals: recent activity, or built and reviewed by Flathub.