shrimply

Permissions

5 permissions weaken the sandbox. Flatsonar asks before installing.

• unrestricted access to the session D-Bus (all your running apps)

  --socket=session-bus
• unrestricted access to the system D-Bus (system services, hardware)

  --socket=system-bus
• sandbox escape: can run commands on the host via flatpak-spawn

  --talk-name=org.freedesktop.Flatpak
• all devices (/dev): webcams, disks, raw hardware

  --device=all
• full access to your entire file system

  --filesystem=host
• inter-process communication (needed for X11)

  --share=ipc
• network

  --share=network
• Wayland display

  --socket=wayland
• X11 display, only when Wayland is unavailable

  --socket=fallback-x11
• audio

  --socket=pulseaudio
• access to /run/media

  --filesystem=/run/media
• access to xdg-run/pipewire-0

  --filesystem=xdg-run/pipewire-0
• sets environment variable CUDA_MODULE_LOADING

  --env=CUDA_MODULE_LOADING=EAGER

Who publishes this

Nobody has confirmed that the publisher controls this app id. Flatsonar warns before installing.

• dev.shrimply.Shrimply claims the domain shrimply.dev; only its owner can prove that

  publisher:namespace
• the build has network access: it can download things the manifest does not list

  shrimply-gtk:build-options:--share=network
• opens the build sandbox: access to operating-system files

  shrimply-gtk:build-options:--filesystem=host-os:ro

Maintenance

Recent activity on the upstream repository, or built and reviewed by Flathub.

No staleness signals: recent activity, or built and reviewed by Flathub.