Flatsonar

cosmic-flatpak

by pop-os

COSMIC Flatpak Repository

Dangerous permissions Unverified publisher GPL-3.0

About

COSMIC Flatpak Repository

Permissions

1 permission weaken the sandbox. Flatsonar asks before installing.

  • sandbox escape: can run commands on the host via flatpak-spawn
    --talk-name=org.freedesktop.Flatpak
  • Wayland display
    --socket=wayland
  • X11 display, only when Wayland is unavailable
    --socket=fallback-x11
  • network
    --share=network
  • talks to com.system76.CosmicSettingsDaemon
    --talk-name=com.system76.CosmicSettingsDaemon
  • access to xdg-config/cosmic
    --filesystem=xdg-config/cosmic:rw
  • inter-process communication (needed for X11)
    --share=ipc

Who publishes this

Nobody has confirmed that the publisher controls this app id. Flatsonar warns before installing.

  • fr.clockworks.cosmic-ext-applet-hue claims the domain clockworks.fr; only its owner can prove that
    publisher:namespace

Maintenance

Recent activity on the upstream repository, or built and reviewed by Flathub.

No staleness signals: recent activity, or built and reviewed by Flathub.