YouTube Parser

Permissions

2 permissions weaken the sandbox. Flatsonar asks before installing.

• full access to your entire file system

  --filesystem=host
• all devices (/dev): webcams, disks, raw hardware

  --device=all
• network

  --share=network
• Wayland display

  --socket=wayland
• X11 display, only when Wayland is unavailable

  --socket=fallback-x11
• audio

  --socket=pulseaudio
• inter-process communication (needed for X11)

  --share=ipc
• talks to org.kde.kwalletd5

  --talk-name=org.kde.kwalletd5
• talks to org.kde.kwalletd

  --talk-name=org.kde.kwalletd
• talks to org.gnome.SettingsDaemon.MediaKeys

  --talk-name=org.gnome.SettingsDaemon.MediaKeys
• talks to org.freedesktop.Secrets

  --talk-name=org.freedesktop.Secrets

Who publishes this

Nobody has confirmed that the publisher controls this app id. Flatsonar warns before installing.

• gr.oscillate.gytparse claims the domain oscillate.gr; only its owner can prove that

  publisher:namespace
• git source tracks a moving branch: what gets built can change without the manifest changing (x6)

  source:unpinned
• fetches from www.tortall.net over unencrypted http: anyone on the path can swap the bytes (x2)

  source:insecure-url
• the build has network access: it can download things the manifest does not list

  gtk:build-options:--share=network
• the build has network access: it can download things the manifest does not list

  gytparse:build-options:--share=network
• fetches from the network during the build (nothing to audit beforehand): pip3 install --prefix=${FLATPAK_DEST} requests yt-dlp dbus-python

  gytparse:build-commands

Maintenance

Recent activity on the upstream repository, or built and reviewed by Flathub.

No staleness signals: recent activity, or built and reviewed by Flathub.