Flatsonar
Suspicious publisher

Amethyst Mod Manager

by ChrisDKN

Manage game mods on Linux and the Steam Deck

Extensive permissions Suspicious publisher
Install Source code

About

Amethyst is a mod manager for Linux and the Steam Deck. It installs, orders, and deploys mods for a wide range of games, with Nexus Mods integration, collections, FOMOD/BAIN installers, LOOT sorting, and per-profile mod lists.

Permissions

4 permissions weaken the sandbox. Flatsonar asks before installing.

  • sandbox escape: can run commands on the host via flatpak-spawn
    --talk-name=org.freedesktop.Flatpak
  • X11 display: X11 lets apps read input and windows of other apps
    --socket=x11
  • full access to your home folder
    --filesystem=home
  • your keyring / saved passwords
    --talk-name=org.freedesktop.secrets
  • network
    --share=network
  • Wayland display
    --socket=wayland
  • audio
    --socket=pulseaudio
  • GPU acceleration
    --device=dri
  • inter-process communication (needed for X11)
    --share=ipc
  • access to /run/media
    --filesystem=/run/media
  • access to /media
    --filesystem=/media
  • access to /mnt
    --filesystem=/mnt
  • access to /var/mnt
    --filesystem=/var/mnt
  • access to ~/.var/app/com.valvesoftware.Steam
    --filesystem=~/.var/app/com.valvesoftware.Steam
  • access to ~/.var/app/com.heroicgameslauncher.hgl
    --filesystem=~/.var/app/com.heroicgameslauncher.hgl
  • access to ~/.var/app/net.lutris.Lutris
    --filesystem=~/.var/app/net.lutris.Lutris
  • access to ~/.var/app/io.github.Faugus.faugus-launcher
    --filesystem=~/.var/app/io.github.Faugus.faugus-launcher
  • access to xdg-run/discord-ipc-0
    --filesystem=xdg-run/discord-ipc-0
  • access to xdg-run/discord-ipc-1
    --filesystem=xdg-run/discord-ipc-1
  • access to xdg-run/discord-ipc-2
    --filesystem=xdg-run/discord-ipc-2
  • access to xdg-run/discord-ipc-3
    --filesystem=xdg-run/discord-ipc-3
  • access to xdg-run/discord-ipc-4
    --filesystem=xdg-run/discord-ipc-4
  • access to xdg-run/discord-ipc-5
    --filesystem=xdg-run/discord-ipc-5
  • access to xdg-run/discord-ipc-6
    --filesystem=xdg-run/discord-ipc-6
  • access to xdg-run/discord-ipc-7
    --filesystem=xdg-run/discord-ipc-7
  • access to xdg-run/discord-ipc-8
    --filesystem=xdg-run/discord-ipc-8
  • access to xdg-run/discord-ipc-9
    --filesystem=xdg-run/discord-ipc-9
  • access to xdg-run/app/com.discordapp.Discord
    --filesystem=xdg-run/app/com.discordapp.Discord
  • access to xdg-run/app/com.discordapp.DiscordCanary
    --filesystem=xdg-run/app/com.discordapp.DiscordCanary
  • access to xdg-run/app/com.discordapp.DiscordPTB
    --filesystem=xdg-run/app/com.discordapp.DiscordPTB
  • access to xdg-run/app/dev.vencord.Vesktop
    --filesystem=xdg-run/app/dev.vencord.Vesktop
  • multi-architecture binaries
    --allow=multiarch
  • sets environment variable MOD_MANAGER_GAMES
    --env=MOD_MANAGER_GAMES=/app/share/amethyst-mod-manager/Games
  • sets environment variable XDG_DATA_DIRS
    --env=XDG_DATA_DIRS=/app/share:/usr/share
  • sets environment variable QT_QPA_PLATFORM
    --env=QT_QPA_PLATFORM=xcb
  • sets environment variable _AMM_OWNS_QT_PLATFORM
    --env=_AMM_OWNS_QT_PLATFORM=1

Who publishes this

Something concrete is wrong: the id claims a namespace this repository does not own, or the build does things a build should not. Flatsonar warns twice.

  • io.github.Amethyst.ModManager claims the io.github.Amethyst namespace but is hosted by github.com/chrisdkn and does not build the owner's code
    publisher:namespace
  • fetches from deb.debian.org over unencrypted http: anyone on the path can swap the bytes
    source:insecure-url

Maintenance

Recent activity on the upstream repository, or built and reviewed by Flathub.

No staleness signals: recent activity, or built and reviewed by Flathub.