Flatsonar

cosmic-flatpak

by pop-os

COSMIC Flatpak Repository

Dangerous permissions Unverified publisher GPL-3.0

About

COSMIC Flatpak Repository

Permissions

1 permission weaken the sandbox. Flatsonar asks before installing.

  • sandbox escape: can run commands on the host via flatpak-spawn
    --talk-name=org.freedesktop.Flatpak
  • inter-process communication (needed for X11)
    --share=ipc
  • network
    --share=network
  • Wayland display
    --socket=wayland
  • talks to com.system76.CosmicSettingsDaemon
    --talk-name=com.system76.CosmicSettingsDaemon
  • talks to com.system76.CosmicSettingsDaemon.*
    --talk-name=com.system76.CosmicSettingsDaemon.*
  • access to xdg-config/cosmic
    --filesystem=xdg-config/cosmic:rw
  • access to ~/.local/state/cosmic/io.github.BlakeGardner.cosmic-ext-applet-torrent-throttle
    --filesystem=~/.local/state/cosmic/io.github.BlakeGardner.cosmic-ext-applet-torrent-throttle:create

Who publishes this

Nobody has confirmed that the publisher controls this app id. Flatsonar warns before installing.

  • packaged by github.com/pop-os, not by the io.github namespace owner; it does build the owner's code from https://github.com/BlakeGardner/cosmic-ext-applet-torrent-throttle.git
    publisher:namespace

Maintenance

Recent activity on the upstream repository, or built and reviewed by Flathub.

No staleness signals: recent activity, or built and reviewed by Flathub.