Flatsonar

cosmic-flatpak

by pop-os

COSMIC Flatpak Repository

Dangerous permissions Unverified publisher GPL-3.0
Install Source code

About

COSMIC Flatpak Repository

Permissions

4 permissions weaken the sandbox. Flatsonar asks before installing.

  • unrestricted access to the session D-Bus (all your running apps)
    --socket=session-bus
  • sandbox escape: can run commands on the host via flatpak-spawn
    --talk-name=org.freedesktop.Flatpak
  • full access to your home folder
    --filesystem=home
  • sets PYTHONPATH: changes which libraries or plugins get loaded
    --env=PYTHONPATH=/app/lib/python3.13/site-packages
  • inter-process communication (needed for X11)
    --share=ipc
  • Wayland display
    --socket=wayland
  • audio
    --socket=pulseaudio
  • GPU acceleration
    --device=dri
  • network
    --share=network
  • access to xdg-config/cosmic
    --filesystem=xdg-config/cosmic:rw
  • portal Desktop
    --talk-name=org.freedesktop.portal.Desktop

Who publishes this

Nobody has confirmed that the publisher controls this app id. Flatsonar warns before installing.

  • packaged by github.com/pop-os, not by the io.github namespace owner; it does build the owner's code from https://github.com/PSGtatitos/papyrus.git
    publisher:namespace
  • installs a prebuilt binary instead of building from source
    source:prebuilt

Maintenance

Recent activity on the upstream repository, or built and reviewed by Flathub.

No staleness signals: recent activity, or built and reviewed by Flathub.