Flatsonar
Suspicious publisher

Vela

by 360900

Community Qt interface for the Proton VPN CLI

Broad permissions Suspicious publisher
Screenshot 1 Screenshot 2 Screenshot 3 Screenshot 4

About

A lightweight Qt-based graphical interface for the Proton VPN command-line tool. Supports connecting to servers by country or city, account management, favorites, connection history, and VPN settings. The Flatpak ships a bundled copy of the Proton VPN CLI, so no separate host installation is needed. VPN connections are created on the host NetworkManager daemon over the system D-Bus.

Permissions

2 permissions weaken the sandbox. Flatsonar asks before installing.

  • your keyring / saved passwords
    --talk-name=org.freedesktop.secrets
  • network configuration
    --system-talk-name=org.freedesktop.NetworkManager
  • inter-process communication (needed for X11)
    --share=ipc
  • X11 display, only when Wayland is unavailable
    --socket=fallback-x11
  • Wayland display
    --socket=wayland
  • network
    --share=network
  • system tray
    --talk-name=org.kde.StatusNotifierWatcher
  • notifications
    --talk-name=org.freedesktop.Notifications

Who publishes this

Something concrete is wrong: the id claims a namespace this repository does not own, or the build does things a build should not. Flatsonar warns twice.

  • io.github._360900.Vela claims the io.github._360900 namespace but is hosted by github.com/360900 and does not build the owner's code
    publisher:namespace
  • installs a prebuilt binary instead of building from source (x2)
    source:prebuilt

Maintenance

Recent activity on the upstream repository, or built and reviewed by Flathub.

No staleness signals: recent activity, or built and reviewed by Flathub.