Flatsonar

cosmic-flatpak

by pop-os

COSMIC Flatpak Repository

Dangerous permissions Unverified publisher GPL-3.0

About

COSMIC Flatpak Repository

Permissions

1 permission weaken the sandbox. Flatsonar asks before installing.

  • unrestricted access to the session D-Bus (all your running apps)
    --socket=session-bus
  • Wayland display
    --socket=wayland
  • access to ~/.local/bin
    --filesystem=~/.local/bin:ro
  • talks to com.system76.CosmicSettingsDaemon
    --talk-name=com.system76.CosmicSettingsDaemon
  • portal Desktop
    --talk-name=org.freedesktop.portal.Desktop
  • GPU acceleration
    --device=dri

Who publishes this

Nobody has confirmed that the publisher controls this app id. Flatsonar warns before installing.

  • packaged by github.com/pop-os, not by the io.github namespace owner; it does build the owner's code from https://github.com/Aquilesorei/spaceboard.git
    publisher:namespace
  • git source tracks a moving branch: what gets built can change without the manifest changing
    source:unpinned

Maintenance

Recent activity on the upstream repository, or built and reviewed by Flathub.

No staleness signals: recent activity, or built and reviewed by Flathub.