Flatsonar

bCNC

by vlachoudis

GRBL CNC command sender, autoleveler and g-code editor

Dangerous permissions Unverified publisher GPL-2.0
Install Source code

About

GRBL CNC command sender, autoleveler and g-code editor

Permissions

3 permissions weaken the sandbox. Flatsonar asks before installing.

  • all devices (/dev): webcams, disks, raw hardware
    --device=all
  • X11 display: X11 lets apps read input and windows of other apps
    --socket=x11
  • full access to your home folder
    --filesystem=home:rw
  • network
    --share=network
  • inter-process communication (needed for X11)
    --share=ipc

Who publishes this

Nobody has confirmed that the publisher controls this app id. Flatsonar warns before installing.

  • https://github.com/pablo-pillcaseo/bcnc-pillcase also publishes this app id
    publisher:collision
  • https://github.com/shefq/bCNC also publishes this app id
    publisher:collision
  • io.github.bcnc is not under a namespace Flatsonar can check
    publisher:namespace
  • git source tracks a moving branch: what gets built can change without the manifest changing
    source:unpinned
  • the build has network access: it can download things the manifest does not list
    build-options:--share=network
  • fetches from the network during the build (nothing to audit beforehand): pip3 install --prefix=${FLATPAK_DEST} pyserial (x7)
    bcnc:build-commands
  • fetches from the network during the build (nothing to audit beforehand): pip3 install --prefix=${FLATPAK_DEST} .
    tkinter:build-commands

Maintenance

Recent activity on the upstream repository, or built and reviewed by Flathub.

No staleness signals: recent activity, or built and reviewed by Flathub.