Flatsonar

cosmic-flatpak

by pop-os

COSMIC Flatpak Repository

Broad permissions Suspicious publisher GPL-3.0

About

COSMIC Flatpak Repository

Permissions

1 permission weaken the sandbox. Flatsonar asks before installing.

  • read-only access to your entire file system
    --filesystem=host:ro
  • Wayland display
    --socket=wayland
  • inter-process communication (needed for X11)
    --share=ipc
  • access to xdg-config/cosmic
    --filesystem=xdg-config/cosmic:rw
  • talks to com.system76.CosmicSettingsDaemon
    --talk-name=com.system76.CosmicSettingsDaemon

Who publishes this

Something concrete is wrong: the id claims a namespace this repository does not own, or the build does things a build should not. Flatsonar warns twice.

  • io.github.lconst.keypeek claims the io.github.lconst namespace but is hosted by github.com/pop-os and does not build the owner's code
    publisher:namespace

Maintenance

Recent activity on the upstream repository, or built and reviewed by Flathub.

No staleness signals: recent activity, or built and reviewed by Flathub.