MeerK40t

Permissions

3 permissions weaken the sandbox. Flatsonar asks before installing.

• all devices (/dev): webcams, disks, raw hardware

  --device=all
• X11 display: X11 lets apps read input and windows of other apps

  --socket=x11
• full access to your home folder

  --filesystem=home
• network

  --share=network
• inter-process communication (needed for X11)

  --share=ipc
• Wayland display

  --socket=wayland
• sets environment variable MEERK40T_DISABLE_UPDATER

  --env=MEERK40T_DISABLE_UPDATER=1

Who publishes this

The creator demonstrably controls this app id: Flathub verification, the hosting account owns the namespace, or a well-known file on their domain.

• the build has network access: it can download things the manifest does not list

  python3-deps:build-options:--share=network
• fetches from the network during the build (nothing to audit beforehand): pip3 install --prefix=${FLATPAK_DEST} --no-cache-dir \ setuptools wheel sip typing_extensions \ Pillow numpy requests \ (x3)

  python3-deps:build-commands
• the build has network access: it can download things the manifest does not list

  python3-wxpython:build-options:--share=network
• fetches from the network during the build (nothing to audit beforehand): pip3 install --verbose --prefix=${FLATPAK_DEST} --no-deps --no-build-isolation wxpython-4.2.4.tar.gz

  python3-wxpython:build-commands
• hosted by github.com/meerk40t, which owns the io.github namespace of io.github.meerk40t.meerk40t

  publisher:namespace

Maintenance

Recent activity on the upstream repository, or built and reviewed by Flathub.

No staleness signals: recent activity, or built and reviewed by Flathub.