Tacky

Permissions

1 permission weaken the sandbox. Flatsonar asks before installing.

• X11 display: X11 lets apps read input and windows of other apps

  --socket=x11
• network

  --share=network
• inter-process communication (needed for X11)

  --share=ipc
• audio

  --socket=pulseaudio
• access to your download folder

  --filesystem=xdg-download

Who publishes this

The creator demonstrably controls this app id: Flathub verification, the hosting account owns the namespace, or a well-known file on their domain.

• git source tracks a moving branch: what gets built can change without the manifest changing

  source:unpinned
• fetches from prdownloads.sourceforge.net over unencrypted http: anyone on the path can swap the bytes (x2)

  source:insecure-url
• hosted by github.com/pounceandmiss, which owns the io.github namespace of io.github.pounceandmiss.Tacky

  publisher:namespace

Maintenance

Recent activity on the upstream repository, or built and reviewed by Flathub.

No staleness signals: recent activity, or built and reviewed by Flathub.