Flatsonar

Pulsar Editor

by vrutkovs

A hackable text editor for the 21st Century

Dangerous permissions Unverified publisher MIT
Screenshot 1 of Pulsar Editor

About

Atom is a text and source editor supporting plugins written in Javascript.

Permissions

4 permissions weaken the sandbox. Flatsonar asks before installing.

  • full access to your entire file system
    --filesystem=host
  • X11 display: X11 lets apps read input and windows of other apps
    --socket=x11
  • your keyring / saved passwords
    --talk-name=org.freedesktop.secrets
  • sets LD_LIBRARY_PATH: changes which libraries or plugins get loaded
    --env=LD_LIBRARY_PATH=/app/lib
  • inter-process communication (needed for X11)
    --share=ipc
  • audio
    --socket=pulseaudio
  • network
    --share=network
  • GPU acceleration
    --device=dri
  • notifications
    --talk-name=org.freedesktop.Notifications
  • talks to org.gtk.vfs
    --talk-name=org.gtk.vfs
  • talks to org.gtk.vfs.*
    --talk-name=org.gtk.vfs.*
  • sets environment variable ELECTRON_TRASH
    --env=ELECTRON_TRASH=gio

Who publishes this

Nobody has confirmed that the publisher controls this app id. Flatsonar warns before installing.

  • io.github.pulsar-edit is not under a namespace Flatsonar can check
    publisher:namespace
  • fetches from ftp.gnome.org over unencrypted http: anyone on the path can swap the bytes
    source:insecure-url
  • installs a prebuilt binary instead of building from source
    source:prebuilt
  • the build has network access: it can download things the manifest does not list
    atom:build-options:--share=network

Maintenance

Recent activity on the upstream repository, or built and reviewed by Flathub.

No staleness signals: recent activity, or built and reviewed by Flathub.