Flatsonar

Quod Libet

by The Quod Libet Development Team

Listen to, browse, or edit your audio collection

Dangerous permissions Verified creator GPL-2.0-or-later v4.7.1
Install Source code
Screenshot 1 of Quod Libet Screenshot 2 of Quod Libet Screenshot 3 of Quod Libet

About

Quod Libet is a music management program. It provides several different ways to view your audio library, as well as support for Internet radio and audio feeds. It has extremely flexible metadata tag editing and searching capabilities.

Supported file formats include Ogg Vorbis/Opus/Speex/FLAC, MP3, FLAC, MOD/XM/IT, Musepack, Wavpack, MPEG-4 AAC, Monkeys Audio, WMA, SPC, MIDI.

Permissions

2 permissions weaken the sandbox. Flatsonar asks before installing.

  • full access to your entire file system
    --filesystem=host
  • owns desktop name org.gnome.UPnP.MediaServer2.QuodLibet: can impersonate a desktop component
    --own-name=org.gnome.UPnP.MediaServer2.QuodLibet
  • inter-process communication (needed for X11)
    --share=ipc
  • network
    --share=network
  • X11 display, only when Wayland is unavailable
    --socket=fallback-x11
  • audio
    --socket=pulseaudio
  • Wayland display
    --socket=wayland
  • access to /tmp
    --filesystem=/tmp
  • talks to org.gnome.SettingsDaemon.MediaKeys
    --talk-name=org.gnome.SettingsDaemon.MediaKeys
  • session inhibit
    --talk-name=org.gnome.SessionManager
  • system tray
    --talk-name=org.kde.StatusNotifierWatcher
  • talks to org.freedesktop.Avahi
    --talk-name=org.freedesktop.Avahi
  • talks to com.canonical.Unity.Launcher
    --talk-name=com.canonical.Unity.Launcher
  • talks to org.enlightenment.wm.service
    --talk-name=org.enlightenment.wm.service
  • talks to org.kde.plasmashell
    --talk-name=org.kde.plasmashell
  • talks to org.xfce.FileManager
    --talk-name=org.xfce.FileManager
  • notifications
    --talk-name=org.freedesktop.Notifications
  • talks to org.freedesktop.FileManager1
    --talk-name=org.freedesktop.FileManager1
  • talks to org.gajim.dbus
    --talk-name=org.gajim.dbus
  • talks to org.mate.SettingsDaemon
    --talk-name=org.mate.SettingsDaemon
  • talks to org.gnome.ScreenSaver
    --talk-name=org.gnome.ScreenSaver
  • talks to org.freedesktop.Telepathy.AccountManager
    --talk-name=org.freedesktop.Telepathy.AccountManager
  • owns bus name org.mpris.quodlibet
    --own-name=org.mpris.quodlibet
  • registers as a media player (MPRIS)
    --own-name=org.mpris.MediaPlayer2.quodlibet

Who publishes this

The creator demonstrably controls this app id: Flathub verification, the hosting account owns the namespace, or a well-known file on their domain.

  • fetches from kakasi.namazu.org over unencrypted http: anyone on the path can swap the bytes
    source:insecure-url
  • verified on Flathub: the developer proved they control this app id
    publisher:flathub

Maintenance

Recent activity on the upstream repository, or built and reviewed by Flathub.

No staleness signals: recent activity, or built and reviewed by Flathub.