xone-tray

Permissions

3 permissions weaken the sandbox. Flatsonar asks before installing.

• all devices (/dev): webcams, disks, raw hardware

  --device=all
• unrestricted access to the session D-Bus (all your running apps)

  --socket=session-bus
• access to operating-system files

  --filesystem=host-os
• system tray

  --talk-name=org.kde.StatusNotifierWatcher
• talks to com.canonical.AppMenu.Registrar

  --talk-name=com.canonical.AppMenu.Registrar
• notifications

  --talk-name=org.freedesktop.Notifications

Who publishes this

The creator demonstrably controls this app id: Flathub verification, the hosting account owns the namespace, or a well-known file on their domain.

• the build has network access: it can download things the manifest does not list

  xone-tray:build-options:--share=network
• fetches from the network during the build (nothing to audit beforehand): cargo fetch --manifest-path Cargo.toml

  xone-tray:build-commands
• hosted by github.com/savagecore, which owns the io.github namespace of io.github.savagecore.XoneTray

  publisher:namespace

Maintenance

Recent activity on the upstream repository, or built and reviewed by Flathub.

No staleness signals: recent activity, or built and reviewed by Flathub.