Flatsonar

dev-prompt

by seraphx2

Command-palette overlay for launching dev repositories

Dangerous permissions Verified creator MIT v0.0.0
Install Source code
Screenshot 1 of dev-prompt Screenshot 2 of dev-prompt Screenshot 3 of dev-prompt

About

dev-prompt is a global-hotkey overlay that finds the git repositories on your machine and opens them in the editor, terminal, or tool of your choice. Press the hotkey, type a few letters, hit Enter. It stays out of the way the rest of the time: no window, a single tray icon, and a rules file that maps each project to the actions that make sense for it.

Permissions

4 permissions weaken the sandbox. Flatsonar asks before installing.

  • sandbox escape: can run commands on the host via flatpak-spawn
    --talk-name=org.freedesktop.Flatpak
  • X11 display: X11 lets apps read input and windows of other apps
    --socket=x11
  • full access to your home folder
    --filesystem=home
  • access to operating-system files
    --filesystem=host-os:ro
  • Wayland display
    --socket=wayland
  • inter-process communication (needed for X11)
    --share=ipc
  • GPU acceleration
    --device=dri
  • network
    --share=network
  • system tray
    --talk-name=org.kde.StatusNotifierWatcher
  • notifications
    --talk-name=org.freedesktop.Notifications
  • access to xdg-run/tray-icon
    --filesystem=xdg-run/tray-icon:create
  • access to /var/lib/flatpak/exports/share/applications
    --filesystem=/var/lib/flatpak/exports/share/applications:ro
  • access to /var/lib/snapd/desktop/applications
    --filesystem=/var/lib/snapd/desktop/applications:ro

Who publishes this

The creator demonstrably controls this app id: Flathub verification, the hosting account owns the namespace, or a well-known file on their domain.

  • repository is 20 day(s) old with 0 star(s): no track record yet
    publisher:new-repo
  • the build has network access: it can download things the manifest does not list
    build-options:--share=network
  • fetches from the network during the build (nothing to audit beforehand): npm ci
    dev-prompt:build-commands
  • hosted by github.com/seraphx2, which owns the io.github namespace of io.github.seraphx2.devprompt
    publisher:namespace

Maintenance

Recent activity on the upstream repository, or built and reviewed by Flathub.

No staleness signals: recent activity, or built and reviewed by Flathub.