Flatsonar
Suspicious publisher

WayVoice

by stepan-pavlenko

Local voice dictation for GNOME and Wayland

Extensive permissions Suspicious publisher
Install Source code

About

WayVoice records microphone audio through PipeWire, transcribes it locally and inserts the result into the focused application.

Permissions

1 permission weaken the sandbox. Flatsonar asks before installing.

  • sandbox escape: can run commands on the host via flatpak-spawn
    --talk-name=org.freedesktop.Flatpak
  • inter-process communication (needed for X11)
    --share=ipc
  • network
    --share=network
  • Wayland display
    --socket=wayland
  • X11 display, only when Wayland is unavailable
    --socket=fallback-x11
  • access to xdg-run/pipewire-0
    --filesystem=xdg-run/pipewire-0
  • notifications
    --talk-name=org.freedesktop.Notifications

Who publishes this

Something concrete is wrong: the id claims a namespace this repository does not own, or the build does things a build should not. Flatsonar warns twice.

  • io.github.stepan.WayVoice claims the io.github.stepan namespace but is hosted by github.com/stepan-pavlenko and does not build the owner's code
    publisher:namespace
  • repository is 2 day(s) old with 0 star(s): no track record yet
    publisher:new-repo
  • the build has network access: it can download things the manifest does not list
    build-options:--share=network
  • fetches from the network during the build (nothing to audit beforehand): /app/lib/wayvoice/runtime/bin/python -m pip install --disable-pip-version-check --no-input --upgrade 'av>=11,<19' 'faste
    wayvoice:build-commands

Maintenance

Recent activity on the upstream repository, or built and reviewed by Flathub.

No staleness signals: recent activity, or built and reviewed by Flathub.