Flatsonar

flatpaks

by noobping

a personal flatpak repository

Broad permissions Unverified publisher MIT
Install Source code

About

a personal flatpak repository

Permissions

2 permissions weaken the sandbox. Flatsonar asks before installing.

  • access to unrecognised path 'home/.password-store:ro'
    --filesystem=home/.password-store:ro
  • access to unrecognised path 'home/.gnupg:ro'
    --filesystem=home/.gnupg:ro
  • owns its own bus name
    --own-name=io.m51.Pass.SearchProvider
  • access to xdg-run/gnupg
    --filesystem=xdg-run/gnupg

Who publishes this

Nobody has confirmed that the publisher controls this app id. Flatsonar warns before installing.

  • io.m51.Pass.SearchProvider claims the domain pass.m51.io; only its owner can prove that
    publisher:namespace
  • the build has network access: it can download things the manifest does not list
    build-options:--share=network
  • fetches from the network during the build (nothing to audit beforehand): cargo fetch --locked
    ripasso-gnome-search-provider:build-commands

Maintenance

Recent activity on the upstream repository, or built and reviewed by Flathub.

No staleness signals: recent activity, or built and reviewed by Flathub.