Flatsonar

appstream-glib

by Richard Hughes

AppStream files validation an tools

Dangerous permissions Verified creator LGPL-2.0-or-later v0.8.1

About

This library provides GObjects and helper methods to make it easy to read and write AppStream metadata. It also provides a simple DOM implementation that makes it easy to edit nodes and convert to and from the standardized XML representation. It also supports reading of Debian-style DEP-11 metadata.

What this library allows you to do:- Read and write compressed AppStream XML files- Read compressed Debian YAML files- Add and search for applications in an application store- Get screenshot image data and release announcements- Easily retrieve the best application data for the current locale- Efficiently interface with more heavy-weight parsers like expat

Permissions

1 permission weaken the sandbox. Flatsonar asks before installing.

  • full access to your entire file system
    --filesystem=host
  • network
    --share=network
  • access to /var/lib/flatpak
    --filesystem=/var/lib/flatpak:ro
  • access to ~/.local/share/flatpak
    --filesystem=~/.local/share/flatpak:ro

Who publishes this

The creator demonstrably controls this app id: Flathub verification, the hosting account owns the namespace, or a well-known file on their domain.

  • fetches from pyyaml.org over unencrypted http: anyone on the path can swap the bytes (x3)
    source:insecure-url
  • verified on Flathub: the developer proved they control this app id
    publisher:flathub

Maintenance

Recent activity on the upstream repository, or built and reviewed by Flathub.

No staleness signals: recent activity, or built and reviewed by Flathub.