Flatsonar

checkIT

by rdYards

Native secure Ledger app for tracking data

Broad permissions Unverified publisher GPL-2.0
Install Source code

About

Native secure Ledger app for tracking data

Permissions

1 permission weaken the sandbox. Flatsonar asks before installing.

  • full access to your home folder
    --filesystem=home
  • owns its own bus name
    --own-name=org.rdyards.CheckIT
  • inter-process communication (needed for X11)
    --share=ipc
  • Wayland display
    --socket=wayland
  • X11 display, only when Wayland is unavailable
    --socket=fallback-x11

Who publishes this

Nobody has confirmed that the publisher controls this app id. Flatsonar warns before installing.

  • org.rdyards.CheckIT claims the domain rdyards.org; only its owner can prove that
    publisher:namespace
  • the build has network access: it can download things the manifest does not list
    checkit:build-options:--share=network
  • fetches from the network during the build (nothing to audit beforehand): cargo fetch --manifest-path Cargo.toml --locked
    checkit:build-commands

Maintenance

Recent activity on the upstream repository, or built and reviewed by Flathub.

No staleness signals: recent activity, or built and reviewed by Flathub.