Flatsonar

Snap4Arduino

by Arduino.org

Snap! visual programming language for Arduino

Dangerous permissions Unverified publisher AGPL-3.0
Screenshot 1 of Snap4Arduino

About

Snap4Arduino is a modification of the Snap! visual programming language that lets you seamlessly interact with almost all versions of the Arduino board. Snap! (formerly BYOB) is an extended reimplementation of Scratch that allows you to Build Your Own Blocks™. It also features first class heterogeneous lists, first class procedures, and continuations. These added capabilities make it suitable for a serious introduction to computer science for high school or college students. Features: - Blocks-based, dynamic, live, concurrent, parallel programming - Almost all Arduino boards supported - Uses standard Firmata firmware - Auto-configurable pinouts and high level hardware abstractions - You can interact with multiple boards at the same time - Desktop-based versions for the three major OSes - Free software licensed under the Affero GPLv3 - Transpilation of simple scripts into Arduino sketches - HTTP protocol for remote control and live-streaming of the Snap! stage - Command line version for embedded GNU/Linuxes - Support for the Linino library instead of Firmata in new generation boards like the Tian, Yun or similar

Permissions

5 permissions weaken the sandbox. Flatsonar asks before installing.

  • all devices (/dev): webcams, disks, raw hardware
    --device=all
  • full access to your entire file system
    --filesystem=host
  • unrestricted access to the session D-Bus (all your running apps)
    --socket=session-bus
  • unrestricted access to the system D-Bus (system services, hardware)
    --socket=system-bus
  • X11 display: X11 lets apps read input and windows of other apps
    --socket=x11
  • inter-process communication (needed for X11)
    --share=ipc
  • network
    --share=network
  • audio
    --socket=pulseaudio

Who publishes this

Nobody has confirmed that the publisher controls this app id. Flatsonar warns before installing.

  • org.snap4arduino.App claims the domain snap4arduino.org; only its owner can prove that
    publisher:namespace
  • fetches from ftp.gnu.org over unencrypted http: anyone on the path can swap the bytes
    source:insecure-url
  • git source tracks a moving branch: what gets built can change without the manifest changing
    source:unpinned
  • the build has network access: it can download things the manifest does not list
    snap4arduino:build-options:--share=network

Maintenance

Recent activity on the upstream repository, or built and reviewed by Flathub.

No staleness signals: recent activity, or built and reviewed by Flathub.