Moment

Permissions

Everything this app can reach outside its sandbox. Nothing here weakens it.

• inter-process communication (needed for X11)

  --share=ipc
• network

  --share=network
• X11 display, only when Wayland is unavailable

  --socket=fallback-x11
• audio

  --socket=pulseaudio
• Wayland display

  --socket=wayland
• GPU acceleration

  --device=dri
• access to xdg-config/kdeglobals

  --filesystem=xdg-config/kdeglobals:ro
• talks to com.canonical.AppMenu.Registrar

  --talk-name=com.canonical.AppMenu.Registrar
• talks to org.kde.kconfig.notify

  --talk-name=org.kde.kconfig.notify
• talks to org.kde.KGlobalSettings

  --talk-name=org.kde.KGlobalSettings
• system tray

  --talk-name=org.kde.StatusNotifierWatcher
• notifications

  --talk-name=org.freedesktop.Notifications

Who publishes this

The creator demonstrably controls this app id: Flathub verification, the hosting account owns the namespace, or a well-known file on their domain.

• fetches from www.portaudio.com over unencrypted http: anyone on the path can swap the bytes

  source:insecure-url
• verified on Flathub: the developer proved they control this app id

  publisher:flathub

Maintenance

Recent activity on the upstream repository, or built and reviewed by Flathub.

No staleness signals: recent activity, or built and reviewed by Flathub.