Hunted, not submitted
The crawler walks Flathub and the forges looking for real flatpak-builder manifests, .flatpak bundles and .flatpakrepo remotes. Nobody has to submit anything, and nobody is hidden for being unverified.
Open-source Flatpak apps, hunted from everywhere
One store, every open-source Flatpak app.
Flatsonar finds open-source apps wherever they live (Flathub, GitHub, GitLab, Codeberg, project remotes, release bundles) and puts them in one store. Every listing credits the people who made it. Anything risky gets explained, and you are asked twice before it runs.
5,121open-source apps
2,124found outside Flathub
1,201with a sponsor button
2,443verified creators
How the hunt works
Three things happen to every app before it reaches you.
Credit where it is due
Every listing names the creator and links the source. FUNDING.yml and AppStream donation links become a Sponsor button. Flatsonar is the shop window; the people behind the apps get the money.
Warned twice, then it is your call
Sandbox permissions are scored, manifests are audited, the pulled files get a ClamAV scan. Yellow or red means two dialogs and two Sures. Nothing is banned; nothing is quietly waved through.
Who publishes this?
An app id is a claim: io.github.alice.Foo says “alice on GitHub made this”. Flatsonar checks that claim wherever the manifest was actually found.
Verified
The creator demonstrably controls the id: Flathub verification, or the hosting account owns the namespace, or their domain serves a well-known file listing it.
Reviewed
On Flathub: the manifest went through review and Flathub built it, but the developer has not verified the id.
Unverified
Off Flathub and ownership could not be confirmed. Nothing known against it, but you are told before installing.
Suspicious
A concrete red flag: an id claiming a namespace the repo neither owns nor builds from, or a build that does things a build should not.
Found outside Flathub
Apps that only exist as a manifest, a bundle or a project remote.
Creators you can support
Most-starred apps whose authors take sponsorship.
Browse by category
Get Flatsonar
A GTK4 desktop app for Linux that installs through the two-gate check (pull, unpack, scan, re-score, ask twice, deploy) and shows you what is already installed with the same scoring.
Early days: it runs from source today. A Flatpak of Flatsonar itself is coming (and scores red by its own rules: a store has to talk to org.freedesktop.Flatpak).
git clone https://github.com/abutauskas/flatsonar.git && cd flatsonar
./scripts/setup-wsl.sh # GTK4, libadwaita, flatpak, clamav
pip install --user -e core -e client
python -m flatsonar