Recently, I installed an application named logseq, and I got the warning about a dependency, electron, being marked as insecure.
Not a problem, I can bypass that, but before doing this, I would like to know why it was marked as insecure.
And I can’t get the information anywhere. Is there a source of information where I can find those reasons? (if it is obvious, I apologize, I am quite new in the NixOS world…)
Logseq isn’t insecure, the extremely outdated version of electron that it uses is, and it should tell you so in the error message.
It’s insecure because it’s a full-on chromium browser with internet access that hasn’t been updated in years. (I would strongly recommend not using logseq as a result.)
1 Like
Thank you.
I only tested it in a nix-shell temp environment, to see what it looked like (I am looking for an opensource Obsidian alternative). But I will not use it. Interface too buggy, and, you said it, outdated and insecure electron.