I'm fairly new to Linux and would appreciate a simple explanation. I'm running Linux Mint 22.3 Cinnamon with kernel 6.14 on a custom-built PC, and I'm setting up a Logitech G29 racing wheel and pedals for simulation racing. I've heard that Oversteer and new-lg4ff can help enable the wheel's full functionality.
I found Oversteer in Mint's software manager as an unverified Flatpak. I installed it briefly, then became worried about the unverified label and removed it. I didn't change any permissions or configure anything manually.
What does "verified" actually mean for a Flatpak? Does "unverified" mean the application is unsafe, and is the Oversteer Flatpak generally trustworthy?
3 Answers
Verification is about identity and authorization, not a safety seal. Some legitimate applications remain unverified simply because the original developers haven’t completed the verification process or because a community contributor publishes the package.
For an app like Oversteer, compare the Flatpak listing with the project’s official site or source repository. Make sure the application ID and maintainer match what the project recommends, and review the sandbox permissions before installing. Removing it after installation was harmless; uninstalling a Flatpak removes the application, though user data may remain unless you remove that separately.
Think of it like buying a book: verified means the publisher has confirmed that the seller represents the author. Unverified means the seller may be repackaging the author’s work. The book might still be perfectly legitimate, but you need to check the seller.
This is also different from a normal distribution package. Distribution maintainers and Flatpak packagers may apply their own patches or choose a particular version, so neither “verified” nor “unverified” should replace basic checks of the source, maintainer, update history, and permissions.
On Flathub, “verified” mainly means the developer has confirmed ownership of the app’s name or ID. It usually indicates that the developer, or someone officially authorized by them, maintains the package. It isn’t a complete security rating or a guarantee that the software is harmless.
An unverified Flatpak is often packaged and maintained by a community member or another third party. That doesn’t automatically make it dangerous, but you should check who maintains it, whether the project links to the official source, how recently it was updated, and what permissions it requests. Oversteer is a known open-source utility, and its project documentation lists Flatpak as an installation option, so its unverified status alone isn’t a reason to panic.

Related Questions
Can't Load PhpMyadmin On After Server Update
Redirect www to non-www in Apache Conf
How To Check If Your SSL Cert Is SHA 1
Windows TrackPad Gestures