Why does the Git not have a release .apk or source .zip ? I can see the code but how do I know that's what I am building? nostr:nprofile1qqszpxr0hql8whvk6xyv5hya7yxwd4snur4hu4mg5rctz2ehekkzrvcpzamhxue69uhhyetvv9ujuurvv438xarj9e3k7mgpr9mhxue69uhkummnw3ezu7n9vfjkget99e3kcmm4vsq3yamnwvaz7tm0venxx6rpd9hzuur4vg5xqmxe
Valid point. At the moment, it’s Web of Trust via nostr:npub10r8xl2njyepcw2zwv3a6dyufj4e4ajx86hz6v4ehu4gnpupxxp7stjt2p8. The listing does read “source code not available”. 🧐
I saw an app named Obtainium that claims to let you “get Android app updates straight from the source“.
They both pull code from Git sources. Obtainium will say "Could not find a suitable release." This means the project has not pushed the build even if all the code is readable on Git.
If there is no APK, Obtainium will not help you
Could you put the zapstore app on f droid? I don't want to install an APK that I download off the web.
What is the rationale for preferring F-Droid, if I may ask? It is a third party, whereas via the web you are trusting our domain name and server. You can verify certificate and blob hash if you want to be 100% sure.
Yes, we want to put Zapstore on F-Droid. But we do not want F-Droid to build a non-reproduceable APK, that would be regarded.
When we get to reproduceable builds, we then will go through the F-Droid bureaucracy, no problem.
Verifying the blob hash is an extra step, and I don't know how, on my phone at least. Fdroid does all that stuff for you. That's why people like it.
And how did you verify that you have the right F-Droid?
People like Zapstore because it does all that stuff for them, too 😉
I know, but the fewer sources you trust the better.
This is just a suggestion. I think you'll get more downloads if you're on fdroid. And even more if you're on Google Play store. It's up to you.
Absolutely, I agree with you. However F-Droid is a tricky one. They build AND host packages themselves, and they had security issues. Way too much trust placed in them. The only way that makes sense to use F-Droid is with reproduceable builds.
All the open source projects are on both stores. Just saying.
