Not the same as Fdroid.
Either:
- Developers nostr-sign their releases
- Our indexer pulls from Github and other sources and nostr-signs those
We never build from source. What you get "direct from the source" (as in what the dev built) on Obtainium is the exact same you get on Zapstore - we are simply indexing it for convenience.
You are probably confusing certificate signatures with nostr signatures.
On another note: this quarter we are pushing a relay that does auto-indexing, so anyone can suggest a repo to index. Effectively having the same huge catalog as Obtainium but without the UX downsides.