The option is adding your app to apps.yaml in our repo https://github.com/zapstore/releastr and sending a PR (or let us know). It only supports github as source right now.
I know, it's not great. We're working on supporting more sources and after that, developers self publishing.
Great! It's early days. Let us know your experience
OpenSats should openly disclose that they KYC devs so that people know how their donations will be deployed and devs know if they should bother with applying.
After the verdict from the Netherlands it's crazy to promote an idea of KYCing devs. It's like giving them a carrot to compromise their pseudonymity.
It's sad Matt that since OpenSats started you stopped promoting https://bitcoindevlist.com/ which is much better initiative as it's direct (p2p) funding without KYC.
It's even better to simply encourage donating towards maintenance/development of the tools you use or would like to see being delivered, without any centralised lists.
We will fix this
"Cypherpunks for three decades have been trying to create cryptographically secure webs of trust, and what nostr figured out is we just need people to shitpost to bootstrap them" - nostr:npub1qny3tkh0acurzla8x3zy4nhrjz5zd8l9sy9jys09umwng00manysew95gx on the latest RHR
🎯
We use PageRank, so not exactly a WoT score as known here but still a popularity contest.
It's early days though, all this will get better.
Relay selection will come to zap.store eventually! Step by step.
If you want to better understand zap.store's web of trust checks, here is a web version to play around with:

nostr:npub10r8xl2njyepcw2zwv3a6dyufj4e4ajx86hz6v4ehu4gnpupxxp7stjt2p8
That's not an update, that's a downgrade

Interesting. Should be fixed when we check version codes. Planned for next release
Thank you!
Absolutely, all those features in the roadmap, including curation, reviews and reproducible builds.
Appreciate the offer for help! Once we pass this messy bootstrapping phase we'll be looking for contributors
We're creating an app store in an adversarial permissionless environment. "Delisting" is only possible today because we have control during this bootstrap phase.
Closed source apps, malware and everything in between is coming. We don't want to become yet another "benevolent" dictator - and ultimately we can't as nostr is a permissionless censorship-resistant protocol.
We will become the best tool for users and developers to find each other with the highest fidelity possible in such an environment.
nostr:npub10r8xl2njyepcw2zwv3a6dyufj4e4ajx86hz6v4ehu4gnpupxxp7stjt2p8 how can I add an app to the store?
Also, do you vet all the versions of the apps on the store before they become available to install?
For now, while we bootstrap, send a PR with an updated apps.yaml at https://github.com/zapstore/releastr
No we don't vet any version. We simply index select repositories and pull the APKs. Curation will come in due course.
Obi gave me a reason. I don't remember what it was. I guess it didn't make sense to me.
I believe Fedi is currently the only closed source app indexed in zap.store , and this was by mistake. Their source repository only has a README file.
We will eventually support proprietary software but need to work on the appropriate warnings.
What should we do now? Leave the misleading repository or delist the app? Both options sound bad.
It was a proof of concept for what we're building. It's not fully functional on CLI yet, but it will come.
You can install bitcoin core from many package managers but often have no idea who built it. You may need to trust one entity and a random maintainer for your distro and there's no easy way to change that.
If we can make package hashes be cryptographically linked to nostr pubkeys, we can leverage trust signals in the nostr network and do curation to increase confidence in what we're installing.
Web of trust is not the one and only solution to this problem, or a perfect one, but a powerful tool in the toolbox. Our goal is to maximize signal and minimize noise while operating in an adversarial permissionless environment.
These are the reason I havent fully migrated yet on nostr:npub10r8xl2njyepcw2zwv3a6dyufj4e4ajx86hz6v4ehu4gnpupxxp7stjt2p8
🙄
Soon!
There was some discussion in the Blossom repo around mirroring lately
Twitter literally has this feature 🤣
jokes aside, nostr:npub10r8xl2njyepcw2zwv3a6dyufj4e4ajx86hz6v4ehu4gnpupxxp7stjt2p8 is pretty cool
But Elon can change your follow list

