The scripts are ran? I don’t think that network log test is done, its manual iirc.
It has never ever been one key signing all apps.
Every single app gets its own unique key.
No they are not.
Only some automated checks are performed for updates, there is no manual review.
They have more resources than you’d expect (an oversight board with numerous members, dozens of active contributors, and more than one active grant/contract at a time) and it’ll take anyone else a long while to get to such a place of stability.
Who is giving them grants ?
Source?
That is how all these projects work.
Donations and grants.
You can see active work/issues that each have a grant sponsor from eg.: Labels · F-Droid / Client · GitLab
They have more than one active grant right now.
Just look at the certificate of any app and the creation date.
You can use an app like App Manager to do this: App Manager | F-Droid - Free and Open Source Android App Repository
VirusTotal also shows it, scroll down to Certificate Attributes, note the different serial numbers and dates:
That’s no longer the case with Droid-ify and Neo Store.
- Localized Metadata for apps (Thanks @BLumia)
They still don’t support mirrors tho Add support for mirrors to ease load on main f-droid repo · Issue #163 · NeoApplications/Neo-Store · GitHub
hope they do soon
Droid-ify does support mirrors
Go to Repositories > Long press the “F-Droid” menu > Edit repository
From there you can select a mirror.
@anon46412288
having users need to both manually select a mirror AND only being able to use a single mirror is not the same as “supporting mirrors”.
F-Droid additionally supports delta index updates which further reduces waste of resources.
To further elaborate on my frustration with these third party clients:
It’s good to see fdroid winning, because i have moved most apps from obtanium back to fdroid.
If you search online for your opensource app and add the wrong link to obtainium, you could be installing malware.
As per this youtube video
I had assumed all github projects were safe and opensource but @SkewedZeppelin had mentioned previously that was not the case.
I’d like to see in red letters around recommending obtanium to make sure to get links from fdroid, not search online.