On the importance of F-Droid, an Android app store (rocket9labs.com)

submitted 2 days ago by trevor@lemmy.ml to c/opensource@lemmy.ml

14 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[-] pavokk@lemmy.dbzer0.com 7 points 2 days ago

Is there anything controversial about them?

[-] beyond@linkage.ds8.zone 13 points 2 days ago

There are those who believe that F-Droid's role as a "middle man" vetting and building packages from source instead of blindly shipping builds provided by upstream makes it a security risk, because you're trusting F-Droid in addition to (some say instead of) the upstream developer. Perhaps telling is that none of these critics can offer an alternative solution.

Before anyone mentions Obtainium and Accrescent, these are not alternatives to F-Droid, they solve completely different problems.

[-] stationary_melon@lemmy.ml 6 points 2 days ago

I personally like F-Droid's vetting process. It's true that updates always arrive a few days later, but you can be sure they don't contain any malicious code. Furthermore, they specify all of the antifeatures a program has, which makes it easier to avoid them. If you want faster updates, you can always download a program through Obtanium.

[-] trevor@lemmy.ml 1 points 2 days ago* (last edited 2 days ago)

I am not an F-Droid maintainer, but as far as I know the code is not vetted by F-Droid after the initial app submission process. Updates are pulled in, built and distributed automatically. The long delay is just because there are a lot of apps to build, and F-Droid is a volunteer-run operation.