I didn’t notice the scope of some of the app permissions until now, but half of those are unnecessary. I’ll be reducing the scope in the next release to avoid any confusion.
F-Droid's big "thing" is reproducible builds. You could theoretically post any artifact to GitHub, so I have to trust that every update the artifact you built matches the source code. F-Droid allows me to know that the artifact matches the source code.
Unless of course you've implemented your own reproducible build system.
The caveat here is it means F-Droid has to build your app, which can take some time (but they're actively working on improving that)
Yeah. Sorry I should have phrased my comment better. I’m not saying that’s a bad thing, but people should understand that the tradeoff of reproducible builds is a slight lag in updates.
all 14 comments