[woojoo666]

Care to elaborate? Has there been any instances of malware?

[worldsavior]

They follow bad practices. For example it takes them too long to update apps, with no appreciation to the update (meaning if there was a critical CVE ), and other. Look at this site[1], showing some reasons why google play store is preferred.

[1] https://wonderfall.dev/fdroid-issues/

[vanous]

>For example it takes them too long to update apps, with no appreciation to the update (meaning if there was a critical CVE ), and other.

Fully agree, have some experiences.

Friendly advice: treat Fdroid like any other development dependency and try to be in control rather than being dependent: run your own f-droid repo which people can add to their Fdroid app as a source.

[worldsavior]

Agreed. Using GitHub is already a better option since it's eliminating another party (Fdroid).

[ajvs]

Self-hosting a F-Droid repo means users can easily get automatic updates, which is important for security.

[worldsavior]

But it requires self hosting.

[SpaghettiCthulu]

Would it be possible to host an fdroid repo on GitHub pages?

[j0hnyl]

Isn't that up to the developers of the individual apps?

[worldsavior]

No because they compile the apps and not the developers.

[beenBoutIT]

F-droid is flawless in terms of security.