[beeflet]

this is cool, I use f-droid, but there are a few external sites I still need to fetch APKs from every once and a while. Does this still check the signatures?

[flutas]

App signature is enforced by the system, so yeah.

Doesn't check MD5/SHA1 signatures afaik though if that's what you meant.