this post was submitted on 31 Aug 2023
22 points (100.0% liked)

F-Droid

8102 readers
2 users here now

F-Droid is an installable catalogue of FOSS (Free and Open Source Software) applications for the Android platform. The client makes it easy to browse, install, and keep track of updates on your device.

Website | GitLab | Mastodon

Matrix space | forum | IRC

founded 3 years ago
MODERATORS
fossdd@lemmy.ml
testman@lemmy.ml
22
Are all apps on the IzzyOnDroid F-Droid Repository fully open source? (lemmy.world)
submitted 1 year ago by trymeout@lemmy.world to c/fdroid@lemmy.ml
5 comments fedilink hide all child comments
 

Are all apps on the IzzyOnDroid F-Droid Repository fully open source? Or are there partially open source apps and closed source apps on the IzzyOnDroid F-Droid Repository?

you are viewing a single comment's thread
view the rest of the comments
[–] WhoRoger@lemmy.world 11 points 1 year ago* (last edited 1 year ago) (1 children)

Yes Izzy only hosts open source apps, but their policies are more lax than of F-Droid. So they can include proprietary libraries or stuff in forks that the original devs don't want. Also Izzy takes the binaries directly, so they can't guarantee their reproducibility like F-Droid does.

Btw other repos don't need to even be for open source apps. Total Commander for Android has their own F-Droid repo too (although it doesn't work atm).

[–] NENathaniel@lemmy.ca 3 points 1 year ago (1 children)

Could you explain what their "reproducibility" means?

[–] biddy@feddit.nl 12 points 1 year ago (1 children)

A program is written in source code. However in order for that source code to run on your device, it has to be "complied" into a "binary". Open source apps mean that the source code is avalible, however someone still has to do the compiling. Fdroid does the compiling themselves, which means they can guarantee that the binary in their repository came from the source code, aka it is reproducible from the source code. Izzy gets the developer to compile the code themselves, which means that a malicious developer could submit a binary that's different to the source code.