"But I do not care very much whether the app is verified or not; it’s perfectly acceptable for a third-party developer to maintain the Flathub packaging if the upstream developers do not wish to do so, and I don’t see any need to discourage this."
Go ahead and run the Signal flathub flatpak. It's unverified and published by a 3rd party. I'm sure its fine tho.
Snark aside, I've been using Fedora Atomics, Flatpak, and Flathub for years now. It's all... fine. But as long as Flathub can host potentially unsafe software, it should never be included by default in any distro. The entire purpose of Fedora having its own software repos is to provide trusted software.
The flatpak cli tool doesn't even make the distinction for verified vs unverified apps. I suspect that Flathub verified badge is purely a Flathub construct. And i wonder if Flatpak was originally designed to work more like Copr, where the user ends up with a bunch of different trusted repos, each often providing a single app.
"But I do not care very much whether the app is verified or not; it’s perfectly acceptable for a third-party developer to maintain the Flathub packaging if the upstream developers do not wish to do so, and I don’t see any need to discourage this."
Go ahead and run the Signal flathub flatpak. It's unverified and published by a 3rd party. I'm sure its fine tho.
Snark aside, I've been using Fedora Atomics, Flatpak, and Flathub for years now. It's all... fine. But as long as Flathub can host potentially unsafe software, it should never be included by default in any distro. The entire purpose of Fedora having its own software repos is to provide trusted software.
The flatpak cli tool doesn't even make the distinction for verified vs unverified apps. I suspect that Flathub verified badge is purely a Flathub construct. And i wonder if Flatpak was originally designed to work more like Copr, where the user ends up with a bunch of different trusted repos, each often providing a single app.
The flatpaks I have installed have never worked. Never bother with it any more, only use AppImage.
Also love these pieces "things are working really well, now we have to change." No thank you.
Linux packaging has been so thoroughly embraced and extended, that .exe is going to win the binary application format war.
God I hate Red Hat so much.