I don’t code so I can’t possibly audit FOSS software. However, I also can’t audit proprietary software. Lots of people can and do audit FOSS software, though, and can and do share their findings. But no matter how many people “audit” propietary software, it remains propietary - a black box. Untrustable, especially considering corporations’ incentives and historical actions.

Thanks for the suggestion. It was already suggested. It looks pretty good, though it wasn’t the one I had originally seen.

This wasn’t what I had found, but it’s the closest I’ve seen so far.

It’s got way more features than I’m looking for, and the UI is a bit clumsy to navigate (or maybe it’s just complex due to all the features).

Thanks for the suggestion! I may use this, but I’ll keep looking for a bit.

Thanks for the suggestions - I’ll check them out.

Thanks for the suggestion. I’ll check it out.

This is well beyond my skillset (or knowledge level), but something like ArchiveBox combined with ActivityPub might be able to distribute internet archiving, each instance sharing with the fediverse what it has archived.

If I give Obtainium this URL: https://builds.joinpeertube.org/mobile/peertube_mobile_v0.5.1.apk

…it recognizes that it’s an apk and shares with AppVerifier as I’ve configured obtainium to do. But I didn’t proceed further because I don’t want to install it if it’s not authenticl. I need a hash to compare with appveifier.

I want to install it via Obtainium (in GrapheneOS), but I also want to verify the apk first (w/AppVerifier). I don’t see a SHA-256 hash on framagit’s repo. Is there a way to verify we’re getting the correct apk?

I self-host forgejo. I’m not a heavy or advanced user, and it suits my needs. I barely use github any more: mainly to star repos I like, and find and use repos (there’s a ton there - it’s almost ubiquitous).

I just installed this a couple days ago and already used it twice. It’s super easy and convenient.