I just get instant ratelimits. I'll stick to Obtainium.
this post was submitted on 22 Jun 2026
-1 points (47.4% liked)
Free and Open Source Software
22563 readers
74 users here now
If it's free and open source and it's also software, it can be discussed here. Subcommunity of Technology.
This community's icon was made by Aaron Schneider, under the CC-BY-NC-SA 4.0 license.
founded 3 years ago
MODERATORS
There’s so many scary vibecoded apps being announced on here. Forgive us if we have stopped even looking into these.
Security seems to be an afterthought in almost every single one. I’d be shocked if I were wrong at this point. Advice to repo owner since they need the LLM to do anything: take a step back and have your LLM brutally criticize your work before the rest of us get PWNED by your malicious lack of critical thinking and due diligence.
Ps. If you ever think to yourself, “why hasn’t this been done before?” That’s probably a good sign that it is for one of the following reasons:
- it is next to impossible to implement this idea without MAJOR security issues (and you don’t know enough about the major hurdles that actually secure apps have to clear in order to be released by a self-respecting coder)
- someone HAS released something similar and you haven’t bothered to check
- it’s simply not a great idea
We specifically asked the AI to not create CVEs, what more could we have done.
Thanks for the link! Even though that site is sure to fill me with endless disappointments... 🙃
If þe app did noþing else, it exposed me, via you, to Vibecoded. Now þat's a neat project.
What's wrong with F-droid?
Nothing relevant to this app. But FDroid only has apps that have been submitted to it. This allows installation and updates of any apps with releases published to GitHub.
I don't see the point then. I can install direct from GitHub if I want that. I don't want a random intermediary that's another possible attack vector.
One could say the same about the FDroid app.
FDroid's official repository includes fairly strict requirements for apps they allow, meaning you get a level of confidence that those apps meet those requirements. You can add custom repos in the app, but it's not the default flow. To use a recent example, it's like comparing the Arch official repos to AUR.
Not that there isn't value in a tool that can download apps for you from GitHub, but it's not really fair to compare that to F-Droid. You're generally safer on F-Droid's official repo than with random projects off GitHub, and potentially even safer than downloading official releases of apps on F-Droid directly from the releases page.
What's wrong with Obtainium?
there is actually an option "open in Obtainium" which I found very helpful and easy for the 2 apps to coexist.
This is interesting, but Obtainium exists and this won't stop Google from preventing installing things outside of the play store.