I’ve come to realize that a lot of foss android apps are pretty outdated and usually abandoned. Is that even safe to use? Like even the fdroid archive repository, are those safe to use? I’m still rather new to the foss world, but in my mind it seems a very outdated app is probably not safe or am I missing something here?
Good tips, these are exactly what I need. Like which repos do you check out; like github and gitlab?
Wherever the app’s code is on. I usually go around finding the link in the store page or through the search engine. Most of the time, they end up on GitHub and GitLab, sometimes on Codeberg or other instance.
Paranoid section ahead: Don’t blindly trust the issues list, closed or open, because there are still ways to permanently delete those, hence giving bad actor a way to hide evidence of the on-going security problem.
In F-Droid, there is always a link to the repo. In english it is probably something like “source (code)”. It is in the collapsable menu under “Links”.
Thanks, I’ve just been doing by the apps version numbers and the last date it was updated