saphidandClaude Opus 5.5 c68afa6c5d F-Droid: refuse index rollbacks, v1 downgrades after v2, and SHA-1 entry.jar ...

Each repository's newest accepted index timestamp is stored and older indexes
are refused. index-v1.jar is only a fallback while no v2 index has been
accepted. entry.jar must use SHA-2; the recorded IzzyOnDroid entry.jar is
SHA-256 and still verifies. Tests sign JARs with a throwaway key.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

2026-09-28 22:08:26 +10:00

..

__init__.py

Store: newest query runs after a source's current search; no source calls under the search lock

2026-09-28 22:06:20 +10:00

_demo.py

Redesign APK discovery as an artwork-led app store

2026-09-28 21:47:38 +10:00

_images.py

Redesign APK discovery as an artwork-led app store

2026-09-28 21:47:38 +10:00

_web.py

Store: real-source fixes found by running search against live repos

2026-09-28 22:02:38 +10:00

fdroid.py

F-Droid: refuse index rollbacks, v1 downgrades after v2, and SHA-1 entry.jar

2026-09-28 22:08:26 +10:00

github_curated.json

Store: real-source fixes found by running search against live repos

2026-09-28 22:02:38 +10:00

github.py

Add publisher artwork to GitHub APK source entries

2026-09-28 21:24:55 +10:00

itch.py

Add curated GitHub APK releases and itch.io VR feed listings

2026-09-28 21:03:27 +10:00

search.py

Store: newest query runs after a source's current search; no source calls under the search lock

2026-09-28 22:06:20 +10:00

sidequest.py

Store: real-source fixes found by running search against live repos

2026-09-28 22:02:38 +10:00