flatpak-external-data-checker
com.bitwarden.desktop | flatpak-external-data-checker | |
---|---|---|
15 | 15 | |
14 | 113 | |
- | 3.5% | |
7.3 | 6.8 | |
7 days ago | 1 day ago | |
Python | ||
- | GNU General Public License v3.0 only |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
com.bitwarden.desktop
-
Flathub – The Linux App Store
> One thing I don't know about (which maybe somebody can inform me/us about): the wiki states that PRs are reviewed by Flathub reviewers, but I see no sign of human review on e.g. https://github.com/flathub/com.bitwarden.desktop/pull/167 (or others in that repo). What's the actual process?
In this case, I think the lack of human involvement is mostly a good thing. Flathub was criticised for having outdated packages[1]. Using automation to automatically update packages is mostly a good thing.
Obviously, we want to see thorough review of new packages, but that's a separate issue.
[1] I thought I read this in an LWN article, but I can't find it. But see e.g. https://github.com/flathub/org.qutebrowser.qutebrowser/issue...
-
Can I trust Flatpak apps if they are not managed by the app developer?
for example, bitwarden's flatpak on github shows basically just repackages the official debian build into a flatpak build. in this case i think it's pretty safe (in fact i use the flatpak).
-
Bitwarden not working
You might also be interested in learning a little about Flatpaks and downloading/installing programs from Flathub. I'll give you the basic background: It's an alternative (in some ways, honestly, modern) way of installing programs that can be sandboxed/permissioned. It's a way of releasing software that also helps ensure compatibility across a wide variety of systems. It's also a way of releasing software that can update independently from the base installation. You can think of it sort of like an app store on a phone where the programs are a bit self-contained and can update independently from the phone's operating system. https://flathub.org/apps/details/com.bitwarden.desktop
- First config install
-
In using Ubuntu for ARM, I noticed there's a 4-year-old version of Bitwarden ARM64 on the Ubuntu Software Center. Be cool if you updated it, but maybe remove it at this point. It’s identified as unsafe due to ‘using a legacy windowing system’, and while it installs, the login errors out.
See https://github.com/flathub/com.bitwarden.desktop/issues/63
-
Publishing Electron apps to flathub
Example of an application but with Electron: https://github.com/flathub/com.bitwarden.desktop
-
I'm a very basic user. What am I missing?
Since we're on the subject, you can also host your own BitWarden if you wanted. Bitwarden also has a desktop client for Linux as well. Alternatively if enabled 3rd Party Repositories or just manually enabled Flathub, you can install the Bitwarden flatpak.
- I made a BASH script that removes Snap from an Ubuntu system and replaces it with Flatpak.
-
Vote for the Bitwarden flatpak app to become official
It's not really that much of a risk. If you look at the yaml file you can see exactly what permissions it requests and what happens when the package is built.
-
What's the current obstacle to more developers directly pushing their apps to flathub?
Luckily, Flathub is transparent in what manifests are used in the production of the Flatpaks they host. For example, this is the one for Bitwarden. You can take some time to learn how Flatpaks are built, but this one seems pretty straight forward. They are taking the .deb file from Bitwarden's github release page and extracting the executable from there. Then it adds a couple extra files, which are viewable within the manifest file, to make it into a Flatpak app.
flatpak-external-data-checker
-
Flathub – The Linux App Store
> Maybe. The CI rules should be made public in that case, though, surely? Maybe they are?
Agreed, but thankfully they are. The PRs link to <https://github.com/flathub/flatpak-external-data-checker>. That said, it'd be clearer if the flathubbot 'user' profile also linked to that URL.
> The enormous amount of value the distros bring [...] is audit of packages (and packaging).
Yes, auditing against supply chain attacks is good! But there's also a risk in running outdated software. I don't have easy answers. But if automation leaves more time for the hard part, great.
-
Developers are lazy, thus Flatpak
Flathub provides an excellent tool to keep your dependencies up to date, so it's just a matter of adding it to the manifests. Besides, who says 'dependencies not being updated enough' is a valid metric to determine the quality of a package? LOL.
- How do I easily create a Flatpak from 2 sources?
-
GE-Proton7-48
According to Github issue/PR #126 new builds are failing because of a bug in flatpak-external-data-checker or some incompatibility between the two projects at least.
-
Do snap packages have any real advantages for the end user over native packages?
I'm surprised the documentation says that since Flathub itself runs its CLI scripts via Flatpak: https://github.com/flathub/flatpak-external-data-checker
-
How do I actually make a flatpak.
Another thing you could add would be to tag your releases on GitHub, add a tag field next to the commit one, and add an x-checker-data section to the manifest so the Flathub bot will automatically open PRs to update the Flatpak release when you update your repository.
-
Automate dependency update of flatpak
See f-e-d-c, and if you're not planing to submit to Flathub, then look at the GitHub workflow example there. Be aware that auto-merging is not acceptable for anything other than extra-data sources.
- The culmination of several months of work by dozens of people, Flatpak 1.14.0 is now out!
-
Zoom can now (as of version 5.11.0) share screen on Wayland
Unfortunately the maintainership of the Zoom Flatpak on Flathub has been a bit slow, but you can still install it since the Flathub bot do automatic builds whenever there's an update, thanks to the provided flatpak-external-data-checker service.
-
Fedora Silverblue and the future of app management
There is https://github.com/flathub/flatpak-external-data-checker which automatizes the update pull requests including dependencies. Flatpak has other downsides, but security or not getting the latest and greatest is not one of them.
What are some alternatives?
desktop - The desktop vault (Windows, macOS, & Linux).
bauh - Graphical user interface for managing your Linux applications. Supports AppImage, Debian and Arch packages (including AUR), Flatpak, Snap and native Web applications
snapd - The snapd and snap tools enable systems to work with .snap files.
flatpak-builder-tools - Various helper tools for flatpak-builder
org.qutebrowser.qutebrowser
apt - Fork of https://salsa.debian.org/apt-team/apt
snap-to-flatpak - A BASH script that removes Snap from an Ubuntu system and replaces it with Flatpak
wormhole-gui - Cross-platform application for easy encrypted file, folder, and text sharing between devices. [Moved to: https://github.com/Jacalz/rymdport]
TauonMusicBox - The desktop music player of today! :city_sunrise:
kittyMake - A simple buildSystem written in python
org.gnome.Geary
flatpak_demo - A demo of a Fyne application packaged as a Flatpak.