Post #3276460

2026-04-30 08:11 UTC

@jcm @vwbusguy@mastodon.online @bookwar@floss.social thankfully there is push in case of flatpaks to make developers verify those :D Which means the flatpak is maintained by either upstream or trusted third-party, but as said above apparently that also means being a contributor, so in both of these cases it's maintained by upstream :D Another point is that even an unverified flatpak is better than distro package, since everyone, no matter the distro, can install it.

Replies (1)

@bookwar@floss.social 2026-04-30 08:32

@tragivictoria@mastodon.catgirl.cloud Working with the reliable trusted upstream is always nice. And it is not a big problem for any form of the distribution. Packaging a well-designed, well-licensed and well-versioned app into a rpm or deb is a no brainer too. And upstream first policy in Fedora specifically discourages any changes to such upstream code because there is no justification for them. But this thread started with a question, what happens when upstream fails in some way. @jcm @vwbusguy@mastodon.online

Open ##3276461