Conversation
Just Adding a Link and pic to add Catima github with one click to Obtainium
| <a href="https://apps.obtainium.imranr.dev/redirect?r=obtainium://app/%7B%22id%22%3A%22me.hackerchick.catima%22%2C%22url%22%3A%22https%3A%2F%2Fgithub.com%2FCatimaLoyalty%2FAndroid%22%2C%22author%22%3A%22CatimaLoyalty%22%2C%22name%22%3A%22Catima%22%2C%22preferredApkIndex%22%3A0%2C%22additionalSettings%22%3A%22%7B%5C%22includePrereleases%5C%22%3Afalse%2C%5C%22fallbackToOlderReleases%5C%22%3Atrue%2C%5C%22filterReleaseTitlesByRegEx%5C%22%3A%5C%22%5C%22%2C%5C%22filterReleaseNotesByRegEx%5C%22%3A%5C%22%5C%22%2C%5C%22verifyLatestTag%5C%22%3Atrue%2C%5C%22sortMethodChoice%5C%22%3A%5C%22date%5C%22%2C%5C%22useLatestAssetDateAsReleaseDate%5C%22%3Afalse%2C%5C%22releaseTitleAsVersion%5C%22%3Afalse%2C%5C%22trackOnly%5C%22%3Afalse%2C%5C%22versionExtractionRegEx%5C%22%3A%5C%22%5C%22%2C%5C%22matchGroupToUse%5C%22%3A%5C%22%5C%22%2C%5C%22versionDetection%5C%22%3Atrue%2C%5C%22releaseDateAsVersion%5C%22%3Afalse%2C%5C%22useVersionCodeAsOSVersion%5C%22%3Afalse%2C%5C%22apkFilterRegEx%5C%22%3A%5C%22%5C%22%2C%5C%22invertAPKFilter%5C%22%3Afalse%2C%5C%22autoApkFilterByArch%5C%22%3Atrue%2C%5C%22appName%5C%22%3A%5C%22Catima%5C%22%2C%5C%22appAuthor%5C%22%3A%5C%22%5C%22%2C%5C%22shizukuPretendToBeGooglePlay%5C%22%3Afalse%2C%5C%22allowInsecure%5C%22%3Afalse%2C%5C%22exemptFromBackgroundUpdates%5C%22%3Afalse%2C%5C%22skipUpdateNotifications%5C%22%3Afalse%2C%5C%22about%5C%22%3A%5C%22%5C%22%2C%5C%22refreshBeforeDownload%5C%22%3Atrue%2C%5C%22includeZips%5C%22%3Afalse%2C%5C%22zippedApkFilterRegEx%5C%22%3A%5C%22%5C%22%2C%5C%22github-creds%5C%22%3A%5C%22%5C%22%2C%5C%22GHReqPrefix%5C%22%3A%5C%22%5C%22%7D%22%2C%22overrideSource%22%3A%22GitHub%22%7D" target="_blank"> | ||
| <img src="https://github.com/user-attachments/assets/713d71c5-3dec-4ec4-a3f2-8d28d025a9c6" alt="Get it on Obtainium" height="90"/></a> |
There was a problem hiding this comment.
I'm not sure if I really want to promote Obtainium. I know it's popular, but I think the attitude of grabbing APKs from dev's GitHub releases directly with 0 security scanning is generally a bad way to get software (though it may still be better than Google Play as Google is extremely abusive to developers).
My main issue is that this URL is basically impossible for me to review, it's extremely long and I have no clue how to tell if it's correct. I also don't know where that GitHub src is coming from.
I also don't understand why the button is needed? If Obtainium does GitHub, why doesn't it just work instantly on the GitHub URL itself?
There was a problem hiding this comment.
Obtainium does not grap any APKs from deves. It purely links to the repro.
The link is basicly a convinience. You can add the git just as is to Obtainium and do the two adjustments I included: 1. It says to scan for the "latest" tag. 2. It Sets the name of the App inside of Obtainium to "Catima" as the standard-setting just grabs the name of the repro "Android".
You can verify the validity of the Link if you have Obtainium installed (which of course is an ask). The link itself does not actually go to Obtainium, it just uses the callup of the obtainium app which then reads all information from the link itself.
Or you can look at the link it is basicly a json put into a link which gives obtainium the above meintioned instructions.
About security: Well it is as secure as your git is, as it does nothing more then load it from here and check the provided sha against the apk.
For some apps, if the providers don't have a git or have some strange constructions or namings in their repro one can refine the selection with regex and some other options.
Also Obtainium is GPL-3.0 license so you can look at what it does.
tl:dr
No APKs are grabbed, link is for convenience for Obtainium-users, URL is just json instructions for the App
There was a problem hiding this comment.
Oh and about where the scr is from, its directly from the Obtainium repo: https://github.com/ImranR98/Obtainium/blob/main/assets/graphics/badge_obtainium.png
2 participants
Just Adding a Link and pic to add Catima github with one click to Obtainium