flathub is still messy. Applications can appear as official, while they are not. Here’s an example where this is happening with Mullvad Browser.
opened 10:57AM - 31 Jul 23 UTC
There is no way on https://flathub.org/apps/net.mullvad.MullvadBrowser for a use… r to recognize that it's unofficial.
Quote https://flathub.org/apps/net.mullvad.MullvadBrowser
> Mullvad Browser
> by Mullvad
But is actually unofficial.
Quote @ruihildt https://github.com/mullvad/mullvad-browser/issues/6
> FYI this is not an official release and we haven't verified it. We are currently considering how to best handle this.
Basic ethics demands not to impersonate people, companies such as about the origin of software.
Note: This is my personal opinion and I am not affiliated to Mullvad.
> `https://flathub.org/apps/net.mullvad.MullvadBrowser`
> `https://flathub.org/apps/` `net` `.` `mullvad` `.` `MullvadBrowser`
Is the `net` part (as opposed to others using `org`) supposed to imply it's unofficial? If it was `org`, that would be mean it's official?
Doesn't `mullvad` imply it's by the mullvad company?
`https://flathub.org/apps/net.SomeIndividualOrCompanyName.MullvadBrowser` would be better.
This matters as there might even be adware / malware being injected as this comment implies.
Quote @tinypinkdragons https://github.com/mullvad/mullvad-browser/issues/6#issuecomment-1565223871:
> As soon as I open the flatpak, my Pi-hole registers a connection attempt to 'aax-us-pdx.amazon-adsystem.com', which the Windows version doesn't do. After some investigation, I came here and saw it wasn't official. Now uninstalled. Any news on an official release, or will you not be publishing to Flathub?
flathub wanted to work on this.
We (Codethink, James Westman, Kolja Lampe, Bartłomiej Piotrowski, and others in the Flathub org) have been hard at work on the work outlined in this post by Rob McQueen supported by the GNOME Foundation and Endless Network. A lot of the progress...
Reading time: 5 mins 🕑
Likes: 29 ❤
They created beta.flathub.org but that now only redirects to flathub.org and the verification feature where the user gets more information on who is providing a flathub still isn’t on the flathub website. I didn’t read the full forum thread or researched what the status of that feature is if it has been deprecated, no longer planned.
1 Like