I don't believe third parties maintainers packaging software on flathub is a big issue but I'm also not familiar with how other distro repos trust their maintai

I don't believe third parties maintainers packaging software on flathub is a big issue but I'm also not familiar with how other distro repos trust their maintainers. Hopefully more developers maintain their flatpak themselves (or someone they trust) and get their apps verified. If most apps are verified, warning users of unverified apps might be a good idea. There's ongoing discussion about splitting open source and proprietary apps in to seperate repos [1]. Additionally having seperate repos for verified and unverified apps might make it more obvious where an app comes from in the cli. But I don't know how seamlessly an app could transition between being in the third party repo and being in the official repo. Having the user quietly stop receiving updates seems like a bad idea, but automatically migrating might not be desirable either. I also think flatpaks cli interface needs some work. It is functional but far from distro package managers. Being verified is especially important for critical apps. Recently someone added malicious versions of apps to the snap store [3]. This lead to people getting their cryptocurrency stolen. [1] https://github.com/flathub/flathub/issues/691 https://github.com/flathub/flathub/issues/691 [2] https://docs.flathub.org/docs/for-app-authors/requirements https://docs.flathub.org/docs/for-app-authors/requirements [3] https://forum.snapcraft.io/t/temporary-suspension-of-automatic-snap-registration-following-security-incident/37077 https://forum.snapcraft.io/t/temporary-suspension-of-automat...