Skip to content

Add Obtainum Link and Pic #3011

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
hidrohase wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Add Obtainum Link and Pic #3011

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 3 additions & 0 deletions docs/README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -20,6 +20,9 @@ Copylefted libre software (GPLv3+) card management app.
<img src="https://fdroid.gitlab.io/artwork/badge/get-it-on.png" alt="Get it on F-Droid" height="90"/></a>
<a href="https://play.google.com/store/apps/details?id=me.hackerchick.catima" target="_blank">
<img src="https://play.google.com/intl/en_us/badges/images/generic/en-play-badge.png" alt="Get it on Google Play" height="90"/></a>
<a href="https://apps.obtainium.imranr.dev/redirect?r=obtainium://app/%7B%22id%22%3A%22me.hackerchick.catima%22%2C%22url%22%3A%22https%3A%2F%2Fgithub.com%2FCatimaLoyalty%2FAndroid%22%2C%22author%22%3A%22CatimaLoyalty%22%2C%22name%22%3A%22Catima%22%2C%22preferredApkIndex%22%3A0%2C%22additionalSettings%22%3A%22%7B%5C%22includePrereleases%5C%22%3Afalse%2C%5C%22fallbackToOlderReleases%5C%22%3Atrue%2C%5C%22filterReleaseTitlesByRegEx%5C%22%3A%5C%22%5C%22%2C%5C%22filterReleaseNotesByRegEx%5C%22%3A%5C%22%5C%22%2C%5C%22verifyLatestTag%5C%22%3Atrue%2C%5C%22sortMethodChoice%5C%22%3A%5C%22date%5C%22%2C%5C%22useLatestAssetDateAsReleaseDate%5C%22%3Afalse%2C%5C%22releaseTitleAsVersion%5C%22%3Afalse%2C%5C%22trackOnly%5C%22%3Afalse%2C%5C%22versionExtractionRegEx%5C%22%3A%5C%22%5C%22%2C%5C%22matchGroupToUse%5C%22%3A%5C%22%5C%22%2C%5C%22versionDetection%5C%22%3Atrue%2C%5C%22releaseDateAsVersion%5C%22%3Afalse%2C%5C%22useVersionCodeAsOSVersion%5C%22%3Afalse%2C%5C%22apkFilterRegEx%5C%22%3A%5C%22%5C%22%2C%5C%22invertAPKFilter%5C%22%3Afalse%2C%5C%22autoApkFilterByArch%5C%22%3Atrue%2C%5C%22appName%5C%22%3A%5C%22Catima%5C%22%2C%5C%22appAuthor%5C%22%3A%5C%22%5C%22%2C%5C%22shizukuPretendToBeGooglePlay%5C%22%3Afalse%2C%5C%22allowInsecure%5C%22%3Afalse%2C%5C%22exemptFromBackgroundUpdates%5C%22%3Afalse%2C%5C%22skipUpdateNotifications%5C%22%3Afalse%2C%5C%22about%5C%22%3A%5C%22%5C%22%2C%5C%22refreshBeforeDownload%5C%22%3Atrue%2C%5C%22includeZips%5C%22%3Afalse%2C%5C%22zippedApkFilterRegEx%5C%22%3A%5C%22%5C%22%2C%5C%22github-creds%5C%22%3A%5C%22%5C%22%2C%5C%22GHReqPrefix%5C%22%3A%5C%22%5C%22%7D%22%2C%22overrideSource%22%3A%22GitHub%22%7D" target="_blank">
<img src="https://github.com/user-attachments/assets/713d71c5-3dec-4ec4-a3f2-8d28d025a9c6" alt="Get it on Obtainium" height="90"/></a>
Comment on lines +23 to +24
Copy link
Member

@TheLastProject TheLastProject Feb 4, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'm not sure if I really want to promote Obtainium. I know it's popular, but I think the attitude of grabbing APKs from dev's GitHub releases directly with 0 security scanning is generally a bad way to get software (though it may still be better than Google Play as Google is extremely abusive to developers).

My main issue is that this URL is basically impossible for me to review, it's extremely long and I have no clue how to tell if it's correct. I also don't know where that GitHub src is coming from.

I also don't understand why the button is needed? If Obtainium does GitHub, why doesn't it just work instantly on the GitHub URL itself?

Copy link
Author

@hidrohase hidrohase Feb 4, 2026 •
edited
Loading

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Obtainium does not grap any APKs from deves. It purely links to the repro.

The link is basicly a convinience. You can add the git just as is to Obtainium and do the two adjustments I included: 1. It says to scan for the "latest" tag. 2. It Sets the name of the App inside of Obtainium to "Catima" as the standard-setting just grabs the name of the repro "Android".

You can verify the validity of the Link if you have Obtainium installed (which of course is an ask). The link itself does not actually go to Obtainium, it just uses the callup of the obtainium app which then reads all information from the link itself.
Or you can look at the link it is basicly a json put into a link which gives obtainium the above meintioned instructions.

About security: Well it is as secure as your git is, as it does nothing more then load it from here and check the provided sha against the apk.

For some apps, if the providers don't have a git or have some strange constructions or namings in their repro one can refine the selection with regex and some other options.

Also Obtainium is GPL-3.0 license so you can look at what it does.

tl:dr
No APKs are grabbed, link is for convenience for Obtainium-users, URL is just json instructions for the App

Copy link
Author

@hidrohase hidrohase Feb 5, 2026 •
edited
Loading

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Oh and about where the scr is from, its directly from the Obtainium repo: https://github.com/ImranR98/Obtainium/blob/main/assets/graphics/badge_obtainium.png



[![Feature graphic](https://github.com/CatimaLoyalty/Android/raw/main/fastlane/metadata/android/en-US/images/featureGraphic.png)](https://catima.app/)

Expand Down