qpdfview team mailing list archive

["." <question818042@xxxxxxxxxxxxxxxxxxxxx>]

New question #818042 on qpdfview:
https://answers.launchpad.net/qpdfview/+question/818042

Hello,

After asking last year and drawing no interest from the project:

https://answers.launchpad.net/qpdfview/+question/707222

I took it upon myself to submit qpdfview to flathub.org:

https://github.com/flathub/flathub/pull/5497

Mainly to allow Steam Deck users to use this fantastic project, to give users on really old distributions access to new versions (e.g. https://answers.launchpad.net/qpdfview/+question/708809 ), and to better protect the rest of the system from malicious documents.

Flathub reviewers have pointed out two compatibility issues.

1. Does the project have some sort of global reverse domain ID that isn't tied to Launchpad, or can it acquire one? Any domain or subdomain you control will do: `org.qpdfview`, `io.github.qpdfview`, `site.srht.qpdfview`, `com.whatever.qpdfview`. I couldn't find anything except for Launchpad, which doesn't work because it uses "subdirectories" for projects, and not subdomains.

2. Can the `local.qpdfview` "domain" used in `application.cpp` to run unique instances be changed to this ID?

If you ever decide to take over maintenance of this package, this will allow you to verify its ownership and mark it as "official", giving users a strong guarantee that it actually comes from a trusted source. The ID cannot be changed after submission.

I believe the same issues will arise when/if the project is submitted to other application stores, such as Snapcraft (which also accepts submissions from third parties).

If you are not interested in any of this, I will either drop the package altogether, or submit it as unofficial, unverifiable in the future, and (likely) without support for running unique instances. The decision will be up to the Flathub maintainers.

Thank you.

-- 
You received this question notification because your team qpdfview is an
answer contact for qpdfview.