Re: OpenRepos.net - Community Repository System
 

No updates lately, huh? :o
Brief details what i'm working on.

What have been already added to OpenRepos:

• SailfishOS
  SailfishOS repos are live! If you cannot get to harbour due to storms, you can get some rest here :p
• Changelogs for packages
  You can now attach change logs to platform packges. Or select 'change autoupdate' option for auto extraction changelogs from deb, rpm, etc.
  If you have multiple versions attached to the same package, higher version changelog will be used. Each platform package have own changelog.
  Changelogs as well as version info will be visible at Warehouse at future releases before you enable repository(install package).
• Rating system
  Multiscale ranking system added. Currently only one scale called 'rating' is enabled. More scales will be added for voting soon(like usability, performance ...)
  Any expectations here?
• Platform filters
  Platform filters to OpenRepos. Select your platform to see available apps. Filters not yet working site-wide, but will do so in a short period of time.
• Some internals
  Bla-bla-bla some internal core changes bla-bla-bla :D

What is done now and will be deployed soon:

• User vs Lib packages
  By default only user section packages (i.e. no system or core updates) will be visible at Applications and Games.
  Libs/perl-extra/python-extra and non-user packages are excluded from 'avarage user' view and moved into System/Libraries-like categories.
  Same for Warehouse. Special switch at settings page(disabled by default) will let you install nonuser packages, and perform more 'low-level' package activity.
  Packages are going to be resorted based on package category.
  I'm thinking about proper categories which should be used at OpenRepos.
• Application tiles
  I found N9-Apps style of application tile quite suitable for openrepos, so tiles are changed and will show more info about the application: Name, Icon, Publisher, Rating, Category, Quick Install link.
  Tile will be main form of application display within 'last changed', 'top downloads', category, etc.
• Application ratings
  Last updated apps seems boring ;) So moar categories to compete:
  Top week, Top month, New, etc.
• Content flags
  Report system for content abuse, harmful package or merge with other package requests.
• Favorites
  Dont know if it is really needed, but why not?
• Meta repositories
  The idea of openrepos :cool: Any user will be able to create own meta repository, and add any applications there.
• Donation support
  Quick bar for donations to publisher. If publisher specifies any options at his profile.
• Beta applications
  Beta packages for application, which are available to close range of users you selected.
  This is first step for paid apps support, and widetest for openrepos copy-protection system.
• Protection system
  Openrepos feature the copy protection system for deb and rpm packages. You dont have to modify your application to get "basic level" protection. Even if package is intercepted(manually downloaded), it cannot be installed on unallowed system. Extra api also will be avilable for devs to get 'activation' information for thier apps.

What is planned for next release(s):

• Paid apps support
  Working hard, but not yet completed. Targeting to finish that stuff before 01.01.2014.
  Currently i'm targeting direct user2publisher paiments without any 'every month invoice' bullshiieet. User buys, you get money with microtransaction. Paypal (and maybe Scrill, ex Moneybookers) on the launch date. All paid apps will can be copy-protected.
  More details will be available asap.

Warehouse client application will be available for sailfish.
Information about changes and updates will be published later at warehouse topic.

Re: OpenRepos.net - Community Repository System
 

1) im sure you wont, but im just gonna say it anyway. please please please dont limit download attempts of paid apps like the ovi store does.

2) what on earth is 'copy protection' for?
why would a developer want to prohibit installation of their app because the user wget-ed it? how does your copy protection work?
and more importantly, how do i circumvent it as a user, and how do i ensure none of my apps ever use it a developer?

3) may i strongly suggest that you provide a mandatory license field when uploading paid apps?

many users will filter out paid apps from their minds because they want to support open development, but it would be GREAT if developers who support open source AND food and shelter could be rewarded with greater visibility.

for example, i missed out on the n9's speakerswitcher for like a year because it was a paid app and i assumed it was proprietary.

4) i would REALLY like a catalog sortable by license type {copyleft, permissive, proprietary, unspecified}. i personally find it annoying to have to download and unpack every deb to find the COPYING file.

Re: OpenRepos.net - Community Repository System
 

There will be no limit for downloads. Download as much as you want. You even can upload deb to warez site. It would be installable only on eligible device.

If you phone is eligible, you can install app even if was downloaded by your friend, who has access to this app( since he also bought it).
As user you will not feel any diff. Ordinary deb/rpm. Download, tap to install, read some notes during installation. Start application ;)
Protection will be applied only to 'closed beta' apps and paid apps.

Reasonable, I will give it a try. Some kind of sorting/promoting features. May be in conjunction with donation system (even for free apps)

To be honest, I forgot to add this feature :( I have been already asked for that. Will be added of course to all applications.

Re: OpenRepos.net - Community Repository System
 

as an ovi store user, the only way i currently download paid apps is with my browser on my laptop. i then store the deb so i dont need to redownload it when i reflash.

will this be possible without having to install some sort of big brother type validator with openrepos? i dont want to lose the ability to install the app if openrepos goes down.

my other concern is as a developer; i would HATE for any user to ever not be able to do what they want with an app of mine, especially if they paid money for it. if there WILL be a big-brother-validator-thing, can it be optional, even for paid apps?

Re: OpenRepos.net - Community Repository System
 

You dont have to. Once reflashed install warehouse, and then all earlier downloaded debs with basic protection will be installable. API protection type depends on you. As developer you will be able to force invalidate all already downloaded debs so they become uninstallable(or unrunnable), since you [may] call api-validity-check function on application startup.

I will write separate post on openrepos about application protection levels with more details.
Short description:

• 1 level - package level.
  Developer: no application or package modification required. upload as is.
  User: just dont reflash phone since you buy application. pre-downloaded debs are reusable. If you reflash, you have to install warehouse and run it first and login with your openrepos account.
• 2 level - package level
  Developer: no application or package modification required. upload as is. Your application dashboard will have option for invalidation previously downloaded package.
  User: you need active online connection for deb installation. pre-downloaded deb are okay if not invalidated by publisher. If package is invalidated, redownload is required.
• 3 level - application level
  Developer: Application shoud you special api for checking validity. Online status depends on how you implement and use api (force active or passive). I.e. show advert or disable some functions if application is not validated.
  Application dashboard will have switch invalidating current installations(not deb files).
  User: Basically, just dont reboot your phone once application has been validated. On reboot/warehouse reinstallation online connection required.

Combinations are [disabled | level 1 | level 2] + [disabled | level 3].

Does this mean that user can redistribute you application package to any forum/site?

Off, Level 1, Level 2 can be switched instantly on any paid/beta application, and will be applied for future downloads.
Level 3 depends on your api usage.

Re: OpenRepos.net - Community Repository System
 

yes, obviously.

oh thats AWFUL. one needs to install either a closed source validator program, or a big-brother-reporting-on-my-activity program that will be in contact with openrepos?

openrepos just turned from SUPER AWESOME BEST THING EVER to maybe even not worth supporting in one bad decision.

i dont understand why you would AIM to be demonstrably worse than ovi store.

Re: OpenRepos.net - Community Repository System
 

may i just point out why other folks dont do this- if you distribute a package that is installable in some medium, then anyone can take those installed files, and make a binary package of them that does NOT forcibly restrict use of the 'warehouse' validator, and then post THAT it to the forums.

basically, youre only making life hard for those who respect copyright law and want to be able to perform those actions permitted in the respective licensing scheme.

also, i suspect that the wording in gplv3 makes it so that gplv3 programs cannot be paid openrepos apps, if you do it this way.

Re: OpenRepos.net - Community Repository System
 

wait, i may have misunderstood; is it possible to have a completely non-restricted paid app {you cant download it unless you pay, but then you get the fully reinstallable deb}?

then obviously gplv3 apps are fine.

if the big-brother-validator is strictly optional, i STILL think youre making a mistake in having it, but i can at least use openrepos to distribute my apps, and maybe make you and me a little bit of money off them.

Re: OpenRepos.net - Community Repository System
 

sry, one more post just to make sure:

i plan on never installing and never asking anyone else to install warehouse, or any other app that forces the user to be online to install, validate, or register any software with any entity.

will i be able to use openrepos in this way? and, separately, will i be able to sell applications that use openrepos in this way?

Re: OpenRepos.net - Community Repository System
 

If you can collect and know all files which belongs to package, as well as package scripts content(preinst,postinst...) ofcourse you can do that. Package level is for script kiddies-protection. Also, protected package does not provide info about files or scripts.

Your application content is not modified.
After installation occurs all your files are same as you packaged them before uplading to openrepos.

It is possible. If you havent selected any protection level and does not use openrepos api-checks at your application.

You can download any application you paid for via openrepos site. If no protection selected, it will be exactly same deb as developer uploaded.