Old git repository is archived.
New git repository has a separate F-droid repository that needs to be add to user's F-Droid before installing, which is why it is removed.
- Einstein Launcher was renamed to Yagni Launcher. Since Yagni Launcher is already included here, I think we should remove Einstein Launcher to avoid duplicates
- F-Droid have archived Emerald Launcher and since there's no activity or any decision on what to do with the project's future, this should be removed.
BlissLauncher does not have a F-Droid link anymore and is no longer maintained.
There is a new version of it called BlissLauncher3, however this does not have a F-Droid link.
The app fetches Markdown from `.../master/README.md`, which is a mutable branch reference. Content can change at any time and is immediately rendered client-side. This increases risk of unexpected content/script injection and makes output non-reproducible.
Affected files: index.html
Signed-off-by: tomaioo <203048277+tomaioo@users.noreply.github.com>
The CSS sets a fixed width of `960px` for the `main` element. This overrides the responsiveness intended by the viewport meta tag, causing horizontal scrolling on mobile devices or small windows.
Affected files: index.html
Signed-off-by: tryboi <270171460+tryboi@users.noreply.github.com>
If a line starting with `*` (app entry) appears before any category header (`### •` or `## –`), `categories[-1]` will raise an `IndexError` because the `categories` list will be empty. A malformed or tampered README.md could cause the CI script to crash with an unhandled exception.
Affected files: ensure_sorted.py
Signed-off-by: Trần Bách <45133811+barttran2k@users.noreply.github.com>
The `changeCSS` function constructs a URL by interpolating user-controlled input (`theme` parameter from the `<select>` element) directly into a CDN URL template. While the current `<select>` restricts values, if the function were called programmatically (e.g., via browser console or if the DOM is manipulated), an attacker could inject an arbitrary path into the stylesheet URL, potentially loading a malicious CSS file from the CDN.
Affected files: index.html
Signed-off-by: Trần Bách <45133811+barttran2k@users.noreply.github.com>
The `README.md` file is opened using `open('README.md', 'r')` but is never explicitly closed. This can lead to resource leaks, especially in long-running processes or if the script were to be extended to open many files. While Python's garbage collector might eventually close it, it's not guaranteed and is considered bad practice.
Affected files: ensure_sorted.py
Signed-off-by: toanmap <174589430+maptoan@users.noreply.github.com>
