There is just an extra sync running now for our repo. We had added new known vulnerable certificates to our "badcert list" and were performing a full repo scan; 3 apps had to be removed. 2 of them haven't seen an update in years, for the 3rd one we informed the developers.
#IzzyOnDroid repo
@IzzyOnDroid how to identify as a user which apps where removed from the repo, so that one could delete them as well from the phone?
@mat The apps in this case were quite specific, so I doubt they were "widely used". As with the download stats (which we now finally have available publicly), we need to establish an easy and transparent way for that.
For now, you can look at our transparency log: https://gitlab.com/IzzyOnDroid/iodrepo_binary_transparency_log/-/commit/70806436ba6a21b9db5eefe7ac1eb4bd751f4274 is last (and here relevant) commit; scroll to "repo/filesystemlog.json" to see what was removed: DroidFrida, WebInspector, BTCMap.
BTCMap at F-Droid.org is NOT affected, that's signed by F-Droid themselves.