There's one commit to this repo but 24 issues, and the APK at https://cryptomator.org/android/ is at 0.3 already.
I just came to look at the code before I install it. Am I missing something?
The mobile apps (Android and iOS) are _open core_ projects.
The encryption code is open source:
https://github.com/cryptomator/cryptolib
Details on the encryption scheme:
https://cryptomator.org/architecture/
The desktop application is fully open source (including UI):
https://github.com/cryptomator/cryptomator
So the mobile apps are not open source? You should probably say something about that in the README. Right now it says "Open Source" in big letters.
Is this repository just for tracking issues then?
This is correct. Hm, you're right. The headline was meant for "here are the things that are open source". We'll update the README, thank you for pointing that out!
It could be good if the core could somehow be protected from non-opensource part. Also I agree it's good to sell open-source programs, I would be glad to pay for commercial but trustworthy open-source programs. But now how could it be trusted -- the non-opensource part could contain a backdoor (built in, for example, by government request) which just sends unencrypted files by a special command from the server.
I have to ask ... I like the project too much already... Why are mobile clients closed source? That mentality is the one thing that's bugging me with this great tool. Making money is a non-issue the way I see it (I can be wrong just as well). I will always pay for Android product, no matter if it is open source. Even though I'm a software engineer and I've spent a couple of years dealing with Android development, I would never go through the hassle of build a project just to not pay something back. So what's the reason for that then? I'm sure the client UI will move much faster if it's open to the public.
Most helpful comment
It could be good if the core could somehow be protected from non-opensource part. Also I agree it's good to sell open-source programs, I would be glad to pay for commercial but trustworthy open-source programs. But now how could it be trusted -- the non-opensource part could contain a backdoor (built in, for example, by government request) which just sends unencrypted files by a special command from the server.