App Downloadfilesweb have DisabledAlgorithm and KnownVuln. What is this?

[mimi89999]

Many old, unmaintained apps have been archived

F-Droid relies on the standard tools for verifying the signatures of APKs, these are Oracle Java’s jarsigner and Google Android’s apksigner. Both of those tools recently disabled the MD5 algorithm used in the APK signatures which are an essential part of the security of the Android platform. That means that any APK signature that uses MD5 is now considered unsigned by jarsigner and apksigner, and unsigned APKs are considered uninstallable. That means that apps that were built a long time ago …