As of now, the way we are calling fpm, we don't pass in version numbers for dependencies. There's a couple cases where this is problematic. Adding support for this would be needed for apt to be a viable distribution path. I'll work on this.

Any user can run ps -efw and see output like

anders 25756 25180 2 01:20 pts/2 00:00:15 /usr/lib/firefox/firefox http://localhost:8888/#coreAPIPassword=hunter2

Because it's authenticated with an HTTP bearer token, illegal characters in HTTP headers would cause a problem for blockstack core passwords. Alternatively, find a way to remove the limitation on characters used in passwords.

Installed v0.16.0, and my todo items don't save when I logout.
Additionally my browser console isn't logging anything

The launcher script currently looks for the latest and latest-browser tags in the Quay registry, which fails because while there is a latest tag, there is not a latest-browser.

There's not even any pair of "core" and "-browser" tags in the registry currently that match, so even overriding that value with a static version number doesn't work.

Our Windows installer should ideally be

1. signed
2. distributed via HTTPS

The current distribution at packages.blockstack.com is insecure because of this.