Zapstore on Nostr: Exactly this, but I will add that you are prompted to verify the download URL, which ...

Exactly this, but I will add that you are prompted to verify the download URL, which in many cases is the developer's Github. So github user/repo comes comes into play there too - which is exactly what Obtainium does.