mommy there are some potential security pitfalls with F-Droid as explained here, but the repository remains quite popular. GitHub can be a bit tedious, and not all FOSS apps are readily available as APKs from GitHub, leading to a mixed workflow of app stores, RSS readers and manual downloads.