Install 0.7.2 — the 0.7.1 archives were withdrawn.
Packaging fix
Installing 0.7.1 from the App Store failed with Extracted app sharepath has more than 1 folder. The archives were built on macOS, where tar stores extended attributes as AppleDouble ._name entries and defaults to the pax format, which adds PaxHeader/… entries. tar hides both when listing an archive, but Nextcloud's PHP extractor writes them out as real files and then rejects the app. The build now sets COPYFILE_DISABLE, strips extended attributes and writes plain ustar archives.
Signing key replaced
The 0.7.1 archives also contained the app's private signing key: the build mirrored the whole working tree and filtered by exclusions, and certificate/ was not on that list — .gitignore keeps a file out of git, not out of the release. The archives have been deleted from the 0.7.1 release page, the key has been replaced and the old certificate revoked. The key was never committed to this repository, and 0.7.0 predates it.
The build now works from an explicit allowlist of what belongs in a Nextcloud app, so nothing can leak in by default again.
No functional changes
The application code is identical to 0.7.1, including the privilege escalation fix in the settings endpoints.
Install
tar xzf sharepath-0.7.2.tar.gz -C /path/to/nextcloud/custom_apps/
occ app:enable sharepath
Disclaimer
This fork's compatibility work was developed and tested with substantial assistance from an AI coding agent (Claude Code); review before use in critical environments. The software is provided as is without warranty of any kind — the authors and maintainers accept no liability for damages or unintended exposure of files (AGPL sections 15/16).