v1.11.3 popped in with a bunch of warnings at IzzyOnDroid:
! repo/com.artemchep.pocketmode_1110300.apk declares intent-filter(s): android.accessibilityservice.AccessibilityService
! repo/com.artemchep.pocketmode_1110300.apk declares sensitive permission(s): android.permission.READ_PHONE_STATE android.permission.SYSTEM_ALERT_WINDOW
! repo/com.artemchep.pocketmode_1110300.apk contains signature block blobs: 0x504b4453 (DEPENDENCY_INFO_BLOCK; GOOGLE)
Can you please explain what for the first two are? As for the last one, please add a few lines to your build.gradle:
android {
dependenciesInfo {
// Disables dependency metadata when building APKs (for IzzyOnDroid/F-Droid)
includeInApk = false
// Disables dependency metadata when building Android App Bundles (for Google Play)
includeInBundle = false
}
}For some background: that BLOB is supposed to be just a binary representation of your app's dependency tree. But as it's encrypted with a public key belonging to Google, only Google can read it – and nobody else can even verify what it really contains. More details can be found e.g. in our documentation on Signing Block Checks at our website, and in our blog article Ramping up security: additional APK checks are in place with the IzzyOnDroid repo.
Thanks in advance!
v1.11.3 popped in with a bunch of warnings at IzzyOnDroid:
Can you please explain what for the first two are? As for the last one, please add a few lines to your
build.gradle:For some background: that BLOB is supposed to be just a binary representation of your app's dependency tree. But as it's encrypted with a public key belonging to Google, only Google can read it – and nobody else can even verify what it really contains. More details can be found e.g. in our documentation on Signing Block Checks at our website, and in our blog article Ramping up security: additional APK checks are in place with the IzzyOnDroid repo.
Thanks in advance!