Automattic / Automattic/simplenote-android

embedded APK?

Open
#1,589 3 comments 1 reaction 0 assignees View on GitHub
Dominant language
Java
Stars
1.9k
Forks
318
Avg merge
15h 23m
Merged PRs (30d)
5

Description

My scanner just alerted me about an embedded APK. Can you please clarify what `res/raw/android_wear_micro_apk.apk` is for? I guess that's pushed to the Wear device by your app? Trouble is, that embedded APK contains non-free dependencies (well, it's Wear):

```
Offending libs:
---------------
* Android Wear APIs (/com/google/android/gms/wearable): NonFreeDep
* Google Mobile Services (/com/google/android/gms): NonFreeDep

2 offenders.
```

Which makes the entire app non-free. Is this embedded APK essential for SimpleNote itself? If not (which I assume), would it be possible to have a "foss build flavor" coming without it?

Contributor guide

Open the contributing guide

Research direction

Start by inspecting res/raw/android_wear_micro_apk.apk and tracing how the Android app packages or uses it. Determine whether it is essential to SimpleNote and whether a FOSS build can exclude it; done means the APK's role and the resulting build option are clearly established.

Written by the indexing model from the issue text.

Assessment

Tech stack
android, java
Domain
build-system, mobile
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.