Greenstand / Greenstand/treetracker-android
Security hardening, dependency cleanup, and code quality improvements
- Dominant language
- Kotlin
- Stars
- 101
- Forks
- 116
- PR merge metrics
- No merged PRs in 30d
Description
Related PRs: #1199 #1201
**Summary**
Address several security issues, remove deprecated/dead dependencies, and improve overall code quality.
**Motivation**
A review surfaced auth tokens being logged in release builds, test utilities available in production DI, and a number of outdated or deprecated dependencies increasing build times and security surface area.
**Acceptance criteria**
- [ ] Gate HTTP body logging to DEBUG builds only
- [ ] Gate fake tree creation behind `BuildConfig.DEBUG`
- [ ] Replace `GlobalScope.launch` with structured coroutine scope
- [ ] Upgrade Koin (beta → stable) and Retrofit to latest stable
- [ ] Replace all `printStackTrace()` with `Timber.e()`
- [ ] Remove dead dependencies: `legacy-support-v4`, `kotlin-stdlib-jdk7`, Fabric Maven repo
- [ ] Migrate test dependencies to AndroidX equivalents
- [ ] Bump Gson, Timber, Detekt, JUnit to latest stable
**References**
Closes #1199, #1201
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.