[Discussion] Possible patching of apks to get around signature spoofing?

Hey there :)

I am not sure whether this is the right place for this, so please let me know in case you know where else to put it :P

I am currently in the process of setting up microG. I am using GrapheneOS, so signature spoofing is not supported out of the box. Also, I am not sure whether patching my ROM using NanoDroid will be a good solution in the long run, especially because it might eventually break OTA updates.

So I started thinking about something else:
Wouldn't it be possible to decompile an APK that uses Google Play Services, replace the package names from Google by the ones from microG and then recompile and sign it?

I am sure I am not the first person thinking about something like this, so I wanted to start a discussion before I go ahead and build something myself.

@mar-v-in what is your take on this? Have you done any research into this direction? Or anyone else? :)

No files, tests, or entry points are named. Start by reviewing the discussion and defining whether APK patching is an intended project change; implementation would need a concrete scope, supported targets, and acceptance criteria before it could be considered done.