objectbox / objectbox/objectbox-java

ObjectBox is not entirely FOSS

Open
#1,102 17 comments 19 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
Java
Stars
4.6k
Forks
311
PR merge metrics
No merged PRs in 30d

Description

Hello ObjectBox team!

In the instructions on the README of the project, we have these instructions:

buildscript {
    ext.objectboxVersion = "3.3.1"
    repositories {        
        mavenCentral()    
    }
    dependencies {
        classpath("io.objectbox:objectbox-gradle-plugin:$objectboxVersion")
    }
}

The plugin added to the classpath is in MavenCentral, this is the latest published version.

As an educated developer, I downloaded the sources jar, so that I could validate the source code that my app is using.

Inside that file, however, there's only a README file:

Not available yet

And naturally, by downloading the Jar file, only .class files are available.


For this reason, the gradle plugin is considered proprietary code. And this has lead F-Droid - the main FLOSS Android distributor - has blocked many apps, such as

And probably more to come.


This is a very serious bug.
I imagine it's somewhere where the code is published to MavenCentral that is not including the source codes.

This issue is a blocker for anyone that wants to integrate ObjectBox to an 100% FLOSS app, such as ones deployed to F-Droid

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start with the README's ObjectBox Gradle plugin instructions and inspect the published objectbox-gradle-plugin 3.3.1 artifact and its sources JAR on Maven Central. Confirm that the release process supplies the corresponding source code rather than only the “Not available yet” README, and verify the resulting artifact can be used by FLOSS distributions.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
build-system, release
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
44/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.