objectbox / objectbox/objectbox-java
ObjectBox is not entirely FOSS
还没有人认领这个 Issue。
- 主要语言
- Java
- 星标
- 4.6k
- 派生
- 311
- PR 合并指标
- 30 天内没有已合并 PR
描述
Hello ObjectBox team!
In the instructions on the README of the project, we have these instructions:
buildscript {
ext.objectboxVersion = "3.3.1"
repositories {
mavenCentral()
}
dependencies {
classpath("io.objectbox:objectbox-gradle-plugin:$objectboxVersion")
}
}
The plugin added to the classpath is in MavenCentral, this is the latest published version.
As an educated developer, I downloaded the sources jar, so that I could validate the source code that my app is using.
Inside that file, however, there's only a README file:
Not available yet
And naturally, by downloading the Jar file, only .class files are available.
For this reason, the gradle plugin is considered proprietary code. And this has lead F-Droid - the main FLOSS Android distributor - has blocked many apps, such as
- https://github.com/LeoColman/Petals/issues/98
- https://github.com/owntracks/android/issues/1298
- https://github.com/Nonononoki/Hendroid/issues/70
- https://github.com/kiwix/kiwix-android/issues/3091
And probably more to come.
This is a very serious bug.
I imagine it's somewhere where the code is published to MavenCentral that is not including the source codes.
This issue is a blocker for anyone that wants to integrate ObjectBox to an 100% FLOSS app, such as ones deployed to F-Droid
贡献指南
这个仓库没有索引到贡献指南
从这里开始
- 先读完整个 Issue,再读项目的贡献指南。
- 在 Issue 下留言说明你要接手 —— 这能避免两个人做同样的事。
- Fork 仓库,在一个分支上完成修改。
- 提交 Pull Request,并在描述里引用这个 Issue 编号。
调研方向
从 README 中的 ObjectBox Gradle plugin 说明开始,检查 Maven Central 上已发布的 objectbox-gradle-plugin 3.3.1 artifact 及其 sources JAR。确认 release 流程提供了对应的源代码,而不只是包含“Not available yet”的 README,并验证生成的 artifact 可供 FLOSS 发行版使用。
由索引模型根据 Issue 内容生成。
评估
- 技术栈
- java
- 领域
- build-system, release
- Issue 类型
- 缺陷
- 难度
- 4/5
- 预计耗时
- 3-5 天
- 活跃度
- 冷清
- 描述清晰度
- 基本清楚
- 新手友好度
- 44/100