SensorBox icon indicating copy to clipboard operation
SensorBox copied to clipboard

Option to install with izzy-on-droid greyed out

Open Gooberpatrol66 opened this issue 1 year ago • 5 comments

Doesn't support Android 12?

Gooberpatrol66 avatar Oct 27 '23 22:10 Gooberpatrol66

Hi, sorry for late response. I will have to push new version here at the github, so easy droid can pick it up. Thanks for the reminder. Unfortunately, I am currently not the most reachable person, but by the end of the year, I should get to it and update it.

Foxpace avatar Nov 14 '23 19:11 Foxpace

Maintainer of IzzyOnDroid here. You didn't specify what year :stuck_out_tongue_winking_eye: but while on it:

A scan (see here for details and background) just revealed the APKs at your releases are signed using a debug key. As that has security implications, may I ask you to please switch to a proper release key, and provide the corresponding APK signed with it? Thanks in advance!

IzzySoft avatar Feb 08 '24 09:02 IzzySoft

@Foxpace any word?

IzzySoft avatar Feb 18 '24 19:02 IzzySoft

@IzzySoft https://github.com/Foxpace/SensorBox/releases/tag/v4.3.5-nf

Foxpace avatar Feb 21 '24 21:02 Foxpace

Thanks @Foxpace!

$ iod repo get motionapps.sensorbox
motionapps.sensorbox: looking for 'https://api.github.com/repos/Foxpace/SensorBox/releases'
motionapps.sensorbox: checking tag 'v4.3.5-nf'
motionapps.sensorbox: lastRelNo set to '4.3.5', checking for files
motionapps.sensorbox: Upstream file date (2024-02-21 22:22) is newer than ours (2021-12-20 01:00).
motionapps.sensorbox: returning ['4.3.5','https://github.com/Foxpace/SensorBox/releases/download/v4.3.5-nf/wear-nofirebase.apk',1708550532]
motionapps.sensorbox: 3.4.1/4.3.5, https://github.com/Foxpace/SensorBox/releases: https://github.com/Foxpace/SensorBox/releases/download/v4.3.5-nf/wear-nofirebase.apk
- Grabbing update for motionapps.sensorbox: OK
- Checking 'repo/motionapps.sensorbox_1000048.apk' for libraries and malware …
- Checking the app's AndroidManifest.xml …
! repo/motionapps.sensorbox_1000048.apk declares sensitive permission(s): android.permission.ACCESS_COARSE_LOCATION android.permission.ACCESS_FINE_LOCATION android.permission.ACCESS_BACKGROUND_LOCATION
! repo/motionapps.sensorbox_1000048.apk contains signature block blobs: 0x504b4453 (DEPENDENCY_INFO_BLOCK; GOOGLE)
motionapps.sensorbox: check if repo contains FUNDING.yml
motionapps.sensorbox: looking for 'https://api.github.com/repos/Foxpace/SensorBox/contents/.github'
motionapps.sensorbox: Github reports "Not Found" for https://api.github.com/repos/Foxpace/SensorBox/contents/.github
motionapps.sensorbox: looking for 'https://api.github.com/repos/Foxpace/SensorBox/contents/'
motionapps.sensorbox: looking for 'https://api.github.com/repos/Foxpace/.github/contents/'
motionapps.sensorbox: Github reports "Not Found" for https://api.github.com/repos/Foxpace/.github/contents/
motionapps.sensorbox: no FUNDING.yml detected.
motionapps.sensorbox: calling 'getFastlaneMeta(github,[host:github.com,owner:Foxpace,repo:SensorBox,path:/fastlane/metadata/android])'
motionapps.sensorbox: FastlaneFeatures title,shortdesc,fulldesc,changelogs,icon,featureGraphicJPG
motionapps.sensorbox: looking for 'https://api.github.com/repos/Foxpace/SensorBox/contents/fastlane%2Fmetadata%2Fandroid'
motionapps.sensorbox: looking for 'https://api.github.com/repos/Foxpace/SensorBox/contents/fastlane%2Fmetadata%2Fandroid%2Fen-GB'
motionapps.sensorbox: looking for 'https://api.github.com/repos/Foxpace/SensorBox/contents/fastlane%2Fmetadata%2Fandroid%2Fen-GB%2Fchangelogs'
motionapps.sensorbox: looking for 'https://api.github.com/repos/Foxpace/SensorBox/contents/fastlane%2Fmetadata%2Fandroid%2Fen-GB%2Fimages'
motionapps.sensorbox: looking for 'https://api.github.com/repos/Foxpace/SensorBox/contents/fastlane%2Fmetadata%2Fandroid%2Fen-GB%2Fimages%2FphoneScreenshots'
motionapps.sensorbox: checking locale 'en-GB'
motionapps.sensorbox: updating 'metadata/motionapps.sensorbox/en-GB/short_description.txt'
motionapps.sensorbox: updating 'metadata/motionapps.sensorbox/en-GB/title.txt'
motionapps.sensorbox: updating 'repo/motionapps.sensorbox/en-GB/featureGraphic.jpg' from 'featureGraphic.png'
motionapps.sensorbox: updating 'repo/motionapps.sensorbox/en-GB/icon.png'

should become available with the next sync. I've added the location permissions to the allow-list (needed for "location sensor").

image

If you want to have the other gaps filled, please provide the reasons for them and I gladly add them.

The DEPENDENCY_INFO_BLOCK is easy to get rid of:

android {
    dependenciesInfo {
        // Disables dependency metadata when building APKs.
        includeInApk = false
        // Disables dependency metadata when building Android App Bundles.
        includeInBundle = false
    }
}

For some background: that BLOB is supposed to be just a binary representation of your app's dependency tree. But as it's encrypted with a public key belonging to Google, only Google can read it – and nobody else can even verify what it really contains.

Btw: currently your app is set to "static", i.e. only monthly update checks. Should you plan more frequent updates (i.e. more than once every 3 months or so) please let me know and I lift your app back to daily checks.

image

IzzySoft avatar Feb 21 '24 23:02 IzzySoft