this post was submitted on 15 Jul 2024
1 points (100.0% liked)

Jerboa

10528 readers
1 users here now

Jerboa is a native-android client for Lemmy, built using the native android framework, Jetpack Compose.

Warning: You can submit issues, but between Lemmy and lemmy-ui, I probably won't have too much time to work on them. Learn jetpack compose like I did if you want to help make this app better.

Built With

Features

Installation / Releases

Support / Donate

Jerboa is made by Lemmy's developers, and is free, open-source software, meaning no advertising, monetizing, or venture capital, ever. Your donations directly support full-time development of the project.

Crypto

Contact

founded 4 years ago
MODERATORS
dessalines@lemmy.ml
1
Jerboa v0.0.70-alpha Release (github.com)
submitted 2 years ago by dessalines@lemmy.ml to c/jerboa@lemmy.ml
6 comments fedilink hide all child comments
top 6 comments
sorted by: hot top controversial new old
[–] GolfNovemberUniform@lemmy.ml 0 points 2 years ago (1 children)

Update plugin com.android.test to v8.5.0 by @renovate in #1561

Was it properly checked for backdoor injections?

[–] LarkinDePark@lemmygrad.ml 0 points 2 years ago (1 children)

What is the "proper" way?

[–] GolfNovemberUniform@lemmy.ml 0 points 2 years ago (1 children)

Check the code for suspicious lines and then check the compiled app for network traffic etc

[–] dessalines@lemmy.ml 0 points 2 years ago* (last edited 2 years ago) (1 children)

There were dozens of dependency upgrades in this release, I have no idea why you think this specific one has security issues. Either way we don't have time to read through every line of code of every dep update, but here's the source code: https://android.googlesource.com/platform/tools/base

If you find something, you might want to submit a PR as it would affect not just ours, but a lot of android projects.

[–] GolfNovemberUniform@lemmy.ml 0 points 2 years ago (1 children)

Reading through the code of the dependency is not required. What is required is reading through the merge request to see if the dependency isn't used for malicious or wasteful purposes. Checking on the authenticity of the dependency is a good idea too.

[–] dessalines@lemmy.ml 1 points 2 years ago

Open up an issue for your concerns on the google issue tracker, here it is linked for you: https://android.googlesource.com/platform/tools/base