The scanner at IzzyOnDroid detected the DEPENDENCY_INFO_BLOCK in your APKs – which is recommended to be removed for the reasons listed below. To remove it, please add the following to your build.gradle:
android {
dependenciesInfo {
// Disables dependency metadata when building APKs (for IzzyOnDroid/F-Droid)
includeInApk = false
// Disables dependency metadata when building Android App Bundles (for Google Play)
includeInBundle = false
}
}Also see Google's own documentation on this.
For some background: that BLOB is supposed to be just a binary representation of your app's dependency tree. But as it's encrypted with a public key belonging to Google, only Google can read it – and nobody else can even verify what it really contains. More details can be found e.g. in our documentation on Signing Block Checks at our website, and in our blog article Ramping up security: additional APK checks are in place with the IzzyOnDroid repo.
@IzzySoft
The scanner at IzzyOnDroid detected the
DEPENDENCY_INFO_BLOCKin your APKs – which is recommended to be removed for the reasons listed below. To remove it, please add the following to yourbuild.gradle:Also see Google's own documentation on this.
For some background: that BLOB is supposed to be just a binary representation of your app's dependency tree. But as it's encrypted with a public key belonging to Google, only Google can read it – and nobody else can even verify what it really contains. More details can be found e.g. in our documentation on Signing Block Checks at our website, and in our blog article Ramping up security: additional APK checks are in place with the IzzyOnDroid repo.
@IzzySoft