dannybuntu on Nostr: Hi! To verify the reproducibility of your apk, first ensure that your app is ...
Hi! To verify the reproducibility of your apk, first ensure that your app is source-available (Open Source). You need to extract your apk from the phone. There are third party apps that do that, but if you want to be sure, you could use WalletScrutiny.com's in-house script which just runs adb:
https://gitlab.com/walletscrutiny/walletScrutinyCom/-/blob/master/apkextractor_sync.shYou may clone the entire walletscrutiny.com repository if you plan on pushing through with doing the entire process.
Now, most Android apps, can either be distributed as a single apk or a bundle of apks (split apks).
Before you run that script though, ensure that your phone is connected to the PC, with Developer Mode and USB debugging both on.
If you run apkextractor_sync.sh, run it like so: (example for illustrative purposes, you need to find the appID of your app)
$ ./apkextractor_sync.sh io.nunchuk.android
The script will tell you if your app if it's a single apk or a split bundle.
Published at
2025-04-10 00:46:04Event JSON
{
"id": "9775556615b5e099a605903bf7f152214777d5c49b07fcefe4368784f1e46b76",
"pubkey": "1f9e547c2f31942623b8ad1d07713282e8640fd8cf474e9f79f18ace8af216ed",
"created_at": 1744245964,
"kind": 1,
"tags": [
[
"e",
"dde8c0673791316738bd9fc6c62e438b330d5384d92cfdd92a5e1ee6a333e41f",
"",
"root"
],
[
"e",
"abbad12b516bfd4eca564b142e63435371aa4d9ac9280239cda6703eea4052a4",
"wss://relay.damus.io/",
"reply",
"d70d50091504b992d1838822af245d5f6b3a16b82d917acb7924cef61ed4acee"
],
[
"p",
"1f9e547c2f31942623b8ad1d07713282e8640fd8cf474e9f79f18ace8af216ed"
],
[
"p",
"d70d50091504b992d1838822af245d5f6b3a16b82d917acb7924cef61ed4acee"
],
[
"client",
"noStrudel",
"31990:266815e0c9210dfa324c6cba3573b14bee49da4209a9456f9484e5106cd408a5:1686066542546"
]
],
"content": "Hi! To verify the reproducibility of your apk, first ensure that your app is source-available (Open Source). You need to extract your apk from the phone. There are third party apps that do that, but if you want to be sure, you could use WalletScrutiny.com's in-house script which just runs adb: \n\nhttps://gitlab.com/walletscrutiny/walletScrutinyCom/-/blob/master/apkextractor_sync.sh\n\nYou may clone the entire walletscrutiny.com repository if you plan on pushing through with doing the entire process.\n\nNow, most Android apps, can either be distributed as a single apk or a bundle of apks (split apks). \n\nBefore you run that script though, ensure that your phone is connected to the PC, with Developer Mode and USB debugging both on.\n\nIf you run apkextractor_sync.sh, run it like so: (example for illustrative purposes, you need to find the appID of your app)\n\n$ ./apkextractor_sync.sh io.nunchuk.android\n\nThe script will tell you if your app if it's a single apk or a split bundle. \n\n",
"sig": "64a71414e67d32fb42e3368f2cf6c7cf2041b81e4c97f57c269427189cfb563a6f3db581cd7c8baf8ff5ea5606c9a5bbf3c3215a022cc454989bae07b279fbc7"
}