Why Nostr? What is Njump?
2025-04-10 00:46:04
in reply to

dannybuntu on Nostr: Hi! To verify the reproducibility of your apk, first ensure that your app is ...

Hi! To verify the reproducibility of your apk, first ensure that your app is source-available (Open Source). You need to extract your apk from the phone. There are third party apps that do that, but if you want to be sure, you could use WalletScrutiny.com's in-house script which just runs adb:

https://gitlab.com/walletscrutiny/walletScrutinyCom/-/blob/master/apkextractor_sync.sh

You may clone the entire walletscrutiny.com repository if you plan on pushing through with doing the entire process.

Now, most Android apps, can either be distributed as a single apk or a bundle of apks (split apks).

Before you run that script though, ensure that your phone is connected to the PC, with Developer Mode and USB debugging both on.

If you run apkextractor_sync.sh, run it like so: (example for illustrative purposes, you need to find the appID of your app)

$ ./apkextractor_sync.sh io.nunchuk.android

The script will tell you if your app if it's a single apk or a split bundle.

Author Public Key
npub1r709glp0xx2zvgac45wswufjst5xgr7cear5a8me7x9vazhjzmksp2sf7d