APK size #21

As you might know, at IzzyOnDroid we have a per-app size limit of 30 MB. CommandClick is slowly approaching that, so I was checking its latest APK for potential remedies. I saw neither pg-map-id nor r8-map-id – which usually means optimization is turned off. And indeed, your build.gradle even explicitly has isMinifyEnabled = false.

Could you please take a look at our documentation on Optimize, but do not obfuscate – and see if you could implement that for the next releases? Thanks in advance!

Btw, the scan also yielded

SigningBlock blobs:
-------------------
0x504b4453 (DEPENDENCY_INFO_BLOCK; GOOGLE)

So while updating your build.gradle, could you please also add a few lines to it for this?

android {
    dependenciesInfo {
        // Disables dependency metadata when building APKs (for IzzyOnDroid/F-Droid)
        includeInApk = false
        // Disables dependency metadata when building Android App Bundles (for Google Play)
        includeInBundle = false
    }
}

Also see Google's own documentation on this.

For some background: that BLOB is supposed to be just a binary representation of your app's dependency tree. But as it's encrypted with a public key belonging to Google, only Google can read it – and nobody else can even verify what it really contains. More details can be found e.g. in our documentation on Signing Block Checks at our website, and in our blog article Ramping up security: additional APK checks are in place with the IzzyOnDroid repo.