@strypey @fdroidorg The Android SDK ("the nonfree Google SDK") is proprietary software, under a proprietary license; https://developer.android.com/studio/terms

The Android SDK contains malware as evidenced by; "3.4 You may not use the SDK for any purpose not expressly permitted by the License Agreement. Except to the extent required by applicable third party licenses, you may not copy (except for backup purposes), modify, adapt, redistribute, decompile, reverse engineer, disassemble, or create derivative works of the SDK or any part of the SDK."

If it didn't contain malware, there would be no reason to forbid reverse engineering.

The SDK may or may not inject proprietary malware into the software it builds.

F-droid's site very clearly states that they use Google's nonfree Android SDK to build apk's.


Therefore, f-droid .apk's compiled after the date they switched from a free SDK to a nonfree SDK may or may not contain proprietary malware.