v4.2.7 APK hard-blocked by Google Play Protect (no install bypass) — stricter than #357
Los mantenedores suelen responder en 1 día
Nadie ha tomado este issue todavía.
Evaluación
- Dificultad
- 4/5
- Tiempo estimado
- 3-5 días
- Aptitud para principiantes
- 42/100
- Tipo de issue
- Error
- Claridad
- Bastante claro
- Estado de actividad
- Activo
- Área
- mobile-dev, release, security
Línea de trabajo
Start by reviewing the v4.2.7 standard APK and the related #357 discussion, then confirm whether the Play Protect hard block is reproducible and tied to the release signing or CI setup. Done means the block is resolved or users have clear, safe installation guidance, including any available trusted distribution option.
Escrito por el modelo de indexación a partir del texto del issue.
Descripción
Summary
Installing the LeanType 4.2.7 APK from the GitHub release page is hard-blocked by Google Play Protect on the latest Android. The install is refused outright (not just a dismissible side-load warning).
What happens
Attempting to install 1-LeanType_4.2.7-standard-release.apk from the v4.2.7 release triggers a Play Protect hard block:
- Title: "App blocked to protect your device"
- Body: "This app can request access to sensitive data. This can increase the risk of identity theft or financial fraud."
- Only an OK button is offered — there is no "Install anyway" option, so the APK cannot be installed at all.
This is stricter than the usual "unrecognised app" download warning: it is a full block with no bypass.
Environment
- Device: Android (latest), Google Play Protect active
- Release: LeanType v4.2.7 (
standardflavor, ~11.1 MB) - Source: GitHub Releases (
https://github.com/LeanBitLab/LeanType/releases/tag/v4.2.7)
Expected behaviour
LeanType is a popular, legitimate open-source keyboard. Users should at least be able to install it, ideally via an installer that Play Protect trusts (see #357), or be given guidance on a safe install path.
Notes / relation to earlier report
Related to closed #357 (July 2026, same Play Protect issue). One maintainer comment there suggests using Obtainium (ImranR98/Obtainium), which is a good mitigation for advanced users, but it does not help less-technical users, and this v4.2.7 report shows Play Protect escalating to a hard block rather than only a warning.
Suggested action
- Confirm whether this is a false positive tied to the current signing/CI setup.
- If a Google Play listing is planned/available, point users there.
- Otherwise, document the recommended safe install path (e.g. Obtainium, or disabling Play Protect for this known app) in the release notes, since the block message will discourage many users.
Thanks for the great project — flagging so others don't get stuck.
- Lenguaje dominante
- Kotlin
- Estrellas
- 1k
- Forks
- 59
- Merge medio
- 13 h 21 min
- PR fusionados (30 d)
- 48
Preparar el entorno
- Sin Dockerfile ni archivo de Docker Compose
- Tiene una plantilla de pull request
- Leer la guía de contribución
Primeros pasos
- Lee el issue completo y luego la guía de contribución del proyecto.
- Comenta en el issue que vas a ocuparte — evita que dos personas hagan lo mismo.
- Haz un fork del repositorio y trabaja en una rama.
- Abre un pull request que haga referencia al número del issue.
Más de LeanBitLab/LeanType
-
Voice input fails in browser address bars due to incorrect password field detection (v4.2.9, follow-up to #516)Posiblemente ocupada @LeanBitLab la tomó hace 2 días. Abiertobug
Dificultad 2/5 1-3 horas Aptitud para principiantes 76/100
LeanBitLab/LeanType#713 · 1 comentario · 1 asignado ·
Los mantenedores suelen responder en 1 día
-
Dificultad 2/5 1-3 horas Aptitud para principiantes 65/100
LeanBitLab/LeanType#423 · 1 comentario ·
Los mantenedores suelen responder en 1 día
-
Add more symbol layoutsAbiertoenhancement
Dificultad 3/5 1-2 días Aptitud para principiantes 70/100
LeanBitLab/LeanType#724 ·
Los mantenedores suelen responder en 1 día
-
bug
Dificultad 3/5 1-2 días Aptitud para principiantes 55/100
LeanBitLab/LeanType#723 ·
Los mantenedores suelen responder en 1 día
-
enhancement
Dificultad 3/5 1-2 días Aptitud para principiantes 56/100
LeanBitLab/LeanType#721 ·
Los mantenedores suelen responder en 1 día
Todos los issues de LeanBitLab/LeanType
Issues similares
-
staticAssetsPath follows symlinks outside the directory on WindowsPosiblemente ocupada @ybelMekk la tomó hoy. Abiertobug security findings
Dificultad 2/5 1-3 horas Aptitud para principiantes 84/100
navikt/mock-oauth2-server#1132 ·
Los mantenedores suelen responder en 1 día
-
a:plugin-description
Dificultad 1/5 Menos de una hora Aptitud para principiantes 76/100
gradle/plugin-portal-requests#319 ·
-
Dificultad 2/5 1-3 horas Aptitud para principiantes 65/100
SimonHalvdansson/Harmonic-HN#399 ·
Los mantenedores suelen responder en 1 día
-
Dificultad 2/5 1-3 horas Aptitud para principiantes 72/100
-
[Request] 李跳跳Abiertorequest-adaption
Dificultad 2/5 Menos de una hora Aptitud para principiantes 78/100
BetterAndroid/android-notification-icon-project#799 ·
Los mantenedores suelen responder en 1 día