Hacktoberfest 2026 : les issues que les mainteneurs ont marquées pour octobre, ouvertes et accessibles aux débutants. Parcourir les issues Hacktoberfest

v4.2.7 APK hard-blocked by Google Play Protect (no install bypass) — stricter than #357

Ouverte
  • Quelque chose ne va pas ?
#583 4 commentaires 0 réactions 0 personnes assignées Voir sur GitHub

Les mainteneurs répondent en général sous 1 jour

Personne n'a encore pris cette issue.

Évaluation

Difficulté
4/5
Temps estimé
3-5 jours
Accessibilité débutants
42/100
Type d'issue
Bug
Clarté
Plutôt claire
Activité
Active
Stack technique
android, kotlin
Domaine
mobile-dev, release, security

Piste de recherche

Start by reviewing the v4.2.7 standard APK and the related #357 discussion, then confirm whether the Play Protect hard block is reproducible and tied to the release signing or CI setup. Done means the block is resolved or users have clear, safe installation guidance, including any available trusted distribution option.

Rédigé par le modèle d'indexation à partir du texte de l'issue.

Description

Summary

Installing the LeanType 4.2.7 APK from the GitHub release page is hard-blocked by Google Play Protect on the latest Android. The install is refused outright (not just a dismissible side-load warning).

What happens

Attempting to install 1-LeanType_4.2.7-standard-release.apk from the v4.2.7 release triggers a Play Protect hard block:

  • Title: "App blocked to protect your device"
  • Body: "This app can request access to sensitive data. This can increase the risk of identity theft or financial fraud."
  • Only an OK button is offered — there is no "Install anyway" option, so the APK cannot be installed at all.

This is stricter than the usual "unrecognised app" download warning: it is a full block with no bypass.

Environment

  • Device: Android (latest), Google Play Protect active
  • Release: LeanType v4.2.7 (standard flavor, ~11.1 MB)
  • Source: GitHub Releases (https://github.com/LeanBitLab/LeanType/releases/tag/v4.2.7)

Expected behaviour

LeanType is a popular, legitimate open-source keyboard. Users should at least be able to install it, ideally via an installer that Play Protect trusts (see #357), or be given guidance on a safe install path.

Notes / relation to earlier report

Related to closed #357 (July 2026, same Play Protect issue). One maintainer comment there suggests using Obtainium (ImranR98/Obtainium), which is a good mitigation for advanced users, but it does not help less-technical users, and this v4.2.7 report shows Play Protect escalating to a hard block rather than only a warning.

Suggested action

  • Confirm whether this is a false positive tied to the current signing/CI setup.
  • If a Google Play listing is planned/available, point users there.
  • Otherwise, document the recommended safe install path (e.g. Obtainium, or disabling Play Protect for this known app) in the release notes, since the block message will discourage many users.

Thanks for the great project — flagging so others don't get stuck.

Langage dominant
Kotlin
Étoiles
1k
Forks
59
Merge moyen
13 h 21 min
PR mergées (30 j)
48

Préparer son environnement

Par où commencer

  1. Lisez l'issue en entier, puis le guide de contribution du projet.
  2. Signalez en commentaire que vous la prenez — cela évite que deux personnes fassent le même travail.
  3. Forkez le dépôt et travaillez sur une branche.
  4. Ouvrez une pull request qui référence le numéro de l'issue.

Autres issues de LeanBitLab/LeanType

Toutes les issues de LeanBitLab/LeanType

Issues similaires

Plus d'issues Kotlin

Recevez les nouvelles issues par e-mail

Un résumé court des issues GitHub adaptées aux débutants.