Skip to content

Security: sadellie/unitto

Security

SECURITY.md

⚠ Security

Permissions

com.sadellie.unitto.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Read (boring): https://developer.android.com/about/versions/14/behavior-changes-14#runtime-receivers-exported

android.permission.INTERNET

Used in Unit Converter to update currency rates. Requests are made only when you select a currency unit. See: CurrencyApiService.kt and UnitsRepository.kt

android.permission.ACCESS_NETWORK_STATE

Used in Unit Converter as a callback. Retries to update currency rates if there was an error (no network, for example) and the Internet connection is back. See: NetworkUtils.kt and ConverterScreen.kt

android.permission.WAKE_LOCK

Not used explicitly. Added automatically by Widget feature.

android.permission.RECEIVE_BOOT_COMPLETED

Not used explicitly. Added automatically by Widget feature.

android.permission.FOREGROUND_SERVICE

Not used explicitly. Added automatically by Widget feature.

Network service (not FOSS)

The app uses Free Currency Exchange Rates API by fawazahmed0. Requests are send to cdn.jsdelivr.net.

There aren’t any published security advisories