What's Changed
- Reduce dependencies for better security.
- Make the code more stable.
- Fix several bugs.
Security
VirusTotal Scan
| File | Status | Scan Report |
|---|---|---|
PlainApp-3.1.1-Universal-Recommended.apk
| ✅ 0/69 Clean | View Report |
PlainApp-3.1.1-Old-Android-32bit.apk
| ✅ 0/64 Clean | View Report |
PlainApp-3.1.1-Google-Play.aab
| ✅ 0/61 Clean | View Report |
SLSA Provenance (Level 3)
The .intoto.jsonl file is a signed SLSA provenance document covering all release artifacts (APKs + AAB).
Verify with slsa-verifier:
slsa-verifier verify-artifact PlainApp-3.1.1-Universal-Recommended.apk \
--provenance-path multiple.intoto.jsonl \
--source-uri github.com/plainhub/plain-app