enable built-in gradle dependency verification

This fully replaces gradle-witness and goes far beyond what it offered. As
far as I can tell, this actually will verify every single artifact that
gradle downloads and uses.

This was generated in two passes to get both the PGP and the SHA256 info:

```
./gradlew --write-verification-metadata pgp,sha256 build connectedFullDebugAndroidTest --export-keys
./gradlew --write-verification-metadata sha256 build connectedFullDebugAndroidTest
```

Thanks to  @vlsi who made me aware of this, and helped make it possible.
closes !837
parent dc936869
*.gpg binary
......@@ -53,7 +53,7 @@ errorprone:
stage: test
script:
- cat config/errorprone.gradle >> app/build.gradle
- ./gradlew assembleDebug
- ./gradlew -Dorg.gradle.dependency.verification=lenient assembleDebug
# once these prove stable, the task should be switched to
# connectedCheck to test all the build flavors
......
This diff was suppressed by a .gitattributes entry.
<?xml version="1.0" encoding="UTF-8"?>
<verification-metadata xmlns="https://schema.gradle.org/dependency-verification" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="https://schema.gradle.org/dependency-verification https://schema.gradle.org/dependency-verification/dependency-verification-1.0.xsd">
<configuration>
<verify-metadata>true</verify-metadata>
<verify-signatures>true</verify-signatures>
<trusted-keys>
<trusted-key id="0394681addddb4f6388a64d295123567c1886c47" group="ch.acra" name="acra" version="4.9.1"/>
<trusted-key id="042b29e928995b9db963c636c7ca19b7b620d787" group="org.apache.maven" name="maven-ant-tasks" version="2.1.3"/>
<trusted-key id="06a228aab83a18a8df7b84b08614d6ab265b4c63" group="org.apache.ant"/>
<trusted-key id="06d34ed6ff73de368a772a781063fe98bcecb758" group="com.puppycrawl.tools" name="checkstyle" version="7.2"/>
<trusted-key id="0785b3eff60b1b1bea94e0bb7c25280eae63ebe5" group="org.apache.httpcomponents"/>
<trusted-key id="08f0aab4d0c1a4bdde340765b341ddb020fcb6ab" group="org.bouncycastle"/>
<trusted-key id="0cc641c3a62453ab390066c4a41f13c999945293">
<trusting group="commons-logging"/>
<trusting group="commons-collections"/>
</trusted-key>
<trusted-key id="19beab2d799c020f17c69126b16698a4adf4d638" group="org.checkerframework" name="checker-qual" version="2.5.2"/>
<trusted-key id="1d9aa7f9e1e2824728b8cd1794b291aef984a085" group="io.reactivex" name="rxjava" version="1.1.0"/>
<trusted-key id="280bcdfa20225ff340f9e3a2fb52acb341119b0a" group="com.nostra13.universalimageloader" name="universal-image-loader" version="1.9.5"/>
<trusted-key id="2bab4466b44f54f8f99bbbdd5ed22f661bbf0acc" group="com.almworks.sqlite4java" name="sqlite4java" version="0.282"/>
<trusted-key id="2db4f1ef0fa761ecc4ea935c86fdc7e2a11262cb">
<trusting group="commons-io"/>
<trusting group="commons-codec"/>
</trusted-key>
<trusted-key id="2e3a1affe42b5f53af19f780bcf4173966770193" group="org.jetbrains" name="annotations" version="13.0"/>
<trusted-key id="31bae2e51d95e0f8ad9b7bcc40a3c4432bd7308c" group="com.googlecode.juniversalchardet" name="juniversalchardet" version="1.0.3"/>
<trusted-key id="3288b8be8512d6c0ca185268c51e6cbc7ff46f0b" group="com.google.auto.service" name="auto-service" version="1.0-rc4"/>
<trusted-key id="3872ed7d5904493d23d78fa2c4c8cb73b1435348" group="com.android.tools.build" name="transform-api" version="2.0.0-deprecated-use-gradle-api"/>
<trusted-key id="475f3b8e59e6e63aa78067482c7b12f2a511e325" group="org.slf4j"/>
<trusted-key id="49977dad0140e24894f9b955354214e5e508c045" group="com.hannesdorfmann" name="adapterdelegates3" version="3.0.1"/>
<trusted-key id="4cf4b443734c0aed8dc93a1f6132aae95d8e9fe0" group="org.nanohttpd"/>
<trusted-key id="4db1a49729b053caf015cee9a6adfc93ef34893e" group="org.hamcrest"/>
<trusted-key id="4f7e32d440ef90a83011a8fc6425559c47cc79c4">
<trusting group="com.sun.activation"/>
<trusting group="javax.activation"/>
<trusting group="javax.annotation"/>
</trusted-key>
<trusted-key id="517b94f8d0a46317a28d8ab30da8a5ec02d11ead" group="net.sf.jopt-simple" name="jopt-simple" version="4.9"/>
<trusted-key id="5767f9cde920750621875079a40e24b5b408dbd5" group="org.robolectric"/>
<trusted-key id="5897253bea3046aeea95a067e93671c7272b7b3f" group="org.jdom" name="jdom2" version="2.0.6"/>
<trusted-key id="5f7903f86c625ed6efa07ab85110767b6248d3c0" group="org.jmdns" name="jmdns" version="3.5.5"/>
<trusted-key id="6214760097dc5cfad0175ac2c9fbaa83a8753994" group="^com[.]fasterxml($|([.].*))" regex="true"/>
<trusted-key id="628462a5eaba59d57e99ae5a840b2bf6da8ed8c8" group="com.google.android.apps.common.testing.accessibility.framework" name="accessibility-test-framework" version="2.1"/>
<trusted-key id="67497e9d680ce8e95bd6b8f85ad66315fc018797" group="com.beust" name="jcommander" version="1.72"/>
<trusted-key id="694621a7227d8d5289699830abe9f3126bb741c1" group="^com[.]google($|([.].*))" regex="true"/>
<trusted-key id="6f538074ccebf35f28af9b066a0975f8b1127b83" group="org.jetbrains.kotlin"/>
<trusted-key id="6f7e5acbcd02db60dfd232e45e1f79a7c298661e" group="com.google.auto" name="auto-parent"/>
<trusted-key id="70cd19bfd9f6c330027d6f260315bfb7970a144f">
<trusting group="^com[.]sun($|([.].*))" regex="true"/>
<trusting group="org.glassfish.jaxb"/>
<trusting group="javax.xml.bind"/>
<trusting group="org.jvnet.staxex"/>
</trusted-key>
<trusted-key id="7616eb882daf57a11477aaf559a252fb1199d873" group="com.google.code.findbugs" name="jsr305" version="3.0.2"/>
<trusted-key id="7f36e793ae3252e5d9e9b98fee9e7dc9d92fc896" group="com.google.errorprone"/>
<trusted-key id="7faa0f2206de228f0db01ad741321490758aad6f" group="org.codehaus.groovy" name="groovy-all" version="2.4.15"/>
<trusted-key id="8254180bfc943b816e0b5e2e5e2f2b3d474efe6b" group="it.unimi.dsi" name="fastutil" version="7.2.0"/>
<trusted-key id="90ee19787a7bcf6fd37a1e9180c08b1c29100955" group="com.squareup" name="javawriter"/>
<trusted-key id="912e716ef6d98746f8eeb4d182de7be82166e84e" group="net.sourceforge.pmd"/>
<trusted-key id="92d3e6630b4b92cb2ef124994786cbe7d4906b68" group="com.google.auto" name="auto-common" version="0.8"/>
<trusted-key id="972239dbe68699f526c06a053e177817ba1b9bfa" group="^info[.]guardianproject($|([.].*))" regex="true"/>
<trusted-key id="984460dfd8f76a226f7dede2e483332711b8c7d6" group="com.ashokvarma.android" name="bottom-navigation-bar" version="2.0.5"/>
<trusted-key id="998af0e2b935996f5cebd56b9b1fda9f3c062231" group="^org[.]apache($|([.].*))" regex="true"/>
<trusted-key id="9ffed7a118d45a44e4a1e47130e6f80434a72a7f" group="^org[.]apache[.]maven($|([.].*))" regex="true"/>
<trusted-key id="a6d6c97108b8585f91b158748671a8df71296252" group="com.squareup" name="javapoet" version="1.10.0"/>
<trusted-key id="a7892505cf1a58076453e52d7999befba1039e8b" group="net.bytebuddy"/>
<trusted-key id="ae2b18e836c5f30687f37efdcc6346f2ce3872d9" group="com.google.protobuf" name="protobuf-java" version="2.6.1"/>
<trusted-key id="afcc4c7594d09e2182c60e0f7a01b0f236e5430f" group="com.google.code.gson"/>
<trusted-key id="b6e73d84ea4fcc47166087253faad2cd5ecbb314" group="org.apache.commons"/>
<trusted-key id="b801e2f8ef035068ec1139cc29579f18fa8fd93b" group="com.google.j2objc" name="j2objc-annotations" version="1.1"/>
<trusted-key id="bdb5fa4fe719d787fb3d3197f6d4a1d411e9d1ae" group="com.google.guava" name="listenablefuture" version="9999.0-empty-to-avoid-conflict-with-guava"/>
<trusted-key id="c7be5bcc9fec15518cfda882b0f3710fa64900e7" group="com.google.auto.value"/>
<trusted-key id="cacfbd4755a2fc78709bdd92be096e29edb8d141" group="net.sf.proguard"/>
<trusted-key id="cb3190ca7842439e57f3712e44ce7bf2825ea2cd" group="com.ibm.icu" name="icu4j" version="53.1"/>
<trusted-key id="cc4483cd6a3eb2939b948667a1b4460d8ba7b9af" group="org.mockito" name="mockito-core" version="3.3.3"/>
<trusted-key id="cd5464315f0b98c77e6e8ecd9daadc1c9fcc82d0">
<trusting group="commons-io"/>
<trusting group="commons-cli"/>
</trusted-key>
<trusted-key id="ce3285f320685193d11fea01f6ce9695c9318406" group="com.google.zxing"/>
<trusted-key id="ce8075a251547bee249bc151a2115ae15f6b8b72" group="org.apache.commons"/>
<trusted-key id="d4c89ea4aaf455fd88b22087efe8086f9e93774e" group="junit" name="junit" version="4.12"/>
<trusted-key id="d54a395b5cf3f86eb45f6e426b1b008864323b92" group="org.antlr"/>
<trusted-key id="d6f1bc78607808ec8e9f69437a8860944fad5f62">
<trusting group="org.apache.commons"/>
<trusting group="commons-net"/>
</trusted-key>
<trusted-key id="d75e25b78ebb19e47c0a99bca7764f502a938c99" group="com.google.protobuf"/>
<trusted-key id="da7a1bb85b19e4fb05073431205c8673dc742c7c" group="^org[.]apache($|([.].*))" regex="true"/>
<trusted-key id="dddee87612e9fb95f5c8d91e411063a3a0ffd119" group="commons-beanutils" name="commons-beanutils" version="1.9.3"/>
<trusted-key id="e3a9f95079e84ce201f7cf60bede11eaf1164480" group="org.hamcrest" name="hamcrest" version="2.2"/>
<trusted-key id="e77417ac194160a3fabd04969a259c7ee636c5ed" group="com.google.errorprone"/>
<trusted-key id="e85aed155021af8a6c6b7a4a7c7d8456294423ba" group="org.objenesis"/>
<trusted-key id="f254b35617dc255d9344bcfa873a8e86b4372146" group="org.codehaus.mojo"/>
<trusted-key id="ff6e2c001948c5f2f38b0cc385911f425ec61b51" group="junit" name="junit" version="4.13"/>
</trusted-keys>
</configuration>
<components>
<component group="androidx.activity" name="activity" version="1.1.0">
<artifact name="activity-1.1.0.aar">
<sha256 value="4f2b35916768032f7d0c20e250e28b29037ed4ce9ebf3da4fcd51bcb0c6067ef" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
<artifact name="activity-1.1.0.pom">
<sha256 value="3690001fc5a57ad176cacf7a13f56219bffb73b93c7978dbac1e1e5db082d6c0" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
</component>
<component group="androidx.annotation" name="annotation" version="1.1.0">
<artifact name="annotation-1.1.0.jar">
<sha256 value="d38d63edb30f1467818d50aaf05f8a692dea8b31392a049bfa991b159ad5b692" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
<artifact name="annotation-1.1.0.pom">
<sha256 value="2e9372ba7780ef44952adbf86b66e1f08682c1e5277c926185f6564a13799efe" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
</component>
<component group="androidx.appcompat" name="appcompat" version="1.1.0">
<artifact name="appcompat-1.1.0.aar">
<sha256 value="8d7299bca44cb3bdf17f5595766acbf459fc81fee223e8686cc6acd3a42ab5c0" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
<artifact name="appcompat-1.1.0.pom">
<sha256 value="340d617121f8ef8e02a6680c8f357aa3e542276d0c8a1cdcb6fd98984b2cb7b9" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
</component>
<component group="androidx.appcompat" name="appcompat-resources" version="1.1.0">
<artifact name="appcompat-resources-1.1.0.aar">
<sha256 value="19944d32b46551a17c347e21894b95837fbd7baaafc9e2082794344f222f7361" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
<artifact name="appcompat-resources-1.1.0.pom">
<sha256 value="046011e16cb01b6f14842565661551110ef1b6427483f5d9068493f4c49690f2" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
</component>
<component group="androidx.arch.core" name="core-common" version="2.0.0">
<artifact name="core-common-2.0.0.pom">
<sha256 value="4b6f1d459ddd146b4e85ed6d46e86eb8c2639c5de47904e6db4d698721334220" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
</component>
<component group="androidx.arch.core" name="core-common" version="2.1.0">
<artifact name="core-common-2.1.0.jar">
<sha256 value="fe1237bf029d063e7f29fe39aeaf73ef74c8b0a3658486fc29d3c54326653889" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
<artifact name="core-common-2.1.0.pom">
<sha256 value="83bbb3960eaabc600ac366c94cb59414e441532a1d6aa9388b0b8bfface5cf01" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
</component>
<component group="androidx.arch.core" name="core-runtime" version="2.1.0">
<artifact name="core-runtime-2.1.0.aar">
<sha256 value="dd77615bd3dd275afb11b62df25bae46b10b4a117cd37943af45bdcbf8755852" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
<artifact name="core-runtime-2.1.0.pom">
<sha256 value="c0c4ed0160cd2ca18390015de8b392b697c173327c6b2c0947d4e62f6958c05d" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
</component>
<component group="androidx.asynclayoutinflater" name="asynclayoutinflater" version="1.0.0">
<artifact name="asynclayoutinflater-1.0.0.aar">
<sha256 value="f7eab60c57addd94bb06275832fe7600611beaaae1a1ec597c231956faf96c8b" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
<artifact name="asynclayoutinflater-1.0.0.pom">
<sha256 value="48167eeedc8da79c4d29deaf0d0cd9b5d8fedcae01f1a6efb3f28f08e8982f71" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
</component>
<component group="androidx.cardview" name="cardview" version="1.0.0">
<artifact name="cardview-1.0.0.aar">
<sha256 value="1193c04c22a3d6b5946dae9f4e8c59d6adde6a71b6bd5d87fb99d82dda1afec7" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
<artifact name="cardview-1.0.0.pom">
<sha256 value="e64ef4e08b58358fe27b599e6fe80a1b153db014c644beee630ab271061c3e6c" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
</component>
<component group="androidx.collection" name="collection" version="1.0.0">
<artifact name="collection-1.0.0.pom">
<sha256 value="a7913a5275ad68e555d2612ebe8c14c367b153e14ca48a1872a64899020e54ef" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
</component>
<component group="androidx.collection" name="collection" version="1.1.0">
<artifact name="collection-1.1.0.jar">
<sha256 value="632a0e5407461de774409352940e292a291037724207a787820c77daf7d33b72" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
<artifact name="collection-1.1.0.pom">
<sha256 value="67e9066ca4acfdc6e3cc508293c31ba0398057ff118e4f70b1e1813c9a3456d1" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
</component>
<component group="androidx.constraintlayout" name="constraintlayout" version="1.1.3">
<artifact name="constraintlayout-1.1.3.aar">
<sha256 value="5ff864def9d41cd04e08348d69591143bae3ceff4284cf8608bceb98c36ac830" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
<artifact name="constraintlayout-1.1.3.pom">
<sha256 value="a47057d0a9b23342c3779d3d56b60944997e98f0c5d8886fda29e4f1074d9ea6" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
</component>
<component group="androidx.constraintlayout" name="constraintlayout-solver" version="1.1.3">
<artifact name="constraintlayout-solver-1.1.3.jar">
<sha256 value="965c177e64fbd81bd1d27b402b66ef9d7bc7b5cb5f718044bf7a453abc542045" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
<artifact name="constraintlayout-solver-1.1.3.pom">
<sha256 value="dc3fff25c5161fbdeb6cb6bffcc49b52884f1404c2db8aa0a476845ab16ec0e5" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
</component>
<component group="androidx.coordinatorlayout" name="coordinatorlayout" version="1.1.0">
<artifact name="coordinatorlayout-1.1.0.aar">
<sha256 value="44a9e30abf56af1025c52a0af506fee9c4131aa55efda52f9fd9451211c5e8cb" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
<artifact name="coordinatorlayout-1.1.0.pom">
<sha256 value="a67c52c9ddfaff2ffb2fd4b97cd94fa382e837ea8a5874d029e0a04fa63e5caf" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
</component>
<component group="androidx.core" name="core" version="1.1.0">
<artifact name="core-1.1.0.aar">
<sha256 value="76c7cfbe596fe3c09a6983bf1c89e889299c08ac9a3b52ce5182a088d056647e" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
<artifact name="core-1.1.0.pom">
<sha256 value="dae46132cdcd46b798425f7cb78fd65890869b6d26101ccdcd43461a4f51754c" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
</component>
<component group="androidx.cursoradapter" name="cursoradapter" version="1.0.0">
<artifact name="cursoradapter-1.0.0.aar">
<sha256 value="a81c8fe78815fa47df5b749deb52727ad11f9397da58b16017f4eb2c11e28564" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
<artifact name="cursoradapter-1.0.0.pom">
<sha256 value="62d95c89850af21030b19f14d5f7ecd6d8bcc9a3014c59002ec99624caac8100" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
</component>
<component group="androidx.customview" name="customview" version="1.0.0">
<artifact name="customview-1.0.0.aar">
<sha256 value="20e5b8f6526a34595a604f56718da81167c0b40a7a94a57daa355663f2594df2" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
<artifact name="customview-1.0.0.pom">
<sha256 value="ce9e47b87184f5bd5e139e9becd5b26476d42d78c31bf2fdedc37acb41b9ad49" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
</component>
<component group="androidx.databinding" name="databinding-common" version="3.6.3">
<artifact name="databinding-common-3.6.3.jar">
<sha256 value="726be765a221e529bb6b320ae0653d2bfd2c1233e939bfdbede148532557a554" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
<artifact name="databinding-common-3.6.3.pom">
<sha256 value="a106582fb3a33d7d2a0cee8da000e421376ecfdc3e90e9e254caae62b24eedeb" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
</component>
<component group="androidx.databinding" name="databinding-compiler-common" version="3.6.3">
<artifact name="databinding-compiler-common-3.6.3.jar">
<sha256 value="2692996256ddc84c583e0257779d29dbe22acc0cbf7bea2387e27566ce2d9548" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
<artifact name="databinding-compiler-common-3.6.3.pom">
<sha256 value="6e1362379a970b9a79ade2f64fc98b3690fa669e7c140b750eb3d40667492da9" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
</component>
<component group="androidx.documentfile" name="documentfile" version="1.0.0">
<artifact name="documentfile-1.0.0.aar">
<sha256 value="865a061ef2fad16522f8433536b8d47208c46ff7c7745197dfa1eeb481869487" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
<artifact name="documentfile-1.0.0.pom">
<sha256 value="013288a9317a552706ce625fb24493e8223288529223ec578cf855a5ae9c16e5" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
</component>
<component group="androidx.drawerlayout" name="drawerlayout" version="1.0.0">
<artifact name="drawerlayout-1.0.0.aar">
<sha256 value="9402442cdc5a43cf62fb14f8cf98c63342d4d9d9b805c8033c6cf7e802749ac1" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
<artifact name="drawerlayout-1.0.0.pom">
<sha256 value="da6733425a83f5ce850878fa7201082345fed7c668dd58550fdd19c0396c6fa4" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
</component>
<component group="androidx.fragment" name="fragment" version="1.1.0">
<artifact name="fragment-1.1.0.pom">
<sha256 value="ef78eb27ac02ddf3545d5f8a3857c73a2837a01853f8d5fcf77251011db52544" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
</component>
<component group="androidx.fragment" name="fragment" version="1.2.4">
<artifact name="fragment-1.2.4.aar">
<sha256 value="1dc194942574302bf35dae7b81b82273505ec2d38f81d9258ad5c0448daddd82" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
<artifact name="fragment-1.2.4.pom">
<sha256 value="ac10f808a89691fff793a1e180125e8651c48b67a36d2b1d6a7ee360287b153b" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
</component>
<component group="androidx.gridlayout" name="gridlayout" version="1.0.0">
<artifact name="gridlayout-1.0.0.aar">
<sha256 value="a7e5dc6f39dbc3dc6ac6d57b02a9c6fd792e80f0e45ddb3bb08e8f03d23c8755" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
<artifact name="gridlayout-1.0.0.pom">
<sha256 value="8cbc2705f0cc18f9d1fc055838e09acb0f51023bae0970a46a0d5c60bf7a82b2" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
</component>
<component group="androidx.interpolator" name="interpolator" version="1.0.0">
<artifact name="interpolator-1.0.0.aar">
<sha256 value="33193135a64fe21fa2c35eec6688f1a76e512606c0fc83dc1b689e37add7732a" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
<artifact name="interpolator-1.0.0.pom">
<sha256 value="0ddc07cc39699f48ecd9ec894b5830c0f09e22e82959294edf37217224c88b7b" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
</component>
<component group="androidx.legacy" name="legacy-support-core-ui" version="1.0.0">
<artifact name="legacy-support-core-ui-1.0.0.aar">
<sha256 value="0d1260c6e7e6a337f875df71b516931e703f716e90889817cd3a20fa5ac3d947" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
<artifact name="legacy-support-core-ui-1.0.0.pom">
<sha256 value="2baaf7f17551765524bd1e4d2f954a2a0178a112039cf549ba8b7d4b41e66931" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
</component>
<component group="androidx.legacy" name="legacy-support-core-utils" version="1.0.0">
<artifact name="legacy-support-core-utils-1.0.0.aar">
<sha256 value="a7edcf01d5b52b3034073027bc4775b78a4764bb6202bb91d61c829add8dd1c7" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
<artifact name="legacy-support-core-utils-1.0.0.pom">
<sha256 value="8fd093008b3ee7c06e52c78da2af980a7b47b69b967fa91dad7af466f7a00a38" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
</component>
<component group="androidx.legacy" name="legacy-support-v4" version="1.0.0">
<artifact name="legacy-support-v4-1.0.0.aar">
<sha256 value="78fec1485f0f388a4749022dd51416857127cd2544ae1c3fd0b16589055480b0" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
<artifact name="legacy-support-v4-1.0.0.pom">
<sha256 value="ed88fb124cfb70f2bb928ede1357874374aa45881bcb6d9744c1dc6680fa7c58" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
</component>
<component group="androidx.lifecycle" name="lifecycle-common" version="2.0.0">
<artifact name="lifecycle-common-2.0.0.pom">
<sha256 value="04d525073469214d0c99e81aaa875dd548ba32b82945abd8326bc50229df700d" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
</component>
<component group="androidx.lifecycle" name="lifecycle-common" version="2.2.0">
<artifact name="lifecycle-common-2.2.0.jar">
<sha256 value="63898dabf7cfe5ec5d7ed8b8c2564c1427be876e1496ead95c2703cf59d3734b" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
<artifact name="lifecycle-common-2.2.0.pom">
<sha256 value="cc30a8a2a97d3767bd169b747c078727308096dd3ab7917d80b2f1f42d118bd6" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
</component>
<component group="androidx.lifecycle" name="lifecycle-livedata" version="2.0.0">
<artifact name="lifecycle-livedata-2.0.0.aar">
<sha256 value="c82609ced8c498f0a701a30fb6771bb7480860daee84d82e0a81ee86edf7ba39" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
<artifact name="lifecycle-livedata-2.0.0.pom">
<sha256 value="a84842ffc0f14e518db75c05cc112680a8a4a164fa78395be32d88304a439423" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
</component>
<component group="androidx.lifecycle" name="lifecycle-livedata-core" version="2.2.0">
<artifact name="lifecycle-livedata-core-2.2.0.aar">
<sha256 value="556c1f3af90aa9d7d0d330565adbf6da71b2429148bac91e07c485f4f9abf614" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
<artifact name="lifecycle-livedata-core-2.2.0.pom">
<sha256 value="aa51621be3817d1f5d21336b0c0525fe96ae899cec656c13d8ea18a51ea32c2f" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
</component>
<component group="androidx.lifecycle" name="lifecycle-runtime" version="2.0.0">
<artifact name="lifecycle-runtime-2.0.0.pom">
<sha256 value="a92a46fa7aec8ac326a5d578734a2d5b63206976996b9e06cae171b35b0ab6de" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
</component>
<component group="androidx.lifecycle" name="lifecycle-runtime" version="2.2.0">
<artifact name="lifecycle-runtime-2.2.0.aar">
<sha256 value="2f866c07a1f33a8c9bb69a9545d4f20b4f0628cd0a155432386d7cb081e1e0bc" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
<artifact name="lifecycle-runtime-2.2.0.pom">
<sha256 value="7f154066fed1c9162870f728b208352831b3d1f8f23f5d388958a50ca4e9f441" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
</component>
<component group="androidx.lifecycle" name="lifecycle-viewmodel" version="2.2.0">
<artifact name="lifecycle-viewmodel-2.2.0.aar">
<sha256 value="967efab24d6c49dd414a8c0ac4a1cd09b018f0b8bb43b739ad360c4158ebde27" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
<artifact name="lifecycle-viewmodel-2.2.0.pom">
<sha256 value="aaa3afaa49ff47e2bc9b2389f939d3e8137616c4616684e2dfb53ba8366aa11d" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
</component>
<component group="androidx.lifecycle" name="lifecycle-viewmodel-savedstate" version="2.2.0">
<artifact name="lifecycle-viewmodel-savedstate-2.2.0.aar">
<sha256 value="3ce866fb822b20fe2f188f974992869a0a6233fe40acbefcff090d6def5e7f33" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
<artifact name="lifecycle-viewmodel-savedstate-2.2.0.pom">
<sha256 value="9f31254e547b214257067611f18fc8a3c08f8df9eba634f6e21badc848596db1" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
</component>
<component group="androidx.loader" name="loader" version="1.0.0">
<artifact name="loader-1.0.0.aar">
<sha256 value="11f735cb3b55c458d470bed9e25254375b518b4b1bad6926783a7026db0f5025" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
<artifact name="loader-1.0.0.pom">
<sha256 value="c978d550808b47434aa49a63164110a50b55b0bcc6160a93a2e37d5110df8c5e" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
</component>
<component group="androidx.localbroadcastmanager" name="localbroadcastmanager" version="1.0.0">
<artifact name="localbroadcastmanager-1.0.0.aar">
<sha256 value="e71c328ceef5c4a7d76f2d86df1b65d65fe2acf868b1a4efd84a3f34336186d8" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
<artifact name="localbroadcastmanager-1.0.0.pom">
<sha256 value="a000041f5a1f79283c5175e1bb60cf3683780f401c6a9d34fbe9751253fa6ff9" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
</component>
<component group="androidx.media" name="media" version="1.0.0">
<artifact name="media-1.0.0.aar">
<sha256 value="b23b527b2bac870c4a7451e6982d7132e413e88d7f27dbeb1fc7640a720cd9ee" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
<artifact name="media-1.0.0.pom">
<sha256 value="9cdfe5f7849069ad84dc4fb0407b3677fb8c22d3d66fd2b8fdb8dec8c5dc7411" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
</component>
<component group="androidx.palette" name="palette" version="1.0.0">
<artifact name="palette-1.0.0.aar">
<sha256 value="6054ee0184ba0ffd66dc825e060e8c9bf2f6c2ea54336cf3bef15c575037a743" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
<artifact name="palette-1.0.0.pom">
<sha256 value="85c5599135a789cfd5f99656f9e8240c9a727f72b2caaab60943aa32bb842771" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
</component>
<component group="androidx.preference" name="preference" version="1.1.1">
<artifact name="preference-1.1.1.aar">
<sha256 value="317dcbc38242aea2f6262c06d51b8a22827e98959967edd40f82600a15cb4bff" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
<artifact name="preference-1.1.1.pom">
<sha256 value="9789dcb6645da154854a140efb87deb853d18f4e837d5f30164acc470902a323" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
</component>
<component group="androidx.print" name="print" version="1.0.0">
<artifact name="print-1.0.0.aar">
<sha256 value="1d5c7f3135a1bba661fc373fd72e11eb0a4adbb3396787826dd8e4190d5d9edd" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
<artifact name="print-1.0.0.pom">
<sha256 value="62482c0594841bee24bb996abb6cb7b320a6a3b77dca9f0a0ba4fe3be5530aa7" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
</component>
<component group="androidx.recyclerview" name="recyclerview" version="1.1.0">
<artifact name="recyclerview-1.1.0.aar">
<sha256 value="f0d2b5a67d0a91ee1b1c73ef2b636a81f3563925ddd15a1d4e1c41ec28de7a4f" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
<artifact name="recyclerview-1.1.0.pom">
<sha256 value="fe321062a6e4e168b9c2b39a1137564c8784a2e5849402729768d5d7c4d972ef" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
</component>
<component group="androidx.savedstate" name="savedstate" version="1.0.0">
<artifact name="savedstate-1.0.0.aar">
<sha256 value="2510a5619c37579c9ce1a04574faaf323cd0ffe2fc4e20fa8f8f01e5bb402e83" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
<artifact name="savedstate-1.0.0.pom">
<sha256 value="844d7d22fcea798c78bf5559229daf88ec9cad8136f5eea0a29aa76b3f8fde7c" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
</component>
<component group="androidx.slidingpanelayout" name="slidingpanelayout" version="1.0.0">
<artifact name="slidingpanelayout-1.0.0.aar">
<sha256 value="76bffb7cefbf780794d8817002dad1562f3e27c0a9f746d62401c8edb30aeede" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
<artifact name="slidingpanelayout-1.0.0.pom">
<sha256 value="40e90f96838c2a8156ab51b181400767049f387cec8c695e412d3d9205b0745b" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
</component>
<component group="androidx.swiperefreshlayout" name="swiperefreshlayout" version="1.0.0">
<artifact name="swiperefreshlayout-1.0.0.aar">
<sha256 value="9761b3a809c9b093fd06a3c4bbc645756dec0e95b5c9da419bc9f2a3f3026e8d" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
<artifact name="swiperefreshlayout-1.0.0.pom">
<sha256 value="8fe4b5db332af33cde899ba571ee866ad977be38114d3ab600edaca454ea8299" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
</component>
<component group="androidx.test" name="core" version="1.2.0">
<artifact name="core-1.2.0.aar">
<sha256 value="c88b739b1c499afb792374be19b9cf829e89567f26441a74f664c0cf8de158a4" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
<artifact name="core-1.2.0.pom">
<sha256 value="8a42e815fcdb7981c2d1dcf1ba20c328e1ce1ed6b798682ba572295e91dc9779" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
</component>
<component group="androidx.test" name="monitor" version="1.2.0">
<artifact name="monitor-1.2.0.aar">
<sha256 value="fc97ca3f00f8ca30b7d5167fbd8736756048e2cc4f8e92dc891106751a5baeef" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
<artifact name="monitor-1.2.0.pom">
<sha256 value="0ea74b28a750735b12905476bf38e7373e924db7f2b88ecd9332d4a6285cafe6" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
</component>
<component group="androidx.test" name="rules" version="1.2.0">
<artifact name="rules-1.2.0.aar">
<sha256 value="24bd7111e0db91b4a5f6d5c3e3e89698580dc90d29273d04a775bb7fe7c2a761" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
<artifact name="rules-1.2.0.pom">
<sha256 value="4746045af7a8b3f4de3f4dce9d8dd2ab0044087b8b7a4866a3c66892516a90f1" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
</component>
<component group="androidx.test" name="runner" version="1.2.0">
<artifact name="runner-1.2.0.aar">
<sha256 value="5387e011167a3c8da08d99b5d59248c0e2da839317b48ebf202e31dc1f791ec1" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
<artifact name="runner-1.2.0.pom">
<sha256 value="8cd8fb464d02f198235d51e1a19aed41f12977c152a62c27462e17a90b4a5f08" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
</component>
<component group="androidx.test.espresso" name="espresso-core" version="3.2.0">
<artifact name="espresso-core-3.2.0.aar">
<sha256 value="beb4712c2520c1da30ac1f25506871f16ea5b83ee686ece5a258769df1a01e15" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
<artifact name="espresso-core-3.2.0.pom">
<sha256 value="244699b0d1409796c29d9c90250b4a1e906a33898da12612cbb482d063d3180b" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
</component>
<component group="androidx.test.espresso" name="espresso-idling-resource" version="3.2.0">
<artifact name="espresso-idling-resource-3.2.0.aar">
<sha256 value="c1a0454fe95788122ba652c3ecff7ec538c7e27de206aed970f2809fb8090d09" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
<artifact name="espresso-idling-resource-3.2.0.pom">
<sha256 value="56f01eb1ad41eb637ed29a2a9f6ec0b9a449ed28656d55fa17f7d34fe0e388c2" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
</component>
<component group="androidx.test.ext" name="junit" version="1.1.1">
<artifact name="junit-1.1.1.aar">
<sha256 value="449df418d2916a0f86fe7dafb1edb09480fafb6e995d5c751c7d0d1970d4ae72" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
<artifact name="junit-1.1.1.pom">
<sha256 value="73df3ef2ed6608706ea86151a5c1fd9dcc8c386963dd8723e259f32643610132" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
</component>
<component group="androidx.test.uiautomator" name="uiautomator" version="2.2.0">
<artifact name="uiautomator-2.2.0.aar">
<sha256 value="2838e9d961dbffefbbd229a2bd4f6f82ac4fb2462975862a9e75e9ed325a3197" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
<artifact name="uiautomator-2.2.0.pom">
<sha256 value="e134946ac5916554d8e7873f4b59034ec039138cc118a84ed1e9f700628163da" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
</component>
<component group="androidx.transition" name="transition" version="1.2.0">
<artifact name="transition-1.2.0.aar">
<sha256 value="a1e059b3bc0b43a58dec0efecdcaa89c82d2bca552ea5bacf6656c46e853157e" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
<artifact name="transition-1.2.0.pom">
<sha256 value="247f12757acabd706b069445fd31c83c016cc7fe67b0468c582d043ea7d20de1" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
</component>
<component group="androidx.vectordrawable" name="vectordrawable" version="1.1.0">
<artifact name="vectordrawable-1.1.0.aar">
<sha256 value="46fd633ac01b49b7fcabc263bf098c5a8b9e9a69774d234edcca04fb02df8e26" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
<artifact name="vectordrawable-1.1.0.pom">
<sha256 value="5b0e2d5b2179e54804785cbc21ce5f473b5e1ddd55a57da482e94dcd39492bb2" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
</component>
<component group="androidx.vectordrawable" name="vectordrawable-animated" version="1.1.0">
<artifact name="vectordrawable-animated-1.1.0.aar">
<sha256 value="76da2c502371d9c38054df5e2b248d00da87809ed058f3363eae87ce5e2403f8" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
<artifact name="vectordrawable-animated-1.1.0.pom">
<sha256 value="276a20116b705fb75b9003ee9496c56f6fd3b32375fb232472811eba60a040bd" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
</component>
<component group="androidx.versionedparcelable" name="versionedparcelable" version="1.1.0">
<artifact name="versionedparcelable-1.1.0.aar">
<sha256 value="9a1d77140ac222b7866b5054ee7d159bc1800987ed2d46dd6afdd145abb710c1" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
<artifact name="versionedparcelable-1.1.0.pom">
<sha256 value="c729c7be0cc06323bda829d460666e79dbd43b799a21089a44bd3b293dc253b5" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
</component>
<component group="androidx.viewpager" name="viewpager" version="1.0.0">
<artifact name="viewpager-1.0.0.aar">
<sha256 value="147af4e14a1984010d8f155e5e19d781f03c1d70dfed02a8e0d18428b8fc8682" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
<artifact name="viewpager-1.0.0.pom">
<sha256 value="1f72f836339d03c6eb013f65075e76ca87075a577578eb4f95f74a3a5d253128" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
</component>
<component group="androidx.viewpager2" name="viewpager2" version="1.0.0">
<artifact name="viewpager2-1.0.0.aar">
<sha256 value="e95c0031d4cc247cd48196c6287e58d2cee54d9c79b85afea7c90920330275af" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
<artifact name="viewpager2-1.0.0.pom">
<sha256 value="4063bca7fe94fe65c98f4168f97ae10e02da0248598ad3ac21c432c7f608a17a" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
</component>
<component group="antlr" name="antlr" version="2.7.7">
<artifact name="antlr-2.7.7.jar">
<sha256 value="88fbda4b912596b9f56e8e12e580cc954bacfb51776ecfddd3e18fc1cf56dc4c" origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
<artifact name="antlr-2.7.7.pom">
<sha256 value="100f793ba27f8b4e4204edb46171ebf36e54e0f94cfc02527fea07a0bb1fceb7" origin="Generated by Gradle because artifact wasn't signed"/>