TubeLab downloads JARs from GitHub
Recent versions of app.fedilab.fedilabtube download prebuilt JARs from https://github.com/frostwire/frostwire-jlibtorrent/releases:
task downloadDependencies(type: Download) {
def baseUrl = "https://github.com/frostwire/frostwire-jlibtorrent" +
"/releases/download/release%2F$libtorrentVersion"
def platforms = ['arm', 'arm64', 'x86', 'x86_64']
def urls = platforms.collect { "$baseUrl/jlibtorrent-android-$it-${libtorrentVersion}.jar" }
urls.add("$baseUrl/jlibtorrent-${libtorrentVersion}.jar")
src urls
dest 'libs'
overwrite false
}
I think this violates our inclusion policy:
Binary dependencies such as JAR files have to be replaced by source-built versions or used from a trusted repository
Thus, all builds TubeLab doing this must be disabled. @IzzySoft, @licaon-kter, what's your opinion?