New app: Pulso Libre

This request adds Pulso Libre (ar.com.pllabs.pulsolibre), a community event and ticket client, with the author's support. It provides free QR reservations, open admission, organizer-reviewed payment receipts and ticket transfers. NonFreeNet and TetheredNet disclose its dependency on the PLLABS backend and possible organizer-selected SoundCloud content.

• Source: https://github.com/mrgabi88-lang/pulso-libre — GPL-3.0-only, with upstream copyright and license notices retained.
• Release: v1.0.0-11, source commit c7d977f90fb0ef53f85018fe5a359b7b6c79e2f8.
• Author contact: pulso@pllabs.com.ar. Fastlane metadata includes en-US and es title, summary, description and changelog. No backend data, server credentials or private signing keys are included.

Build recipe and validation

The recipe pins the official Flutter 3.38.4 srclib and NDK 28.2.13676358, preserves compile SDK 37, target SDK 36 and min SDK 24, and uses the explicit unsigned Gradle option. It preinstalls platform-tools, build-tools;35.0.0 and platforms;android-37.0 before starting Gradle.

Preinstalling Build Tools 35 avoids a reproduced first-run SDK-loader failure involving android-37 versus android-37.0; a fresh local control passes on its first invocation. The recipe changes no platform API, SDK binary, scanner or signing rule. AGP 8.11.1's warning that it was tested only through API 36 remains visible and is not suppressed.

Local validation includes an unsigned Windows build, static analysis and 103 passing tests. Official fdroidserver metadata checks and source scans passed locally, including a separate check of the 122 locked Pub archives after cleanup. These checks do not substitute for the Linux APK build or APK scanner.

The current metadata head 6a40297c29791975ddbf49c88da2f9ba31c22cdb passed all 9 jobs in pipeline 2881512872, including the Linux APK build and APK checks. This refers to the current head, not earlier failed pipelines.

The unsigned CI APK was independently checked: ar.com.pllabs.pulsolibre, 1.0.0 / 11, 59,890,899 bytes (about 57.1 MiB), arm64-v8a/armeabi-v7a/x86_64, 16 KiB zip alignment, no v1 signature or v2/v3 signing block. SHA-256: d6b2004b76f9aa3bf6896bd89b576fb6d18f2160cda68ad696ca361bd48fbe35.

Reports contain 1 minor and 9 informational entries. INTERNET supports the disclosed backend connection; USE_BIOMETRIC/USE_FINGERPRINT support local unlocking, ACCESS_NETWORK_STATE detects connectivity, and the AndroidX-generated DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION protects internal receivers. The remaining informational entries describe ABIs, R8, Fastlane metadata and a separate CI-signed test artifact. Known non-free class and extra-signing-block scans passed. Two log limitations remain explicit: Androguard falls back to its API 28 permission catalog for target 36, limiting that analysis; the ephemeral CI config.yml triggers a file-permissions warning. Neither changes the app's target SDK. The CI artifact is not an F-Droid repository release.

Items for maintainer review

• Flutter uses the pinned official srclib; migration to an upstream Flutter submodule remains for review. Updates remain manual (AutoUpdateMode and UpdateCheckMode: None).
• The local universal unsigned APK is about 57 MiB. ABI splits and their version codes are deferred, without changing versionCode 11 here.
• Reproducible builds are not enabled: the publisher-signed web APK has a different resource tree. There is intentionally no Binaries or upstream signing-key verification field. An F-Droid-signed build cannot directly update the publisher-signed app.
• Final inclusion/licensing review, screenshots and a separate Fastlane icon remain pending.

Inclusion checklist

Based on the project's App inclusion template; unresolved items are deliberately unchecked.

• Final compliance review against the inclusion criteria.
• The original author requested and supports inclusion.
• Fastlane metadata includes en-US and es summary, description and changelog.
• CONTRIBUTING, Quick Start Guide, Flutter template and metadata reference reviewed.
• Title follows New app: app name.
• Public fork and unprotected source branch verified.
• Searched fdroiddata/RFP for the app ID and Pulso Libre; no matching request or existing MR found.
• One app and one metadata file only.
• Metadata is valid YAML with LF at metadata/ar.com.pllabs.pulsolibre.yml.
• Full source commit SHA; latest build enabled, no disabled versions.
• Release tagged v1.0.0-11.
• Automatic updates enabled (deferred as explained above).
• AuthorName, issue tracker and author contact available.
• Flutter submodule instead of srclib.
• Reproducible builds (reason explained above).
• ABI split (pending review).
• All 9 CI jobs pass at the current metadata head (pipeline 2881512872).
• Current-head Reports warnings/errors are resolved or explained above.