Review org.bitcoin.wallet - "Bitcoin Wallet: by Bitcoin.org"

App has 1000+ downloads now, The description need to be changed: https://walletscrutiny.com/android/org.bitcoin.wallet/

it's legit app, details at: https://github.com/bitcoin-dot-org/BitcoinWalletMobile/issues/4#issuecomment-821237769

not a scam (but it looked like fake due to mismatch in appid, missing tag, no mention anywhere)

They say at: https://github.com/bitcoin-dot-org/BitcoinWalletMobile/issues/4#issuecomment-822010380

It's obviously legit, but we're trying to be lowkey about it for now, we need to make sure users aren't losing money before we promote it more

which is worth to mention in the review as well (aka it's like BETA state?!)

anyway to rebuild the app version 1.0 I used:

podman build --rm -t bitcoinorg_lv_build_apk -f Containerfile

Containerfile content:

FROM frolvlad/alpine-glibc

RUN set -ex; \
    apk update; \
    apk add --no-cache \
        openjdk8 \
        git \
        yarn; \
    adduser -D appuser;

USER appuser

ENV ANDROID_SDK_ROOT="/home/appuser/app/sdk" \
    ANDROID_HOME="/home/appuser/app/sdk" \
    NODE_ENV="production"

RUN set -ex; \
    mkdir -p "/home/appuser/app/sdk/licenses" "/home/appuser/app/bitcoinorg/"; \
    printf "\n24333f8a63b6825ea9c5514f83c2829b004d1fee" > "/home/appuser/app/sdk/licenses/android-sdk-license"; \
    cd /home/appuser/app/bitcoinorg/; \
    git clone https://github.com/bitcoin-dot-org/BitcoinWalletMobile/; \
    cd BitcoinWalletMobile; \
    git checkout v1.0; \
    yarn install --frozen-lockfile --production; \
    cd android; \
    sed -i '/org.gradle.jvmargs/s/^#//g' gradle.properties; \
    ./gradlew assembleRelease; \
    ./gradlew bundleRelease

APK located in:

/home/appuser/app/bitcoinorg/BitcoinWalletMobile/android/app/build/outputs/apk/release/app-release.apk

AppBundle located in:

/home/appuser/app/bitcoinorg/BitcoinWalletMobile/android/app/build/outputs/bundle/release/app-release.aab

looks like the app use AppBundle, the part that missing in the review is comparing it to APK from google-play...