-
Notifications
You must be signed in to change notification settings - Fork 18
Description
Hi, thanks for exodus, im not an android dev.
On the https://github.com/pretix/pretixscan-android app exodus detects the com.facebook.flipper tracker.
On https://fbflipper.com/docs/getting-started/android-native/ FB says:
It's recommended that you keep all Flipper instantiation code in a separate build variant to ensure it doesn't accidentally make it into your production builds.
As far as I can see pretix does this correctly: https://github.com/pretix/pretixscan-android/blob/master/pretixscan/app/build.gradle#L168
by using com.facebook.flipper:flipper-noop instead in builds other then debug.
As far as I can see, the noop implementation just provides mocks.
https://github.com/facebook/flipper/blob/main/android/no-op/src/main/java/com/facebook/flipper/android/NoOpAndroidFlipperClient.java
I decompiled the app on F-Droid and couldnt find a real flipper implementation:
If its just a mock/"no-op" (no operation) implementation it shouldnt be detected as a privacy invasive tracker.
Here https://gitlab.com/fdroid/fdroiddata/-/issues/3443#note_2260177467 someone had a similar problem with other apps, where Green, Countly were just a stub but were reported as trackers.
