4 points
Update plugin com.android.test to v8.5.0 by @renovate in #1561
Was it properly checked for backdoor injections?
4 points
Is there a reason you’re suspicious about that particular dependency, or are you just asking about dependencies in general?
2 points
*
I’m worried about that one specifically. Dependencies in general can be suspicious if they come from untrusted sources but in that case it’s suspicious by being related to testing (like the xz thing was) that shouldn’t even be in a released app anyways.
3 points
3 points
3 points
*
1 point
The context is the name of the dependency and its very questionable purpose.
4 points