v1.0.2 — F-Droid review fixes + About dialog

Bug-fix release addressing every finding from the F-Droid inclusion review
(fdroiddata!44998). Thanks to
@MiggiV2 for testing 1.0.1 on real hardware and finding all four, and
to @andrewpozdnakov7 for the source review.

No new permissions. Still no INTERNET permission, no tracking, no ads, no root.

Fixed

• The APK contents list was unreadable in dark theme. Every screen sits in a Scaffold with a
  transparent container so the pastel gradient shows through, but Material 3 resolves that to no
  content colour and falls back to its hard-coded Color.Black default. The Contents header and
  all entry names on the app detail screen painted pure black on the dark background, at roughly
  1.3:1 contrast. Fixed once in GradientBackground, which now publishes onSurface as the content
  colour — closing the whole class of bug for every screen rather than patching two call sites.
• Split bundles were saved as .apks.apk. The Storage Access Framework reconciles the requested
  MIME type against the file name's extension and renames the file when they disagree: apks maps
  to no registered type, while the APK MIME type maps to apk. Bundles now request
  application/octet-stream, the only type that agrees with an unregistered extension, so the
  .apks name is written as intended. The archive contents were always correct — only the name was
  wrong, so existing files can simply be renamed to drop the trailing .apk.
• The Settings screen could not be scrolled, so the About card — with the app name and the
  GPL-3.0-or-later notice — was clipped below the screen edge and unreachable on shorter screens,
  and worse at large font scales.
• Status- and navigation-bar icons ignored the in-app theme. enableEdgeToEdge detects dark mode
  from the system night setting, so choosing Light on a system-dark device (or Dark on a
  system-light one) left the system-bar icons the same colour as the app background, and changing the
  theme in Settings never updated them. Bar appearance now follows the resolved app theme.

Added

• An About dialog. Tapping About in Settings opens a compact modal with the app icon, version
  and build number, a short description, the developer and contact address, the licence, third-party
  credits and the copyright line. The contact address opens your email app via ACTION_SENDTO with
  the version pre-filled in the subject — a hand-off to another app, not a network call.
• The Nunito OFL notice now ships with the app. SIL OFL 1.1 requires the copyright notice and
  licence text to travel with the font, and the app embeds Nunito, so the APK is itself a
  distribution of it. The full licence is bundled at assets/licenses/OFL-1.1-Nunito.txt and
  indexed by THIRD_PARTY_LICENSES.md.

Verification

sha256sum vadhod-apk-extractor-v1.0.2.apk

5cd3211e0c0ba57a329bd89cfbfc5b1351eeda7300cd22b59661b131647ddf55  vadhod-apk-extractor-v1.0.2.apk
f26f1ad4fc9a3656e097e7bffa25830d62add66fac106e251df38c3e0b889286  vadhod-apk-extractor-v1.0.2-source.zip

The APK is signed with certificate CN=Vadhod, OU=Apps, O=Vadhod, L=Mumbai, ST=MH, C=IN, SHA-256
fingerprint:

9a7ae254b76d1d77aa91a14b144bfb49ce7ae6734bd3ff64d63296a6c04d918d

Same key as 1.0 and 1.0.1, so this installs as a normal update over the GitHub build. The APK
Signing Block contains only the v2 signature and padding — no Dependency metadata block — and
carries no META-INF/version-control-info.textproto, so it stays reproducible from the tagged
commit.

Tested on a moto g45 5G (Android 15): dark-theme contents readable, split export writes a valid
.apks containing base.apk plus three config splits with all CRCs matching, Settings scrolls, and
the About dialog opens.

Important

This still will not install over the Google Play build. Google re-signs Play uploads with its
own app-signing key, so the two are not interchangeable — uninstall first if you are switching
sources.

Files

File	Description
vadhod-apk-extractor-v1.0.2.apk	Signed release APK (Android 10+, ~3 MB)
vadhod-apk-extractor-v1.0.2-source.zip	Source at tag v1.0.2
SHA256SUMS.txt	Checksums for both files

Vadhod APK Extractor 1.0.1

Packaging-only release for F-Droid inclusion. No functional changes — no behaviour, UI or
permission differences from 1.0. If you are happy on 1.0, there is nothing here you need.

What changed

Three things were stripped out of the APK, all of them build-system defaults rather than app code:

• The dependency-metadata signing block. The Android Gradle Plugin embeds a Play Console dependency
  manifest into the APK Signing Block, compressed and encrypted with a Google key so nobody else can
  read it. F-Droid's scanner rejects it as opaque, non-free and non-reproducible. Now disabled with
  dependenciesInfo { includeInApk = false }.
• The git-commit stamp. AGP wrote the building commit into
  META-INF/version-control-info.textproto, which tied the binary to which commit produced it. Now
  disabled with vcsInfo { include = false }.
• An unused Gradle toolchain plugin (foojay-resolver-convention), which downloads a JDK at build
  time. Nothing in this project declares a Java toolchain, so it was dead weight.

The About screen now reads GPL-3.0-or-later, matching LICENSE.

Verification

sha256sum vadhod-apk-extractor-v1.0.1.apk

9799c19722588e0043aad1195e7df67fec52f6b74aa48d409d19da9658a5b4c7  vadhod-apk-extractor-v1.0.1.apk
015c532dede837cc6538d9efff1298ec3b549376cda81b226c865891d9dbe4ee  vadhod-apk-extractor-v1.0.1-source.zip

The APK is signed with certificate CN=Vadhod, OU=Apps, O=Vadhod, L=Mumbai, ST=MH, C=IN, SHA-256
fingerprint:

9a7ae254b76d1d77aa91a14b144bfb49ce7ae6734bd3ff64d63296a6c04d918d

Same key as 1.0, so this installs as a normal update over the GitHub build.

Important

This still will not install over the Google Play build. Google re-signs Play uploads with its own
app-signing key, so the two are not interchangeable — uninstall first if you are switching sources.

Files

File	Description
vadhod-apk-extractor-v1.0.1.apk	Signed release APK (Android 10+, ~3 MB)
vadhod-apk-extractor-v1.0.1-source.zip	Source at tag v1.0.1
SHA256SUMS.txt	Checksums for both files

Vadhod APK Extractor 1.0

Vadhod APK Extractor 1.0 — the first public release. A beautiful, privacy-first, 100% offline tool to extract and back up the APK of any app installed on your device.

Also available on Google Play.

Highlights

• Private by design — no INTERNET permission at all, no tracking, no analytics, no ads, no accounts. Nothing leaves your device.
• Split-APK aware — simple apps export as a clean single .apk; split apps are bundled into one reinstallable .apks archive, so your backups actually reinstall.
• Browse, search, sort — every installed app across System and User tabs, sorted by name, size, install date or last update.
• Batch extraction — select many apps and extract at once, with live per-item and overall progress.
• Inspect — version, size, min/target SDK, install dates, the signing certificate SHA-256, and a full listing of the APK's contents.
• Share & export — share an extracted APK, or export any app's icon as a PNG.
• Storage Access Framework only — you pick the destination folder; no broad storage permissions.
• Soft pastel design with full light and dark themes, WCAG AA contrast, font-scale and reduce-motion support.

Requires Android 10 (API 29) or newer.

Downloads

File	What it is
vadhod-apk-extractor-v1.0.apk	The signed, R8-minified release build — install this
vadhod-apk-extractor-v1.0-source.zip	Full source at tag v1.0
SHA256SUMS.txt	Checksums for both files
Source code (zip / tar.gz)	Auto-generated by GitHub

Verify before installing

sha256sum vadhod-apk-extractor-v1.0.apk

1f574b1fc184436740f84705ba24d803c2cd952010318f9a38fd7202abe7fa99  vadhod-apk-extractor-v1.0.apk
bb95aedff6cdbf96949212dabb3e05b0c5b9c4b60d7f4d5c40457a4218b5cbae  vadhod-apk-extractor-v1.0-source.zip

The APK is signed with certificate CN=Vadhod, OU=Apps, O=Vadhod, L=Mumbai, ST=MH, C=IN, SHA-256 fingerprint:

9a:7a:e2:54:b7:6d:1d:77:aa:91:a1:4b:14:4b:fb:49:ce:7a:e6:73:4b:d3:ff:64:d6:32:96:a6:c0:4d:91:8d

Important

This APK is signed with a different key than the Google Play build. Google Play re-signs uploads with its own app-signing key, so this build will not install over a Play Store install (INSTALL_FAILED_UPDATE_INCOMPATIBLE). Uninstall first, or just stay on one source.

Permissions

QUERY_ALL_PACKAGES is the only sensitive permission, and it is required to list the apps installed on your device — the app's entire purpose. That list never leaves the device.

License

GNU GPL v3 or later. Full changelog: CHANGELOG.md.