A Confusing Dependency

Earlier this year I've received the task to put together a demo application which involved recording and playing back audio. As usual in this situation, I scoured the internet, browsing for existing libraries to see if anyone has a solution that I could use, or at least base my implementation on. Discovery I quickly stumbled upon the aptly named adrielcafe/AndroidAudioRecorder library. It had some

[ytRino]

😱

[gfx]

JitPackで配流しているライブラリと同じidのマルウェア入りアーティファクトがjcenterにあってそれが使われたという件。

[jmatsu]

はーん。結局本家のリリースを見て checksum 入れるしかないんだろうか。