nenadzaric/skills-android-jadx-decompile repository overview

⁠jadx-decompile

Offline static Android fixture tool. This is a new integration validated on a self-owned synthetic fixture, not a claim about arbitrary app compatibility.

⁠Immutable image

docker pull --platform linux/amd64 docker.io/nenadzaric/skills-android-jadx-decompile@sha256:70e1a7ed55ab11525afc8cdffc4a962436e955b6c7ace4069c632900571a0972

Image index: sha256:f0ebfa5a03632d2f888cbd980894d9fb246f0ad61d5e2014c844dc37f952ca5c.

⁠Actual adapter source and notices

The accompanying immutable OCI artifact contains jadx-decompile/build-source/ (the Python adapter, Dockerfile, locked requirements where applicable, owned fixtures and native test harnesses) and jadx-decompile/notices/ (primary texts and original installed/embedded dependency notices with exact hashes). It is the source for the custom entrypoint; native upstream alone does not contain this adapter. Git/recipe image relocation and subsequent delivery metadata do not change executable image bytes. Supplemental source/notice indexes are accompanying documentation, not claimed present in the already-built image.

oras pull docker.io/nenadzaric/skills-android-jadx-decompile@sha256:83893aace744b5d79de09d1bdadb8ad8603ace595834d99e50dfa7ba9bdadb6f
sha256sum jadx-decompile-source-notices.tar.gz

Expected bundle SHA256: 899d070cf1345d3b2db85694a4263e58b2c005c91a342c0e4b7dd0b0c6584e29. Extract this archive to read the source and notices/SOURCE-AND-NOTICES.json.

Pinned native upstream: https://github.com/skylot/jadx/tree/28ff15e4ae69950aebea110a13e5ab895d234dfc⁠

Pinned native source archive: https://github.com/skylot/jadx/archive/28ff15e4ae69950aebea110a13e5ab895d234dfc.tar.gz⁠

Native upstream license: Apache-2.0. First-party adapter/packaging follows the existing workflows Proprietary policy; this delivery makes no new open-source license grant. Dependencies retain their own licenses/notices. This inventory is not an exhaustive SBOM or independently reproducible binary build.

⁠Reproduce native fixture checks

After pulling the public image above and extracting the source bundle, assign a LOCAL alias matching the original build test harness. This does not push or require private registry access.

docker tag docker.io/nenadzaric/skills-android-jadx-decompile@sha256:70e1a7ed55ab11525afc8cdffc4a962436e955b6c7ace4069c632900571a0972 ghcr.io/nenadzaric/skills-android-jadx-decompile:1.5.6-outputfix1
cd jadx-decompile/build-source
python3 test_native.py

⁠Java runtime source

The installed OpenJDK source package is openjdk-17 version 17.0.20.1+1-1~deb12u1. Its official Debian descriptor and all three SHA256-verified source payloads accompany this bundle under notices/openjdk-corresponding-source/. Runtime license is GPL-2.0 with Classpath exception, with component-specific notices preserved.

Official descriptor: https://security.debian.org/debian-security/pool/updates/main/o/openjdk-17/openjdk-17_17.0.20.1+1-1~deb12u1.dsc⁠

Source payload: https://security.debian.org/debian-security/pool/updates/main/o/openjdk-17/openjdk-17_17.0.20.1+1.orig-googletest.tar.xz⁠ (SHA256 94695f01012f939e8eeb51f839dd11323a57a6bb70dee8a34c7a7a1cddf00905).

Source payload: https://security.debian.org/debian-security/pool/updates/main/o/openjdk-17/openjdk-17_17.0.20.1+1.orig.tar.xz⁠ (SHA256 098e267645e5f5282a105097404945e877af6eae5b429bfbe914eb17157e8a90).

Source payload: https://security.debian.org/debian-security/pool/updates/main/o/openjdk-17/openjdk-17_17.0.20.1+1-1~deb12u1.debian.tar.xz⁠ (SHA256 ef24b88b89854544c8f339afbec051c322f7268dcaec7a563f4201b0ceba7625).