Android apps, described by their data
Not a file dump. Cards carry facts, and which facts depends on whether we hold the file — so each card says which kind it is.
Two kinds of card
HOST — we hold the APK. Its signature was checked with apksigner and its certificate matches the one we confirmed for that app; the card shows the file's SHA-256, minSdk compatibility and, once a second release has been checked, what permissions changed between them.
DATA_LINK — we do not hold the file and have not checked one. The card points at the official source and lists reference details from that listing.
SHA-256 of the file we serve
Compatibility from minSdk
Permission changes, when a previous version is held
