Gradle & Code Quality
OWASP Dependency-Check with Gradle: Triage Matches, Not Just Scores
OWASP Dependency-Check identifies potential known-vulnerability matches in dependencies.
3 min read
APKLint / Engineering notebook
Android engineering guides.
Page 6 of 11.
Practical guides to Android packages, signing, security and release decisions. Start with the problem, inspect the evidence, and follow the relevant tool or official reference.
262 focused guides61 free toolsReference review: 22 Sep 2026
Showing 121–144 of 262 guides · Page 6 of 11.
Gradle & Code Quality
Android Studio Lint: Run the Build-Integrated Check, Not Just a Snippet Scan
Android Lint is a build-aware analysis tool, not just the warning underline in the editor.
3 min read
Gradle & Code Quality
Android Static Code Analysis: Combine Build Context and Focused Checks
Android static code analysis works best as a set of complementary checks.
3 min read
Gradle & Code Quality
Java Code Review Checklist for Android: Lifecycles, Errors and Resources
A Java code review for Android should prioritize ownership, lifecycle and failure behavior before style.
3 min read
Gradle & Code Quality
Kotlin Design Patterns for Android: Prefer Clear Ownership Over Ceremony
Useful Kotlin design patterns on Android make state, ownership and errors easier to understand.
4 min read
Gradle & Code Quality
R8 vs ProGuard: Shrinking, Optimization and Compatible Rules
R8 is the optimizer used by modern Android builds; ProGuard is a separate Java bytecode shrinker and obfuscator.
3 min read
Gradle & Code Quality
minifyEnabled on Android: Test the Release Variant You Actually Ship
minifyEnabled enables code shrinking, optimization and obfuscation for an Android build type.
3 min read
Gradle & Code Quality
shrinkResources: Remove Unused Assets Without Breaking Dynamic Lookups
shrinkResources removes resources that the Android optimizer determines are unused.
3 min read
Gradle & Code Quality
Android App Obfuscation: Raise Cost, Don't Hide Secrets
Android app obfuscation makes packaged code harder to read by renaming and transforming it.
3 min read
Gradle & Code Quality
ProGuard for Java vs R8 for Android: Pick the Pipeline
ProGuard is a Java bytecode shrinker, optimizer and obfuscator.
3 min read
Gradle & Code Quality
Write Narrow R8 Keep Rules for Reflection and Serialization
A good R8 keep rule preserves the contract that static analysis cannot see without disabling optimization for an entire application.
3 min read
Gradle & Code Quality
R8 Missing Classes: Fix the Dependency Before Suppressing the Warning
An R8 missing-class error means the optimizer encountered a reference whose definition was not available in the analyzed inputs.
3 min read
Gradle & Code Quality
Retrace an Obfuscated Stack Trace with the Mapping File
Retrace needs the mapping file from the exact optimized release that produced the crash.
3 min read
Gradle & Code Quality
Resolve Gradle Dependency Conflicts with dependencyInsight
A dependency conflict occurs when the graph requests incompatible or different versions of a module.
3 min read
Gradle & Code Quality
Duplicate Class Build Errors: Find the Two Owners of the Same Class
A duplicate-class error means two packaged inputs define the same class.
3 min read
Gradle & Code Quality
Lock Gradle Dependencies for Reproducible Release Builds
Dependency locking records resolved module versions so a later build does not silently select a different compatible or dynamic version.
3 min read
Gradle & Code Quality
Verify Gradle Dependency Checksums Before Trusting Them
Gradle dependency verification checks downloaded artifacts against trusted checksums or signatures.
3 min read
Gradle & Code Quality
Gradle Configuration Cache: Measure Reuse and Fix Incompatible Tasks
Gradle's configuration cache reuses the configured task graph between compatible invocations.
3 min read
Firebase & App Integrity
Set Up Firebase on Android and Verify the App Identity
Firebase setup starts with the Android application's actual package identity, not the project folder name.
3 min read
Firebase & App Integrity
Firebase BoM and SDK Versions: Pin a Verified Release, Not a Moving “Latest”
On 22 September 2026, Firebase's Android release notes list BoM 34.19.0 , released on 9 September 2026.
3 min read
Firebase & App Integrity
Firebase Google Sign-In on Android: Match Package and Signing Certificates
Google Sign-In can work in a debug build and fail after Google Play installation because the package is signed by a different certificate.
3 min read
Firebase & App Integrity
Configure Crashlytics in Gradle and Prove a Crash Arrives
Crashlytics setup is complete only when a controlled crash from the intended build reaches the correct Firebase app with readable information.
3 min read
Firebase & App Integrity
Firebase Crashlytics SDK vs Gradle Plugin: Both Have a Different Job
com.google.firebase:firebase-crashlytics is the Android runtime library. The Crashlytics Gradle plugin is a build-time integration.
3 min read
Firebase & App Integrity
Firebase DebugView on Android: Enable, Verify, Disable
Firebase DebugView is useful for checking development analytics events quickly.
3 min read
Guides are dated references, not a live view of your app or Console. Verify changing policy and SDK details before release.
APKLint is independent and is not affiliated with Google, Android or the other projects discussed.