What the developer wrote
Authored by Sander van Grieken
android: remove unneeded dl-ndk-ci.sh
What changed, and why it matters
This commit simply deletes an unused helper script that downloaded an Android NDK build artifact during continuous integration. There is no security-relevant change, no vulnerability fix, and no indication the script was ever part of shipped Electrum software.
No action required. This is a routine cleanup commit with no security implications.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The removed shell script (contrib/android/dl-ndk-ci.sh) parsed a CI web page via curl/grep/python to extract an artifactUrl and download an Android NDK zip. It was a build-time utility, not runtime code, and the commit message explicitly states it is ‘unneeded’. No patch, hardening, or vulnerability remediation is present.
Changed components
contrib/android/dl-ndk-ci.sh (deleted build helper)Inspect captured patch +0 / −8
diff --git a/contrib/android/dl-ndk-ci.sh b/contrib/android/dl-ndk-ci.sh
deleted file mode 100755
index 41b1922..0000000
--- a/contrib/android/dl-ndk-ci.sh
+++ /dev/null
@@ -1,8 +0,0 @@
-#!/bin/sh
-if [ -z "$1" ]; then
- echo "missing url"
- exit 1
-fi
-echo $1
-
-curl $1 | grep "var JSVariables" | python3 -c "import sys; line=sys.stdin.read(); line=line[line.find('{'):-2]; import json; j=json.loads(line); print(j['artifactUrl'])" | wget -i - -O android-ndk-ci-linux-x86_64.zip
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.