Repository navigation
docs: public download page (Czech README, GPL-3.0, screenshots) - #13
Conversation
README.md becomes the page an ordinary visitor lands on: download link on top, what the app does and does not do, install steps including Android 13+ "Omezené nastavení", the three permissions and what each yields, and an honest safety section (why to trust it, what to watch out for). The former developer README moves to docs/development.md unchanged apart from a pointer back. LICENSE is GPL-3.0, the same as detektor-mapy. handoff.md records the decision and the history audit; CLAUDE.md asks future releases to be published as Latest so releases/latest keeps working. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
…data) Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 81bae7e363
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
| - má výslovně **zakázáno číst obsah oken** (`canRetrieveWindowContent="false"`), takže text obrazovky | ||
| nedostane, ani kdyby o něj požádala, |
There was a problem hiding this comment.
Attribute content protection to the parser, not the XML flag
canRetrieveWindowContent="false" prevents querying window/node content, but it does not strip text or content descriptions already present in an AccessibilityEvent; AccessibilityEventParserTest.textAndContentDescriptionNeverReachTheSample explicitly constructs such a scroll event and relies on the parser ignoring those fields. Claiming that the configuration makes screen text unavailable even if requested gives users a false technical guarantee and would remain untrue if the parser later regressed, so describe the parser and policy guard as the protection instead.
Useful? React with 👍 / 👎.
| - **Bez internetu nejde nic poslat.** Aplikace nemá oprávnění `INTERNET`. To není slib v podmínkách | ||
| použití, to je technická nemožnost: Android jí síť vůbec nepustí. V *Nastavení → Aplikace → ScrollMeter → | ||
| Mobilní data* uvidíš 0 B. |
There was a problem hiding this comment.
Avoid claiming that exfiltration is technically impossible
When evaluating a compromised or maliciously modified build, lacking INTERNET blocks direct network sockets but does not prevent handing data to another network-capable app through an intent, browser URL, or exported component; this app already uses sharing intentionally for CSV exports. Because this safety section asks users to trust a powerful Accessibility service on the assertion that it could not send data even if it wanted to, replace the absolute claim with the accurate guarantees that the current code contains no network behavior and Android denies it direct network access.
Useful? React with 👍 / 👎.
Honza wants ScrollMeter installable straight from GitHub, the same way as
detektor-mapy. This makes the repo ready to go public.README.mdis now the Czech page a visitor lands on: download link at the top, what the app does and does not do, install steps (including Android 13+ Omezené nastavení), the three permissions and what each yields, and an honest safety section.docs/development.mdunchanged, with a pointer back.LICENSEis GPL-3.0, the same as detektor-mapy.docs/img/holds four screenshots from the emulator (release APK v0.2.0, real measured data).handoff.mdrecords the decision and the history audit.CLAUDE.mdasks future releases to be published as Latest, because the README linksreleases/latest.History audit before going public: every revision grepped for passwords, tokens, keys, e-mails, IPs and phone numbers. Nothing secret; only the commit author e-mail and the test OnePlus serial number. PR bodies are clean too.
Docs only, no code change. CI is still blocked by account billing.
🤖 Generated with Claude Code