惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

P
Privacy International News Feed
WordPress大学
WordPress大学
Security Latest
Security Latest
Cyberwarzone
Cyberwarzone
K
Kaspersky official blog
Cisco Talos Blog
Cisco Talos Blog
Microsoft Security Blog
Microsoft Security Blog
G
GRAHAM CLULEY
N
News | PayPal Newsroom
Apple Machine Learning Research
Apple Machine Learning Research
freeCodeCamp Programming Tutorials: Python, JavaScript, Git & More
V
Visual Studio Blog
美团技术团队
J
Java Code Geeks
I
Intezer
The Cloudflare Blog
SecWiki News
SecWiki News
S
Secure Thoughts
Microsoft Azure Blog
Microsoft Azure Blog
V2EX - 技术
V2EX - 技术
C
Cyber Attacks, Cyber Crime and Cyber Security
奇客Solidot–传递最新科技情报
奇客Solidot–传递最新科技情报
Spread Privacy
Spread Privacy
D
DataBreaches.Net
S
Security Affairs
Help Net Security
Help Net Security
S
Securelist
F
Full Disclosure
C
Check Point Blog
F
Fortinet All Blogs
Know Your Adversary
Know Your Adversary
Exploit-DB.com RSS Feed
Exploit-DB.com RSS Feed
Y
Y Combinator Blog
云风的 BLOG
云风的 BLOG
阮一峰的网络日志
阮一峰的网络日志
The Register - Security
The Register - Security
cs.CL updates on arXiv.org
cs.CL updates on arXiv.org
人人都是产品经理
人人都是产品经理
博客园_首页
G
Google Developers Blog
Google Online Security Blog
Google Online Security Blog
Cyber Security Advisories - MS-ISAC
Cyber Security Advisories - MS-ISAC
H
Help Net Security
酷 壳 – CoolShell
酷 壳 – CoolShell
I
InfoQ
Application and Cybersecurity Blog
Application and Cybersecurity Blog
H
Hacker News: Front Page
L
LINUX DO - 热门话题
Threat Intelligence Blog | Flashpoint
Threat Intelligence Blog | Flashpoint
L
LangChain Blog

ashishb.net

A day in Luxembourg - the richest country in the world I was asked to install malware during a fake interview Book summary: Breakneck - China's quest to engineer the future by Dan Wang Book summary: How to Teach Your Baby to Read Book Summary: The Discontented Little Baby Book by Pamela Douglas Introducing Amazing Sandbox - run third-party tools and AI agents securely on your machine Why software outsourcing gets a bad reputation? Book summary: The Natural Baby Sleep Solution by Polly Moore A day in Antwerp, Belgium Journey of online influencers Two days in Brussels, Belgium Shortcuts - when we love them and when we don't A visit to Rakhigarhi Three days in overhyped Paris Empty Japan, crowded Tokyo The real lock-in in GitHub is not the code, but the stars 11-day Norwegian Breakaway East Caribbean cruise Sanskrit and Sri Lankan Air Force Use REST with Open API The Achilles heel of American capitalism Costa Rica in 4 days At a juice stall in Sri Lanka A short stay at Warsaw, Poland Best practices for using Python & uv inside Docker Two days in Vilnius, Lithuania How IntelliJ IDEs waste disk space Pregnancy Why there aren't many digital nomads from India Two days in Riga, Latvia To keep your machine secure, run third-party tools inside Docker Family Ties in Your DNA: Some relatives are closer than others Doctors per capita Two days in Tallinn, Estonia Ship tools as standalone static binaries Made in America Two days in Helsinki, Finland The land of good deals Two days in Oslo, Norway FastAPI vs Flask performance comparison Google Search is losing to Perplexity Two days in Dublin, Ireland Continuous integration ≠ Continuous delivery World's simplest project success heuristic London in 5 days It is hard to recommend Python in production Inflation, IRS, Credit cards, and Vendors Temu and the Chinese approach Things to do in Miami Florida Revenue vs Cost Axis Language learning as an adult The unanchored babies of the green card limbo Price variance in the United States A day in Louisville, Kentucky A surprisingly positive experience with Air India Unhospitable Airports Android: Don't use stale views USA = Union of Sales and Advertisement A day in Nashville, Tennessee Minimize Javascript in your codebase A day in Birmingham, Alabama In defense of ad-supported products Real vs artificial world The science behind Punjabi singers Hiking Mt. Fuji The Indian startup bubble is insane Repairing database on the fly for millions of users Book Summary: One up on Wall Street by Peter Lynch It is hard to recommend Google Cloud At the Prague airport Kyoto in three days Migrating from WordPress to Hugo Book summary: Sick Societies by Robert B. Edgerton Statistical outcomes require statistical games Illegal immigrants to Europe via Cairo Tokyo in three days Mobs are Status Games Writing Script matters as much as the spoken language Sri Lanka in 5 days LLMs: great for business but bad business Book Summary: Safe Haven by Mark Spitznagel Mac shortcut for typing Avagraha symbol On a bus with an asylum seeker Nicaragua in 5 days When to commit Generated code to version control Why I always buy a local SIM in a foreign country Use Makefile for Android Four days in Guadalajara, Mexico Android Navigation: Up vs Back Hotels vs Airbnb vs Hostels Currency issues in Argentina Abstractions should be deep not wide Some data on podcasting Always support compressed response in an API service A day in El Calafate - Patagonia, Argentina Hermetic docker images with Hugging Face machine learning models American Elections The sound of "ch" API services should always have usage Limits Hiking in El Chaltén - trekking capital of Argentina Natural Laws vs Man-made Laws
Maintaining an Android app is a lot of work
Ashish Bhatia · 2025-06-07 · via ashishb.net

Featured on Hacker News

TLDR NewsletterReddit r/androiddevReddit r/programmingReddit r/linux

There was recent news about 47% decline in the number of apps on Google Play Store.

As a hobby Android developer, who has been developing MusicSync, a Google Play Music + Podcast replacement for the last five years, I thought I would share my experience of maintaining an Android app. And why this reduction in the number of apps is not surprising to me.

I have several side-projects that run on a backend server with a limited web UI, and it is much less effort to maintain them.

However, maintaining an Android app as a side-project is a more involved affair. And here are some of the problems I have faced.

Java vs Kotlin

Kotlin is clearly the preferred language of development if you are starting a new Android project in 2025. But what if you are maintaining a hobby project written in Java? You will start seeing incompatibility when your dependencies are re-written in Kotlin.

  • If you depend on a library that uses Kotlin’s coroutines or relies on Kotlin’s suspend functions, then you will have to work around it, or rewrite your app in Kotlin as well!
  • Jetpack Compose, an official Google UI library for Android is entirely unusable from Java.
  • I would imagine that if you started with Kotlin first then a big chunk of StackOverflow questions written for Java audiences require you translate them to corresponding Kotlin code as well

To their credit, Android documentation still gives code samples in both Java and Kotlin.

Google makes breaking changes to its libraries

Google has a habit of making breaking changes to its Android libraries. Here’s a list of some of the libraries that I have used in my app and the issues I have faced.

Media 3

Android ships with MediaPlayer. Google recommends its open-source library ExoPlayer. ExoPlayer V1 was last released in 2017. It was replaced with backward-incompatible ExoPlayer V2 which was last released in July 2024. And now, it has now been replaced with backward-incompatible media3. The Google provided migration script is far from being complete.

Further, media3 does not follow semantic versioning, minor version upgrades has resulted in breaking API changes.

Google Auth library

Google’s own Auth library had a bug and sign-in was broken for API 26 and lower for months.

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
java.lang.NoSuchMethodError: No virtual method getAndSetObject(Ljava/lang/Object;JLjava/lang/Object;)Ljava/lang/Object;
in class Lsun/misc/Unsafe; or its super classes
(declaration of 'sun.misc.Unsafe' appears in /system/framework/core-libart.jar)
  E  at com.google.common.util.concurrent.AbstractFuture$UnsafeAtomicHelper.gasWaiters(AbstractFuture.java:1394)
  E  at com.google.common.util.concurrent.AbstractFuture.releaseWaiters(AbstractFuture.java:1110)
  E  at com.google.common.util.concurrent.AbstractFuture.complete(AbstractFuture.java:1000)
  E  at com.google.common.util.concurrent.AbstractFuture.set(AbstractFuture.java:783)
  E  at com.google.auth.oauth2.OAuth2Credentials$RefreshTask.access$400(OAuth2Credentials.java:600)
  E  at com.google.auth.oauth2.OAuth2Credentials$RefreshTask$1.onSuccess(OAuth2Credentials.java:617)
...

Dropping support for older Android versions

Google Ads library v24 dropped support for Android API 21. According to official Google statistics, API 21 is used by 0.1% (~4 million) users. The rationale behind this has been left unexplained.

Upgrades for the sake of it

Material 2 was deprecated for Material 3. No clear migration guide was provided. I tried to upgrade and some components like Sliders won’t look good. Why? I don’t know, and I was never able to figure out the mystic. It does not help that most documentation now refers to Jetpack Compose which I cannot use!

So, for the near term, Java-based codebase are likely stuck with Material 2.

The UI design guidelines for Android evolve unpredictably

  • Bottom bar, a featured popular on iOS was discouraged and then became a standard feature in Material design.
  • Back and up buttons used to behave differently and now they are supposed to behave the same. I only learnt about it last year when I posted about it on Reddit.
  • You might think that you can just use Material Design components and be done with it. But migrating from one version of Material Design to another is not trivial either. And before you migrate from Material 1 to Material 2, Google deprecates it for Material 3.

Google makes breaking changes to Android platform

Every major release of Android makes breaking changes that requires developer effort

  • Toasts use to work for quick notifications, now, after API 31, it only works if the app is foreground. How to know if you app in foreground? You have to use ActivityLifecycleCallbacks for that and write ton of code and even then there are confusions about onStart vs onResume.
  • Displaying notifications didn’t require permissions, now after API 33, it requires POST_NOTIFICATIONS.
  • Storage permissions were either all or none, now API 33 onwards, they can be fine-grained at the level of audio, video, and images.
  • Background code execution restrictions keeps changing subtly in every release.
  • Media notifications were changed in a backward-incompatible in API 33 onwards. This long thread explains the pain of a lot of developers.
  • API 35 onwards, Android introduced edge-to-edge display of apps by default. However, one could opt out of it explicitly via windowOptOutEdgeToEdgeEnforcement. API 36 onwards, the opt-out no longer works. So, what if you wrote an app targeting API 34 or lower? Well, its UI is broken as portions of it are hidden behind the system navigation and status bars.

Crucial third-party libraries have been deprecated

Several popular third-party have been deprecated or are no longer maintained.

Picasso

Picasso was great for image loading and has been deprecated. It has been replaced with coil but the upgrade is not trivial.

Glide

Glide an alternative to Picasso was last released in Sep 2023.

OkHttp

OkHttp which even Android uses internally for implementing HttpURLConnection has not seen a stable release since Oct 2023, the last stable release was 4.12.0 and even the last alpha release was in April 2024.

OkHttp 4.12.0 does not support Happy Eyeballs which is a major issue with IPv6 networks.

EventBus

EventBus was the de-facto event passing library for Android. And it is unmaintained now.

RateThisApp

RateThisApp was good to get app ratings, and then it was abandoned.

I don’t blame the maintainers here. If you use an open-source library, you have to be prepared for the fact that it may not be maintained. I am just pointing out, how some of the obvious boilerplate tasks that one requires for building an Android app are suddenly in a limbo.

Two different versioning schemes for everything

Android has two versioning schemes, Android API version is for developers and Android version for marketing.

For example, Android 11 is API 30, Android 12 is API 31 as well as 32(!), Android 13 is API 33, Android 14 is API 34. The developer documents would reference one scheme or the other or sometimes both! And you are supposed to memorize the mappings while trying to debug issues using GitHub issues or StackOverflow. It just adds unnecessary friction and confusion.

Forced upgrades

There are multiple versions in an Android app, all tightly coupled with each other.

  • minSdkVersion and targetSdkVersion of the app
  • Java sourceCompatibility and targetCompatibility
  • version of dependencies
  • version of Android build tool chain
  • version of Gradle
  • version of Android Studio

You might think that all updates are optional, but they aren’t

  • Gradle and Android Studio must be upgraded together for version-compatibility
  • Upgrading Java sourceCompatibility and targetCompatibility requires upgrading Gradle (and hence, Android Studio)
  • Upgrading Android build tool chain requires upgrading minSdkVersion and targetSdkVersion
  • Upgrade Android build tool chain requires upgrading Gradle version
  • Also, if you want to stay on an old library like Exoplayer V2, sooner or later, it will become incompatible with other dependencies, and you will be forced to upgrade to media3!

You see how you are forced to upgrade almost everything or nothing?

And what if you decide to not upgrade any of these? Well, your app will get delisted if the targetSdkVersion is too old.

Conclusion

Compared to server-side development, Android development requires a bit more efforts to maintain. So, if you are planning to build an Android app as a hobby, keep the ongoing maintenance cost in mind.

Update

After this article ended up on the front page of Hacker News, Two new items came out during those discussions that are worth mentioning.

  • App published for the first time after 2021, have to hand over their private signing keys to Google Play Store
  • Further, multiple people suggested that I should use F-droid to publish apps. The problem is that F-droid not only have very little reach, but also it cannot solve for backward-incompatible changes to the underlying platform, abandoned libraries, and backward-incompatible changes to Android libraries.