Code on GitHub: should I remove my app UUID?

Former Member over 3 years ago

Should I remove the app UUID from manifest.xml if I put my code on GitHub?

I have mixed feelings about this. I used to think maybe app UUIDs should be kept secret, but after reflection I figured:

1) People don't seem to mind posting them to github, even the author of Crystal, a watch face with 3 million downloads.

2) Nobody can do anything special with that UUID unless they have your private key

jim_m_58 over 3 years ago

The very first question is why are you putting on github?

No one else can reuse your manifest ID and publish. Be very, very careful with your developer key though

waterkip over 3 years ago

I wouldn't if you already published the app. If you haven't published the app yet, you can keep the repo private. Or when you don't want to do that, I would use a working name for your app and before publishing the app generate a new UUID (that is very easy) and set the correct name.