Code Monkey home page Code Monkey logo

android-debloat-list's Introduction

Android Debloat List

A comprehensive list of apps that come preinstalled with many ROMs and how to remove and replace them, intended for backend rather than frontend. This list is kept in synchronised with the Universal Android Debloater (UAD) project.

JSON Schema

Our JSON schema is quite different from the one used in the UAD project.

  • id (string) - Name of the package. It has to be unique per entry across all the list.
  • label (string) optional - The readable name of the package in English, currently optional as UAD does not have this field.
  • dependencies (list of strings) optional - Package names of the apps that this app depends on.
  • required_by (list of strings) optional - Package names of the apps that depend on this app.
  • tags (list of strings) optional - List of predefined tags/categories.
  • description (string) - Description of the package under 200 words.
  • web (list of strings) optional - List of websites including Google Play Store, investigation reports, etc.
  • removal (string) - How should this app be removed. The values are predefined.
  • warning (string) optional - Additional description for the app that require user's attention.
  • suggestions (string) optional - Suggestion ID.

Values for removal

name description
delete It's safe to just get rid of the app.
replace Replace the app with something else, preferably, with one of the suggestions.
caution It might not be safe to get rid of the app.
unsafe It is unsafe to get rid of the app. warning must be set for this.

Values for tags

Will be added when required.

Suggestions

The filename of the suggestion is its Suggestion ID. The file contains a list of suggested apps. Each suggestion has the following format:

  • id (string) - Package name of the app.
  • label (string) - The readable name of the app in English.
  • reason (string) optional - Why this is suggested, under 100 words. This value must only be filled for cases where no valid alternative exists.
  • source (string) optional - Source of the app. This is a predefined value, could be fgas where f stands for F-Droid, g for Google Play Store, a for Amazon Appstore and s for Samsung Galaxy Store.
  • repo (string) - Link to the project repository.

Criteria for suggestions

  1. There does not already exist a suggestion for the Suggestion ID that offers similar or better features. A new suggestion without a reason is preferable over an existing suggestion with reason.
  2. Both source code and software have to be free (libre) and open source having an OSI approved license. Use of non-free assets or resources (that is, non-source code) in a software is permissible. But the reason must be included for such cases.
  3. Interface or functions (UI/UX) should be very or nearly similar to the original app or even better. If no such alternative is available right now, reason must be included.
  4. For crucial apps, such as instant messaging or password manager apps, only an audited app might be listed. Unaudited yet popular apps should contain sufficient warning in the reason section.
  5. The suggested app should not contain any trackers. If it does contain any reasonable tracker such as crash reporting framework, it should be disabled (that is, opt-out) by default. If there exists no such alternatives, the reason section must be updated with sufficient warning.
  6. No credits or endorsement is allowed. If a suggested app contain or advertise its inclusion in this list, the app will be removed from the list in immediate effect.

Contributing

See CONTRIBUTING.md.

License

Copyright (C) 2022  Muntashir Al-Islam

This program is free software: you can redistribute it and/or modify
it under the terms of the GNU Affero General Public License as published by
the Free Software Foundation, either version 3 of the License, or
(at your option) any later version.

This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
GNU Affero General Public License for more details.

You should have received a copy of the GNU Affero General Public License
along with this program.  If not, see <https://www.gnu.org/licenses/>.

android-debloat-list's People

Contributors

application-maker avatar gflowerg avatar muntashirakon avatar nett00n avatar shuvashish76 avatar suhasdissa avatar

Stargazers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

Watchers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

android-debloat-list's Issues

CallEnhancement vulnerability

Please check before submitting an issue

  • I have investigated the app and created a report

Vulnerability report

CVE-2019-15472

Package name

com.qualcomm.qti.callenhancement

Package label

CallEnhancement

Affected versions

Requires investigation (see below). Reported version: 9 (28)

Removal

Remove

Additional context

As per the report, it “allows unauthorized microphone audio recording via a confused deputy attack.” No PoC is provided. So, affected versions are not known.

RSS readers comparison

Features Feeder Read You
1 F-Droid (last update) status 06-04-24 11-02-24
2 Size (on F-Droid) 33.9MB 4.9MB
3 App Store (F&G) F
4 OPML v1.1 v2.0
5 Export/Import ✅ (opt-out additional app specific configuration)
6 Accounts Only local Local+Services+Self-hosted
7 Publication time ☑️
8 Saved/Starred articles
9 Block list
10 Export/Import favourites ☑️ (no import)
11 Parse full content ☑️ (only for feeds) ✅ (for groups & feed)
12 Extra Unique IDs
13 Tags
14 Swipe action ✅ (with customization)
15 Switch articles
16 View & save Images
17 Sub-groups
18 Notification actions
19 Bionic reading
20 Archive 50-1000 items per feed 1month-always
21 Clear articles
22 Notification ☑️ (for specific feeds only) ✅ (for feeds & as group)
23 Muted feeds
24 Read aloud
25 Material You
26 Estimated reading time
27 Manual fetch articles ✅ (for feeds & groups) ❌ (only All)
28 Settings import/export
29 Widget
30 Sorting
31 Search
32 Thumbnail preview
33 External fonts
34 Sync progress bar
35 Read progress bar
36 Remember scroll position
37 Rename Group
38 Change sites' group
39 Sticky notification
40 RSS from link
41 Text selection action

Calendars comparison

# Feature Fossify Calendar Etar
1. Material Design 3
2. Add calendar events ✅ (events and tasks)
3. CalDav sync ✅ (opt-out) ✅ (opt-in)
4. Widgets ✅ (only one widget)
5. Offline calendars ✅ (via event types)
6. Custom day for starting a week ❌ (only western) ✅ (global)
7. Automatic backups
8. Print calendar
9. Size (on F-Droid) 9.4 MB 6.2 MB
10. Updates Frequent updates Less updates
11. Maintainability Backed by Fossify (a new org) Backed by Etar and Lineage OS

Samsung packages | Galaxy J7 Prime

Add missing Samsung packages.
Test device : Galaxy J7 Prime (SM-G610F)

List of packages : (sort by package name)

com.samsung.android.MtpApplication, com.samsung.android.SettingsReceiver, com.samsung.android.app.bikemode, com.samsung.android.app.clockpack, com.samsung.android.app.powerplanning, com.samsung.android.app.soundpicker, com.samsung.android.app.sprotect, com.samsung.android.applock, com.samsung.android.clipboarduiservice, com.samsung.android.communicationservice, com.samsung.android.incallui, com.samsung.android.keyguardmgsupdator, com.samsung.android.rlc, com.samsung.android.timezone.autoupdate_O, com.samsung.android.uds, com.samsung.android.wallpaper.res, com.samsung.memorysaver, com.samsung.networkui, com.sec.android.inputmethod

how to use

I don't understand how to use this project? Do I put it inside a UAD folder or is it a UAD in itself?

please, help me.

Audio recorders comparison

Features FVR RY Axet Dimowner
1 F-Droid (last update) status 03-08-23 18-08-23 03-08-23 11-12-21 ⛔
2 Size (on F-Droid) 8.8MB 2.9MB 5.7MB 760KB*
3 App Store (F&G) F
4 Trash
5 Widget ☑️ (shortcut)
6 Encoding m4a, mp3, ogg m4a, sac, 3gp, opus, wav ogg, wav, flac, mp3, opus m4a, wav, 3gp
7 Compression Lossless wav format, opt-in 16, 24 bit (float) PCM -
8 Channels ✖️ (mono⸮)
9 Recording source Camera, Microphone, Android default, Voice recognition, Voice communication, Unprocessed, Voice performance Default, Microphone, Camcorder, Unprocessed Mic, Unprocessed, Bluetooth, Internal audio -
10 Sample rate 44.1 kHz Custom input (44.1 default) 8,11,16,22,32,44.1,48,96,144,192 kHz 8,16,22,32,44.1,48 kHz
11 Bitrate 32-320 kbps Custom input (192 default) - 48-256 kbps
12 Custom save location
13 Waveform while recording ☑️ ☑️ ✅(with live silence period colour, live decibels (dB) in text and visual) ✅(with live file size)
14 Time stamps visualizer ✅(opt-in)
15 Recording sort
16 Recording bookmark
17 Filename format Pattern based 4 options 5 options
18 Trim
19 Player
20 Extras Record automatically after launch, Change date & time format shown recording list +Screen recorder Skip silence, Encoding on fly, Pause during call, Silent mode i.e activate DND Screen on while recording

PS: ᴾᵉʳˢᵒⁿᵃˡˡʸ ᴵ ᵈᵒⁿ'ᵗ ᵘˢᵉ ᵃᵘᵈᶦᵒ ʳᵉᶜᵒʳᵈᵉʳˢ ᵖˡᵉᵃˢᵉ ᵉᵈᶦᵗ ᶦᶠ ⁿᵉᶜᵉˢˢᵃʳʸ, ᵗʰᵃⁿᵏˢ.

(Suggestion app) Add Record You as an Audio recorder alternative

Here is the issue created following this comment, to track the progress of the Record You app integration in the suggestions list.

Feature comparison between Audio Recorder (the current audio recorder alternative) and Record You

Criterias Audio Recorder Record You
Record audio
Record options Naming pattern, audio format (m4a/wav/3gp), sample rate, bitrate, channel count Save folder location, audio format (m4a/wav/3gp/aac/opus), sample rate, bitrate, channel count, audio source, naming pattern
App launcher shortcuts
Rename before saving
Recordings list
"Keep screen on while recording" feature
Includes a screen recorder
Screen record annotation tool -
Embedded audio stream to screen record -
Theming Color palettes Material You + light/dark
Waveform while recording

Support for Android TV?

ADL requires an app to be installed on the device, and usually Android TVs don't play nicely with APKs which are not designed for it,
I haven't tested ADL on Android TVs, though I can, but I guess I shouldn't waste my time unless the developer requests.

Theoretically it was possible to debloat Android TVs with UAD since everything was on the PC connected via USB, no need to install APK on the device itself.

Motorola packages | moto g71 5G

Add missing Motorola packages.
Test device : moto g71 5G

List of packages : (sort by package name)

com.motorola.actions.overlay, com.motorola.aiservices, com.motorola.android.fota, com.motorola.android.launcher.overlay.amx, com.motorola.android.launcher.overlay.applabeltwolines, com.motorola.android.launcher.overlay.koodo, com.motorola.android.launcher.overlay.telus, com.motorola.android.launcher.overlay.upgrades, com.motorola.android.networkstack.overlay.mcc460, com.motorola.android.networkstack.tethering.overlay.motCommon, com.motorola.android.overlay.common, com.motorola.android.overlay.crystaltalkai, com.motorola.android.overlay.gabutton, com.motorola.android.overlay.payjoy, com.motorola.android.providers.settings, com.motorola.android.providers.settings.auto_generated_rro_product__, com.motorola.android.settings.overlay.corfur.row, com.motorola.android.settings.overlay.fps.rear, com.motorola.android.settings.overlay.global, com.motorola.android.systemui.overlay.att, com.motorola.android.systemui.overlay.sprint, com.motorola.android.systemui.overlay.tmo, com.motorola.android.systemui.overlay.usc, com.motorola.android.systemui.overlay.vzw, com.motorola.appforecast, com.motorola.camera3, com.motorola.camera3.content.ai, com.motorola.carrierconfig, com.motorola.contacts.preloadcontacts.overlay.vzw, com.motorola.dciservice, com.motorola.discovery, com.motorola.dolby.dolbyui, com.motorola.dynamicvolume, com.motorola.enterprise.service, com.motorola.gamemode, com.motorola.help.extlog, com.motorola.imagertuning_V2, com.motorola.launcherconfig.overlay.amxar, com.motorola.launcherconfig.overlay.amxbr, com.motorola.launcherconfig.overlay.amxcl, com.motorola.launcherconfig.overlay.amxco, com.motorola.launcherconfig.overlay.amxla, com.motorola.launcherconfig.overlay.amxmx, com.motorola.launcherconfig.overlay.amxpe, com.motorola.livewallpaper3, com.motorola.mobiledesktop.core, com.motorola.motcameradesktop, com.motorola.motointelligence, com.motorola.motointelligence.overlay, com.motorola.motosignature2.app, com.motorola.mototour, com.motorola.msimsettings, com.motorola.nfwlocationattribution, com.motorola.overlay.googleasi, com.motorola.overlay.launcher3, com.motorola.personalize, com.motorola.photoeditor, com.motorola.rcsConfigService, com.motorola.revoker.services, com.motorola.screenshoteditor, com.motorola.settings, com.motorola.setup.auto_generated_rro_vendor__, com.motorola.setup.overlay.amx, com.motorola.setup.overlay.gabuttonrighttop, com.motorola.setup.overlay.pai, com.motorola.spectrum.setup.extensions, com.motorola.systemui.desk, com.motorola.telprov, com.motorola.thermalservice, com.motorola.wifi.motowifimetrics

Others:

com.android.wifi.resources.overlay.WifiVodafoneOverlay
com.payjoy.access
com.satispay.promotion

Additional info :
I know it's a lot of bloatware 😅, rooted my device so I thought better to contribute here before installing a custom ROM. Need some time, please assign this to me, thanks.

My Debloat

Please check before submitting an issue

  • The bloatware in my proposal are not present in the list
  • I have tested the bloatware in my device
  • I have investigated the bloatware and created a report

Source

Samsung SM-035M/DS

New packages

com.snapchat.android
com.kwai.video
com.king.candycrushsaga
com.shopee.br
com.disney.disneyplus

Reports

  1. com.snapchat.android: Snapchat is a social media app that allows users to share photos and videos that disappear after a short period of time. It is known for its ephemeral messages, fun filters and augmented reality features. Users can send "Snaps" to friends or add them to "Stories" that are visible for 24 hours. The app also includes text messaging and video calling features.
  2. com.kwai.video: Just another one of the useless short video apps. Depending on the phone model it may not be possible to uninstall but to disable. (Even disabled it still runs in the background).
  3. com.candycrushsaga: A boring generic fruit game for old people. I don't see why you would keep this game.
  4. com.shopee: The Shopee app is an e-commerce platform that allows users to buy and sell a variety of products. It offers a wide range of categories, from fashion and electronics to home and beauty products. Users can explore products, make purchases, track orders, receive discounts and participate in special promotions. Shopee also includes features such as chat for communication between buyers and sellers, as well as convenient payment and delivery options. It is a popular platform in Asia and other regions, providing a comprehensive online shopping experience.
  5. com.disney.disneyplus: Disney+ is a video streaming service offered by The Walt Disney Company. It offers a vast collection of movies and television series from Disney, Pixar, Marvel, Star Wars and National Geographic. Subscribers can watch animated classics, popular movies, original series, documentaries and more. Disney+ also offers the possibility to download content for offline viewing and supports streaming on various platforms such as smartphones, tablets, smart TVs and computers. It is a popular platform for fans of all ages, who want to access a variety of content produced by Disney and its affiliates.

Additional context

No response

(Suggestion app) Add Filen Drive as a Cloud service alternative

Here is the issue created following this comment, to track the progress of the Filen Drive app integration in the suggestions list.

Features available and awaiting availability:

  • Automatic photo backup
  • Integration in the share menu to upload files
  • Files and folder sharing
  • Fully open-sourced and e2e encrypted on the client side 💪
  • Offers free 10GB extensible to 40GB with referral offers
  • Has lifetime plans
  • Fast startup
  • Bidirectional edition on shared folders PLANNED
  • Unified interface with the rest of the OS (has an iOS-like interface)
  • Document collaboration features (OnlyOffice,...) PLANNED
  • Integration in the SAF PLANNED

Browser & WebView suggestion

Browsers:


WebViews:

Vanadium: Depends on hardening and compatibility fixes in GrapheneOS rather than reinventing the wheel inside Vanadium. For example, GrapheneOS already provides a hardened malloc implementation so there's no need for Vanadium to replace it. Similarly, it can deploy security features causing breakage on other operating systems due to the ability to fix compatibility problems in the OS.

vs

Mulch: Nearly all of the patches are from GrapheneOS's Vanadium browser

Additional info:
Magisk module open_webview : Magisk-Modules-Alt-Repo/open_webview#11
I vote for Cromite browser & Mulch webview.

FactoryKit Test vulnerability (Xioami)

Please check before submitting an issue

  • I have investigated the app and created a report

Vulnerability report

CVE-2019-15340

Package name

com.huaqin.factory

Package label

FactoryKit Test

Affected versions

Requires investigation (see below). Reported version: QL1715_201805292006 (1)

Removal

Remove

Additional context

It “allows any app co-located on the device to programmatically disable and enable Wi-Fi, Bluetooth, and GPS without the corresponding access permission through an exported interface.” However, the name of the exported component is not mentioned and no PoC is available.

Merging PRs of UAD

If you're familiar with UAD, you've probably seen some of my PRs too. After creating loads of PRs for UAD, I now stopped making extensive PRs that add bloatware because it feels useless to file PRs while the project seems dead. I got the suggestion to look at your repos. Looking promising so far. 🙂

So I'm now trying to figure out how (and if technically possible) we can merge my PRs to your repo. I know the structure and attributes are different from UAD, but perhaps a script will do it. Do you have any ideas?

Sim Toolkit (STK) vulnerability (≤ 5.1)

Please check before submitting an issue

  • I have investigated the app and created a report

Vulnerability report

CVE-2015-3843

Package name

com.android.stk

Package label

SIM Toolkit

Affected versions

≤ 5.1 (22)

Removal

Remove

Additional context

No response

Lenovo packages | Tab4 8 plus

This is an attempt to debloat Lenovo packages from my personal device. (originally requested here)
Test device : Lenovo Tab4 8 plus (TB-8704X)
Currently UAD contains only 4 Lenovo packages : com.lenovo.lsf.user, com.tblenovo.center, com.lenovo.ue.device, com.tblenovo.lenovotips

com.mediatek.wfo.impl vulnerability

Please check before submitting an issue

  • I have investigated the app and created a report

Vulnerability report

CVE-2019-15368

Package name

com.mediatek.wfo.impl

Package label

N/A

Affected versions

Requires investigation (see below). Reported version: 8.1.0 (27)

Removal

Remove

Additional context

According to the report, it “allows any app co-located on the device to modify a system property through an exported interface without proper authorization”, but the component isn't mentioned. All versions with this exported component should be vulnerable.

Add `bootloop` and `breakage` packages

UAD project seems abandoned but still many issues coming from users with their own research. In this issue we'll try to track all important bootloop, breakage labeled issues/prs and add them to ADL if possible. Here most likely they'll be tagged with caution or unsafe with warning.

Keep this issue open so that we can track all future issues as well.
Sort them all with their package ID.
The UAD link shall be mentioned in the related PR to track them when required. PR link in the table not necessary as we're planning to add multiple packages from UAD issues.
e.g

PID UAD ADL
com.xiaomi.xmfs 0x192/universal-android-debloater#262

MTKLogger vulnerability

Please check before submitting an issue

  • I have investigated the app and created a report

Vulnerability report

CVE-2016-10135

Package name

com.mediatek.mtklogger

Package label

MTKLogger

Affected versions

Requires investigation. See additional context below.

Removal

Remove

Additional context

It has two exported vulnerable components which can be exploited:

  1. com.mediatek.mtklogger.framework.LogReceiver
  2. com.mediatek.mtklogger.framework.MTKLoggerService

Therefore, any version with those two exported components should be vulnerable to this attack.

Add warning to `com.google.android.providers.media.module`

Please check before submitting an issue

  • The bloatware in my proposal are present in the list
  • I have investigated the bloatware to confirm my concerns

Source

Device: moto g71 5G
Android: 12

Affected packages

  • com.google.android.providers.media.module

Reports

Media Storage `com.google.android.providers.media.module

"description": "Media Storage\nIn Android 11 this is literally what provides access to files.\nSafe to disable, but NOT recommended; breaks file browsers and other forms of file access.\nContent providers encapsulate data, providing centralized management of data shared between apps.\nhttps://developer.android.com/guide/topics/providers/content-providers.html",

  1. Marked as unsafe but description says safe to remove...
  2. The description is confusing, if it's only A11 affected or later versions also. Checked in my A12 device everything crashing if disabled & you can't access /storage/emulated/0. I'd suggest to remove. In Android 11 this is literally what provides access to files.
  3. Move this package to google.json. Change label to Media Storage. Separate web link.

Additional context

https://source.android.com/docs/core/media/media-provider

Add FlorisBoard

"description": "Gboard – the Google Keyboard (https://play.google.com/store/apps/details?id=com.google.android.inputmethod.latin)\nSometimes the only keyboard app on a phone; Make sure you have another installed before you disable.\n\"Simple Keyboard\" is a good FOSS, lightweight replacement based on the AOSP Keyboard:\nhttps://f-droid.org/en/packages/rkr.simplekeyboard.inputmethod/",

  • Remove line "Simple Keyboard" is a good FOSS, lightweight replacement based on the AOSP Keyboard:\nhttps://f-droid.org/en/packages/rkr.simplekeyboard.inputmethod/ & add removal string replace.

Reason to prefer FlorisBoard over Simple Keyboard 👇🏿

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.