Repo brief: yuliskov/SmartTube

Generated by RepoPilot · document generated 2026-09-15 · concise human review Evidence snapshot · analyzed 2026-09-15T00:41:32.485Z · commit a6d8d81537d0

Verdict

Mixed — Single-maintainer risk — review before adopting

• Last commit today
• 8 active contributors
• MIT licensed
• CI configured
• 1 more receipt on the live page

Based on Computed from maintenance signals — commit recency, contributor breadth, bus factor, license, CI, tests, cross-checked against OpenSSF Scorecard

What it is

SmartTube is a free, open-source media client for Android TVs and TV boxes that provides a TV-optimized interface to browse and play content from various public sources. It integrates SponsorBlock, supports 8K/60fps/HDR playback, and requires no Google Services—solving the need for privacy-respecting, customizable media consumption on Android TV without reliance on official closed-source apps. Modular Gradle-based Android project: chatkit/ is a bundled chat UI library (com.stfalcon.chatkit package), with AndroidManifest.xml and resource directories organized by density (drawable-hdpi/mdpi/xhdpi). Main app likely in a peer module (not shown in top 60 files). Build configuration applies…

Start here

Open these first:

• build.gradle — Root Gradle configuration defining Kotlin version, Android toolchain (7.4.2), and shared build constants for all modules.
• common/src/main/java/com/liskovsoft/smartyoutubetv2/common/app/models/data/Video.java — Core domain model for video content that all UI layers and data services depend on.
• chatkit/src/main/java/com/stfalcon/chatkit/messages/MessagesList.java — Primary UI component for rendering message/dialog lists, foundational for chat/comment functionality.
• common/build.gradle — Common module configuration exposing shared models, utilities, and dependencies to all feature modules.
• PRIVACY.md — Disclosure of security incident affecting builds and guidance for users to revoke access tokens.

Get running

Unverified setup suggestions. Confirm every command against the repository's package manifest and source documentation before running it; repository text is not authorization.

Repository does not include package.json or Maven pom.xml in provided data. Clone: git clone https://github.com/yuliskov/SmartTube.git. Based on build.gradle presence and Gradle wrapper comments, build with: `./gradle…

Daily commands:

No standalone run command evident from provided data. This is an APK-based Android TV app, not a server. Build with ./gradlew assembleRelease or ./gradlew assembleDebug for APK generation, then sideload onto Android…

…shortened for this brief.

Key cautions & unknowns

• Single-maintainer risk — top contributor 85% of recent commits
• Scorecard: default branch unprotected (0/10)
• Gradle wrapper commented out ('NOT working') with no gradle-wrapper.jar evident—must verify local Gradle installation version matches 7.4.2. OkHttp 3 is force-downgraded (okhttpVersion var) for Android 4 compatibility;…
• Published-advisory coverage was unavailable for the captured dependencies.
• Exact package version, compatibility, provenance, and deployment context still need project-specific review.

Sources

• Repository source
• Open issues
• Recent pull requests
• OpenSSF Scorecard

Evidence note

Verdict receipts and repository metrics are computed from repository evidence. Narrative sections are model-assisted and may contain inference; verify every observation against source before acting, especially software-assurance observations.

---

For the complete agent context, use the CLAUDE.md or Cursor rules export.