I’d like to request that the app signing certificate SHA-256 hash be posted out-of-band or added to the README and generated using:
apksigner verify --print-certs
(see apksigner usage).
The hash should be placed somewhere separate from the APK source (e.g., in the README if the APK is hosted elsewhere). This will help users verify APK authenticity, using tools like AppVerifier, when downloading from sources other than Google Play or Accrescent.
Thank you for considering this!