Apple could not verify “androidx_sqliteJni10441516...

# room

[Василий]

Apple could not verify “androidx_sqliteJni10441516714404854592.tmp” is free of malware that may harm your Mac or compromise your privacy

[Василий]

I made a KMP/CMP application, uploaded it to various app stores, and did not encounter any problems anywhere. I started the Mac OS application and uploading it to the Mac App Store. I did everything according to the instructions from https://github.com/JetBrains/compose-multiplatform/tree/master/tutorials/Signing_and_notarization_on_macOS I managed to assemble a signed .pkg file. Then I sent it to the App Store using Transporter, downloaded it using TestFlight, opened it, and got the error you can see in the screenshots.
There was a note at the end of the instructions:

If you are loading native libraries from JVM code, they must be loaded directly from the app bundle (because of sandbox and signing). That means they cannot first be extracted from a JAR and then loaded (what some libraries do). You can include native libraries in the bundle using fromFiles (see here) and then you can load them in JVM code using System.loadLibrary("LIBRARYNAME"). Note that the Skiko native library used by Compose is already loaded correctly if you are using the default application configuration.

I started to figure it out further, opened the application container directory and found this (numerated screenshot):
1 - application container. Just a directory, the application is not running.
2 - launched the application, appeared .tmp. It looks like a bytecode inside, so it can't be read normally using nano, I won't even apply a screenshot.
3 - the application has closed, .tmp has disappeared.
From what I concluded, sqliteJni is a dynamic library that is generated when launching an application to create a driver for a mac. And dynamic libraries on the mac are prohibited according to the paragraph from the github above. I don't understand what to do, there is extremely little information on KMP on macs.
How do I work properly with the room library on macOS?

[Василий]

I saw this issue in https://issuetracker.google.com/issues/381282544 , but i don't see any solution.
All we have to do is wait for room to add the option to specify the dylib file to build along with the project, or did someone manage to send the KMP/CMP application from room to the Mac App Store/Testflight?

[Василий]

BA2C6Yl7tl.png,photo_2025-02-18_04-22-06.jpg,photo_2025-02-18_04-19-31.jpg

[danysantiago]

Keep an eye on https://issuetracker.google.com/381282544, we are working on providing a way to configure the native library so it is loaded from the bundled and does not raise any security alarms.