Binary files /web/ftp/repo/fdroid/repo/com.trustdevice.android_7.apk and /web/ftp/repo/fdroid/repo/com.trustdevice.android_1.0.7.apk differ
! repo/com.trustdevice.android_7.apk declares sensitive permission(s): android.permission.QUERY_ALL_PACKAGES
! repo/com.trustdevice.android_7.apk contains signature block blobs: 0x504b4453 (DEPENDENCY_INFO_BLOCK; GOOGLE)
For some background: that BLOB is supposed to be just a binary representation of your app's dependency tree. But as it's encrypted with a public key belonging to Google, only Google can read it – and nobody else can even verify what it really contains. More details can be found e.g. here: Ramping up security: additional APK checks are in place with the IzzyOnDroid repo.