Some questions about this project

[zqingdut]

Hello centic9,I have a few questions to ask:
The project is currently popular and practical, but the introduction is only a demo. Based on the principle of not reinventing the wheel, do you consider defining the entire project as an Android SDK for Apache Poi to reduce the cost of developers using it?
Do you have an official vulnerability disclosure channel? If there is a vulnerability in this software, how should it be disclosed?
I noticed that the binary package of the project has not been released on the maven repository. Do you have plans to release it?

[centic9]

There are no plans to make this more "official", thus it likely will stay in this "demo" mode.

Unfortunately there is not much time and community to build this out more, also Android knowledge is very limited, thus the jar-binary is the only way this is available right now.

The binary will very likely not end up on the official Apache-Maven repository. It could be published with group-id "dstadler.org" fairly easily, maybe I will find the time to copy over the necessary bits from other Gradle builds at some point.

For security-related concerns you likely can report directly to Apache POI via the Apache Foundation Security procedures while stating that you use this wrapping for Android.