gradle dependency verification is too buggy with .pom metadata See merge request fdroid/fdroidclient!945