I am working on a project which I plan to opensource. The app will use a crash detection library which to initialise requires an API key and app key in order to initialise and send th crash data to the service.
I obviously don't want to publish these keys into the open source repository so I was wondering what the best way of doing it is.
I was thinking my development environment could contain an environment variable which contains the API and App Key and the gradle file checks if the environment variable is set, and if so it updates a string resource value with the environment variable value and the library calls activity.getString(R.id.string_key) and if this is not set, it doesn't initialise the crash detection library.
Is this the best way of doing it, or is there a better alternative?