#AnySoftKeyboard, installed from #FDroid, asks for access to Contacts. Was it compromised? (EDIT: Unlikely)
I don’t remember it asking me for Contacts before (but @lnxw37a2 does). [EDIT: I was] worried it may have been subject to a supply chain attack, and to be on the safe side, I uninstalled it.
It seems to be a mostly unmaintained app that I never use, but hadn’t uninstalled. This is the first new version since 2025/07/25, and before that, 2022/01/14 (the first version shipped by @fdroid).
It’s not my preferred keyboard, so I haven’t used it in a while. But as I remember, it was abandoned for a little while, and then there was a beta branch that was in development for some time. It’s had somewhat regular development, so maybe this is its first official release in a while. While it is off-putting that it asks for contact access right away, I suspect that is so that contact names can be included in your word suggestions. It’s a fairly common keyboard feature.