atlas-master\atlas-gradle-plugin\dexpatch\src\main\java\com\taobao\android\apatch\MergePatch.java

MergePatch.java 中有采用明文的形式存储密码，会造成任何有充分权限的人读取和无意中误用密码。至少密码要先经过 hash 处理再存储。

String keystore = "/Users/seker/programs/debugsign/seker.keystore";
    String password = "12345678";
    String alias = "seker.keystore";
    String entry = "12345678";
    String name = "main";