On 2nd April 2020, India launched Aarogya Setu mobile App for helping augment the efforts of limiting the spread of COVID19, with an objective of enabling Bluetooth based contact tracing, mapping of likely hotspots and dissemination of relevant information about COVID19.
The App has over 114 million users as on 26th May, which is more than any other Contact Tracing App in the world. The App is available in 12 languages and on Android, iOS and KaiOS platforms
Releasing the source code of a rapidly evolving product that is being regularly used by more than 114 million users, is challenging. Developing and maintaining the source code is a huge responsibility, both for Team Aarogya Setu and the developer community.
The repository now being shared is the actual production environment. All subsequent product updates will also be made available through this repository.
The process of supporting the open source development will be managed by National Informatics Centre (NIC). All code suggestions will be processed through pull request reviews. Aarogya Setu’s source code has been licensed under Apache License
While making the code Open Source, Government of India also seeks the developer community to help identify any vulnerabilities or code improvement in order to make Aarogya Setu more robust and secure.
Towards this objective, Government has also launched a Bug Bounty Programme with a goal to partner with security researchers and Indian developer community to test the security effectiveness of Aarogya Setu and also to improve or enhance its security and build user’s trust.
Details of the Bug Bounty Programme along with the rewards therein are being shared separately. Details of the Bug Bounty Program is available on the innovate portal of MyGov at https://innovate.mygov.in/