Cordova Build.json password security
<p>I've had issues getting cordova to prompt me for the password to the storePassword and password fields in the build.json file when building and signing my apks. The solution I've turned to is to enter them in the build.json file.</p>

<p>My question: is there any security issue when manually entering passwords into build.json (such as the passwords somehow being included in the actual signed apk, etc.)?</p>

<p>I have build.json in the root of my cordova project so it is automatically detected and all I have to do is:</p>

<pre><code>cordova build android --release
</code></pre>

<p>...which is why I've gone this route (it just works). I know this might seem like a silly question, but the Cordova docs state:</p>

<blockquote>
  <p>"For release signing, passwords can be excluded and the build system
  will issue a prompt asking for the password."</p>
</blockquote>

<p>...which implies that for some reason passwords shouldn't be entered into build.json for release.</p>