Currently embedders can (and Chrome does) import Java sources that are not from 'content_public' packages.
The goal here is to have some working DEPS rule in chrome/ (and android_webview etc.) that allows for only including content_public packages.
It gets complicated because java sources have a package path and a directory path. Currently all Java sources (private and public) are under content/public/android/java.
If I understand buildtools/checkdeps/java_checker.py correctly, then it converts import statements to directory paths, and then checks that path against the *directory* the class to be imported is in (and not the package name of the imported class).
That means we'd either have to change or extend checkdeps or change the current directory layout in content so that all non_public packages move out from content/public/android/java to content/android/java or so.
Comment 1 by siev...@chromium.org
, Jun 3 2016