This website requires JavaScript.
Explore
CRT
Fishies
crt.fyi
Help
Sign in
CRT
/
storebound
Watch
1
Star
0
Fork
You've already forked storebound
0
Code
Issues
Pull requests
Releases
1
Packages
1
Activity
Actions
1366e7e231
storebound
/
cli
/
console
History
Download ZIP
Download TAR.GZ
CRT
1366e7e231
scan, privacy answers and credentials from a second game's first release (lessons 35-37): review-prompt needs rating context, not a bare "rate"; account signals skip import lines and module paths, config-only accounts say "from config"; accounts.inApp without deletion code stays a medium 5.1.1(v) finding; privacy-manifest --propose builds NSPrivacyCollectedDataTypes from appPrivacy.types and check warns on an empty list; appPrivacy.types is authoritative in the App Privacy sheet (unlisted = not collected), ad / support / AR types default to not collected without tracking or ad SDKs; Play advertising ID from SDKs, the AD_ID permission, app-ads.txt or the flag, never from a Device ID alone; scan.ignore[].evidence and warnings for entries that match nothing; empty credentials template, placeholder values count as missing (check, doctor)
2026-10-13 05:39:09 +08:00
..
accounts.ts
CLI runs on Node 20+: npx storebound (bunx keeps working)
2026-10-13 04:03:28 +08:00
app-id.ts
console fill: one app shown twice is one app; App Privacy opens by app id via the API
2026-10-12 06:32:21 +08:00
debug.ts
console fill: no silent waits; an unknown page gets a debug dump and a bounded stop
2026-10-12 07:08:10 +08:00
fill.ts
CLI runs on Node 20+: npx storebound (bunx keeps working)
2026-10-13 04:03:28 +08:00
plan.ts
scan, privacy answers and credentials from a second game's first release (lessons 35-37): review-prompt needs rating context, not a bare "rate"; account signals skip import lines and module paths, config-only accounts say "from config"; accounts.inApp without deletion code stays a medium 5.1.1(v) finding; privacy-manifest --propose builds NSPrivacyCollectedDataTypes from appPrivacy.types and check warns on an empty list; appPrivacy.types is authoritative in the App Privacy sheet (unlisted = not collected), ad / support / AR types default to not collected without tracking or ad SDKs; Play advertising ID from SDKs, the AD_ID permission, app-ads.txt or the flag, never from a Device ID alone; scan.ignore[].evidence and warnings for entries that match nothing; empty credentials template, placeholder values count as missing (check, doctor)
2026-10-13 05:39:09 +08:00
session.ts
CLI runs on Node 20+: npx storebound (bunx keeps working)
2026-10-13 04:03:28 +08:00
verify.ts
CLI runs on Node 20+: npx storebound (bunx keeps working)
2026-10-13 04:03:28 +08:00