CRT
ae58948abd
Detects the stack (native iOS / Android, React Native, Expo, Capacitor, Cordova, Flutter, Unity, Godot) and the SDKs from a maintained table with versions, file:line and each vendor's disclosure page, then reports App Store and Google Play rejection risks with guideline, evidence, fix, severity and skill: 2.1(a) demo account and placeholder text, 5.1.1(v) account deletion, 4.8 login services, 3.1.1 restore and outside payments, 3.1.2 subscription info, 5.1.2(i) ATT, purpose strings, privacy link, privacy manifest, 2.3.10, 2.3.7, 2.3.8, 4.2 web wrappers, 2.5.1, 2.5.5, ATS, export compliance, 1.3 kids ads, review prompts, privacy labels vs SDKs; Play target SDK 36, delete-account URL, App access, foreground services, exact alarms, QUERY_ALL_PACKAGES, SMS / call log, com.example package name. Proposes Data safety / App Privacy / ATT / privacy manifest answers (detected file:line or ask owner) as a diff against the config; --write adds only the detected ones. scan.ignore records owner-accepted findings. MCP tool scan (read-only), validate includes open findings, desktop Checks tab shows them. Fixtures for iOS, Android, Capacitor, Unity, Flutter, clean and teaser.
7 lines
606 B
Markdown
7 lines
606 B
Markdown
# ios-native fixture
|
|
|
|
A made-up SwiftUI notes app with planted App Review problems for `storebound scan` tests: Google Sign-In without Sign
|
|
in with Apple, sign-up without in-app deletion, a non-consumable without Restore Purchases, AdMob and the IDFA without
|
|
App Tracking Transparency, the camera without a purpose string, an empty and a vague purpose string, UIWebView, a
|
|
private settings URL scheme, an IPv4 server URL, NSAllowsArbitraryLoads, no export compliance answer, no privacy
|
|
manifest, old SDKs, and an App Store listing that names Android, a competitor and lorem ipsum. Not a buildable project.
|