Detects the stack (native iOS / Android, React Native, Expo, Capacitor, Cordova, Flutter, Unity, Godot) and the SDKs from a maintained table with versions, file:line and each vendor's disclosure page, then reports App Store and Google Play rejection risks with guideline, evidence, fix, severity and skill: 2.1(a) demo account and placeholder text, 5.1.1(v) account deletion, 4.8 login services, 3.1.1 restore and outside payments, 3.1.2 subscription info, 5.1.2(i) ATT, purpose strings, privacy link, privacy manifest, 2.3.10, 2.3.7, 2.3.8, 4.2 web wrappers, 2.5.1, 2.5.5, ATS, export compliance, 1.3 kids ads, review prompts, privacy labels vs SDKs; Play target SDK 36, delete-account URL, App access, foreground services, exact alarms, QUERY_ALL_PACKAGES, SMS / call log, com.example package name. Proposes Data safety / App Privacy / ATT / privacy manifest answers (detected file:line or ask owner) as a diff against the config; --write adds only the detected ones. scan.ignore records owner-accepted findings. MCP tool scan (read-only), validate includes open findings, desktop Checks tab shows them. Fixtures for iOS, Android, Capacitor, Unity, Flutter, clean and teaser.
17 lines
448 B
Text
17 lines
448 B
Text
// !$*UTF8*$!
|
|
{
|
|
archiveVersion = 1;
|
|
objects = {
|
|
A1B2C3D4E5F6000000000001 /* XCRemoteSwiftPackageReference "GoogleSignIn-iOS" */ = {
|
|
isa = XCRemoteSwiftPackageReference;
|
|
repositoryURL = "https://github.com/google/GoogleSignIn-iOS";
|
|
};
|
|
A1B2C3D4E5F6000000000002 /* Debug */ = {
|
|
isa = XCBuildConfiguration;
|
|
buildSettings = {
|
|
INFOPLIST_FILE = Notes/Info.plist;
|
|
PRODUCT_BUNDLE_IDENTIFIER = com.example.notes;
|
|
};
|
|
};
|
|
};
|
|
}
|