CRT/storebound
1
0
Fork 0
Code Issues Pull requests Releases 1 Packages 1 Activity Actions
storebound/tests/fixtures/scan/flutter
History
CRT ae58948abd storebound scan: offline rejection-risk scan of the project itself 
Detects the stack (native iOS / Android, React Native, Expo, Capacitor, Cordova,
Flutter, Unity, Godot) and the SDKs from a maintained table with versions,
file:line and each vendor's disclosure page, then reports App Store and Google
Play rejection risks with guideline, evidence, fix, severity and skill: 2.1(a)
demo account and placeholder text, 5.1.1(v) account deletion, 4.8 login
services, 3.1.1 restore and outside payments, 3.1.2 subscription info, 5.1.2(i)
ATT, purpose strings, privacy link, privacy manifest, 2.3.10, 2.3.7, 2.3.8, 4.2
web wrappers, 2.5.1, 2.5.5, ATS, export compliance, 1.3 kids ads, review
prompts, privacy labels vs SDKs; Play target SDK 36, delete-account URL, App
access, foreground services, exact alarms, QUERY_ALL_PACKAGES, SMS / call log,
com.example package name.

Proposes Data safety / App Privacy / ATT / privacy manifest answers (detected
file:line or ask owner) as a diff against the config; --write adds only the
detected ones. scan.ignore records owner-accepted findings. MCP tool scan
(read-only), validate includes open findings, desktop Checks tab shows them.
Fixtures for iOS, Android, Capacitor, Unity, Flutter, clean and teaser.
2026-10-11 23:20:55 +08:00
..
android/app storebound scan: offline rejection-risk scan of the project itself 2026-10-11 23:20:55 +08:00
ios/Runner storebound scan: offline rejection-risk scan of the project itself 2026-10-11 23:20:55 +08:00
lib storebound scan: offline rejection-risk scan of the project itself 2026-10-11 23:20:55 +08:00
store storebound scan: offline rejection-risk scan of the project itself 2026-10-11 23:20:55 +08:00
pubspec.lock storebound scan: offline rejection-risk scan of the project itself 2026-10-11 23:20:55 +08:00
pubspec.yaml storebound scan: offline rejection-risk scan of the project itself 2026-10-11 23:20:55 +08:00
README.md storebound scan: offline rejection-risk scan of the project itself 2026-10-11 23:20:55 +08:00
storebound.config.ts storebound scan: offline rejection-risk scan of the project itself 2026-10-11 23:20:55 +08:00

README.md

flutter fixture

A made-up Flutter subscription app: Google Sign-In without Sign in with Apple, sign-up without deletion, a subscription without Terms of Use (config and listing) or renewal wording, app_tracking_transparency without NSUserTrackingUsageDescription, a location foreground service without FOREGROUND_SERVICE_LOCATION, and a targetSdk that comes from the Flutter SDK. Not a buildable project.