History

CRT 582ea909ca scan: accounts mean User ID, never email without evidence; accounts.signUp (username -> PSL_ACM_USER_ID_OTHER_AUTH); built bundles are low-trust evidence; privacy-manifest and scan find plugins in monorepo node_modules, workspaces and local SwiftPM packages		2026-10-12 02:03:07 +08:00
..
app	storebound scan: offline rejection-risk scan of the project itself	2026-10-11 23:20:55 +08:00
gradle	storebound scan: offline rejection-risk scan of the project itself	2026-10-11 23:20:55 +08:00
README.md	storebound scan: offline rejection-risk scan of the project itself	2026-10-11 23:20:55 +08:00
storebound.config.ts	scan: accounts mean User ID, never email without evidence; accounts.signUp (username -> PSL_ACM_USER_ID_OTHER_AUTH); built bundles are low-trust evidence; privacy-manifest and scan find plugins in monorepo node_modules, workspaces and local SwiftPM packages	2026-10-12 02:03:07 +08:00

README.md

android fixture

A made-up Kotlin budget app with planted Google Play problems for storebound scan tests: targetSdk 34, the reserved com.example package name, QUERY_ALL_PACKAGES, READ_SMS, USE_EXACT_ALARM, a foreground service without a type, sign-up without a delete-account URL, and AdMob not in the Data safety answers. Not a buildable project.