mobile.dependenciesMobile dependencies
Identifies bundled Android libraries from META-INF version markers (androidx, Material, Play Services, Firebase, pom.properties) and checks their Maven coordinates against OSV.dev, and inventories iOS frameworks. Emits an info-level SBOM inventory. Works on built APK/AAB/IPA files only; use code.dependencies for source trees.
- Engine
- Built-in
- Targets
- Mobile build
- Areas
- Supply chain, Security
- Runs
- By default, when the target applies
- Network
- Contacts services beyond the target
Run only this auditor
bunx openaudit ./app-release.apk --only mobile.dependenciesBuilt into openaudit; nothing to install.