Flatsonar

NinjaDroid

by rovellipaolo

Ninja Reverse Engineering on Android APK packages

Broad permissions Unverified publisher GPL-3.0
Install Source code

About

Ninja Reverse Engineering on Android APK packages

Permissions

1 permission weaken the sandbox. Flatsonar asks before installing.

  • sets PATH: changes which libraries or plugins get loaded
    --env=PATH=/app/bin:/app/jre/bin
  • sets environment variable JAVA_HOME
    --env=JAVA_HOME=/app/jre

Who publishes this

Nobody has confirmed that the publisher controls this app id. Flatsonar warns before installing.

  • https://github.com/merlinepedra25/NINJADROID also publishes this app id
    publisher:collision
  • https://github.com/merlinepedra/NINJADROID also publishes this app id
    publisher:collision
  • org.paolorovelli.NinjaDroid claims the domain paolorovelli.org; only its owner can prove that
    publisher:namespace
  • the build has network access: it can download things the manifest does not list
    ninjadroid:build-options:--share=network
  • fetches from the network during the build (nothing to audit beforehand): pip3 install pipenv
    ninjadroid:build-commands

Maintenance

Recent activity on the upstream repository, or built and reviewed by Flathub.

No staleness signals: recent activity, or built and reviewed by Flathub.