N0zoM1z0andGitHub
904d03e987
* feat(android): integrate static APK analysis with headless JADX * test(android): include APK tools in explicit effects audit
22 lines
1.2 KiB
TypeScript
22 lines
1.2 KiB
TypeScript
/** Audited upstream release; source remains unmodified in the Git submodule. */
|
|
export const JADX_RELEASE = Object.freeze({
|
|
version: "0.7.1",
|
|
revision: "5844800a486d2248fa949b74c9896285f5b54de2",
|
|
sha256: "6e5eacf500b64292bfb73c49797c1958f6ee44646e43e868039ae7feb573ff75",
|
|
url: "https://github.com/1013503897/jadx-headless-mcp/releases/download/v0.7.1/jadx-headless-mcp-0.7.1-all.jar",
|
|
});
|
|
|
|
/** Producing engine identity used by Evidence and the generated product catalog. */
|
|
export const JADX_PROVIDER_IDENTITY = Object.freeze({
|
|
id: "jadx",
|
|
name: "JADX headless",
|
|
version: JADX_RELEASE.version,
|
|
});
|
|
|
|
/** Audited engine coverage, kept outside portable Android semantics. */
|
|
export const JADX_LIMITATIONS = [
|
|
"Static decompiler observations do not establish runtime behavior; the APK is never executed.",
|
|
"Method signatures use provider display types; exact DEX descriptors and instruction offsets are unavailable. Overload indices are local to this engine and artifact.",
|
|
"Manifest summary fields are extracted by the upstream engine; decoded XML is retained for verification. APK signatures, split APKs, native libraries and Android runtime capture are not verified by this provider.",
|
|
] as const;
|