Apk Mvaen Scanner

APK Maven Scanner is an analysis tool for Android developers, security auditors, and anyone who needs to know what's inside an APK.

Pick or upload any APK file and the app breaks it down to reveal its internal composition — no access to the original source code required.

### What it detects

🔍 Maven Dependencies
Identifies third-party libraries bundled in the APK as groupId:artifactId coordinates — e.g. com.squareup.okhttp3:okhttp, com.google.code.gson:gson, or com.inmobi:monetization — with a confidence level and the evidence used for each inference.

📱 Development Framework
Automatically recognizes whether the app was built with:
- Native Android (Kotlin/Java)
- Flutter
- React Native
- Unity
- Apache Cordova
- Capacitor
- Xamarin / .NET MAUI
- Godot Engine
- Adobe AIR
- NativeScript

🔒 Obfuscation Level
Calculates the APK's obfuscation percentage (0–100%) by analyzing class names, package structure, and the manifest. The result is displayed with a gradient color indicator: green (clean) → yellow → orange → red → dark red (fully obfuscated).

🏷️ SDK Category Classification
Detected dependencies are automatically tagged by SDK type:
- Analytics (Google Analytics, Firebase, Mixpanel…)
- Advertising (AdMob, Unity Ads, AppLovin, IronSource…)
- Attribution (Adjust, AppsFlyer, Branch…)
- Crash Reporting (Firebase Crashlytics, Sentry, Bugsnag…)
- Push Notifications (Firebase Cloud Messaging, OneSignal…)

### How it works

APK Maven Scanner analyzes evidence inside the APK itself — DEX files, AndroidManifest.xml, META-INF entries, resources, and strings — to infer the third-party library structure. It requires no internet access or external hash databases; all analysis is performed locally on the device.

### Who it's for

- Android developers who want to audit their own builds or analyze competitors' apps
- Security auditors who need to identify dependencies and assess risk
- QA teams verifying consistency across releases
- Anyone curious about what an app is made of

### Privacy

All analysis is performed entirely on-device. No APK data is ever sent to external servers.