<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:dc="http://purl.org/dc/elements/1.1/">
  <channel>
    <title>DEV Community: Hamd</title>
    <description>The latest articles on DEV Community by Hamd (@hamd_veltack).</description>
    <link>https://dev.to/hamd_veltack</link>
    <image>
      <url>https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https:%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F4236913%2Fc5dbe478-d35e-4363-8439-3325b76c614f.png</url>
      <title>DEV Community: Hamd</title>
      <link>https://dev.to/hamd_veltack</link>
    </image>
    <atom:link rel="self" type="application/rss+xml" href="https://dev.to/feed/hamd_veltack"/>
    <language>en</language>
    <item>
      <title>How I detect which framework an Android app was built with (Flutter, React Native, Unity...)</title>
      <dc:creator>Hamd</dc:creator>
      <pubDate>Tue, 10 Nov 2026 11:01:39 +0000</pubDate>
      <link>https://dev.to/hamd_veltack/how-i-detect-which-framework-an-android-app-was-built-with-flutter-react-native-unity-18a8</link>
      <guid>https://dev.to/hamd_veltack/how-i-detect-which-framework-an-android-app-was-built-with-flutter-react-native-unity-18a8</guid>
      <description>&lt;p&gt;I kept wondering which apps on my phone were Flutter, React Native or plain Kotlin. Play Store doesn't tell you, so I built &lt;strong&gt;StackLens&lt;/strong&gt;, an on-device Android app inspector. Here's how the detection works.&lt;/p&gt;

&lt;h2&gt;
  
  
  Every framework leaves fingerprints in the APK
&lt;/h2&gt;

&lt;p&gt;An APK is a zip file. Cross-platform frameworks have to ship their runtime inside it, and those files have very recognisable names:&lt;/p&gt;

&lt;div class="table-wrapper-paragraph"&gt;&lt;table&gt;
&lt;thead&gt;
&lt;tr&gt;
&lt;th&gt;Framework&lt;/th&gt;
&lt;th&gt;What to look for&lt;/th&gt;
&lt;/tr&gt;
&lt;/thead&gt;
&lt;tbody&gt;
&lt;tr&gt;
&lt;td&gt;Flutter&lt;/td&gt;
&lt;td&gt;
&lt;code&gt;lib/&amp;lt;abi&amp;gt;/libflutter.so&lt;/code&gt;, &lt;code&gt;libapp.so&lt;/code&gt;, &lt;code&gt;assets/flutter_assets/&lt;/code&gt;
&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;React Native&lt;/td&gt;
&lt;td&gt;
&lt;code&gt;assets/index.android.bundle&lt;/code&gt;, &lt;code&gt;libhermes.so&lt;/code&gt; or &lt;code&gt;libjsc.so&lt;/code&gt;, &lt;code&gt;libreactnativejni.so&lt;/code&gt;
&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;Unity&lt;/td&gt;
&lt;td&gt;
&lt;code&gt;lib/&amp;lt;abi&amp;gt;/libunity.so&lt;/code&gt;, &lt;code&gt;libil2cpp.so&lt;/code&gt;, &lt;code&gt;assets/bin/Data/&lt;/code&gt;
&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;Xamarin / .NET MAUI&lt;/td&gt;
&lt;td&gt;
&lt;code&gt;assemblies/*.dll&lt;/code&gt;, &lt;code&gt;libmonodroid.so&lt;/code&gt;, &lt;code&gt;libmonosgen-2.0.so&lt;/code&gt;
&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;Cordova / Capacitor&lt;/td&gt;
&lt;td&gt;
&lt;code&gt;assets/www/index.html&lt;/code&gt;, &lt;code&gt;cordova.js&lt;/code&gt;, &lt;code&gt;capacitor.config.json&lt;/code&gt;
&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;Jetpack Compose&lt;/td&gt;
&lt;td&gt;
&lt;code&gt;androidx.compose.*&lt;/code&gt; classes in the dex files&lt;/td&gt;
&lt;/tr&gt;
&lt;/tbody&gt;
&lt;/table&gt;&lt;/div&gt;

&lt;h2&gt;
  
  
  Reading the APK without root
&lt;/h2&gt;

&lt;p&gt;&lt;code&gt;PackageManager&lt;/code&gt; gives you &lt;code&gt;applicationInfo.sourceDir&lt;/code&gt; (and &lt;code&gt;splitSourceDirs&lt;/code&gt; for split APKs). Those files are world-readable, so you can open them with &lt;code&gt;ZipFile&lt;/code&gt; and list the entries. No root needed, and you never extract anything to disk.&lt;/p&gt;

&lt;p&gt;The catch: on Android 11+ you need &lt;code&gt;QUERY_ALL_PACKAGES&lt;/code&gt; to see other installed apps at all.&lt;/p&gt;

&lt;h2&gt;
  
  
  Confidence, not guesses
&lt;/h2&gt;

&lt;p&gt;One file name isn't always proof (an app can bundle a stray &lt;code&gt;.so&lt;/code&gt;), so StackLens scores matches:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;
&lt;strong&gt;High:&lt;/strong&gt; the core runtime library plus the app payload (e.g. &lt;code&gt;libflutter.so&lt;/code&gt; + &lt;code&gt;libapp.so&lt;/code&gt;)&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Medium:&lt;/strong&gt; only part of the signature&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Low:&lt;/strong&gt; weak hints only&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;If nothing matches, it says &lt;strong&gt;"unknown"&lt;/strong&gt; instead of guessing, and it always shows the exact files it matched so you can check for yourself.&lt;/p&gt;

&lt;h2&gt;
  
  
  While I was in there…
&lt;/h2&gt;

&lt;p&gt;Once you have the APK and the &lt;code&gt;PackageInfo&lt;/code&gt;, a lot more is cheap to show:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Requested permissions vs the ones actually granted&lt;/li&gt;
&lt;li&gt;Target/min SDK, debuggable, allowBackup and cleartext-traffic flags&lt;/li&gt;
&lt;li&gt;SHA-256 signing certificate fingerprints&lt;/li&gt;
&lt;li&gt;Activities, services, receivers and providers, and which are exported&lt;/li&gt;
&lt;li&gt;Native libraries per ABI and split APK names&lt;/li&gt;
&lt;/ul&gt;

&lt;h2&gt;
  
  
  Privacy
&lt;/h2&gt;

&lt;p&gt;StackLens doesn't declare the &lt;code&gt;INTERNET&lt;/code&gt; permission, so your app list physically can't leave the phone. Results are kept in memory only.&lt;/p&gt;

&lt;p&gt;It's free, no ads, no account: &lt;a href="https://play.google.com/store/apps/details?id=com.veltack.stacklens" rel="noopener noreferrer"&gt;https://play.google.com/store/apps/details?id=com.veltack.stacklens&lt;/a&gt;&lt;/p&gt;

&lt;p&gt;I'd love to hear about false positives or frameworks I'm missing (Kotlin Multiplatform and NativeScript are next on my list). What signatures would you add?&lt;/p&gt;

</description>
      <category>android</category>
      <category>flutter</category>
      <category>reactnative</category>
      <category>mobile</category>
    </item>
  </channel>
</rss>
