Bundle Report

com-ranchero-NetNewsWire-Evergreen v7.0.6

Bundle risk20medium

Binary-only · L1Live analyzer output · not mock dataAnalyzed just now

v7.0.6build 7059medium· 20

f3384e94d3a04e534316bdfe6f86ddccc90af34cb85d8df44da37cde7c6d578a

Platform: macOS · MACAPP
Bundle size: 33.6 MB
OS range: macOS 15.0 → macOS 15.0+
Architectures: arm64, x86_64
Permissions: 1

Store review readiness

Blocked at pre-review

1 blocking issue and 1 reviewer-flag item.

Hold submission. Fix the blocking issue above — Apple/Google will auto-reject otherwise.

Blocking1

Auto-rejection causes

Required Reason API used but undeclared: UserDefaults· NSPrivacyAccessedAPICategoryUserDefaults

Needs review1

Reviewer may ask

App Transport Security disabled globally

OK5

What was checked and passed

ATT framework + NSUserTrackingUsageDescription consistent
Build SDK meets Apple's current floor
SDK-collected data types covered by app manifest
No version-confirmed CVEs against bundled SDKs
Static surface clusters with labeled-clean corpus neighbors· corpus k-NN bad-neighbor weight 0.23 (low)

2 findings

Required Reason API used but undeclared: UserDefaultsRequired Reason API mismatch · critical
Binary references UserDefaults API but no app-level PrivacyInfo.xcprivacy is present to declare it. Apple pre-review will reject (TN3183).
component: NSPrivacyAccessedAPICategoryUserDefaults
App Transport Security disabled globallyNetwork security · warning
Info.plist NSAppTransportSecurity.NSAllowsArbitraryLoads = true

Want PR-level context for this app?

Connect the GitHub repo for this app to upgrade to L3. You'll get per-PR Check Runs, source-aware risk factors, and root-cause attribution against this exact bundle.

Compare tiers