https://seg.inf.unibe.ch/keywords/static-analysis-react-native/Recent content in Static Analysis, React Native on Software Engineering GroupHugoen-USSoftware Engineering Group (SEG), [Institute of Computer Science](https://www.inf.unibe.ch/), [University of Bern](https://www.unibe.ch/). All rights reserved.https://seg.inf.unibe.ch/teaching/student-projects/current/t0088-x-tpl-detect/Mon, 01 Jan 0001 00:00:00 +0000https://seg.inf.unibe.ch/teaching/student-projects/current/t0088-x-tpl-detect/Modern Android applications are increasingly built using hybrid frameworks such as React Native, Flutter, and Cordova, allowing developers to deploy apps across multiple platforms with a single codebase. Like native apps, hybrid applications heavily rely on Third-Party Libraries (TPLs) to accelerate development and integrate functionalities like analytics, advertising, and UI components. However, TPLs can introduce severe security vulnerabilities and privacy risks. While numerous techniques exist to detect TPLs in native Android applications (analyzing Dalvik bytecode), identifying TPLs in hybrid apps remains a significant challenge. This project aims to bridge this gap by investigating the structure of hybrid apps and developing a novel approach to accurately detect embedded TPLs within their non-native components (e.g., JavaScript bundles, Dart binaries).