I’ve only worked with the chrome store which is obviously open source so static analysis doesn’t work here like it does there. It’s a good question. My hot tak

I’ve only worked with the chrome store which is obviously open source so static analysis doesn’t work here like it does there. It’s a good question. My hot take is diff the syscalls. Easy enough to do. If you changed a bunch of them then big review. It’s not perfect but in 30 seconds I couldn’t think of anything better. My first hot take was app submit its own test scripts for an emulator but that could easily be gamed.