Anyone knows how does Google detect that an app is trying to download and run code remotely? Is it an automatic process done by Google? For example, if I use th

Anyone knows how does Google detect that an app is trying to download and run code remotely? Is it an automatic process done by Google? For example, if I use this library but don't ever download new code - so that it's not really used - will it come up on their radar somehow? Thanks