Release Notes: V1.0.10

Released 2026-09-20 · Download this release · Full changelog

Added:

User workspace: config & tools auto-deployed to ~/Documents/AppInfoScanner on first run
TOML workspace config (config.toml) with automatic migration from legacy config.py
Credential detection (24 AK/SK rule sets) and personal/corporate PII detection (9 rule sets, ID-card & USCC checksum-validated)
Sensitive-permission detection (49 Android / 22 iOS, with risk notes) and component detection (20 Android / 22 iOS, with CVE notes)
Unified packer library (39 vendors) with three-signal shell detection (manifest class / file signatures / package-missing heuristic)
Multi-protocol / IPv4 (with ports) / IPv6 / loopback-service extraction with adb-reverse capture hints
Structured reports (report.json / txt / xlsx) and centralized per-task logs (logs/, newest 20 kept)
Toolchain auto-install on macOS/Linux (Java / adb / frida) with frida version-consistency management (trio explicitly pinned)
i18n (Chinese/English, APPINFO_LANG) and a unit-test suite (59 cases)

Fixed:

apktool 3.x decode failure and wrong baksmali output directory
macOS strings missing ~90% of binary strings
Directory-mode web-scan crash, raw tracebacks on corrupt APK/IPA, and misplaced dex decompile output
Flutter apps falsely flagged as packed, 0.0.0.0 over-filtering sibling IPs, greedy uses-permission matching
Sniffer undefined-name regression, scan-thread queue race, history existence check, exit() bypassing error handling

Improved:

Path handling and external commands normalized (os.path.join / subprocess argument lists)
Two-tier public-domain filtering (126-entry suffix table); private addresses never sniffed
Console output (noise reduction, single-line progress, [!] sensitive prefix) and regex-escaped history domains

Release Notes: V1.0.10 ​