{
  "added_at": "2026-11-01",
  "additional_evidence_urls": [
    "https://github.com/Eliot5566/app-xray/blob/66a7b06fb45d99e0e1d1dbcf221856a62639faab/docs/en/guide.md",
    "https://github.com/morluto/rea/discussions/7974"
  ],
  "category": "community-integrations",
  "description_en": "Builds evidence-linked HTML/JSON reports, summary cards and diffs from REA analysis of app packages, native build metadata and model files. Its component and configuration findings come from static inputs; they are not observed runtime traffic, a complete security audit or reconstructed software.",
  "description_zh": "基于 REA 对应用包、原生构建元数据和模型文件的分析生成带证据链接的 HTML/JSON 报告、摘要卡片及差异；组件与配置发现来自静态输入，并非实测流量、完整安全审计或重建软件。",
  "entry_url": "https://awesomerea.org/resources/app-xray-rea-evidence-reports/",
  "entry_url_zh": "https://awesomerea.org/zh/resources/app-xray-rea-evidence-reports/",
  "evidence_url": "https://github.com/Eliot5566/app-xray/blob/66a7b06fb45d99e0e1d1dbcf221856a62639faab/README.md",
  "group": "rea",
  "id": "app-xray-rea-evidence-reports",
  "json_url": "https://awesomerea.org/resources/app-xray-rea-evidence-reports/record.json",
  "kind": "integration",
  "markdown_url": "https://awesomerea.org/resources/app-xray-rea-evidence-reports/index.md",
  "markdown_url_zh": "https://awesomerea.org/zh/resources/app-xray-rea-evidence-reports/index.md",
  "name": "App X-Ray",
  "name_zh": "App X-Ray",
  "record_type": "resource",
  "relationship": "community-integration",
  "requirement_facets": [
    "prerequisites",
    "limits",
    "testing",
    "license"
  ],
  "requirements": [
    "README requires Node.js 22+; supported inputs include Electron/app.asar/source folders, APKs, Go/Rust executables and listed model formats. REA analysis requirements vary with the input.",
    "Rules see literal values and metadata; runtime-generated addresses are missed. A detected setting or dependency does not prove runtime behavior or exploitability, and unsupported/obfuscated inputs can leave unknowns.",
    "The public gallery uses open-source app snapshots. Report-derived REA-Bench answers reuse those reports as their reference.",
    "Code is MIT; bundled Inter fonts retain SIL OFL 1.1. Reports omit target app code, and upstream software/model rights remain separate."
  ],
  "requirements_zh": [
    "README 要求 Node.js 22+；输入包括 Electron/app.asar/源码目录、APK、Go/Rust 可执行文件及所列模型格式，REA 分析依赖随输入变化。",
    "规则读取字面量和元数据，可能漏掉运行时生成的地址；发现配置或依赖不代表运行时行为或可利用性，不支持/混淆的输入仍可能留下未知项。",
    "公开画廊使用开源应用快照；从报告生成的 REA-Bench 答案仍以这些报告为参考。",
    "代码采用 MIT，内嵌 Inter 字体保留 SIL OFL 1.1；报告不包含目标应用代码，上游软件/模型权利独立保留。"
  ],
  "targets": [
    "app",
    "binary"
  ],
  "url": "https://github.com/Eliot5566/app-xray",
  "verification": "source-reviewed",
  "verified_at": "2026-11-01"
}