SDKGPT is a mobile app SDK intelligence platform. It crawls app stores for APKs, parses SDK signals (.so/Service/Activity/DEX), matches against LibChecker knowledge base, and outputs SDK intelligence. Covering 1,900+ SDKs, 57000+ DEX package signals, 280K+ Android apps, 1,100+ companies.
SDKGPT helps SDK vendors find customers, investors do market analysis, and security researchers batch-audit apps. Browsing data is permanently free; combo exploration for leads, full market share, and export are paid B2B features.
3. Parse APK:androguard parses .so/DEX/Service/Activity signals, subprocess isolation prevents OOM (one fresh subprocess per APK, RLIMIT_AS 8GB hard limit)
4. Match SDK Rules:Matches using LibChecker original logic (== || startsWith(prefix+".")), covering .so/DEX/Service/Activity four signal types
5. Output SDK Intelligence:Write to database, frontend display + API queries
SDK Signal Types
.so Signal (signal_type=0):Native library filename (e.g. libBaiduMap.so). Shallow layer extracts filename, deep layer uses pyelftools to extract JNI function names and internal strings from .so binary
DEX Package Signal (signal_type=1):Java/Kotlin package name prefix (e.g. com.umeng.analytics). 57000+ package signals covered
Service/Activity Declaration (signal_type=2):Service and Activity component names declared in AndroidManifest.xml
URL Signal (signal_type=10):http/https URL hosts extracted from DEX strings (e.g. ulogs.umeng.com). Used to discover pure REST API integrations, cloud services/SaaS without SDK package name traces
SDK Matching Rules
Package Name Match:== (exact match) or startsWith(prefix+".") (prefix + dot, not simple startsWith)
.so Match:Filename exact match or prefix match
Service/Activity Match:Component name exact match or prefix match
URL Match:Host suffix match sdk_company.domain
Matching results have two levels: confirmed signal (rule-matched, is_confirmed=true) and potential signal (not yet matched, is_confirmed=false, upgraded after LLM final judgment).
Target Users
SDK Vendors:Find companies using competitor products but not yours, precise customer acquisition
Investors:Analyze SDK market share, penetration rate trends, conduct market research
Security Researchers:Batch audit SDKs used by apps, discover security risks
Product Features
Home:SDKGPT mobile app SDK intelligence platform homepage, 5-stage pipeline monitoring
Batch Package Import:Batch import 100 package names to query
Category Filter:Filter by app category
Region Filter:Filter by app source region
Free vs Pro: Free version shows total count + 10 preview results for any filter. Pro version offers full list, pagination, CSV/JSON export, saved searches, and batch import.
API Endpoints
All APIs return JSON. Pro features require Supabase JWT Bearer token authentication.
Combo Explorer
GET/api/search/apps:Combo explorer query. Params: sdks_g0, sdk_op_g0, province, city, size_bucket, q, bundle_ids, page, limit. Free users get first 10 results, Pro gets full pagination
GET/api/search/apps/export:Export CSV/JSON. Pro only