Skip to content
  • Tech Dev NotesTech Dev Notes
Apps
  • Lookup
  • Compare
Market movement
  • Charts
  • Rankings
Visual proof
  • Screens
  • Store listings
  • Icons
Stacks and releases
  • Tech stacks
  • Tool releases
  • Developers
More
  • X feature flags
  • Grokipedia
  • Grok companions
  • Blog
  • Follow on X
ChartsRankingsMoversCompareLookupScreensTech stacksReleases

© 2026 Tech Dev Notes

RSSAboutAPIStatusSecurityPrivacyTermsSitemap@techdevnotes

Build stack

Grubhub: Food Delivery Android tech stack

Hybrid React Native (Hermes) Android app with Jetpack Compose, Retrofit to first-party Grubhub hosts, Firebase, LaunchDarkly and extensive analytics SDKs

v2026.23 · latest

Languages

4

Java · Kotlin · React Native / JavaScript

Third-party SDKs

44

14 categories

Permissions

28

18 native libs

Signals

70

capabilities, APIs, fonts

Analyzed June 19, 2026·Bundle com.grubhub.android·Detection lower bound
Built withJava146Kotlin143JJetpack Compose117AAmplitude31AAppsFlyer30BBranch53FFacebook SDK42Firebase Analytics118Google Analytics (legacy)12Google App Measurement94Google Mobile Ads (AdMob)101Datadog28
SectionsRuntimeSDKsAndroid buildSignals

Analysis

What the stack reveals

An automated read of the signals detected on this page - each point links to the evidence below.

Hybrid React Native with Hermes

Architecture

Bundles libhermes.so, libreactnative.so and hermes bytecode alongside Java/Kotlin and Jetpack Compose, indicating a JS-based cross-platform layer with native extensions.

libhermes.so · libreactnative.so · hermes_bytecode · Jetpack Compose · +1

Runtime↓

First-party Grubhub API hosts

Backend & API

Declares Retrofit and references multiple first-party hosts such as api.grubhub.com, auth.grubhub.com and amazon-pay.grubhub.com.

Retrofit · api.grubhub.com · auth.grubhub.com · amazon-pay.grubhub.com

Signals↓

Heavy analytics and attribution

Analytics

Integrates Amplitude, AppsFlyer, Branch, Braze, Facebook SDK and others for analytics and attribution; declares tracking.

Amplitude · AppsFlyer · Branch · Braze · +1

Dual crash reporting and feature flags

Dependencies

Includes both Firebase Crashlytics and Datadog for crash and performance, plus LaunchDarkly for feature flags.

Firebase Crashlytics · Datadog · LaunchDarkly

SDKs↓

Keystore, biometrics and secure UI

Security

Uses Android Keystore, biometric auth and FLAG_SECURE to block screenshots, for protecting sensitive operations.

Android Keystore · Biometric auth · FLAG_SECURE

Signals↓

Visibility into payment and social apps

Notable

Queries other installed apps including Amazon, PayPal, Venmo, Facebook and Instagram, and registers schemes like amzn and fbconnect.

com.amazon.mShop.android.shopping · com.paypal.android.p2pmobile · amzn · fbconnect

Build

Build & platform

Android SDK levels, supported ABIs, and signing scheme from the Android app.

Min SDK

24

Target SDK

36

ABIs

1

armeabi-v7a

Signing

v2 · v3

Common Name: GrubHub Incorporated

Manifest

App components

Activities, services, broadcast receivers, and content providers declared in the manifest.

Activities

157

Services

18

Receivers

22

Providers

8

Exported (26)

activity:androidx.compose.ui.tooling.PreviewActivityactivity:androidx.test.core.app.InstrumentationActivityInvoker$BootstrapActivityactivity:androidx.test.core.app.InstrumentationActivityInvoker$EmptyActivityactivity:androidx.test.core.app.InstrumentationActivityInvoker$EmptyFloatingActivityactivity:com.amazon.identity.auth.device.workflow.WorkflowActivityactivity:com.ben.qr_code_scanner.presentation.QRCodeScannerActivityactivity:com.facebook.CustomTabActivityactivity:com.google.android.gms.tagmanager.TagManagerPreviewActivityactivity:com.grubhub.dinerapp.android.amazon.AmazonLinkingHelperActivityactivity:com.grubhub.dinerapp.android.campus_dining.cfa_checkin.presentation.CFACheckInActivityactivity:com.grubhub.dinerapp.android.splash.SplashActivityactivity:com.grubhub.features.carting.braintree.BraintreeThirdPartyPaymentHelperActivity

Manifest

Permissions

28 permissions requested in the manifest.
android.permission.ACCESS_ADSERVICES_ATTRIBUTIONandroid.permission.ACCESS_COARSE_LOCATIONandroid.permission.ACCESS_FINE_LOCATIONandroid.permission.ACCESS_NETWORK_STATEandroid.permission.ACCESS_WIFI_STATEandroid.permission.CAMERAandroid.permission.CHANGE_WIFI_STATEandroid.permission.DOWNLOAD_WITHOUT_NOTIFICATIONandroid.permission.FOREGROUND_SERVICEandroid.permission.INTERNETandroid.permission.NFCandroid.permission.POST_NOTIFICATIONSandroid.permission.READ_EXTERNAL_STORAGEandroid.permission.READ_PHONE_STATEandroid.permission.RECEIVE_BOOT_COMPLETEDandroid.permission.REORDER_TASKSandroid.permission.USE_BIOMETRICandroid.permission.USE_FINGERPRINTandroid.permission.VIBRATEandroid.permission.WAKE_LOCK

Native

Native libraries

Bundled native (.so) libraries - NDK code and cross-platform runtimes.
libandroidx.graphics.path.solibappmodules.solibc++_shared.solibcallstack-repack.solibcrashlytics-common.solibcrashlytics-handler.solibcrashlytics-trampoline.solibcrashlytics.solibdatastore_shared_counter.solibfbjni.solibhermes.solibhermestooling.solibimagepipeline.solibjsi.solibnative-filters.solibnative-imagetranscoder.solibreact_codegen_safeareacontext.solibreactnative.so

API

API surface

Endpoints, base URLs, and URI schemes recovered from the DEX string pool (Retrofit detected).

Base URLs

http://www.pp.grubhub.comhttps://api.grubhub.com

API endpoints

/account/a/account/accountSettings/help/e/account/accountSettings/help/f/account/accountSettings/help/g/account/accountSettings/help/j/account/accountSettings/l0/account/accountSettings/m0/account/accountSettings/manageData/presentation/d/account/accountSettings/manageData/presentation/e/account/activeOrders/presentation/b/account/addressInfo/presentation/A/account/addressInfo/presentation/G/account/addressInfo/presentation/h/account/addressInfo/presentation/k/account/b/account/c/account/chat/client/zendesk/d/account/chat/client/zendesk/e/account/chat/client/zendesk/s/account/chat/client/zendesk/u

URI schemes

alipayamznandroid-appandroid-keystoreandroid.resourceassetsfbconnectgrubhubappjsonmarketrtspstripejsstripesdktealiumwswss

Signals

Capability & security signals

Behaviors inferred from DEX type descriptors - WebView bridges, dynamic code loading, reflection, crypto, keystore, and more.
Android KeystoreBiometric authClassLoader usePlay Core (in-app updates / dynamic features)Process exec (Runtime)ReflectionScreenshot/recording block (FLAG_SECURE)Symmetric crypto (javax.crypto)Telephony / device infoWebViewWebView JavaScript bridge

Build

Build & platform

Compiler, target OS, supported device families, and localization footprint detected from the bundle.

Devices

Android

Runtime

Languages & runtimes

Primary runtimes and language signatures used by the app.
C/C++ (native)
142
Java
146
Kotlin
143
React Native / JavaScript
45

Dependencies

Third-party SDKs

Grouped by purpose. Select any SDK to see other tracked apps that use it; open the ↗ link for its source.
44 of 44 SDKs
SDKCategoryVendorVersionAppsSource
AmplitudeProduct analytics and experimentation.AnalyticsAmplitude-31
AppsFlyerMobile attribution and marketing measurement.AnalyticsAppsFlyer-30
BranchDeep linking and mobile attribution.AnalyticsBranch-53
Facebook SDKMeta login, sharing, and app-events/attribution SDK.AnalyticsMeta-42
Firebase AnalyticsApp usage and event analytics from Firebase.AnalyticsGoogle-118
Google Analytics (legacy)Analytics--12
Google App MeasurementGoogle Analytics for Firebase event measurement substrate.AnalyticsGoogle-94
Google Mobile Ads (AdMob)AdMob mobile advertising for Android.AdsGoogle-101
DatadogReal User Monitoring, logs, and observability.Crash & PerformanceDatadog-28
CrashlyticsReal-time crash reporting from Firebase.Crash & PerformanceGoogle-78
BraintreePayPal-owned payments SDK (cards, wallets).PaymentsPayPal-28
StripePayments and financial infrastructure SDK.PaymentsStripe-17
AppAuthOAuth 2.0 and OpenID Connect client SDK.AuthenticationOpenID Foundation-34
Facebook LoginFacebook account authentication SDK.AuthenticationMeta-24
Google Sign-InGoogle account authentication for Android.AuthenticationGoogle-140
AaxiosNetworking--15-
KtorKotlin asynchronous HTTP client/server framework.NetworkingJetBrains-33
OkHttpHTTP client for Android and Kotlin/Java.NetworkingSquare-125
RetrofitType-safe HTTP client for Android/Java.NetworkingSquare-92
VolleyHTTP networking library for Android.NetworkingGoogle-36
BrazeCustomer engagement and lifecycle messaging.MessagingBraze-33
Firebase Cloud MessagingPush notifications via Firebase Cloud Messaging.MessagingGoogle-131
ZZendeskMessaging--5
Google LocationFused location / geofencing services.MapsGoogle-106
Google MapsGoogle Maps SDK for mapping, places, and geocoding.MapsGoogle-87
Kotlin CoroutinesAsynchronous/concurrent programming for Kotlin.Reactive / AsyncJetBrains-131
RxJavaReactive extensions library for composing asynchronous Java/Kotlin streams.Reactive / AsyncReactiveX-66
DataStoreTyped key-value / proto data storage (Jetpack).StorageGoogle-90
OkioI/O and buffering library for Kotlin/Java.StorageSquare-86
RoomSQLite object-mapping persistence (Jetpack).StorageGoogle-129
SSQLDelightStorage--17
FirebaseGoogle's app platform (auth, Firestore, messaging, analytics, crash reporting).FirebaseGoogle-160
Google DataTransportFirebase/Google transport runtime for telemetry and event delivery.FirebaseGoogle-143
Google Play servicesGoogle's core mobile services platform.FirebaseGoogle-143
AndroidSVGSVG parser and renderer for Android.RenderingBig Bad Logic-45
CoilKotlin-first image loading for Android.RenderingCoil Contributors-75
FrescoAndroid image loading, caching, and rendering library.RenderingMeta-34
GlideImage loading and caching for Android.RenderingBumptech-112
Jetpack ComposeAndroid's declarative UI toolkit.RenderingGoogle-117
LottieRenders After Effects vector animations.RenderingAirbnb-138
Material ComponentsMaterial Design UI components for Android.RenderingGoogle-138
PicassoImage downloading and caching library for Android.RenderingSquare-28
Facebook ShareMeta sharing components (share dialogs, links, media).Social PlatformMeta-24
LaunchDarklyFeature flag management and experimentation.Feature FlagsLaunchDarkly-9
44 SDK rows

Interface

UI & graphics

Frameworks and libraries Grubhub: Food Delivery uses to render its interface and animations.
CoilFrescoGlideJetpack ComposeLottieMaterial ComponentsPicasso

Assets

Bundled fonts

Custom font families packaged in the app bundle.
comicneue_boldcomicneue_regulardefault_bolddefault_bold_italicdefault_mediumdefault_medium_italicdefault_regulardefault_regular_italicfontawesome-webfontrokt_icons

Packaging

Build & packaging

Dependency managers and build tooling detected in the app bundle.
Gradle (inferred)R8 / ProGuard (name obfuscation detected)

Integrations

Services & integrations

Service configuration, URL schemes, universal links, and integration keys observed in the sanitized audit.

Firebase projects

grubhubreleasegrubhubrelease.appspot.com · https://grubhubrelease.firebaseio.com

SDK config keys

com.google.android.maps.v2.API_KEYGoogle Maps
com.facebook.sdk.ApplicationIdFacebook SDK
com.facebook.sdk.ClientTokenFacebook SDK
io.branch.sdk.BranchKeyBranch

Registered URL schemes

@7F13011F@7F13018C@7F13018D@7F13018E@7F13047B@7F130483@7F130484amzncom.grubhub.dinerapp.corporate.ssofbconnectgrubhubapplink-popupstripesdktagmanager.c.com.grubhub.android

Queries other apps

com.amazon.mShop.android.shoppingcom.android.chromecom.facebook.katanacom.facebook.litecom.google.android.apps.mapscom.instagram.androidcom.paypal.android.p2pmobilecom.samsung.android.mapsagentcom.venmointent:httpintent:httpsintent:mailtointent:smstointent:tel

Universal link hosts

cct.com.grubhub.androidcom.grubhub.android

Network

Backend & API

Backend hosts, GraphQL operations, and certificate pinning signals detected in the app.

Backend hosts

amazon-pay.grubhub.comandroid.grubhub.comapi-gtm.grubhub.comapi.grubhub.comauth.grubhub.comcct.com.grubhub.androidcorporate.grubhub.comgrocery.grubhub.comgrubhub.comgrubhubrelease.firebaseio.comlp.grubhub.commedia-cdn.grubhub.comwww.grubhub.comwww.pp.grubhub.com

First party

App modules

Likely first-party modules and resource bundles detected in Grubhub: Food Delivery.
com.grubhubcom.grubhub.android

Entitlements

Capabilities

System capabilities and entitlement flags included with the app.
Advertising IDApproximate locationBiometric authCameraFingerprint authForeground serviceNFCNotificationsPhone / carrier infoPrecise locationStorage (read)Storage (write)

APIs

Detected API usage

System frameworks and privacy-sensitive APIs referenced by the binary.
Android KeystoreBiometric authClassLoader usePlay Core (in-app updates / dynamic features)Process exec (Runtime)ReflectionScreenshot/recording block (FLAG_SECURE)Symmetric crypto (javax.crypto)Telephony / device infoWebViewWebView JavaScript bridge

Privacy

Privacy signals

Privacy-related data types, tracking domains, and sensitive API signals detected statically.

Tracking domains

api.amplitude.comapi2.branch.ioapi3-eu.branch.ioapp-measurement.comaps-webhandler.appsflyer.comcdn.branch.iodevelopers.facebook.comdust.k8s.test-001.d-usw-2.braze.comfacebook.comfirebase-settings.crashlytics.compagead2.googlesyndication.comsdk.iad-01.braze.comsondheim.braze.comwww.braze.comwww.googleadservices.com

Accessed API samples

Ad SDK presentAdvertising IDAmplitudeAnalytics SDK presentAppsFlyerBranchBrazeDatadogFacebook SDKFirebase AnalyticsFirebase CrashlyticsFirebase MessagingGoogle Analytics (legacy)Google App MeasurementGoogle Mobile Ads (AdMob)Tracking/telemetry hosts in app stringsZendesk

Architecture

Architecture details

Additional build and bundle signals that help explain how the app is structured.

Storyboards

0

Nibs

0

Build dependency versions

androidx.activity_activity1.9.3 · Google
androidx.activity_activity-compose1.9.3 · Google
androidx.activity_activity-ktx1.9.3 · Google
androidx.annotation_annotation-experimental1.4.1 · Google
androidx.appcompat_appcompat1.7.1 · Google
androidx.appcompat_appcompat-resources1.7.1 · Google
androidx.asynclayoutinflater_asynclayoutinflater1.0.0
androidx.autofill_autofill1.1.0 · Google
androidx.biometric_biometric1.1.0 · Google
androidx.browser_browser1.8.0 · Google
androidx.cardview_cardview1.0.0 · Google
androidx.compose.animation_animation1.7.4 · Google
androidx.compose.animation_animation-core1.7.4 · Google
androidx.compose.foundation_foundation1.7.4 · Google
androidx.compose.foundation_foundation-layout1.7.4 · Google
androidx.compose.material3_material31.3.0 · Google
androidx.compose.material3_material3-window-size-class1.3.0 · Google
androidx.compose.material_material1.7.4
androidx.compose.material_material-icons-core1.7.2
androidx.compose.material_material-ripple1.7.4 · Google
androidx.compose.runtime_runtime1.7.4 · Google
androidx.compose.runtime_runtime-livedata1.7.4
androidx.compose.runtime_runtime-saveable1.7.4 · Google
androidx.compose.ui_ui1.7.4 · Google
androidx.compose.ui_ui-geometry1.7.4 · Google
androidx.compose.ui_ui-graphics1.7.4 · Google
androidx.compose.ui_ui-text1.7.4 · Google
androidx.compose.ui_ui-tooling1.7.4 · Google
androidx.compose.ui_ui-tooling-data1.7.4 · Google
androidx.compose.ui_ui-tooling-preview1.7.4 · Google
androidx.compose.ui_ui-unit1.7.4 · Google
androidx.compose.ui_ui-util1.7.4 · Google
androidx.compose.ui_ui-viewbinding1.7.4
androidx.constraintlayout_constraintlayout-compose1.1.1
androidx.coordinatorlayout_coordinatorlayout1.1.0 · Google
androidx.core_core1.16.0 · Google
androidx.core_core-ktx1.16.0 · Google
androidx.core_core-splashscreen1.0.1
androidx.core_core-viewtree1.0.0 · Google
androidx.cursoradapter_cursoradapter1.0.0 · Google
androidx.customview_customview1.1.0 · Google
androidx.customview_customview-poolingcontainer1.0.0 · Google
androidx.databinding_baseAdapters8.11.1
androidx.databinding_databindingKtx8.11.1
androidx.databinding_library8.11.1
androidx.databinding_viewbinding8.11.1 · Google
androidx.datastore_datastore1.1.3 · Google
androidx.datastore_datastore-core1.1.3 · Google
androidx.datastore_datastore-preferences1.1.3 · Google
androidx.documentfile_documentfile1.0.0 · Google
androidx.drawerlayout_drawerlayout1.1.1 · Google
androidx.dynamicanimation_dynamicanimation1.0.0 · Google
androidx.emoji2_emoji21.3.0 · Google
androidx.emoji2_emoji2-views-helper1.3.0 · Google
androidx.exifinterface_exifinterface1.3.7 · Google
androidx.fragment_fragment1.8.4 · Google
androidx.fragment_fragment-compose1.8.4
androidx.fragment_fragment-ktx1.8.4 · Google
androidx.graphics_graphics-path1.0.1 · Google
androidx.interpolator_interpolator1.0.0 · Google
androidx.legacy_legacy-support-core-ui1.0.0
androidx.legacy_legacy-support-core-utils1.0.0 · Google
androidx.legacy_legacy-support-v41.0.0
androidx.lifecycle_lifecycle-extensions2.2.0
androidx.lifecycle_lifecycle-livedata2.8.7 · Google
androidx.lifecycle_lifecycle-livedata-core2.8.7 · Google
androidx.lifecycle_lifecycle-livedata-core-ktx2.8.7 · Google
androidx.lifecycle_lifecycle-livedata-ktx2.8.7 · Google
androidx.lifecycle_lifecycle-process2.8.7 · Google
androidx.lifecycle_lifecycle-runtime2.8.7 · Google
androidx.lifecycle_lifecycle-runtime-compose2.8.7 · Google
androidx.lifecycle_lifecycle-runtime-ktx2.8.7 · Google
androidx.lifecycle_lifecycle-service2.8.7 · Google
androidx.lifecycle_lifecycle-viewmodel2.8.7 · Google
androidx.lifecycle_lifecycle-viewmodel-compose2.8.7 · Google
androidx.lifecycle_lifecycle-viewmodel-ktx2.8.7 · Google
androidx.lifecycle_lifecycle-viewmodel-savedstate2.8.7 · Google
androidx.loader_loader1.1.0 · Google
androidx.localbroadcastmanager_localbroadcastmanager1.1.0 · Google
androidx.media_media1.0.0 · Google
androidx.metrics_metrics-performance1.0.0-beta03
androidx.navigation_navigation-common2.8.9 · Google
androidx.navigation_navigation-common-ktx2.8.9
androidx.navigation_navigation-compose2.8.9 · Google
androidx.navigation_navigation-fragment2.8.9
androidx.navigation_navigation-runtime2.8.9 · Google
androidx.navigation_navigation-runtime-ktx2.8.9
androidx.paging_paging-runtime2.1.1 · Google
androidx.paging_paging-runtime-ktx2.1.1 · Google
androidx.palette_palette1.0.0
androidx.preference_preference1.1.1
androidx.print_print1.0.0 · Google
androidx.profileinstaller_profileinstaller1.4.1 · Google
androidx.recyclerview_recyclerview1.3.2 · Google
androidx.room_room-runtime2.6.1 · Google
androidx.room_room-rxjava22.6.1
androidx.savedstate_savedstate1.2.1 · Google
androidx.savedstate_savedstate-ktx1.2.1 · Google
androidx.slidingpanelayout_slidingpanelayout1.2.0
androidx.sqlite_sqlite2.4.0 · Google
androidx.sqlite_sqlite-framework2.4.0 · Google
androidx.startup_startup-runtime1.1.1 · Google
androidx.swiperefreshlayout_swiperefreshlayout1.1.0 · Google
androidx.tracing_tracing1.2.0 · Google
androidx.transition_transition1.4.1 · Google
androidx.transition_transition-ktx1.4.1
androidx.vectordrawable_vectordrawable1.1.0 · Google
androidx.vectordrawable_vectordrawable-animated1.1.0 · Google
androidx.versionedparcelable_versionedparcelable1.1.1 · Google
androidx.viewpager2_viewpager21.1.0-beta02 · Google
androidx.viewpager_viewpager1.0.0 · Google
androidx.webkit_webkit1.11.0 · Google
androidx.window_window1.4.0 · Google
androidx.window_window-core1.4.0 · Google
androidx.work_work-runtime2.8.1 · Google
androidx.work_work-rxjava22.8.1
com.fasterxml.jackson?
com.google.android.material_material1.11.0 · material-components
com.google.dagger_dagger2.52 · Google
com.google.gson?
com.google.protobuf?
javax.inject? · JSR 330
kotlinx.serialization? · JetBrains
kotlinx_coroutines_android1.10.2
kotlinx_coroutines_core1.10.2
kotlinx_coroutines_jdk81.10.2
kotlinx_coroutines_play_services1.10.2
kotlinx_coroutines_reactive1.10.2
kotlinx_coroutines_rx21.10.2
kotlinx_coroutines_slf4j1.10.2
org.koin?

Explore technologies across all apps

Browse every SDK, framework, and language we detect, then compare the apps that share the same stack.

App tech stacks →
Grubhub: Food Delivery app icon

Live from Google Play

Grubhub: Food Delivery

Grubhub
Open in Google Play(opens in new tab)Developer site(opens in new tab)RSS feed

Rating

4.5 (989,464)

Price

Free

Installs

10M+ installs

Version

v2026.36

PassiveTech stackIcons
Store ProfileApp IconsBuild Stack