Skip to content
  • Tech Dev NotesTech Dev Notes
Apps
  • Lookup
  • Compare
Market movement
  • Charts
  • Rankings
Visual proof
  • Screens
  • Store listings
  • Icons
Stacks and releases
  • Tech stacks
  • Tool releases
  • Developers
More
  • X feature flags
  • Grokipedia
  • Grok companions
  • Blog
  • Follow on X
ChartsRankingsMoversCompareLookupScreensTech stacksReleases

© 2026 Tech Dev Notes

RSSAboutAPIStatusSecurityPrivacyTermsSitemap@techdevnotes

Build stack

VEVOR Android tech stack

Flutter Android app with C++ natives (libflutter, libmpv, libbarhopper), bundled TFLite ML models, Firebase+AppsFlyer tracking, and Adyen payments

vv2.1.2 · latest

Languages

4

Flutter / Dart · Java · Kotlin

Third-party SDKs

46

19 categories

Permissions

48

9 native libs

Signals

55

capabilities, APIs, fonts

Analyzed June 19, 2026·Bundle com.vevor.store·Detection observed
Built withFlutter / Dart9Java146JJetpack Compose117AAppsFlyer30FFacebook SDK42Firebase Analytics118Google App Measurement94Google Ad Manager14Google Mobile Ads (AdMob)101CCrashlytics6Firebase Performance39AAdyen10
SectionsRuntimeSDKsAndroid buildSignals

Analysis

What the stack reveals

An automated read of the signals detected on this page - each point links to the evidence below.

Flutter core with native extensions

Architecture

Bundles libflutter.so plus Java/Kotlin code and C/C++ libraries including libmpv.so and libbarhopper_v3.so, indicating Flutter UI/logic with native media and barcode processing.

libflutter.so · libmpv.so · libbarhopper_v3.so · Flutter / Dart · +1

Runtime↓

On-device TFLite models for vision

On-device ML

Ships three TensorFlow Lite models (barcode SSD MobileNet and two 1D feature/regressor models) alongside ML Kit barcode/vision SDK for local inference.

barcode_ssd_mobilenet_v1_dmp25_quant.tflite · oned_auto_regressor_mobile.tflite · oned_feature_extractor_mobile.tflite · ML Kit · +1

Firebase and multi-tracker analytics

Analytics

Integrates Firebase (Analytics, Crashlytics, Messaging, Remote Config) with AppsFlyer, Facebook SDK, and Google Ad Manager for ads and event tracking.

Firebase · AppsFlyer · Facebook SDK · Google Mobile Ads (AdMob) · +1

Keystore, anti-fraud, and screen protection

Security

Uses Android Keystore with symmetric crypto, FLAG_SECURE screenshot blocking, Play Integrity API, and reCAPTCHA for fraud prevention.

Android Keystore · Symmetric crypto (javax.crypto) · FLAG_SECURE · Play Integrity · +1

Signals↓

VEVOR first-party backends plus Adyen

Backend & API

Targets app.vevor.com, data.vevor.com, img.vevorstatic.com, m.vevor.com and registers Adyen 3DS scheme for payments.

app.vevor.com · data.vevor.com · img.vevorstatic.com · Adyen · +1

Signals↓

Declared tracking with social queries

Privacy

Declares tracking and queries Facebook, Instagram, Snapchat, TikTok, and other social apps while referencing their domains in tracking lists.

declares_tracking · facebook.com · accounts.snapchat.com · com.instagram.android · +1

Signals↓

Build

Build & platform

Android SDK levels, supported ABIs, and signing scheme from the Android app.

Min SDK

26

Target SDK

35

ABIs

1

arm64-v8a

Signing

v2 · v3

Common Name: Android

Manifest

App components

Activities, services, broadcast receivers, and content providers declared in the manifest.

Activities

47

Services

17

Receivers

11

Providers

10

Exported (15)

activity:com.adyen.threeds2.internal.ui.activity.ChallengeActivityactivity:com.facebook.CustomTabActivityactivity:com.firework.player.pager.PlayerActivityactivity:com.firework.player.pager.SeparateSingleTaskPlayerActivityactivity:com.firework.player.pager.SingleInstancePlayerActivityactivity:com.google.firebase.auth.internal.GenericIdpActivityactivity:com.google.firebase.auth.internal.RecaptchaActivityactivity:com.vevor.app.WelcomeActivityactivity:com.vevor.store.MainActivityprovider:com.facebook.FacebookContentProviderreceiver:androidx.profileinstaller.ProfileInstallReceiverreceiver:com.adyen.threeds2.internal.AppUpgradeBroadcastReceiver

Manifest

Permissions

48 permissions requested in the manifest.
android.permission.ACCESS_ADSERVICES_AD_IDandroid.permission.ACCESS_ADSERVICES_ATTRIBUTIONandroid.permission.ACCESS_COARSE_LOCATIONandroid.permission.ACCESS_FINE_LOCATIONandroid.permission.ACCESS_NETWORK_STATEandroid.permission.ACCESS_WIFI_STATEandroid.permission.CAMERAandroid.permission.CHANGE_NETWORK_STATEandroid.permission.CHANGE_WIFI_STATEandroid.permission.FOREGROUND_SERVICEandroid.permission.INTERNETandroid.permission.MOUNT_UNMOUNT_FILESYSTEMSandroid.permission.POST_NOTIFICATIONSandroid.permission.READ_APP_BADGEandroid.permission.READ_CALENDARandroid.permission.READ_EXTERNAL_STORAGEandroid.permission.READ_LOGSandroid.permission.READ_MEDIA_AUDIOandroid.permission.READ_PHONE_STATEandroid.permission.REORDER_TASKS

Native

Native libraries

Bundled native (.so) libraries - NDK code and cross-platform runtimes.
libapp.solibbarhopper_v3.solibdatastore_shared_counter.solibflutter.solibimage_processing_util_jni.solibmediakitandroidhelper.solibmmkv.solibmpv.solibsurface_util_jni.so

API

API surface

Endpoints, base URLs, and URI schemes recovered from the DEX string pool (Retrofit detected).

Base URLs

https://img.vevorstatic.com/us%2FFDJXCTYIXIX4TSO9KV0%2Fgoods_img_big-v2%2Ftopside-creeper-m100-1.2.jpghttps://m.vevor.com/floor-jacks-c_11489/triple-bag-air-jack-pneumatic-jack-6600lbs-heavy-duty-heavy-load-pneumatic-air-p_010577361995

API endpoints

/account/landing/account/login/account/login-pass/account/logout/account/pro-register/account/register/account/register-type/account/social/login/api/activity/saver/get-banner-info/api/ad_setting/api/common/zzab/api/common/zzad/api/common/zzag/api/common/zzai/api/common/zzay/api/common/zzf/api/common/zzh/api/common/zzq/api/common/zzs/api/common/zzu

URI schemes

adyen3ds2adyencheckoutandroid-appandroid-keystoreandroid.resourceassetchrome-extensiondirectfbconnectldapmarketotpauthrawresourcertprtspsnapchattwittersdkvevor-pushwhatsappwss

Signals

Capability & security signals

Behaviors inferred from DEX type descriptors - WebView bridges, dynamic code loading, reflection, crypto, keystore, and more.
Android KeystoreClassLoader usePlay Core (in-app updates / dynamic features)Process exec (Runtime)ReflectionScreenshot/recording block (FLAG_SECURE)Symmetric crypto (javax.crypto)Telephony / device infoWebViewWebView JavaScript bridge

Security

Potential secrets detected

String patterns matching credentials/keys found by static scanning. Counts only - values are never published.
google oauth client: 2

Build

Build & platform

Compiler, target OS, supported device families, and localization footprint detected from the bundle.

Devices

Android

Runtime

Languages & runtimes

Primary runtimes and language signatures used by the app.
C/C++ (native)
142
Flutter / Dart
9
Java
146
Kotlin
143

Dependencies

Third-party SDKs

Grouped by purpose. Select any SDK to see other tracked apps that use it; open the ↗ link for its source.
46 of 46 SDKs
SDKCategoryVendorVersionAppsSource
AppsFlyerMobile attribution and marketing measurement.AnalyticsAppsFlyer-30
Facebook SDKMeta login, sharing, and app-events/attribution SDK.AnalyticsMeta-42
Firebase AnalyticsApp usage and event analytics from Firebase.AnalyticsGoogle-118
Google App MeasurementGoogle Analytics for Firebase event measurement substrate.AnalyticsGoogle-94
Google Ad ManagerAds--14
Google Mobile Ads (AdMob)AdMob mobile advertising for Android.AdsGoogle-101
CrashlyticsReal-time crash reporting from Firebase.Crash & PerformanceGoogle-78
Firebase PerformanceCrash & Performance--39
AdyenGlobal payments platform SDK.PaymentsAdyen-10
Credential ManagerUnified passkey/password/federated sign-in API (Jetpack).AuthenticationGoogle-58
Facebook LoginFacebook account authentication SDK.AuthenticationMeta-24
Firebase AuthAuthentication--16
Google Sign-InGoogle account authentication for Android.AuthenticationGoogle-140
OkHttpHTTP client for Android and Kotlin/Java.NetworkingSquare-125
RetrofitType-safe HTTP client for Android/Java.NetworkingSquare-92
VolleyHTTP networking library for Android.NetworkingGoogle-36
Apollo GraphQLType-safe GraphQL client.GraphQL / APIApollo GraphQL-39
Firebase Cloud MessagingPush notifications via Firebase Cloud Messaging.MessagingGoogle-131
ZZendeskMessaging--5
Google LocationFused location / geofencing services.MapsGoogle-106
Google MapsGoogle Maps SDK for mapping, places, and geocoding.MapsGoogle-87
Media3 (ExoPlayer)Media playback (ExoPlayer) for Android.MediaGoogle-88
ML KitGoogle's on-device machine-learning SDK for vision, text, and language tasks.On-device ML / AIGoogle-64
ML KitGoogle's on-device machine-learning SDK for vision, text, and language tasks.On-device ML / AIGoogle-30
Kotlin CoroutinesAsynchronous/concurrent programming for Kotlin.Reactive / AsyncJetBrains-131
RxJavaReactive extensions library for composing asynchronous Java/Kotlin streams.Reactive / AsyncReactiveX-66
RxJava 3Reactive extensions library for composing asynchronous Java/Kotlin streams.Reactive / AsyncReactiveX-19
DataStoreTyped key-value / proto data storage (Jetpack).StorageGoogle-90
MMKVHigh-performance key-value storage by Tencent.StorageTencent-8
OkioI/O and buffering library for Kotlin/Java.StorageSquare-86
RoomSQLite object-mapping persistence (Jetpack).StorageGoogle-129
AAWS SDKAWS / Amazon--14
FirebaseGoogle's app platform (auth, Firestore, messaging, analytics, crash reporting).FirebaseGoogle-160
Google DataTransportFirebase/Google transport runtime for telemetry and event delivery.FirebaseGoogle-143
Google Play servicesGoogle's core mobile services platform.FirebaseGoogle-143
AndroidSVGSVG parser and renderer for Android.RenderingBig Bad Logic-45
CoilKotlin-first image loading for Android.RenderingCoil Contributors-75
GlideImage loading and caching for Android.RenderingBumptech-112
Jetpack ComposeAndroid's declarative UI toolkit.RenderingGoogle-117
LottieRenders After Effects vector animations.RenderingAirbnb-138
Material ComponentsMaterial Design UI components for Android.RenderingGoogle-138
PicassoImage downloading and caching library for Android.RenderingSquare-28
Facebook ShareMeta sharing components (share dialogs, links, media).Social PlatformMeta-24
Play IntegrityApp/device integrity and anti-abuse attestation API for Android.Anti-FraudGoogle-51
reCAPTCHABot/abuse detection and risk scoring.Anti-FraudGoogle-21
Firebase Remote ConfigFeature Flags--63
46 SDK rows

Interface

UI & graphics

Frameworks and libraries VEVOR uses to render its interface and animations.
CoilGlideJetpack ComposeLottieMaterial ComponentsPicasso

Models

On-device ML models

Core ML and ML model bundles shipped inside the app for local inference.
barcode_ssd_mobilenet_v1_dmp25_quant.tfliteoned_auto_regressor_mobile.tfliteoned_feature_extractor_mobile.tflite

Assets

Bundled fonts

Custom font families packaged in the app bundle.
CupertinoIconsfw_roboto_medium_numbersinter_tight_boldinter_tight_mediuminter_tight_regularInterTight-BoldInterTight-MediumInterTight-RegularMaterialIcons-Regularroboto_medium_numbers

Packaging

Build & packaging

Dependency managers and build tooling detected in the app bundle.
Gradle (inferred)

Integrations

Services & integrations

Service configuration, URL schemes, universal links, and integration keys observed in the sanitized audit.

Firebase projects

app-all-countryapp-all-country.appspot.com

SDK config keys

com.facebook.sdk.ApplicationIdFacebook SDK
com.facebook.sdk.ClientTokenFacebook SDK
com.google.android.gms.ads.AD_MANAGER_APPGoogle Ad Manager

Registered URL schemes

@7F14054Badyen3ds2fbconnectgenericidphttphttpsrecaptchavevor

Queries other apps

com.facebook.katanacom.facebook.litecom.google.android.apps.mapscom.instagram.androidcom.samsung.android.mapsagentcom.snapchat.androidcom.ss.android.ugc.trillcom.zhiliaoapp.musicallyintent:httpintent:httpsintent:mailtointent:tel

Universal link hosts

cct.com.vevor.storecom.vevor.storefirebase.authvevor.onelink.me
Allows arbitrary network loads

Network

Backend & API

Backend hosts, GraphQL operations, and certificate pinning signals detected in the app.

Backend hosts

app.vevor.comcct.com.vevor.storedata.vevor.comimg.vevorstatic.comm.vevor.comvevor.onelink.mewww.vevor.com

First party

App modules

Likely first-party modules and resource bundles detected in VEVOR.
com.vevorcom.vevor.store

Entitlements

Capabilities

System capabilities and entitlement flags included with the app.
Advertising IDApproximate locationCalendar (read)Calendar (write)CameraFingerprint authForeground serviceMedia: audioNotificationsPhone / carrier infoPrecise locationStorage (read)Storage (write)

APIs

Detected API usage

System frameworks and privacy-sensitive APIs referenced by the binary.
Android KeystoreClassLoader usePlay Core (in-app updates / dynamic features)Process exec (Runtime)ReflectionScreenshot/recording block (FLAG_SECURE)Symmetric crypto (javax.crypto)Telephony / device infoWebViewWebView JavaScript bridge

Privacy

Privacy signals

Privacy-related data types, tracking domains, and sensitive API signals detected statically.

Tracking domains

accounts.snapchat.comapp-measurement.comdevelopers.facebook.comfacebook.comfirebase-settings.crashlytics.compagead2.googlesyndication.comus-central1-gcp.api.snapchat.comwww.facebook.comwww.googleadservices.com

Accessed API samples

Ad SDK presentAdvertising IDAnalytics SDK presentAppsFlyerFacebook SDKFirebase AnalyticsFirebase CrashlyticsFirebase MessagingFirebase PerformanceGoogle Ad ManagerGoogle App MeasurementGoogle Mobile Ads (AdMob)Tracking/telemetry hosts in app stringsZendesk

Architecture

Architecture details

Additional build and bundle signals that help explain how the app is structured.

Storyboards

0

Nibs

0

Build dependency versions

androidx.activity_activity1.8.2 · Google
androidx.activity_activity-compose1.8.2 · Google
androidx.activity_activity-ktx1.8.2 · Google
androidx.annotation_annotation-experimental1.4.1 · Google
androidx.appcompat_appcompat1.7.1 · Google
androidx.appcompat_appcompat-resources1.7.1 · Google
androidx.asynclayoutinflater_asynclayoutinflater1.0.0
androidx.autofill_autofill1.0.0 · Google
androidx.browser_browser1.8.0 · Google
androidx.camera_camera-camera21.4.1 · Google
androidx.camera_camera-core1.4.1 · Google
androidx.camera_camera-extensions1.4.1
androidx.camera_camera-lifecycle1.4.1 · Google
androidx.camera_camera-video1.4.1
androidx.camera_camera-view1.4.1
androidx.cardview_cardview1.0.0 · Google
androidx.compose.animation_animation1.4.3 · Google
androidx.compose.animation_animation-core1.4.3 · Google
androidx.compose.foundation_foundation1.4.3 · Google
androidx.compose.foundation_foundation-layout1.4.3 · Google
androidx.compose.material3_material31.0.1 · Google
androidx.compose.material_material-icons-core1.4.3
androidx.compose.material_material-ripple1.4.3 · Google
androidx.compose.runtime_runtime1.4.3 · Google
androidx.compose.runtime_runtime-saveable1.4.3 · Google
androidx.compose.ui_ui1.4.3 · Google
androidx.compose.ui_ui-geometry1.4.3 · Google
androidx.compose.ui_ui-graphics1.4.3 · Google
androidx.compose.ui_ui-text1.4.3 · Google
androidx.compose.ui_ui-tooling-preview1.4.3 · Google
androidx.compose.ui_ui-unit1.4.3 · Google
androidx.compose.ui_ui-util1.4.3 · Google
androidx.coordinatorlayout_coordinatorlayout1.1.0 · Google
androidx.core_core1.16.0 · Google
androidx.core_core-ktx1.16.0 · Google
androidx.core_core-viewtree1.0.0 · Google
androidx.credentials_credentials1.2.0-rc01 · Google
androidx.credentials_credentials-play-services-auth1.2.0-rc01 · Google
androidx.cursoradapter_cursoradapter1.0.0 · Google
androidx.customview_customview1.1.0 · Google
androidx.customview_customview-poolingcontainer1.0.0 · Google
androidx.databinding_baseAdapters8.7.3
androidx.databinding_databindingKtx8.7.3
androidx.databinding_library8.7.3
androidx.databinding_viewbinding8.7.3 · Google
androidx.datastore_datastore1.1.3 · Google
androidx.datastore_datastore-core1.1.3 · Google
androidx.datastore_datastore-preferences1.1.3 · Google
androidx.documentfile_documentfile1.0.0 · Google
androidx.drawerlayout_drawerlayout1.1.1 · Google
androidx.dynamicanimation_dynamicanimation1.0.0 · Google
androidx.emoji2_emoji21.3.0 · Google
androidx.emoji2_emoji2-views-helper1.3.0 · Google
androidx.exifinterface_exifinterface1.3.6 · Google
androidx.fragment_fragment1.8.6 · Google
androidx.fragment_fragment-ktx1.8.6 · Google
androidx.interpolator_interpolator1.0.0 · Google
androidx.legacy_legacy-support-core-ui1.0.0
androidx.legacy_legacy-support-core-utils1.0.0 · Google
androidx.legacy_legacy-support-v41.0.0
androidx.lifecycle_lifecycle-extensions2.2.0
androidx.lifecycle_lifecycle-livedata2.7.0 · Google
androidx.lifecycle_lifecycle-livedata-core2.7.0 · Google
androidx.lifecycle_lifecycle-livedata-core-ktx2.7.0 · Google
androidx.lifecycle_lifecycle-livedata-ktx2.7.0 · Google
androidx.lifecycle_lifecycle-process2.7.0 · Google
androidx.lifecycle_lifecycle-runtime2.7.0 · Google
androidx.lifecycle_lifecycle-runtime-ktx2.7.0 · Google
androidx.lifecycle_lifecycle-service2.7.0 · Google
androidx.lifecycle_lifecycle-viewmodel2.7.0 · Google
androidx.lifecycle_lifecycle-viewmodel-ktx2.7.0 · Google
androidx.lifecycle_lifecycle-viewmodel-savedstate2.7.0 · Google
androidx.loader_loader1.0.0 · Google
androidx.localbroadcastmanager_localbroadcastmanager1.0.0 · Google
androidx.media_media1.4.3 · Google
androidx.navigation_navigation-common2.5.3 · Google
androidx.navigation_navigation-common-ktx2.5.3
androidx.navigation_navigation-fragment2.5.3
androidx.navigation_navigation-fragment-ktx2.5.3
androidx.navigation_navigation-runtime2.5.3 · Google
androidx.navigation_navigation-runtime-ktx2.5.3
androidx.navigation_navigation-ui2.5.3
androidx.navigation_navigation-ui-ktx2.5.3
androidx.preference_preference1.2.0
androidx.preference_preference-ktx1.2.0
androidx.print_print1.0.0 · Google
androidx.privacysandbox.ads_ads-adservices1.1.0-beta11 · Google
androidx.privacysandbox.ads_ads-adservices-java1.1.0-beta11 · Google
androidx.profileinstaller_profileinstaller1.3.1 · Google
androidx.recyclerview_recyclerview1.3.2 · Google
androidx.room_room-guava2.6.1 · Google
androidx.room_room-ktx2.6.1 · Google
androidx.room_room-paging2.6.1
androidx.room_room-runtime2.6.1 · Google
androidx.room_room-rxjava22.6.1
androidx.room_room-rxjava32.6.1
androidx.savedstate_savedstate1.2.1 · Google
androidx.savedstate_savedstate-ktx1.2.1 · Google
androidx.slidingpanelayout_slidingpanelayout1.2.0
androidx.sqlite_sqlite2.4.0 · Google
androidx.sqlite_sqlite-framework2.4.0 · Google
androidx.startup_startup-runtime1.1.1 · Google
androidx.swiperefreshlayout_swiperefreshlayout1.1.0 · Google
androidx.tracing_tracing1.2.0 · Google
androidx.tracing_tracing-ktx1.2.0 · Google
androidx.transition_transition1.4.1 · Google
androidx.vectordrawable_vectordrawable1.1.0 · Google
androidx.vectordrawable_vectordrawable-animated1.1.0 · Google
androidx.versionedparcelable_versionedparcelable1.1.1 · Google
androidx.viewpager2_viewpager21.1.0-beta02 · Google
androidx.viewpager_viewpager1.0.0 · Google
androidx.webkit_webkit1.12.0 · Google
androidx.window.extensions.core_core1.0.0
androidx.window_window1.2.0 · Google
androidx.window_window-java1.2.0
com.google.android.material_material1.10.0 · material-components
com.google.dagger_dagger2.51 · Google
com.google.gson?
com.google.protobuf?
com.squareup.moshi?
Dagger? · Google
javax.inject? · JSR 330
kotlinx.serialization? · JetBrains
kotlinx_coroutines_android1.9.0
kotlinx_coroutines_core1.9.0
kotlinx_coroutines_play_services1.9.0

Explore technologies across all apps

Browse every SDK, framework, and language we detect, then compare the apps that share the same stack.

App tech stacks →
VEVOR app icon

Live from Google Play

VEVOR

VEVOR STORE LLC
Open in Google Play(opens in new tab)RSS feed

Rating

4.8 (24,153)

Price

Free

Installs

500K+ installs

Version

vv3.1.3

PassiveTech stackIcons
Store ProfileApp IconsBuild Stack