I'm looking for an API, preferably in PHP, or optionally a command-line tool (Python would be OK, but anything running on Linux should do) which, given the package name of an Android app, gives me details on the modules used in it. Results should of course be in a structured format: e.g. a PHP array of objects, or JSON.
The following details, or at least a significant subset (must-haves are bold), should be provided by that API:
- name of the module
- type of the module (e.g. advertisement, development tool, social stuff)
- (level of) danger concerning data abuse (does it collect PII, device identifiers, location data)
- what data is accessed/collected
- which permissions are required/used by the module¹
- link to details on the module, including background on how it uses data it accesses and reputation of the company behind it
Additional helpful/interesting details are welcome, while the above is basically what I "wish for". Data for the most recent version of an app is fine, multiple sets by app version are not required (but wouldn't hurt either). Of course, the provider those data are retrieved from by the API should be reputable.
The API should be available for free (as in "free beer"), and preferably also be free (as in "free speech") – so FOSS is strongly preferred.
For some background, here's a reference from our Android sister site on what I want to achieve: Dangers of ad modules in apps
¹ while most modules require "must have" permissions to work at all, some do access other permissions if available to the host app; see e.g. inMobi. Preferably the API provides those separately.