[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"doc-detail-83674-en":3,"doc-seo-83674-105":30,"detail-sidebar-cat-0-en-105":91},{"code":4,"msg":5,"data":6},0,"success",{"doc_id":7,"user_id":8,"nickname":9,"user_avatar":10,"doc_module":4,"category_id":11,"category_name":12,"doc_title":13,"doc_description":14,"doc_content":15,"file_id":16,"file_url":17,"file_type":18,"file_size":19,"view_count":20,"is_deleted":4,"is_public":21,"is_downloadable":21,"audit_status":21,"page_count":22,"language":23,"language_code":24,"site_id":25,"html_lang":24,"table_of_contents":26,"faqs":27,"seo_title":13,"seo_description":14,"update_tm":28,"read_time":29},83674,4810365810221,"Aurora","https://ap-avatar.wpscdn.com/davatar_155a257f0dc6eb9ab79c44ca47cae57d",8,"Research & Report","A large-scale dataset of Android applications and their SDK dependencies","Mobile applications increasingly rely on third-party Software Development Kits (SDKs) for services such as advertising, analytics, authentication, crash reporting, and location sharing. The work presents a large-scale dataset linking Android apps to the third-party SDKs embedded in their APKs. A reproducible static-analysis pipeline combines AndroZoo app package data with SDK detection rules from Exodus Privacy, producing hundreds of thousands of app-version observations and metadata-rich SDK-provider mappings. The publicly released dataset and code enable reproducible research on app–SDK dependency networks and upstream technological concentration.","arXiv :2607 .02627v 1 [ cs . SE] 2 Jul 2026  \nA large-scale dataset of Android applications and their SDK dependencies  \nAurora Gori Savellini 1,* , Tiziano Squartini1,2 , and Massimo Riccaboni 1,3  \n1 IMT School for Advanced Studies, P.zza San Francesco 19, 55100 Lucca (Italy)  \n2 Istituto Nazionale di Alta Matematica ‘Francesco Severi’ (INdAM-GNAMPA), P. le Aldo Moro 5, 00185 Rome (Italy)  \n3 IUSS University School for Advanced Studies, P.zza della Vittoria 15, 27100 Pavia (Italy)  \n* [aurora.gorisavellini@imtlucca.it](aurora.gorisavellini@imtlucca.it)  \nABSTRACT  \nMobile applications (apps) increasingly rely on third-party Software Development Kits (SDKs) to provide services such as advertising, analytics, authentication, crash reporting, and location services. These components form an important, but often hidden, layer of the mobile ecosystem. Here, we present a large-scale dataset linking Android apps to the third-party SDKs they integrate. The dataset was constructed by combining app package files (APKs) and metadata from AndroZoo with SDK detection rules provided by Exodus Privacy. We implemented a reproducible, static-analysis pipeline that downloads APKs, inspects their compiled code, and detects SDKs through code-level signature matching: the released dataset contains 334,719 unique app-version observations (associated with 99,722 Android apps) and 246 third-party SDKs-including app-level metadata such as categories, comments, file size, download counts, ratings and SDK-level metadata such as categories, code roots, code versions, names. The dataset supports the construction of a large-scale app-SDK dependency network and its projection onto both layers; in addition, SDKs are mapped to their corresponding operating companies, enabling provider-level analysis of technological concentration and upstream control in the mobile ecosystem. To support reproducible research, the pipeline and dataset are publicly released on GitHub and Zenodo; more broadly, the project provides a reusable research infrastructure for studying third-party technological dependencies, data-collection capabilities, and privacy infrastructures across Android apps.  \nBackground & Summary  \nMobile applications (apps) increasingly rely on third-party Software Development Kits (SDKs) 1 : rather than developing these functionalities internally, app developers integrate reusable software modules supplied by upstream technology providers, thus making SDKs a fundamental layer of the Android ecosystem and enabling software reuse, modular production, and the specialization of technological capabilities across firms.  \nBeyond their engineering role, tracking SDKs also constitute an important data-collection infrastructure. Since they are directly embedded into the app code, they inherit the permissions granted to the host app and can mediate the collection, processing, and exchange of user-and app-generated data: through advertising, analytics, authentication, cloud, and engagement services, SDK providers may aggregate information across thousands of otherwise unrelated applications, thus shaping both software dependencies and data flows throughout the mobile ecosystem.  \nDespite their growing importance, openly available datasets linking Android apps to their embedded third-party SDKs remain relatively scarce. Existing app-store metadata do not explicitly report SDK dependencies, while commercial mobile intelligence platforms typically provide proprietary analyses under restricted-access models: recovering app-SDK relationships, therefore, requires inspecting Android Package Kit (APK)2 files and identifying software signatures associated with known SDKs through static analysis.  \nHere we present a large-scale open dataset linking Android apps distributed through Google Play to the third-party tracking SDKs embedded into their APKs. The dataset was constructed by combining APKs and application metadata retrieved  \n1 Software Development Kits (SDKs) are reusab","cbCaivkURXfQ1oWS","https://ap.wps.com/l/cbCaivkURXfQ1oWS","pdf",5370417,4,1,23,"English","en",105,"# Abstract\n# Background & Summary\n# Dataset Construction Pipeline\n## Inputs and Sources\n## Static Analysis and SDK Detection\n## Network Representations and Outputs","[{\"question\":\"What does the dataset link together?\",\"answer\":\"The dataset links Android apps to the third-party tracking SDKs embedded in their APKs, creating app–SDK and app–SDK–provider relationships.\"},{\"question\":\"How were SDKs detected in the released dataset?\",\"answer\":\"SDKs were detected via a reproducible static-analysis pipeline that downloads APKs, extracts and inspects compiled code, and matches code signatures to SDK detection rules from Exodus Privacy.\"},{\"question\":\"What outputs and metadata does the dataset include?\",\"answer\":\"The release includes app-level and SDK-level metadata and supports constructing large-scale app–SDK dependency networks, including mappings from SDKs to provider entities for concentration and upstream control analyses.\"}]",1784189668,58,{"code":4,"msg":31,"data":32},"ok",{"site_id":25,"language":24,"slug":33,"title":13,"keywords":34,"description":14,"schema_data":35,"social_meta":86,"head_meta":88,"extra_data":90,"updated_unix":28},"a-large-scale-dataset-of-android-applications-and-their-sdk-dependencies","",{"@graph":36,"@context":85},[37,53,68],{"@type":38,"itemListElement":39},"BreadcrumbList",[40,44,48,51],{"item":41,"name":42,"@type":43,"position":21},"https://docshare.wps.com","Home","ListItem",{"item":45,"name":46,"@type":43,"position":47},"https://docshare.wps.com/document/","Document",2,{"item":49,"name":12,"@type":43,"position":50},"https://docshare.wps.com/document/research-report/",3,{"item":52,"name":13,"@type":43,"position":20},"https://docshare.wps.com/document/a-large-scale-dataset-of-android-applications-and-their-sdk-dependencies/83674/",{"url":52,"name":13,"@type":54,"author":55,"headline":13,"publisher":57,"fileFormat":60,"inLanguage":24,"description":14,"dateModified":61,"datePublished":62,"encodingFormat":60,"isAccessibleForFree":63,"interactionStatistic":64},"DigitalDocument",{"name":9,"@type":56},"Person",{"url":41,"name":58,"@type":59},"DocShare","Organization","application/pdf","2026-07-26","2026-07-16",true,{"@type":65,"interactionType":66,"userInteractionCount":20},"InteractionCounter",{"@type":67},"ViewAction",{"@type":69,"mainEntity":70},"FAQPage",[71,77,81],{"name":72,"@type":73,"acceptedAnswer":74},"What does the dataset link together?","Question",{"text":75,"@type":76},"The dataset links Android apps to the third-party tracking SDKs embedded in their APKs, creating app–SDK and app–SDK–provider relationships.","Answer",{"name":78,"@type":73,"acceptedAnswer":79},"How were SDKs detected in the released dataset?",{"text":80,"@type":76},"SDKs were detected via a reproducible static-analysis pipeline that downloads APKs, extracts and inspects compiled code, and matches code signatures to SDK detection rules from Exodus Privacy.",{"name":82,"@type":73,"acceptedAnswer":83},"What outputs and metadata does the dataset include?",{"text":84,"@type":76},"The release includes app-level and SDK-level metadata and supports constructing large-scale app–SDK dependency networks, including mappings from SDKs to provider entities for concentration and upstream control analyses.","https://schema.org",{"og:url":52,"og:type":87,"og:title":13,"og:site_name":58,"og:description":14},"article",{"robots":89,"canonical":52},"index,follow",{"doc_id":7,"site_id":25},{"code":4,"msg":5,"data":92},[93,97,101,105,110,115,120,123,128,131,135],{"id":21,"doc_module":4,"doc_module_name":46,"category_name":94,"show_sort_weight":95,"slug":96},"Story & Novel",90,"story-novel",{"id":47,"doc_module":4,"doc_module_name":46,"category_name":98,"show_sort_weight":99,"slug":100},"Literature",80,"literature",{"id":20,"doc_module":4,"doc_module_name":46,"category_name":102,"show_sort_weight":103,"slug":104},"Exam",70,"exam",{"id":106,"doc_module":4,"doc_module_name":46,"category_name":107,"show_sort_weight":108,"slug":109},5,"Comic",60,"comic",{"id":111,"doc_module":4,"doc_module_name":46,"category_name":112,"show_sort_weight":113,"slug":114},6,"Technology",50,"technology",{"id":116,"doc_module":4,"doc_module_name":46,"category_name":117,"show_sort_weight":118,"slug":119},7,"Healthcare",40,"healthcare",{"id":11,"doc_module":4,"doc_module_name":46,"category_name":12,"show_sort_weight":121,"slug":122},30,"research-report",{"id":124,"doc_module":4,"doc_module_name":46,"category_name":125,"show_sort_weight":126,"slug":127},9,"Religion & Spirituality",20,"religion-spirituality",{"id":126,"doc_module":4,"doc_module_name":46,"category_name":129,"show_sort_weight":126,"slug":130},"World Cup","world-cup",{"id":132,"doc_module":4,"doc_module_name":46,"category_name":133,"show_sort_weight":132,"slug":134},10,"Lifestyle","lifestyle",{"id":136,"doc_module":4,"doc_module_name":46,"category_name":137,"show_sort_weight":106,"slug":138},19,"General","general"]