harmonyos
Warn
Audited by Socket on Sep 11, 2026
1 alert found:
SecuritySecurityevals/files/migration-plan.md
MEDIUMSecurityMEDIUM
evals/files/migration-plan.md
The plan should not be implemented as a direct one-to-one port. The most serious issues are the unsupported JNI-to-ArkTS assumption, unreliable long-running work from UIAbility.onCreate, stale permission caching and bulk permission prompting, incorrect ArkUI state-model mapping, and use of a debug signing profile for release builds. No malicious behavior is evident in the supplied architecture text, but these issues could cause broken functionality, privacy violations, excessive permissions, AppGallery rejection, or insecure releases.
Confidence: 96%Severity: 82%
Audit Metadata