Totally. But there has to be some middle ground. If you did a 180 then do a manual review. If the app is fundamentally the same with a minor bug fix then why review it?
I’ve only worked with the chrome store which is obviously open source so static analysis doesn’t work here like it does there.
It’s a good question. My hot take is diff the syscalls. Easy enough to do. If you changed a bunch of them then big review. It’s not perfect but in 30 seconds I couldn’t think of anything better. My first hot take was app submit its own test scripts for an emulator but that could easily be gamed.
“If you did a 180 then do a manual review. If the app is fundamentally the same with a minor bug fix then why review it?” would have to be a different thing.
