A real-shaped audit of a fictional subscription app — the findings, the severities, and the pull requests that fix them.
logPurchase() is called in the buy-button handler, before the store confirms the transaction. Cancelled and declined purchases are reported to Meta as real revenue.
Fix: Gate the Purchase event on the billing ack callback; reconcile against the store's transaction queue on next launch.
The Meta SDK initializes lazily on the home screen, but install and first-open events fire during the splash flow — they land in a dead queue and never send.
Fix: Move SDK init to application start, ahead of any event call.
The SDK flushes its event queue on a timer. Users who buy and immediately close the app — a common pattern — never flush, and the conversion is silently lost.
Fix: Install the recovery module: persistent intent markers, reconciliation with the store on next open, idempotent replay.
Client events carry no deterministic identifier, so any retry or replay risks double-counting purchases.
Fix: Derive event_id from the store transaction id; dedupe on replay.
Every PR ships with tests, a written rationale, and a verification step you can run yourself.
The first audit is free during early access — connect your repo and see your own findings.
Audit My Repo