Provenance App: IPA Analysis

Inside the IPA

Provenance App

Joseph Mattielloorg.provenance-emu.provenance

← App page

Package analysisv3.3.0

Build 2858Record 8816514782026-01-28

Uncompressed filesNot recordedSum of recorded file sizes

Recorded IPA size1.6 GBSelected build · archive size

Files inventoried0No file inventory available

Embedded librariesNot availableFrameworks & dynamic libraries

Package footprint

What takes up space?

Uncompressed

No file inventory yet

A storage breakdown needs a recorded package inventory. Metadata alone cannot show what is inside an IPA.

Bundle structure

Space by folder

Top level

No folders recorded

Folder sizes will appear with the package inventory.

Explore the package

File explorer

Find the heavy files, inspect paths, or filter by what they contain.

No files to explore

File names and sizes have not been recorded for an analyzed package.

Native binary explorer

Every binary. Every architecture.

Inspect signed entitlements and permissions, load commands, memory layout, dependencies, symbols and runtime evidence for each slice.

Native analysis has not been recorded for this build

New package processing stores complete reports for each binary and architecture here. Existing header only records are not presented as full binary analysis.

Under the hood

Frameworks & engines

Embedded code and runtime evidence from this build, not other releases.

0 embedded libraries

No engine identification recorded for this build. That does not mean the app has no game engine or runtime.

No embedded framework records

Statically linked libraries cannot be identified from file paths alone.

Recorded signals

Package details

Only the analyzed build

Privacy & permissions

Recorded

Tracking declared: No
Non exempt encryption: Not declared

Permission descriptions

NSPhotoLibraryUsageDescription: Provenance can set custom artworks from your photos or save screenshots to the Photo Library.
NSBluetoothAlwaysUsageDescription: Provenance uses Bluetooth to support game controllers.
NSPhotoLibraryAddUsageDescription: Provenance can set custom artworks from your photos or save screenshots to the Photo Library.
NSCameraUsageDescription: Used for album artwork.
NSMicrophoneUsageDescription: Provenance uses the microphone for systems that support audio input (eg. Famicom, Nintendo DS, 3DS).
NSLocationUsageDescription: Some games may use location data to enhance emulated location gameplay features
NSMotionUsageDescription: Provenance uses your device's accelerometer and gyroscope to emulate the portable consoles' built-in accelerometer and gyroscope.
NSLocalNetworkUsageDescription: RetroArch needs access to Wi-Fi networks for enhanced emulated Wi-Fi network features.
NSLocationWhenInUseUsageDescription: Some games may use location data to enhance emulated location gameplay features
NSFileProviderDomainUsageDescription: Provenance uses file provider for loading ROMs.

Tracking domains 0

[]

Accessed API types 9

[
  {
    "NSPrivacyAccessedAPIType": "NSPrivacyAccessedAPICategoryUserDefaults",
    "NSPrivacyAccessedAPITypeReasons": [
      "CA92.1"
    ]
  },
  {
    "NSPrivacyAccessedAPIType": "NSPrivacyAccessedAPICategoryUserDefaults",
    "NSPrivacyAccessedAPITypeReasons": [
      "C56D.1"
    ]
  },
  {
    "NSPrivacyAccessedAPIType": "NSPrivacyAccessedAPICategoryFileTimestamp",
    "NSPrivacyAccessedAPITypeReasons": [
      "3B52.1"
    ]
  },
  {
    "NSPrivacyAccessedAPIType": "NSPrivacyAccessedAPICategoryFileTimestamp",
    "NSPrivacyAccessedAPITypeReasons": [
      "C617.1"
    ]
  },
  {
    "NSPrivacyAccessedAPIType": "NSPrivacyAccessedAPICategoryDiskSpace",
    "NSPrivacyAccessedAPITypeReasons": [
      "E174.1"
    ]
  },
  {
    "NSPrivacyAccessedAPIType": "NSPrivacyAccessedAPICategoryFileTimestamp",
    "NSPrivacyAccessedAPITypeReasons": [
      "0A2A.1"
    ]
  },
  {
    "NSPrivacyAccessedAPIType": "NSPrivacyAccessedAPICategoryUserDefaults",
    "NSPrivacyAccessedAPITypeReasons": [
      "1C8F.1"
    ]
  },
  {
    "NSPrivacyAccessedAPIType": "NSPrivacyAccessedAPICategoryUserDefaults",
    "NSPrivacyAccessedAPITypeReasons": [
      "1C8F.1",
      "C56D.1"
    ]
  },
  {
    "NSPrivacyAccessedAPIType": "NSPrivacyAccessedAPICategorySystemBootTime",
    "NSPrivacyAccessedAPITypeReasons": [
      "35F9.1"
    ]
  }
]

Collected data types 5

[
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeCrashData",
    "NSPrivacyCollectedDataTypeLinked": false,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAppFunctionality"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeOtherDiagnosticData",
    "NSPrivacyCollectedDataTypeLinked": false,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAppFunctionality"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypePurchaseHistory",
    "NSPrivacyCollectedDataTypeLinked": false,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAnalytics",
      "NSPrivacyCollectedDataTypePurposeAppFunctionality"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeOtherDiagnosticData",
    "NSPrivacyCollectedDataTypeLinked": false,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAnalytics"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypePerformanceData",
    "NSPrivacyCollectedDataTypeLinked": false,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAppFunctionality"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  }
]

Additional Info.plist declarations

App transport security: { "NSAllowsArbitraryLoads": true, "NSExceptionDomains": { "127.0.0.1": { "NSExceptionAllowsInsecureHTTPLoads": true, "NSIncludesSubdomains": true }, "69.69.0.1": { "NSExceptionAllowsInsecureHTTPLoads": true, "NSIncludesSubdomains": true }, "gamefaqs.gamespot.com": { "NSExceptionAllowsInsecureHTTPLoads": true, "NSIncludesSubdomains": true }, "gamespot.com": { "NSExceptionAllowsInsecureHTTPLoads": true, "NSIncludesSubdomains": true }, "github.com": { "NSExceptionAllowsInsecureHTTPLoads": true, "NSIncludesSubdomains": true }, "localhost": { "NSExceptionAllowsInsecureHTTPLoads": true, "NSIncludesSubdomains": true }, "provenance-emu.com": { "NSExceptionAllowsInsecureHTTPLoads": true, "NSIncludesSubdomains": true }, "wiki.provenance-emu.com": { "NSExceptionAllowsInsecureHTTPLoads": true, "NSIncludesSubdomains": true } } }
Url schemes: [ { "CFBundleTypeRole": "Editor", "CFBundleURLIconFile": "LaunchImageTV", "CFBundleURLName": "org.provenance-emu.provenance", "CFBundleURLSchemes": [ "provenance" ] } ]
Required capabilities: [ "metal", "arm64" ]

Static observations

2 recorded

Firebase

Firebase client configuration present

Project: provenance-b8143. Firebase client API keys are public identifiers by design. Presence alone does not establish a vulnerability; API restrictions and access rules were not tested.

ATS

NSAllowsArbitraryLoads: true

The package declares an ATS exception. Actual network traffic and use of cleartext connections were not tested.

Analysis record

Method: Stored static package extraction and inventory; not a live security test.
Coverage: Only the selected build is represented. Missing data means not analyzed, not safe. Scanner identity and scan time are unavailable for sources that did not record them.
Recorded extraction times: 2026-05-23 20:18:37
Known version identifiers: 13 (2 with metadata)

Browse version history on the app page →