COOK: draft CRA dossier
Meme character and coin launcher for the Solana Seeker, Android (Expo / React Native), version 2.0.0 (build 32), live in the dApp Store since October 2026.
Generated 2026-10-24 by cra-dossier 0.1.0 from the repository at commit cd17b114fbab. SBOM: 814 components (29 top-level) by cdxgen. Known vulnerabilities in SBOM components: 59 advisories (see the report for which are build-time only).
| Items | Evidence found | Partly shown | Not found | Manufacturer decision | Not applicable | Open |
|---|---|---|---|---|---|---|
| 63 | 5 | 29 | 14 | 14 | 1 | 57 |
57 open items means the declaration is not signed. That is the point of publishing it: this is what a solo-built app looks like against the regulation today, with each item tied to the article that asks for it.
Documents
- 00_README
- 01_scope_and_classification
- 02_technical_file
- 03_risk_assessment
- 04_vulnerability_handling
- 05_user_information
- 06_support_period
- 07_declaration_of_conformity_DRAFT
- 08_gap_list
- sbom_summary
- sbom_vulnerabilities
- SECURITY
- sbom.cdx.json (CycloneDX)
- security.txt (draft)
The public copy omits advisory summaries from the vulnerability report; the manufacturer's copy carries them. The answers file that fed the prose is the manufacturer's own description, written from the repository.