title: How does SourceDNA track SDKs used by apps
body: <p>I just got done reading the press hysteria around AFNetworking exposing apps to a man in the middle attack.  I was surprised that sourcedna.com claims </p>
  
  <blockquote>
    <p>SourceDNA analyzes the code in thousands of iOS &amp; Android apps.</p>
  </blockquote>
  
  <p>sourcedna.com even has a search engine to report whether a vendor's apps use the AFNetworking SDK.</p>
  
  <p>Considering they don't have access to paid apps, how do they claim to do this?  Do SDKs like AFNetworking log SDK use in some form?  If so, to who?</p>