Assessing penalties for sdks that violate policies in mobile apps

A computer program product stored on a computer readable storage medium, which when executed by a computing system, processes software development kits (SDKs), the program product comprising:

• program code that wraps an inputted SDK in a penalty container to create a wrapped SDK, wherein the wrapped SDK includes re-instrumented code that redirects application programming interface (API) calls between the SDK and an associated App and operating system through a wrapper in order to monitor runtime behavior;
• and
• program code that instantiates a policy module that is configurable by an SDK provider and App developer to implement a mutual policy configuration for the penalty container;
• wherein the penalty container includes program code that assesses penalties to the SDK provider based on SDK violations of the mutual policy configuration.

A computerized method for processing software development kits (SDKs), comprising:

• receiving an SDK from an SDK provider;
• wrapping the SDK in a penalty container to create a wrapped SDK, wherein the wrapped SDK includes re-instrumented code that redirects application programming interface (API) calls between the SDK and an associated App and operating system through a wrapper in order to monitor runtime behavior;
• and
• instantiating a policy module that is configurable by the SDK provider and an App developer to implement a mutual policy configuration for the penalty container;
• wherein the penalty container includes a penalty manager that assesses penalties to the SDK provider based on SDK violations of the mutual policy configuration.