GPLv3 violation report

closed-source commercial android app named "TipTop VPN" (pkgid: com.free.tiptop.vpn.proxy) is violating the GNU PUBLIC LICENCE VERSION 3 (aka gplv3) by using the sing-box core binaries without providing their source code or modifications

evidence (extracted from APK via apktool)

analysis of official split APK (split_config.arm64_v8a.apk) reveals that the native library lib/arm64-v8a/libbox.so is an exact, not renamed copy of the sing-box android library.

1. jni exports match io.nekohasekai.libbox
   running strings libbox.so | grep -i "nekohasekai" exposes original package namespaces
   Java_io_nekohasekai_libbox_Libbox__1init
Java_io_nekohasekai_libbox_Libbox_checkConfig
Java_io_nekohasekai_libbox_Libbox_newService
   and so on

2. hardcoded sagernet/sing-box urls inside binary
   golang runtime strings inside libbox.so contains direct links to official ecosystem resources on github.

3. leaked configurations
   app stores active node configurations under explicit key "sing_box_config" in its internal directory (harmony_prefs/prefs/prefs.data) using standard vless json structures.

links

google play: https://play.google.com/store/apps/details?id=com.free.tiptop.vpn.proxy
app store (apple): https://apps.apple.com/us/app/vpn-proxy-tiptop-vpn/id6454190738

please consider submitting official DMCA takedown notice to google and apple as the copyright holders of the sing-box core project

Review the reported Google Play and App Store links and the APK evidence for lib/arm64-v8a/libbox.so, including the exported io.nekohasekai.libbox symbols and embedded sing-box references. Confirm whether the report is actionable for the project and document the maintainers' decision about any follow-up.