{
  "ok": true,
  "app_id": "air.com.KalromSystems.SandDrawLite",
  "comparable": false,
  "comparison_status": "limited_coverage",
  "regressed": null,
  "grade_delta": null,
  "score_delta": null,
  "from": {
    "scan_id": "86e1ae98-8452-4f1a-b943-93e3843664a4",
    "version": "6.1.1",
    "analysis": {
      "status": "unknown"
    },
    "provenance": {},
    "grade": "B",
    "score": 87,
    "scanned_at": "2026-09-03T03:07:45.109Z"
  },
  "to": {
    "scan_id": "78bc1450-7726-4f08-bb32-761c7be517c7",
    "version": "6.1.1",
    "analysis": {
      "issues": [],
      "stages": {
        "pii": "complete",
        "sbom": "complete",
        "signing": "certificate_parsed",
        "strings": "complete",
        "manifest": "complete"
      },
      "status": "complete",
      "grading": {
        "policy": "static-coverage-v1",
        "blockers": [],
        "eligible": true
      },
      "timings_ms": {
        "total": 9956.629,
        "harvest": 4117.866000000001,
        "detectors": 4980.092999999994
      },
      "bytes_total": 86680171,
      "bytes_scanned": 86680171,
      "bytes_skipped": 0,
      "files_processed": 1602,
      "coverage_version": 2,
      "string_encodings": [
        "ascii",
        "utf16le"
      ],
      "signature_validation": "not_performed"
    },
    "provenance": {
      "mode": "static",
      "artifacts": [
        {
          "name": "base.apk",
          "sha256": "b47aadb7e8332052299356e49daff10a946d1899646372cda6139ae86d66e691"
        },
        {
          "name": "config.arm64_v8a.apk",
          "sha256": "40b0bf750ba13bd2621cc7cd2781bd3fe8f28d2ccef1abbc7f5c118cfa305b66"
        },
        {
          "name": "config.en.apk",
          "sha256": "53fac755b6281d3670ce4c84af1e11ddc300b03a195879bb52faf1d0b12963f3"
        },
        {
          "name": "config.es.apk",
          "sha256": "d81aded212003ffd65c67f7d23354ca294d071bb695dd0d87f909092707d36bb"
        },
        {
          "name": "config.xxhdpi.apk",
          "sha256": "590f902f8c1ad5a5a6f426af0f7309e1facafb5de4973c861b7c7c8ca9fb61cd"
        }
      ],
      "ruleset_sha256": "3bb79cc3710b0fb021feaa322578f4cffe08396a97c51b34df092b5a05891d5e"
    },
    "grade": "A",
    "score": 92,
    "scanned_at": "2026-10-06T22:26:42.309Z"
  },
  "findings": {
    "added": [
      {
        "finding_type": 20,
        "severity": "low",
        "title": "Google API key (client-shipped; restriction unverified)",
        "fingerprint": "61fd3ce954bc871caef5a526051b68ac882277977bd3152cfc75a8b3793da368",
        "verified": false
      },
      {
        "finding_type": 35,
        "severity": "low",
        "title": "Exported content provider without permission (third-party library artifact, shared across 232 unrelated developers)",
        "fingerprint": "e510d1eb34e8724fb89c83162bddb9cb7decb566898c4cfb5f1fc0556fb56332",
        "verified": false
      },
      {
        "finding_type": 57,
        "severity": "medium",
        "title": "Short signing key (RSA 1024-bit)",
        "fingerprint": "eff7d2f7607ae274d531546d1e828faf234bca919325efac0bbe80b2f250d041",
        "verified": false
      }
    ],
    "removed": [
      {
        "finding_type": 20,
        "severity": "low",
        "title": "Google API key (client-shipped; restriction unverified)",
        "fingerprint": "4154ae78ef89f1dd1a2cbda54a2ef030cc508e3bad580dd8b3689b64ae814a6f",
        "verified": false
      },
      {
        "finding_type": 35,
        "severity": "medium",
        "title": "Exported content provider without permission",
        "fingerprint": "c30eb2214bbe9f97d58e8b82825fb983e0df628c4d4b94c8e3a4ab1545a66e12",
        "verified": false
      },
      {
        "finding_type": 57,
        "severity": "medium",
        "title": "Short signing key (RSA 1024-bit)",
        "fingerprint": "c0908fb30fa18324ad43f60111957be428de82cb1baf73a54edd1ca8d185e47e",
        "verified": false
      }
    ],
    "persisting_count": 0,
    "added_by_sev": {
      "critical": 0,
      "high": 0,
      "medium": 1,
      "low": 2
    },
    "removed_by_sev": {
      "critical": 0,
      "high": 0,
      "medium": 2,
      "low": 1
    }
  },
  "trackers": {
    "added": [
      "Yandex Ads",
      "Google Analytics for Firebase",
      "Google UMP (consent)",
      "IAB TCF"
    ],
    "removed": [
      "Google AdServices"
    ]
  },
  "known_vulns": {
    "from": 0,
    "to": 0,
    "delta": 0,
    "from_recorded": true,
    "to_recorded": true
  }
}