{
  "capsule": {
    "schema": "apk-scanner.proof/v2",
    "issuer": "apk-scanner.com",
    "issued_at": "2026-10-13T20:39:22.134Z",
    "app": {
      "app_id": "com.adarshbarnwal.notesapp",
      "title": "JeeAB360 Predictor-JEE /STD 12",
      "version": "2.9"
    },
    "analysis": {
      "issues": [],
      "stages": {
        "pii": "complete",
        "sbom": "complete",
        "signing": "certificate_parsed",
        "strings": "complete",
        "manifest": "complete"
      },
      "status": "complete",
      "grading": {
        "policy": "static-coverage-v1",
        "blockers": [],
        "eligible": true
      },
      "timings_ms": {
        "total": 19371.385,
        "harvest": 2479.2040000000034,
        "detectors": 15923.097000000118
      },
      "bytes_total": 47323846,
      "bytes_scanned": 47323846,
      "bytes_skipped": 0,
      "files_processed": 1875,
      "coverage_version": 2,
      "string_encodings": [
        "ascii",
        "utf16le"
      ],
      "signature_validation": "not_performed"
    },
    "provenance": {
      "mode": "static",
      "artifacts": [
        {
          "name": "base.apk",
          "sha256": "cf0552c636f09dabd18a591841d4b175318bd629133e26e1fd842ca36301f02d"
        },
        {
          "name": "config.arm64_v8a.apk",
          "sha256": "4d63893b387b4bc909c5ab98710aeff5d3f4f2dcd96a9213b07877b33dab6e3b"
        },
        {
          "name": "config.en.apk",
          "sha256": "b0809ab95f8da237c29a99cfba1bc526c30e058a668d49b93590cfc5f17c4783"
        },
        {
          "name": "config.xxhdpi.apk",
          "sha256": "5d5f8349f514f143c62a2f874f82d7bf5cc6042ce80a06fce97e8d387e2177e0"
        }
      ],
      "ruleset_sha256": "3bb79cc3710b0fb021feaa322578f4cffe08396a97c51b34df092b5a05891d5e"
    },
    "apk_sha256": "cf0552c636f09dabd18a591841d4b175318bd629133e26e1fd842ca36301f02d",
    "scan": {
      "scan_id": "bfd35f7e-a647-41a7-88af-deaa7f9281c3",
      "scanned_at": "2026-10-13T08:35:53.461Z",
      "grade": "F",
      "score": 0
    },
    "apk_signer": {
      "scheme": "v3",
      "subject_o": "Google Inc.",
      "subject_cn": "Android",
      "sha256": "8becb1046fc3b1bcbfd676abbafe0c95b07df30bb7348b79d84baa158341c7e2",
      "not_after": "2050-05-12T15:11:29+00:00"
    },
    "counts": {
      "critical": 0,
      "high": 106,
      "medium": 1,
      "low": 4,
      "info": 1
    },
    "findings": [
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "b7e5d3aaba2c7de578ab9580958e59693925e8ef07d18f9e5f2be973f209dc33",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "f6f456cb9b959a8740a6e3d7baf76549ec82b6099a5748415fddf92a7fcbf13a",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "1aba3f5aee1a24632c1e6855b904fc23db6cc0f088fc0ec65e8ad7a3d02172eb",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "0c5a83c6977adf50d24ffee65d12324db0aeaadffe1aab3e6df0a28c81184388",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "68d73fffcdf0aae115f9f23775fe55c2a113c1cdd080b3deb9709faf3d5a09bd",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "0f7104e99e3cfebf4f8d563b64566f6afabceb54d1578a3dab6e962b2ee70f57",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "98b17bee7455e538c638a05a0a7b3fa577f3f789742038d86eb3a97ccd051e80",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "012b5d8ae8aa4a265439b762d219e5b3e85f3b314bf2ec16a0d1150689f35f5c",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "8b744233d170dfd4af699e9119b789441ba3ccb35cb277643868d880109d261f",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "10dc59712ed80c1652d58089401d5d9ba4e5443d3c8fd05e340cd4f7da455fb8",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "4961724958e2a7f19c554824f77f4ce966bd89908a3023bde7aa638f07b1ddb1",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "cbdc0191212ff8d6f9e5410d9946fc9c5684539f039f120fdf8eda393097d41b",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "66eed9482a24c20a2935ca0a96b602cc7fd7c470892e1dc1a44f58c3b28836d3",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "225884c487104f78708fff458b35b522a10718b16c5bac3c0fcbdd4ecb591d8c",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "c2c2d275eff38d877e92669abb2934bdad4e6abc05dc4fe5792b63d1d56a4496",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "ff169f03e7ed50aa025270a9e853c9d9794a4dc97ab1fc9740cfd33f4c962239",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "e202012b492b9f0c4608cc97eee2ef25fe933ad9552e1befb2a1aca2594747ba",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "730010f718c642c16237c0a55181721b29d68ada6c2a1043e32751ed1958e886",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "32b527fc27b8f4c916a0206b0c71bdefec99357e2740245112b86ed33a0c04bf",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "0df3d27a72842c1f0c6ed1601af36547ad51cdcc8f865bd995a5a255d76bc9d1",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "be02f51fe5c1ab5c3183e71daaa15546c37dd95a02dad35785df1bebad163a71",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "21b29672cb869787a1144d7239f8c6c4a282c4e9e08e7a5cfcc006612e430bfa",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "6f2fc48b67c3774cac24a246fed78588658247e6bee0d8989739914ab8cfd9a8",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "f475a24de8bb5f61c80d07b6cbef5535aba35d3dfcda5cf81167f785a1a924f0",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "28edf2763ae8472e839d2099df5c9a28c60a75009cf43852365aa47c45817afe",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "a36860e75e944354181da4f52692255872653f9d3cbdc9d6a279576d536bc075",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "8db90a81f9a914094bc7054872de7dfdbc07c0fa6ebca4bf0bc4004ebf634244",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "3e8f35d7b8d1bb6ecb771dbfd9b4d105d2a794cb05bb50c8cc93c48557ee3f25",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "817e5d3872da4697382303d4b3db492117018a750dd7f992d4f55a88f47dd7a1",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "beddeba23a7449417b709d05e4bea5b83f94c0d3c50337f5ac3f3f1d5c44bfc5",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "39465ae6339e5f1062c52f9b9aace241729a3bb68f1000f6212c6ebbb4d9a087",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "d2e74464c7f57712f30be7a46af26a576ef156826621efd74c564f52a5ff0407",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "fad156b40b9e9037b9a2574648cb9b6a0e11b0886488fceb27cbbd3625ce1f81",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "858f84ba4b8456bf99df053591dbf968e4bda671459aedcaae96f36edb2e660b",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "204f8d606cd3b3f157ecea51b93cc13e39a8dbee3bcdbffc53814314f99d9fea",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "e09f96dd1924b33753958291a53d8dd9cada296185fc190e471083b66a7353c2",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "5e35d40d309136d3c219015d6005160d803a9a97f049893bcbe39f8abd400b9f",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "36c4569c9895f2c89028d5bbb6875860e9d9978a3acc909bc336b35f9e7eea04",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "86c7d20ca59943788713a98238bba7831bca4db97b39758aaa6ef72c6132f613",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "26290e3d2ec7f672d86835278347f83c46282c8f164ba26e922edf9ef7580d3f",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "7e2bb4801e42627019bb018625afb260332e01f2d0d6fc49eb68c3586690d363",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "8c3a9c4e1828dae088745c29649d714ef173593e5b5aab638e0d3d5efa4f36f6",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "e323b3f8907fb119ebd8e192c4fb3c9ac244ad49633fc35f90440557dbc90a95",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "fbd57f3e442e80a229966e624c46f38bb1e58d71adf81cf83e2f5ce97e830664",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "ad5d384d6c23d5b138199dfc61c7ce5853bd61f14be888ca01b23f42fd6f559f",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "5514743b471afe21b3fe50095998a074f6134082adbfc72759daa31820681839",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "1f557924bc8320423aa0c6a6431e2a0efb76cdeb16e689dc3ba0a52e1b4e2d07",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "7888f9ab20708b2d19f88752ea6f132eb333bbae3c6924ed60fd5bb8b255a2bb",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "396cd9b8a5dbccce2cd3da97255ee11bc2648e63eb3ad1e44e6026d6cd6ea60b",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "76e385ed32901dbbfeae42fb81f7cdb48493fe61b6d7eb0848d2b552887dd4ff",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "524ad91c7edb58aeb61e878462ea3f5566b5a7edf910c408b6befcb99c27b6d0",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "708aad6d3a58392f300a23279e76a477c94ccf6f96fc0bde6f39014252daa773",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "1b3f274bb9716e4734fca5390c63db1f1a08cc1f6909616a546c59d0871954a4",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "4b0ac2905373818c9fb09fffa5c911c8329c781fec589285fa53824a78d258e5",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "c269755c3eaeb9267da04412238055217e9b90585994bb799a7f39985465a085",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "54f84f78f2a4c1915babc371bb1ed45f9fad394d4e6f198e50fa5216ee8406c0",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "3255c5a8c4a7eef16bcd91d83b8e18ff1e45798d2fedc44cd0e5b13de747785c",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "2c0c45154ec32d9cfe424e3bd42d566fff7bf3bd027318c0e060fac38afa5db3",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "25116f44dc9ab5578c4187e236c3161cbacb641dbd0b3b8e2cc954575223146b",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "973a86f5edfbc64129a81148720dbcb3407b005ff89fd48547d7d8bebf08ed79",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "566e6381b4644da4afdd4097a1f6adb0349e4e3fb8e8a931b799a40387caa591",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "e3acc7bbbaba92c62df14ef817dd4e65cf9e2315aabfc99c3a7967cb6adfd537",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "5b5f6f4277ae8bf2f48f93af88056fbe008c599884f2b5d4bc15e50d050b2b71",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "1845952c36cd4763bf8d589e4b0dadcd8ef633bc4e737d46aa6029bda122ee97",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "fd036d994bbb9a531aa8754901fa91b865aad2706b88e544352c3867c3c35163",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "6f4e51328a80155484fa7051f73a3546fe120ede845dc80d5cc822be5cf6c41e",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "ec9311411b555fe03ae9177729241189a73016f8ee685732dd03338db4e6d864",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "d47f51e10b408abe482e56aa418d7b5b5caff2ec6611f460a8c4537d0ba0fe52",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "4adee0103eeaca8a9324e722d7602f42127c7f1e4660a26e1aa765d857412f16",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "f9dd265d59992d2b014dab265166ff349e6899e586a85f85cdd7cf6b0b43fa8f",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "3614972ddad102a7dffe35c21600d608db814c3e284868d6da44bcd43cbae602",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "24706adf27534c2390b596c9ab47aa31632d00509c9a311c5a713e142d2190b3",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "ae9d81d956f0e039e574314c2e601a0dd08db6df956b2c3e4261d198fa9e7259",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "6d5a64788a9c43a63269ac64587f72583c54928d4b221884e67a385a150a27c1",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "9ea00a5e19a0833d55c46b1461d5b2c950dd6f8bafc0115b22ffd2cf5c330bc5",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "3937fb202d99d58dd211161d0b7d46318d60a25582f8f9e7ad681252e962426f",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "e2b2189abd0473f59b251dac3a1fc567b1fa96d63dff8255cf4764bd33537297",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "3e4334f9ce7aede7062d528eb978638f1ce7577077c75a55c2f0bd9ca1390eb9",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "c2fdb5c149ef152d73ec3c0055551c311efba5823c44ced2e3f5bae92b312297",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "e2601c7bff6b54af2af972fbd3d37e5568accb320b90bba51117a7405314c434",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "dc2c05e995248b215ebe08de7d4ff0fbac33993ed32c1be815ee79d38678f5c2",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "65f71cf01fa178d33f3b4dada2a7786354fd9381b9d66b9641bc5f9d855aebec",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "b90565fc2268136ddd29f5efcb6c5c9fc99282d0cfaadcfaaf3a850c43d1a426",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "9527fae250f60914ddbe0f1cce619abe763b26b6c7c24b6bead09f2a3ef9d276",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "ad7777c06a7ee382e6b0a0da46641ffed9507c2751485b7f4fdee46e5e24150a",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "dd927f03fa37e0cf471c007e7e0f4fa7e13f6a54bdc229b9c9c24ada02c53ad4",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "b1e58444bef6bbc509fd8a69924145de6466be1be674f8fc0a196aebdd65a667",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "f61259a6922a204c27cd0c2eb8c3eb9904d60e5a208d59632cb481160097fa39",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "74808b21e3d41784eccdba794353038f9a0c3746148a7eb09cdd2f0501880dfc",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "3116f74ace7a3c1e18454f53b81163b22604dbf3d230db9bb4c587256772778f",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "28a9b9789129e0125f29a58aba849e1553a00979b94aa3fef843acc072e1fd4c",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "8c059d4fc0950e898df6f3b923d54b63223f91ea70004fcfdeda270dd654294e",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "4c99fa5d815025db459421ad05091799cca5287516d5899b0ba45f688fbe6a86",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "fe8f3fa8fa1c92a169a09ba6e6632ac4f39adcdd569e82c2511542402cdd0f87",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "7962644da5c044b282d33e5c3e2ad9e7c3f405c397537106351f717623a98ab3",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "128ae986b1980015a671532de265753246fd8bd0bf61344b8e7dc2db9cf0276c",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "344129ad7524b895cfc21a5a230f5ba1e5282d0a74426432a21ad6d669e9b927",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "5a9880140c5461a9f15774b9d09fd592ca1b09cdce7e0c82ebfe8f7c4dad1bc5",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "ccfc51f47d315305c1ab514c6dbd9a509557f2936c3f8a83e58679903d620516",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "c896b3f2eadecf69abd513bbae82e7772b5df51e53b636e9fe28901b26202d80",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "af347403263c11026ba529de411ef9d0d48319d7ab991f617422e24bc4418391",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "0ccae63d8c867a86c4772e2fe74d521b089e8afb1461060b6928318e221afed2",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "18a92ef540bef6d889d6f89de4e92b0767f1203e8f5be62a328ee09bbb1fdf3c",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "14f02a853b26c1dccd382ea152152ad3ecd64bc54db60352370a7005e14f1d7a",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "bc48cb4d20e7c598c4a3a003a95276532577b717b4dfb56fd30930f3b21bba57",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 47,
        "severity": "high",
        "title": "Discord bot token",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "0b1f9316176c2dc1e98b0f3538e01240055e2b77fa6db54007ce68293f119695",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
      },
      {
        "finding_type": 37,
        "severity": "info",
        "title": "Application data is backup-enabled",
        "redacted_display": "android:allowBackup=\"true\"",
        "fingerprint": "68d134f0bcd98a9559d6dd5275f80a3928e4a6490ac4a0f1bd16f87683bd49f8",
        "verified": false,
        "cwe": [
          "CWE-530",
          "CWE-312"
        ],
        "masvs": [
          "MASVS-STORAGE-1",
          "MASVS-STORAGE-2"
        ],
        "remediation": "Backup is on by default on Android; this manifest states it explicitly. If the app stores sensitive local data, define dataExtractionRules/fullBackupContent to exclude it, or set android:allowBackup=false."
      },
      {
        "finding_type": 2,
        "severity": "low",
        "title": "Firebase Realtime Database reference",
        "redacted_display": "https://██████████████.firebaseio.com/███",
        "fingerprint": "d9c0c06e392d5f79c1f81635f6a71c6cb96395189200b52459886c74a0909eee",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 20,
        "severity": "low",
        "title": "Google API key (client-shipped; restriction unverified)",
        "redacted_display": "AIza•••••••• (21–40 chars, redacted)",
        "fingerprint": "fbc57d51357d634da5d74acdf65a3990bc3e24bfcdacf7946abdeca15143cb78",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Restrict the API key (application + API restrictions in Google Cloud Console); a client-shipped key is public, so restriction is the control."
      },
      {
        "finding_type": 20,
        "severity": "low",
        "title": "Google API key (client-shipped; restriction unverified)",
        "redacted_display": "AIza•••••••• (21–40 chars, redacted)",
        "fingerprint": "459b615a9edc1ee07cfe5623184718696f0e80812c80ef4873ae2997852a82f2",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Restrict the API key (application + API restrictions in Google Cloud Console); a client-shipped key is public, so restriction is the control."
      },
      {
        "finding_type": 53,
        "severity": "low",
        "title": "Firebase Storage bucket reference",
        "redacted_display": "████████████",
        "fingerprint": "fed65109a001ae2c0b5691fb0c5bfa507b2e8af94c8cc1ba8293212e63a52251",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 62,
        "severity": "medium",
        "title": "com.squareup.okhttp3:okhttp 3.10.0 — CVE-2021-0341",
        "redacted_display": "CVE-2021-0341 (fixed in 4.9.2)",
        "fingerprint": "b35496237e28b68c8e0d69cddebe93abcbdeb329cec963569542cc48edb144a4",
        "verified": false,
        "cwe": [
          "CWE-937",
          "CWE-1104"
        ],
        "masvs": [
          "MASVS-CODE-3"
        ],
        "remediation": "Confirm the bundled version, then upgrade the dependency to a patched release; track third-party components in an SBOM."
      }
    ],
    "live_verification": {
      "verified_count": 0,
      "items": []
    },
    "trackers_count": 7,
    "pii": {
      "sources": 2,
      "identifiers": [
        "Advertising ID (AAID)",
        "Android ID",
        "Device ID / IMEI"
      ],
      "destinations": 4
    },
    "sbom": {
      "component_count": 67,
      "vuln_count": 1,
      "components": [
        {
          "name": "androidx.activity:activity",
          "version": "1.8.0",
          "cves": []
        },
        {
          "name": "androidx.activity:activity-ktx",
          "version": "1.8.0",
          "cves": []
        },
        {
          "name": "androidx.annotation:annotation-experimental",
          "version": "1.4.0",
          "cves": []
        },
        {
          "name": "androidx.appcompat:appcompat",
          "version": "1.7.0",
          "cves": []
        },
        {
          "name": "androidx.appcompat:appcompat-resources",
          "version": "1.7.0",
          "cves": []
        },
        {
          "name": "androidx.asynclayoutinflater:asynclayoutinflater",
          "version": "1.0.0",
          "cves": []
        },
        {
          "name": "androidx.browser:browser",
          "version": "1.4.0",
          "cves": []
        },
        {
          "name": "androidx.cardview:cardview",
          "version": "1.0.0",
          "cves": []
        },
        {
          "name": "androidx.coordinatorlayout:coordinatorlayout",
          "version": "1.1.0",
          "cves": []
        },
        {
          "name": "androidx.core:core",
          "version": "1.13.0",
          "cves": []
        },
        {
          "name": "androidx.core:core-ktx",
          "version": "1.13.0",
          "cves": []
        },
        {
          "name": "androidx.cursoradapter:cursoradapter",
          "version": "1.0.0",
          "cves": []
        },
        {
          "name": "androidx.customview:customview",
          "version": "1.1.0",
          "cves": []
        },
        {
          "name": "androidx.customview:customview-poolingcontainer",
          "version": "1.0.0",
          "cves": []
        },
        {
          "name": "androidx.datastore:datastore",
          "version": "1.1.7",
          "cves": []
        },
        {
          "name": "androidx.datastore:datastore-core",
          "version": "1.1.7",
          "cves": []
        },
        {
          "name": "androidx.datastore:datastore-preferences",
          "version": "1.1.7",
          "cves": []
        },
        {
          "name": "androidx.datastore:datastore-preferences-core",
          "version": "1.1.7",
          "cves": []
        },
        {
          "name": "androidx.documentfile:documentfile",
          "version": "1.0.0",
          "cves": []
        },
        {
          "name": "androidx.drawerlayout:drawerlayout",
          "version": "1.1.1",
          "cves": []
        },
        {
          "name": "androidx.dynamicanimation:dynamicanimation",
          "version": "1.0.0",
          "cves": []
        },
        {
          "name": "androidx.emoji2:emoji2",
          "version": "1.3.0",
          "cves": []
        },
        {
          "name": "androidx.emoji2:emoji2-views-helper",
          "version": "1.3.0",
          "cves": []
        },
        {
          "name": "androidx.exifinterface:exifinterface",
          "version": "1.3.6",
          "cves": []
        },
        {
          "name": "androidx.fragment:fragment",
          "version": "1.6.2",
          "cves": []
        },
        {
          "name": "androidx.fragment:fragment-ktx",
          "version": "1.6.2",
          "cves": []
        },
        {
          "name": "androidx.interpolator:interpolator",
          "version": "1.0.0",
          "cves": []
        },
        {
          "name": "androidx.legacy:legacy-support-core-ui",
          "version": "1.0.0",
          "cves": []
        },
        {
          "name": "androidx.legacy:legacy-support-core-utils",
          "version": "1.0.0",
          "cves": []
        },
        {
          "name": "androidx.legacy:legacy-support-v4",
          "version": "1.0.0",
          "cves": []
        },
        {
          "name": "androidx.lifecycle:lifecycle-extensions",
          "version": "2.2.0",
          "cves": []
        },
        {
          "name": "androidx.loader:loader",
          "version": "1.0.0",
          "cves": []
        },
        {
          "name": "androidx.localbroadcastmanager:localbroadcastmanager",
          "version": "1.0.0",
          "cves": []
        },
        {
          "name": "androidx.media:media",
          "version": "1.0.0",
          "cves": []
        },
        {
          "name": "androidx.navigation:navigation-common",
          "version": "2.7.7",
          "cves": []
        },
        {
          "name": "androidx.navigation:navigation-fragment",
          "version": "2.7.7",
          "cves": []
        },
        {
          "name": "androidx.navigation:navigation-runtime",
          "version": "2.7.7",
          "cves": []
        },
        {
          "name": "androidx.navigation:navigation-ui",
          "version": "2.7.7",
          "cves": []
        },
        {
          "name": "androidx.print:print",
          "version": "1.0.0",
          "cves": []
        },
        {
          "name": "androidx.privacysandbox.ads:ads-adservices",
          "version": "1.1.0-beta11",
          "cves": []
        },
        {
          "name": "androidx.privacysandbox.ads:ads-adservices-java",
          "version": "1.1.0-beta11",
          "cves": []
        },
        {
          "name": "androidx.profileinstaller:profileinstaller",
          "version": "1.3.1",
          "cves": []
        },
        {
          "name": "androidx.recyclerview:recyclerview",
          "version": "1.4.0",
          "cves": []
        },
        {
          "name": "androidx.recyclerview:recyclerview-selection",
          "version": "1.2.0-alpha01",
          "cves": []
        },
        {
          "name": "androidx.room:room-runtime",
          "version": "2.2.5",
          "cves": []
        },
        {
          "name": "androidx.savedstate:savedstate",
          "version": "1.2.1",
          "cves": []
        },
        {
          "name": "androidx.savedstate:savedstate-ktx",
          "version": "1.2.1",
          "cves": []
        },
        {
          "name": "androidx.slidingpanelayout:slidingpanelayout",
          "version": "1.2.0",
          "cves": []
        },
        {
          "name": "androidx.sqlite:sqlite",
          "version": "2.1.0",
          "cves": []
        },
        {
          "name": "androidx.sqlite:sqlite-framework",
          "version": "2.1.0",
          "cves": []
        },
        {
          "name": "androidx.startup:startup-runtime",
          "version": "1.1.1",
          "cves": []
        },
        {
          "name": "androidx.swiperefreshlayout:swiperefreshlayout",
          "version": "1.0.0",
          "cves": []
        },
        {
          "name": "androidx.tracing:tracing",
          "version": "1.0.0",
          "cves": []
        },
        {
          "name": "androidx.transition:transition",
          "version": "1.5.0",
          "cves": []
        },
        {
          "name": "androidx.vectordrawable:vectordrawable",
          "version": "1.1.0",
          "cves": []
        },
        {
          "name": "androidx.vectordrawable:vectordrawable-animated",
          "version": "1.1.0",
          "cves": []
        },
        {
          "name": "androidx.versionedparcelable:versionedparcelable",
          "version": "1.1.1",
          "cves": []
        },
        {
          "name": "androidx.viewpager2:viewpager2",
          "version": "1.1.0-beta02",
          "cves": []
        },
        {
          "name": "androidx.viewpager:viewpager",
          "version": "1.0.0",
          "cves": []
        },
        {
          "name": "androidx.webkit:webkit",
          "version": "1.11.0-alpha02",
          "cves": []
        },
        {
          "name": "androidx.window:window",
          "version": "1.0.0",
          "cves": []
        },
        {
          "name": "androidx.work:work-runtime",
          "version": "2.7.0",
          "cves": []
        },
        {
          "name": "com.google.android.material:material",
          "version": "1.12.0",
          "cves": []
        },
        {
          "name": "com.squareup.okhttp3:okhttp",
          "version": "3.10.0",
          "cves": [
            "CVE-2021-0341"
          ]
        },
        {
          "name": "kotlinx:coroutines_android",
          "version": "1.9.0",
          "cves": []
        },
        {
          "name": "kotlinx:coroutines_core",
          "version": "1.9.0",
          "cves": []
        },
        {
          "name": "kotlinx:coroutines_play_services",
          "version": "1.9.0",
          "cves": []
        }
      ]
    },
    "control_coverage": {
      "schema": "apk-scanner.coverage/v1",
      "framework": "OWASP MASVS v2",
      "disclaimer": "Static, metadata-only analysis. Each control is scored evidence-for / gap-signal / requires-manual-testing. This is evidence toward a MASVS assessment, NOT a certification — apk-scanner.com is not an authorized assessment lab. Absence of a static finding does not prove a control passes.",
      "rows": [
        {
          "control": "MASVS-STORAGE-1",
          "category": "STORAGE",
          "title": "The app securely stores sensitive data.",
          "static": "partial",
          "status": "gap-detected",
          "count": 109,
          "findings": [
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 47,
              "key": "discord_bot_token",
              "title": "Discord bot token",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 37,
              "key": "allow_backup",
              "title": "Application data is backup-enabled",
              "severity": "info",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                530,
                312
              ]
            },
            {
              "finding_type": 20,
              "key": "google_api_key",
              "title": "Google API key (client-shipped; restriction unverified)",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 20,
              "key": "google_api_key",
              "title": "Google API key (client-shipped; restriction unverified)",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                798
              ]
            }
          ]
        },
        {
          "control": "MASVS-STORAGE-2",
          "category": "STORAGE",
          "title": "The app prevents leakage of sensitive data.",
          "static": "partial",
          "status": "gap-detected",
          "count": 3,
          "findings": [
            {
              "finding_type": 37,
              "key": "allow_backup",
              "title": "Application data is backup-enabled",
              "severity": "info",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                530,
                312
              ]
            },
            {
              "finding_type": 2,
              "key": "firebase_rtdb",
              "title": "Firebase Realtime Database reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 53,
              "key": "firebase_storage",
              "title": "Firebase Storage bucket reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            }
          ]
        },
        {
          "control": "MASVS-CRYPTO-1",
          "category": "CRYPTO",
          "title": "The app employs current strong cryptography and uses it according to best practices.",
          "static": "partial",
          "status": "no-static-findings",
          "count": 0,
          "findings": []
        },
        {
          "control": "MASVS-CRYPTO-2",
          "category": "CRYPTO",
          "title": "The app performs key management according to best practices.",
          "static": "partial",
          "status": "no-static-findings",
          "count": 0,
          "findings": []
        },
        {
          "control": "MASVS-AUTH-1",
          "category": "AUTH",
          "title": "The app uses secure authentication and authorization protocols.",
          "static": "manual",
          "status": "requires-manual-testing",
          "count": 0,
          "findings": []
        },
        {
          "control": "MASVS-AUTH-2",
          "category": "AUTH",
          "title": "The app performs local authentication securely.",
          "static": "manual",
          "status": "requires-manual-testing",
          "count": 0,
          "findings": []
        },
        {
          "control": "MASVS-AUTH-3",
          "category": "AUTH",
          "title": "The app secures sensitive operations with additional authentication.",
          "static": "manual",
          "status": "requires-manual-testing",
          "count": 0,
          "findings": []
        },
        {
          "control": "MASVS-NETWORK-1",
          "category": "NETWORK",
          "title": "The app secures all network traffic according to current best practices.",
          "static": "yes",
          "status": "no-static-findings",
          "count": 0,
          "findings": []
        },
        {
          "control": "MASVS-NETWORK-2",
          "category": "NETWORK",
          "title": "The app verifies the identity of the remote endpoint (e.g. certificate pinning).",
          "static": "partial",
          "status": "no-static-findings",
          "count": 0,
          "findings": []
        },
        {
          "control": "MASVS-PLATFORM-1",
          "category": "PLATFORM",
          "title": "The app uses IPC mechanisms securely.",
          "static": "yes",
          "status": "no-static-findings",
          "count": 0,
          "findings": []
        },
        {
          "control": "MASVS-PLATFORM-2",
          "category": "PLATFORM",
          "title": "The app uses WebViews securely.",
          "static": "partial",
          "status": "no-static-findings",
          "count": 0,
          "findings": []
        },
        {
          "control": "MASVS-PLATFORM-3",
          "category": "PLATFORM",
          "title": "The app uses the user interface securely.",
          "static": "manual",
          "status": "requires-manual-testing",
          "count": 0,
          "findings": []
        },
        {
          "control": "MASVS-CODE-1",
          "category": "CODE",
          "title": "The app requires an up-to-date platform version.",
          "static": "yes",
          "status": "no-static-findings",
          "count": 0,
          "findings": []
        },
        {
          "control": "MASVS-CODE-2",
          "category": "CODE",
          "title": "The app has a mechanism for enforcing updates.",
          "static": "manual",
          "status": "requires-manual-testing",
          "count": 0,
          "findings": []
        },
        {
          "control": "MASVS-CODE-3",
          "category": "CODE",
          "title": "The app only uses software components without known vulnerabilities.",
          "static": "yes",
          "status": "gap-detected",
          "count": 1,
          "findings": [
            {
              "finding_type": 62,
              "key": "sbom_cve",
              "title": "com.squareup.okhttp3:okhttp 3.10.0 — CVE-2021-0341",
              "severity": "medium",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                937,
                1104
              ]
            }
          ]
        },
        {
          "control": "MASVS-CODE-4",
          "category": "CODE",
          "title": "The app validates and sanitizes all untrusted inputs and follows secure-coding practice.",
          "static": "partial",
          "status": "no-static-findings",
          "count": 0,
          "findings": []
        },
        {
          "control": "MASVS-RESILIENCE-1",
          "category": "RESILIENCE",
          "title": "The app validates the integrity of the platform.",
          "static": "manual",
          "status": "requires-manual-testing",
          "count": 0,
          "findings": []
        },
        {
          "control": "MASVS-RESILIENCE-2",
          "category": "RESILIENCE",
          "title": "The app implements anti-tampering mechanisms.",
          "static": "manual",
          "status": "requires-manual-testing",
          "count": 0,
          "findings": []
        },
        {
          "control": "MASVS-RESILIENCE-3",
          "category": "RESILIENCE",
          "title": "The app implements anti-static-analysis mechanisms.",
          "static": "manual",
          "status": "requires-manual-testing",
          "count": 0,
          "findings": []
        },
        {
          "control": "MASVS-RESILIENCE-4",
          "category": "RESILIENCE",
          "title": "The app implements anti-dynamic-analysis techniques.",
          "static": "manual",
          "status": "requires-manual-testing",
          "count": 0,
          "findings": []
        },
        {
          "control": "MASVS-PRIVACY-1",
          "category": "PRIVACY",
          "title": "The app minimizes access to sensitive data and resources.",
          "static": "yes",
          "status": "no-static-findings",
          "count": 0,
          "findings": []
        },
        {
          "control": "MASVS-PRIVACY-2",
          "category": "PRIVACY",
          "title": "The app prevents identification of the user.",
          "static": "yes",
          "status": "no-static-findings",
          "count": 0,
          "findings": []
        },
        {
          "control": "MASVS-PRIVACY-3",
          "category": "PRIVACY",
          "title": "The app is transparent about data collection and usage.",
          "static": "yes",
          "status": "no-static-findings",
          "count": 0,
          "findings": []
        },
        {
          "control": "MASVS-PRIVACY-4",
          "category": "PRIVACY",
          "title": "The app offers user control over their data.",
          "static": "manual",
          "status": "requires-manual-testing",
          "count": 0,
          "findings": []
        }
      ],
      "categories": [
        {
          "category": "STORAGE",
          "controls": 2,
          "gaps": 2,
          "verified": 0,
          "manual": 0
        },
        {
          "category": "CRYPTO",
          "controls": 2,
          "gaps": 0,
          "verified": 0,
          "manual": 0
        },
        {
          "category": "AUTH",
          "controls": 3,
          "gaps": 0,
          "verified": 0,
          "manual": 3
        },
        {
          "category": "NETWORK",
          "controls": 2,
          "gaps": 0,
          "verified": 0,
          "manual": 0
        },
        {
          "category": "PLATFORM",
          "controls": 3,
          "gaps": 0,
          "verified": 0,
          "manual": 1
        },
        {
          "category": "CODE",
          "controls": 4,
          "gaps": 1,
          "verified": 0,
          "manual": 1
        },
        {
          "category": "RESILIENCE",
          "controls": 4,
          "gaps": 0,
          "verified": 0,
          "manual": 4
        },
        {
          "category": "PRIVACY",
          "controls": 4,
          "gaps": 0,
          "verified": 0,
          "manual": 1
        }
      ]
    }
  },
  "proof": {
    "alg": "ed25519",
    "key_id": "IE6LeZNX4dAAPLGr",
    "digest_sha256": "d564fdf98203491eccc5f37bb3016867997f766eddbb86622c8984afd009bae0",
    "signature": "VxxVcDiRz124IXMIrGzumWqf6sT8hZHGdziIcT3pG1Bh7WC2xGcqJbNCq4IXGMgy0UdHHWS02sW/An2R8HeyCg==",
    "public_key_pem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAwH2fYdYB5nD0CQslDtG3FgafcJBoOX2OGoT80Woksrk=\n-----END PUBLIC KEY-----\n",
    "verify_url": "https://apk-scanner.com/verify"
  }
}