{
  "ok": true,
  "app_id": "com.apisconnect.habitanto",
  "comparable": false,
  "comparison_status": "limited_coverage",
  "regressed": true,
  "grade_delta": null,
  "score_delta": null,
  "from": {
    "scan_id": "a605c6f5-c659-4541-8e45-81c4e8fb1bdb",
    "version": "5.4.9",
    "analysis": {
      "status": "unknown"
    },
    "provenance": {},
    "grade": "D",
    "score": 42,
    "scanned_at": "2026-09-03T00:31:45.592Z"
  },
  "to": {
    "scan_id": "def3ba56-b8f7-4da9-8d47-c9277d3d58b7",
    "version": "5.4.18",
    "analysis": {
      "issues": [],
      "stages": {
        "pii": "complete",
        "sbom": "complete",
        "signing": "certificate_parsed",
        "strings": "complete",
        "manifest": "complete"
      },
      "status": "complete",
      "grading": {
        "policy": "static-coverage-v1",
        "blockers": [],
        "eligible": true
      },
      "timings_ms": {
        "total": 8452.274,
        "harvest": 3195.6220000000017,
        "detectors": 4596.930000000005
      },
      "bytes_total": 64342684,
      "bytes_scanned": 64342684,
      "bytes_skipped": 0,
      "files_processed": 1121,
      "coverage_version": 2,
      "string_encodings": [
        "ascii",
        "utf16le"
      ],
      "signature_validation": "not_performed"
    },
    "provenance": {
      "mode": "static",
      "artifacts": [
        {
          "name": "base.apk",
          "sha256": "91d46ba2c53e30d8dc07a8b38699f3e8b070a24afdf91c85f2698989299aae5c"
        },
        {
          "name": "config.arm64_v8a.apk",
          "sha256": "6e3e411160bd553b2e6a5c650a0584d6b4a06f54a59a7f0b2b998da222d62124"
        },
        {
          "name": "config.en.apk",
          "sha256": "c3c996f78da38c654dfd03d53d07fe5a87269f90c674b88f878945e45fb7c046"
        },
        {
          "name": "config.es.apk",
          "sha256": "130b426caa51553eae97ef112f3c3b16aadb3c884547a0d07c608de92e32b104"
        },
        {
          "name": "config.xxhdpi.apk",
          "sha256": "5eb695f26aae196089784684cfa1e0aabdcc3c480a3ceeb6026a966e1822e8ba"
        }
      ],
      "ruleset_sha256": "3bb79cc3710b0fb021feaa322578f4cffe08396a97c51b34df092b5a05891d5e"
    },
    "grade": "D",
    "score": 42,
    "scanned_at": "2026-10-06T21:09:34.255Z"
  },
  "findings": {
    "added": [
      {
        "finding_type": 20,
        "severity": "low",
        "title": "Google API key (client-shipped; restriction unverified)",
        "fingerprint": "a39248b5f31fdf31c2b80f3831855fdd9f65e0025a3b66362510dc29c7a3ec74",
        "verified": false
      },
      {
        "finding_type": 2,
        "severity": "low",
        "title": "Firebase Realtime Database reference",
        "fingerprint": "d9b47cb98dee736524fcbad8bce4ad8db5aa6d183ccdf03d6320de438576adc3",
        "verified": false
      },
      {
        "finding_type": 53,
        "severity": "critical",
        "title": "Firebase Storage bucket reference — confirmed publicly readable",
        "fingerprint": "a539b711d465dcd791773be9717622a39db9b1ebb981fbfbeee12815c904c6e4",
        "verified": true
      },
      {
        "finding_type": 20,
        "severity": "low",
        "title": "Google API key (client-shipped; restriction unverified)",
        "fingerprint": "3040e363d3ce3a512aa3697f99c6fb9a44b9f7bd7cda305767eaa1af03442d33",
        "verified": false
      },
      {
        "finding_type": 20,
        "severity": "low",
        "title": "Google API key (client-shipped; restriction unverified)",
        "fingerprint": "d59de99addff49f42bdee55a2974311ca15b9cf202ee11215dadb3db0b98bb12",
        "verified": false
      },
      {
        "finding_type": 53,
        "severity": "low",
        "title": "Firebase Storage bucket reference",
        "fingerprint": "98f5ac96c18ecf37a65fe622250971a0e6d633731fe4323e2af21e03256acc3a",
        "verified": false
      },
      {
        "finding_type": 53,
        "severity": "low",
        "title": "Firebase Storage bucket reference",
        "fingerprint": "6da605c01a32d6178ae1e6876876e3de02277efaeb0bf30b781056b6efdcc7a8",
        "verified": false
      },
      {
        "finding_type": 53,
        "severity": "low",
        "title": "Firebase Storage bucket reference",
        "fingerprint": "b6e2cb8eb4bf3d0a7bcb1c02e7aaa6b80181f3fefcd2655ab608c7c76f9d6977",
        "verified": false
      }
    ],
    "removed": [
      {
        "finding_type": 20,
        "severity": "low",
        "title": "Google API key (client-shipped; restriction unverified)",
        "fingerprint": "7c9fb2a11909685f7b8e374ebca660ffa52e257460e03b2de7ba361e27e52300",
        "verified": false
      },
      {
        "finding_type": 2,
        "severity": "low",
        "title": "Firebase Realtime Database reference",
        "fingerprint": "63090433d3e9738bd37bd85e5e5d81c90c691fa832c3c581c7fd95cb99ec6cb0",
        "verified": false
      },
      {
        "finding_type": 53,
        "severity": "critical",
        "title": "Firebase Storage bucket reference — confirmed publicly readable",
        "fingerprint": "16b8e19b41c43027f66b47fd86fa09363e2440004139186fb3ce3aa5383ab15f",
        "verified": true
      },
      {
        "finding_type": 20,
        "severity": "low",
        "title": "Google API key (client-shipped; restriction unverified)",
        "fingerprint": "5d83d2d05fce22e8d959357976f5c474212cce1a1e7aea9bdbe7bf4a1edbaf3e",
        "verified": false
      },
      {
        "finding_type": 53,
        "severity": "low",
        "title": "Firebase Storage bucket reference",
        "fingerprint": "d9012310f7f6aa341517ef59e733bcde2998b2cf6a8c99ae2e41b357bb04adbc",
        "verified": false
      },
      {
        "finding_type": 53,
        "severity": "low",
        "title": "Firebase Storage bucket reference",
        "fingerprint": "9d4be2254319c988e5df02c147df9a8e1a8ca7ec3e0bbbe4aee9e15abdec0a33",
        "verified": false
      },
      {
        "finding_type": 53,
        "severity": "low",
        "title": "Firebase Storage bucket reference",
        "fingerprint": "17b713574b29d02a8b1ceb56674afa24af24553eee325b356fcd00c32ad8459a",
        "verified": false
      }
    ],
    "persisting_count": 0,
    "added_by_sev": {
      "critical": 1,
      "high": 0,
      "medium": 0,
      "low": 7
    },
    "removed_by_sev": {
      "critical": 1,
      "high": 0,
      "medium": 0,
      "low": 6
    }
  },
  "trackers": {
    "added": [
      "Google Analytics for Firebase",
      "IAB TCF"
    ],
    "removed": [
      "Google AdServices"
    ]
  },
  "known_vulns": {
    "from": 0,
    "to": 0,
    "delta": 0,
    "from_recorded": true,
    "to_recorded": true
  }
}