{
  "ok": true,
  "app_id": "com.armstrongsoft.camphatteras",
  "comparable": false,
  "comparison_status": "limited_coverage",
  "regressed": true,
  "grade_delta": null,
  "score_delta": null,
  "from": {
    "scan_id": "35f7d735-c2a5-4be7-91a4-754cd4f72c63",
    "version": "1.0.15",
    "analysis": {
      "status": "unknown"
    },
    "provenance": {},
    "grade": "D",
    "score": 35,
    "scanned_at": "2026-09-02T11:45:56.894Z"
  },
  "to": {
    "scan_id": "8c200736-9673-4b5c-b3af-15a0e367cca4",
    "version": "1.0.15",
    "analysis": {
      "issues": [],
      "stages": {
        "pii": "complete",
        "sbom": "complete",
        "signing": "certificate_parsed",
        "strings": "complete",
        "manifest": "complete"
      },
      "status": "complete",
      "grading": {
        "policy": "static-coverage-v1",
        "blockers": [],
        "eligible": true
      },
      "timings_ms": {
        "total": 14624.515,
        "harvest": 4273.745999999997,
        "detectors": 9181.352000000057
      },
      "bytes_total": 83025660,
      "bytes_scanned": 83025660,
      "bytes_skipped": 0,
      "files_processed": 2316,
      "coverage_version": 2,
      "string_encodings": [
        "ascii",
        "utf16le"
      ],
      "signature_validation": "not_performed"
    },
    "provenance": {
      "mode": "static",
      "artifacts": [
        {
          "name": "base.apk",
          "sha256": "48d3eee54016ecede4dde5a95d44d528a35a358cc1fadf1fdcb39e494dc0d06d"
        },
        {
          "name": "config.arm64_v8a.apk",
          "sha256": "c48405463535b0056229cf21684c7ca08b36ae73dbea1061c52c1ce27425b7fb"
        },
        {
          "name": "config.en.apk",
          "sha256": "1f6d40430f936faf59b0b2044d3320f440abdc7e45d34af940e2733f12f2d1b7"
        },
        {
          "name": "config.xxhdpi.apk",
          "sha256": "b95dfa4c197c0184d7c40878d96ba04284463afb43bad36bc21e91fa2e57f701"
        }
      ],
      "ruleset_sha256": "3bb79cc3710b0fb021feaa322578f4cffe08396a97c51b34df092b5a05891d5e"
    },
    "grade": "D",
    "score": 36,
    "scanned_at": "2026-10-06T15:44:21.323Z"
  },
  "findings": {
    "added": [
      {
        "finding_type": 20,
        "severity": "low",
        "title": "Google API key (client-shipped; restriction unverified)",
        "fingerprint": "530178f621728589a4515ee4ae1fb63c9606c619b9405d993a815b0194077046",
        "verified": false
      },
      {
        "finding_type": 2,
        "severity": "low",
        "title": "Firebase Realtime Database reference",
        "fingerprint": "3bbb81594716ca277f040e254242ddae988a65d6bff7620b2837d3a0b665fc8a",
        "verified": false
      },
      {
        "finding_type": 53,
        "severity": "critical",
        "title": "Firebase Storage bucket reference — confirmed publicly readable",
        "fingerprint": "df4720ff1db04d3db066ef7b23cae0b8075cd625a608eb1b71208e4487233664",
        "verified": true
      },
      {
        "finding_type": 20,
        "severity": "low",
        "title": "Google API key (client-shipped; restriction unverified)",
        "fingerprint": "7b24794f4bcca36e9dd6355ee4e7377039b2a1cbbced4163dd8f88933d47cd49",
        "verified": false
      },
      {
        "finding_type": 34,
        "severity": "medium",
        "title": "Cleartext (HTTP) traffic permitted",
        "fingerprint": "94025ca91177232efea2d52d976e37f967866402c6e01f481a8de610b8e478e7",
        "verified": false
      },
      {
        "finding_type": 37,
        "severity": "info",
        "title": "Application data is backup-enabled",
        "fingerprint": "68d134f0bcd98a9559d6dd5275f80a3928e4a6490ac4a0f1bd16f87683bd49f8",
        "verified": false
      },
      {
        "finding_type": 60,
        "severity": "low",
        "title": "Background location access with advertising SDKs present",
        "fingerprint": "0c010d775be9542eee48043eb496c06888f9b8e8fcdf3af66a6b84e99192f6ce",
        "verified": false
      }
    ],
    "removed": [
      {
        "finding_type": 20,
        "severity": "low",
        "title": "Google API key (client-shipped; restriction unverified)",
        "fingerprint": "accbc0535637e610a21f18f709520d274e7d242899413f1a41beea126b67fe11",
        "verified": false
      },
      {
        "finding_type": 2,
        "severity": "low",
        "title": "Firebase Realtime Database reference",
        "fingerprint": "bdb56224f5d5cef0674f9072c87cce33d0df19f56f5c44d3564956d6a332eedf",
        "verified": false
      },
      {
        "finding_type": 53,
        "severity": "critical",
        "title": "Firebase Storage bucket reference — confirmed publicly readable",
        "fingerprint": "0c5a2a9e6b6a523a113b9dd9f1ad5ef4598235b01ffaf0dad8761d4b51ffaa40",
        "verified": true
      },
      {
        "finding_type": 20,
        "severity": "low",
        "title": "Google API key (client-shipped; restriction unverified)",
        "fingerprint": "f0535176fa82f2a963a0e99514f692dd32c6610df1197b77104c83533a2e1f48",
        "verified": false
      },
      {
        "finding_type": 34,
        "severity": "medium",
        "title": "Cleartext (HTTP) traffic permitted",
        "fingerprint": "cb46c44cd0500b927ddd01f9e4dcfa5c6d153e5e0bc975b6b15004181d0e1387",
        "verified": false
      },
      {
        "finding_type": 37,
        "severity": "low",
        "title": "Application data is backup-enabled",
        "fingerprint": "d3416964a26a93aeec0126ea1bb43b17c4aba66f0c76c2dc8ebd02d06ec4ef49",
        "verified": false
      },
      {
        "finding_type": 60,
        "severity": "low",
        "title": "Background location access with advertising SDKs present",
        "fingerprint": "fb67d0eee43d47ebaf2986da1c709b5c711f77a5b4416768a75918f9d061990e",
        "verified": false
      }
    ],
    "persisting_count": 0,
    "added_by_sev": {
      "critical": 1,
      "high": 0,
      "medium": 1,
      "low": 4
    },
    "removed_by_sev": {
      "critical": 1,
      "high": 0,
      "medium": 1,
      "low": 5
    }
  },
  "trackers": {
    "added": [
      "Google Analytics for Firebase",
      "IAB TCF"
    ],
    "removed": [
      "Google AdServices"
    ]
  },
  "known_vulns": {
    "from": 1,
    "to": 0,
    "delta": -1,
    "from_recorded": true,
    "to_recorded": true
  }
}