{
  "ok": true,
  "app_id": "com.bagatrix.mathway.android",
  "comparable": false,
  "comparison_status": "limited_coverage",
  "regressed": true,
  "grade_delta": null,
  "score_delta": null,
  "from": {
    "scan_id": "e658798b-d0fa-4c4b-80ca-aa33b3f32a31",
    "version": "6.12.0",
    "analysis": {
      "status": "unknown"
    },
    "provenance": {},
    "grade": "C",
    "score": 72,
    "scanned_at": "2026-09-04T20:23:04.592Z"
  },
  "to": {
    "scan_id": "10202f7b-2028-492a-9b55-bbefaebaae05",
    "version": "6.13.0",
    "analysis": {
      "issues": [],
      "stages": {
        "pii": "complete",
        "sbom": "complete",
        "signing": "certificate_parsed",
        "strings": "complete",
        "manifest": "complete"
      },
      "status": "complete",
      "grading": {
        "policy": "static-coverage-v1",
        "blockers": [],
        "eligible": true
      },
      "timings_ms": {
        "total": 17593.138,
        "harvest": 3843.314,
        "detectors": 12583.860999999995
      },
      "bytes_total": 69333708,
      "bytes_scanned": 69333708,
      "bytes_skipped": 0,
      "files_processed": 2313,
      "coverage_version": 2,
      "string_encodings": [
        "ascii",
        "utf16le"
      ],
      "signature_validation": "not_performed"
    },
    "provenance": {
      "mode": "static",
      "artifacts": [
        {
          "name": "base.apk",
          "sha256": "910cc97fa5c0b097fe20fb1379c8533636203142a1b7f564c707092cb06916d4"
        },
        {
          "name": "config.arm64_v8a.apk",
          "sha256": "3dbb702f85c0ca14e014da5a77da5ccc91f4c0918886307892304a8451659192"
        },
        {
          "name": "config.xxhdpi.apk",
          "sha256": "0ba1b8f68c3c7e036e9f7c327f603112356efa65b7d56ded73c9302ad3c74484"
        }
      ],
      "ruleset_sha256": "a4c4120389ccc4b44afa23b5786f6b8d2bf3dc47ca546355bb3ef6da4a54b513"
    },
    "grade": "B",
    "score": 79,
    "scanned_at": "2026-09-30T17:10:27.659Z"
  },
  "findings": {
    "added": [
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "8dc4f1249deae17b147b47bcc8f3081d6ba04a2f374c2c1cf2aa28f226667f4c",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "fe7f06831b78b44a9fb8a5ffa12f8c57d507f8f12c696019a032340fd626ac30",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "7375bc632b4a9f10e9019b9da361613251040ecab889292d33f1db0cd88c7bdb",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "8746464ee1f2b3de4843658bb20831bea2973cad508d7ac73f30a6e033228f89",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "9e89f185d3f1bcdae7c87b7cf6c9a00ec9b35a99c928a2050c1abc9f42623c69",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "f342376b57641dac7b2b40c9f89210bcc8b4da75c198778a849de8c1ee9bbfe6",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "b2d111bf6bc13e851e092a4e07e02e206894443764e0c31b5f919df682300fc7",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "0a5dcf9bb55224e044e12d943f26028dd54836212bdff57a46704a6257c4a58c",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "95a9e34c1946d0cebf5fc4fb5a534f7cbe14d143a9e155201ec510603a74a24c",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "69bf4beb9c24faaf9a1d67402f1b96206f4dfe583f517004a9ba5f2d8841b270",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "687c54d384459fa9e61688a66963caa481d631dc137c55674a16536798b7e9c8",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "fd69231487e2fabefd0fdedc24a996d421175178c239035f05cd481856c36c73",
        "verified": false
      },
      {
        "finding_type": 31,
        "severity": "high",
        "title": "Slack incoming webhook URL",
        "fingerprint": "7b1ab64ecca72f55a10c07a281859932bb1e2cb71b684446698f7fbd64378d64",
        "verified": false
      },
      {
        "finding_type": 20,
        "severity": "low",
        "title": "Google API key (client-shipped; restriction unverified)",
        "fingerprint": "ad52e2cd727a43d940b071a2965b7457f1debdc4876cbdfe8c1c642b02ad5978",
        "verified": false
      },
      {
        "finding_type": 2,
        "severity": "low",
        "title": "Firebase Realtime Database reference",
        "fingerprint": "226c93cccba06bb156e437480c1f5a14ebd526a1347057734bb6264830adfd99",
        "verified": false
      }
    ],
    "removed": [
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "632be797875a3ebba210838beacecf97f5ac8b0cecb31480287014a1d43939d5",
        "verified": false
      },
      {
        "finding_type": 31,
        "severity": "high",
        "title": "Slack incoming webhook URL",
        "fingerprint": "70a48a745d50f8bc4bc25a42567576e62eae329629e2ac2382252832930d7172",
        "verified": false
      },
      {
        "finding_type": 20,
        "severity": "low",
        "title": "Google API key (client-shipped; restriction unverified)",
        "fingerprint": "f994fdef728a3ae60d9d419971dd8a395951eea3e5f20687c074833642ac458f",
        "verified": false
      },
      {
        "finding_type": 2,
        "severity": "low",
        "title": "Firebase Realtime Database reference",
        "fingerprint": "1e9310c2f4819ee70f04bd2c946a6773453dce41b597844deae71ef4cde8e904",
        "verified": false
      },
      {
        "finding_type": 77,
        "severity": "low",
        "title": "Data Safety label omits Contacts",
        "fingerprint": "38151aa20c8ccd2e1d72f12d1735b09ff5ac035bcec20c1114af2739bcabc70f",
        "verified": false
      },
      {
        "finding_type": 78,
        "severity": "medium",
        "title": "Ships third-party ad/analytics SDKs but Data Safety declares no data shared",
        "fingerprint": "83da7ab9e68685bd851b079a3d4595ee01f3c876a89e9d3c932fd3694df414a8",
        "verified": false
      }
    ],
    "persisting_count": 0,
    "added_by_sev": {
      "critical": 0,
      "high": 1,
      "medium": 0,
      "low": 14
    },
    "removed_by_sev": {
      "critical": 0,
      "high": 1,
      "medium": 1,
      "low": 4
    }
  },
  "trackers": {
    "added": [
      "Google Analytics for Firebase",
      "IAB TCF",
      "OneTrust CMP"
    ],
    "removed": [
      "Google AdServices"
    ]
  },
  "known_vulns": {
    "from": 0,
    "to": 0,
    "delta": 0,
    "from_recorded": true,
    "to_recorded": true
  }
}