{
  "ok": true,
  "app_id": "com.coinbase.android",
  "comparable": false,
  "comparison_status": "limited_coverage",
  "regressed": null,
  "grade_delta": null,
  "score_delta": null,
  "from": {
    "scan_id": "a6c202b9-272f-4481-a154-261db681eba3",
    "version": "14.32.25",
    "analysis": {
      "status": "unknown"
    },
    "provenance": {},
    "grade": "A",
    "score": 96,
    "scanned_at": "2026-09-02T10:02:20.363Z"
  },
  "to": {
    "scan_id": "f3176517-d982-48bc-804d-a05e7a158eff",
    "version": "14.34.37",
    "analysis": {
      "issues": [
        "string_output_limit"
      ],
      "stages": {
        "pii": "complete",
        "sbom": "complete",
        "signing": "certificate_parsed",
        "strings": "partial",
        "manifest": "complete"
      },
      "status": "partial",
      "grading": {
        "policy": "static-coverage-v1",
        "blockers": [
          "analysis_incomplete",
          "string_output_limit",
          "strings_coverage_unavailable"
        ],
        "eligible": false
      },
      "timings_ms": {
        "total": 57803.473,
        "harvest": 9077.307999999975,
        "detectors": 46156.8969999999
      },
      "bytes_total": 310351044,
      "bytes_scanned": 233008064,
      "bytes_skipped": 77342980,
      "files_processed": 5432,
      "coverage_version": 2,
      "string_encodings": [
        "ascii",
        "utf16le"
      ],
      "signature_validation": "not_performed"
    },
    "provenance": {
      "mode": "static",
      "artifacts": [
        {
          "name": "base.apk",
          "sha256": "33701cbb716a3152e68748d81a2974f0116ff181b0a6bed2afb2d6e548b1de73"
        },
        {
          "name": "config.arm64_v8a.apk",
          "sha256": "9d26ad9bb37b2f53a278a1be75b496698247889737da4dd860307bc49fbabb06"
        },
        {
          "name": "config.en.apk",
          "sha256": "f224fafa39ae7ba8275cfaacc2407dcb6aaa3232a02f91836b517ab70c421913"
        },
        {
          "name": "config.xxhdpi.apk",
          "sha256": "85e8d5402aead4288a4bff543b27e58992799ebc5410458adc3620aa487b69d0"
        }
      ],
      "ruleset_sha256": "fb649a88cc2e66d8cb5b3c389ee4628bf97383e131015c594e187dc06eabcef7"
    },
    "grade": "?",
    "score": null,
    "scanned_at": "2026-09-16T12:52:34.569Z"
  },
  "findings": {
    "added": [
      {
        "finding_type": 20,
        "severity": "low",
        "title": "Google API key (client-shipped; restriction unverified)",
        "fingerprint": "4193216734219595d38561b6d8f89ed7a2562ffd3dedb272217cfe3de9f7da20",
        "verified": false
      },
      {
        "finding_type": 2,
        "severity": "low",
        "title": "Firebase Realtime Database reference",
        "fingerprint": "23442516e84479ddaa7c550ec76bd11265eacb9da03127d755d06dd7599092d0",
        "verified": false
      },
      {
        "finding_type": 53,
        "severity": "low",
        "title": "Firebase Storage bucket reference",
        "fingerprint": "c84daf9bad68c2e00c6c945c6cc40bed2b7c873ac601ab99afb0a40a15880c72",
        "verified": false
      },
      {
        "finding_type": 72,
        "severity": "low",
        "title": "Sentry DSN",
        "fingerprint": "4ff33ef227af81603528d645093ffbe4a13428bfe1bcb6c0e31e4dbbfebb6dc3",
        "verified": false
      },
      {
        "finding_type": 72,
        "severity": "low",
        "title": "Sentry DSN",
        "fingerprint": "33f360f8e35bced46a201372d6d967dcc0e71a8790e7e1446b71f9a0a0c3d8f1",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "ceee9f8192b3d6a9567d3847f8a3f171084d15074f82775d431a064605a966c0",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "81454a97de1d5e272cc9f209622800cd936c63c7e6b27df2738652517b0f7237",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "ee311040b73f798aa6b53a591c4aa14382f5a59d8bc9df0243e97d15f3b2f85c",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "817e1efcb1a85470e3f2028ff7a4f569e0641ba78069d645e8da75da3b649518",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "19a95215fa6fe3402563359c9adf6a70e9d4fbae8da578d19560464a77ce0eaf",
        "verified": false
      },
      {
        "finding_type": 72,
        "severity": "low",
        "title": "Sentry DSN",
        "fingerprint": "0fe42abc6d6f97fce2f0cab7bb27e442f0b5678db84d2ca82c4ac85559b02a2a",
        "verified": false
      },
      {
        "finding_type": 72,
        "severity": "low",
        "title": "Sentry DSN",
        "fingerprint": "0cae72a4dfd0d6899a5cbbf9d4ba3c10e9b69bae5ac3dfe9dcacc4e57bd93b84",
        "verified": false
      },
      {
        "finding_type": 72,
        "severity": "low",
        "title": "Sentry DSN",
        "fingerprint": "a45044d9191629cde261e4b1a908a89dd3dc3b0d1e8c08286425acdaee599728",
        "verified": false
      },
      {
        "finding_type": 72,
        "severity": "low",
        "title": "Sentry DSN",
        "fingerprint": "980f6bfab0e72607846f477595741e06ca1e353572abad4b062de66de3546214",
        "verified": false
      },
      {
        "finding_type": 77,
        "severity": "low",
        "title": "Data Safety label omits Calendar",
        "fingerprint": "2a94ef25c6a64a2fcc33bcb8d2ada6376b418ddfa745771aa213e568d5afb277",
        "verified": false
      },
      {
        "finding_type": 77,
        "severity": "low",
        "title": "Data Safety label omits Contacts",
        "fingerprint": "52d6df5eafe80ad7de0275ee425de0bf8d715439e92a9026117bea4d546827d0",
        "verified": false
      },
      {
        "finding_type": 78,
        "severity": "medium",
        "title": "Ships third-party ad/analytics SDKs but Data Safety declares no data shared",
        "fingerprint": "2b54e044aaab4c3f757c82024e4d291eb1074bc851c642350ce6faee6f887e08",
        "verified": false
      }
    ],
    "removed": [
      {
        "finding_type": 20,
        "severity": "low",
        "title": "Google API key (client-shipped; restriction unverified)",
        "fingerprint": "7360c72f455d5a29b9ca33888c59d22161f211eb403bc9f4d327140fcaddb517",
        "verified": false
      },
      {
        "finding_type": 2,
        "severity": "low",
        "title": "Firebase Realtime Database reference",
        "fingerprint": "e5fe0a753b0a176f4d8f7ca47900cfaf728b84ecc7068ebdee3310a941112e6e",
        "verified": false
      },
      {
        "finding_type": 53,
        "severity": "low",
        "title": "Firebase Storage bucket reference",
        "fingerprint": "66c23f193e81c91c6e0b772bfb83cd24a2cb1b8b3b560515d2b52d4d6b105457",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "df943670c3ffc31ab40c2514220a649c255272c3ec59612793a68a375fe2751a",
        "verified": false
      }
    ],
    "persisting_count": 0,
    "added_by_sev": {
      "critical": 0,
      "high": 0,
      "medium": 1,
      "low": 16
    },
    "removed_by_sev": {
      "critical": 0,
      "high": 0,
      "medium": 0,
      "low": 4
    }
  },
  "trackers": {
    "added": [
      "IAB TCF"
    ],
    "removed": []
  },
  "known_vulns": {
    "from": 0,
    "to": 0,
    "delta": 0,
    "from_recorded": true,
    "to_recorded": true
  }
}