{
  "capsule": {
    "schema": "apk-scanner.proof/v2",
    "issuer": "apk-scanner.com",
    "issued_at": "2026-10-13T15:52:41.012Z",
    "app": {
      "app_id": "com.darinsoft.vimo",
      "title": "VLLO - Video Editor Vlog Edits",
      "version": "13.9.2"
    },
    "analysis": {
      "issues": [],
      "stages": {
        "pii": "complete",
        "sbom": "complete",
        "signing": "certificate_parsed",
        "strings": "complete",
        "manifest": "complete"
      },
      "status": "complete",
      "grading": {
        "policy": "static-coverage-v1",
        "blockers": [],
        "eligible": true
      },
      "timings_ms": {
        "total": 46193.349,
        "harvest": 18999.917999999994,
        "detectors": 24941.234999999913
      },
      "bytes_total": 386665752,
      "bytes_scanned": 386665752,
      "bytes_skipped": 0,
      "files_processed": 3347,
      "coverage_version": 2,
      "string_encodings": [
        "ascii",
        "utf16le"
      ],
      "signature_validation": "not_performed"
    },
    "provenance": {
      "mode": "static",
      "artifacts": [
        {
          "name": "base.apk",
          "sha256": "e645bce9b6c1eff2b17e999ab5439271643abdeb54a38ad64181665f71db0b3e"
        },
        {
          "name": "config.arm64_v8a.apk",
          "sha256": "af577a0436ad6ef8db66047270cd209c74d9250e7d8fd5317ba7e44d552f3ff7"
        },
        {
          "name": "config.en.apk",
          "sha256": "9db0ec552577f9f38f33eecb7bafaed11faa8d44ef36198cad3c169244d936ff"
        },
        {
          "name": "config.xxhdpi.apk",
          "sha256": "0035dd92fb42329cb1b5669fe7c41421173e65c367be488fe77ea91642f7231c"
        },
        {
          "name": "default_asset_pack.apk",
          "sha256": "12335028422e448aeb2ff0a7340f1ca0a6653d7730ec81be74dac638057eb1ee"
        }
      ],
      "ruleset_sha256": "3bb79cc3710b0fb021feaa322578f4cffe08396a97c51b34df092b5a05891d5e"
    },
    "apk_sha256": "e645bce9b6c1eff2b17e999ab5439271643abdeb54a38ad64181665f71db0b3e",
    "scan": {
      "scan_id": "e3cc7a0e-9e0e-458a-9edb-41373d58aefe",
      "scanned_at": "2026-10-08T20:46:52.823Z",
      "grade": "C",
      "score": 72
    },
    "apk_signer": {
      "scheme": "v3",
      "subject_o": null,
      "subject_cn": "darinsoft",
      "sha256": "eb63e8cb2226e33c60d969edca722f782774fbe1927d260018282b8da9074b5b",
      "not_after": "2045-05-27T06:18:42+00:00"
    },
    "counts": {
      "critical": 0,
      "high": 1,
      "medium": 1,
      "low": 107,
      "info": 1
    },
    "findings": [
      {
        "finding_type": 79,
        "severity": "high",
        "title": "Hardcoded credentials in a URL",
        "redacted_display": "•••••••• (40+ chars, redacted)",
        "fingerprint": "6cce1ab09f328e7f9ac5d28544f53cffffb3a9b00122be88699857c5c0986c4b",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1",
          "MASVS-AUTH-1"
        ],
        "remediation": "Remove the embedded username:password, rotate the credential, and authenticate to the endpoint with short-lived per-user tokens instead."
      },
      {
        "finding_type": 37,
        "severity": "info",
        "title": "Application data is backup-enabled",
        "redacted_display": "android:allowBackup=\"true\"",
        "fingerprint": "68d134f0bcd98a9559d6dd5275f80a3928e4a6490ac4a0f1bd16f87683bd49f8",
        "verified": false,
        "cwe": [
          "CWE-530",
          "CWE-312"
        ],
        "masvs": [
          "MASVS-STORAGE-1",
          "MASVS-STORAGE-2"
        ],
        "remediation": "Backup is on by default on Android; this manifest states it explicitly. If the app stores sensitive local data, define dataExtractionRules/fullBackupContent to exclude it, or set android:allowBackup=false."
      },
      {
        "finding_type": 2,
        "severity": "low",
        "title": "Firebase Realtime Database reference",
        "redacted_display": "https://███████████████████████████.firebaseio.com/███",
        "fingerprint": "034751e8c48b01689b9c930279bff704b0e33219212287a6ac6621e3fed7f1b6",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "ad934c2a15341ca9b7d37d13dbb8b99e1b44d45b8840fdc58398f56f88f22e01",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "9ee3b2c06f98fa07c0b2726c73c299cb39b49607e24b69a75ccbf548c5e977bd",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "5ee82964f2630e0caeefc2c48099c2e400860750196aff5ce2d2066be62fcdde",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "0d2a04488bf06980bd860ebd03cfaa6d4d14238c6b508debca40ce1894421f53",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "2dc9732288d7a8b1e7c12ef214173391fcbae15f2f66a483a136987d27737409",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "f6a9fd3bbd8cd3bba5c81a8de6bedef3aa0765104f770d74248c1faabf5b8f30",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "b8166e482f46571ffa12f1b32775063d5766ab918caa01a1184e7391cae85e32",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "d9469701389d7615fbe1763a0f8774f0d022f1ea2a9a8098f78755e4da04835d",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "d6be35da555cf9f46ff81f73cc894f8d47f07996aab32fab60037f71ccc33a2b",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "7397e90e94eee744f4f00d3ed14d41674d9fde15f32b91b335bd475425945eb7",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "40547e8a2db5895f355822f22af5e3c52f809d6892f2f28635417198f88bea87",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "0b092e68b5597f83ad902f51b93b7e7204d81f78ee222ec9b6004826977fe015",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "4cc54af56219f1d1f4290d33a04b2e491037ae6c3f762205fbd91d0ac824b830",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "050317b9f42c2b6eab1cd747119cdd83ee9c0f21d9f90262243da9163943fb83",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "aed9aaeb00080d1a910532921d10cc48c9fc8d91a41956dbbcccde86cfb1ab08",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "e76f2ecf6c31e5d9d5d885678214d8a37d7b52e072f71323b2d0f6e78b3275a8",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "a32aa8e1df4a33addf1ddb710651db89a010953728053639a33400d9ab59a3c7",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "c79d4f086775919749247b00cce1193a03bc0fe69dc38d0575c98796345f654a",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "2986eda4531587a9bf79fea5d96e4ae069907d991ffad14dc2ca4f6a082ee91c",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "f58830c9363e2ea5fae8e5e79c25558329e0ba13f206a1fff16c90265734b85e",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "5606c350c73f5d2c3e0790b6f8c237daf097cd050d90f68945108b8f9c7965d9",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "ade4221a2199af874c448696c25a073db078833c6947f27e4f588e12fa4f68df",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "a890a0caf9a4e7f1f877caaf576aacbc52afe1864d63f50da001adbaafd9db3b",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "040622a97c9c6dfdb9f8b9ae7565e788d996752b7d740db01fd9e11184090d77",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "663a9a3d853f42154dbcd940cf045d8638ee4ac39e26be3e82f7b2a69f277d6c",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "ac1f2224ff423083705325eebad9da60aa6e8ca687062bbc591a84515b612fa3",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "76862a0b4b5c8b5ee656ac87460e14b956d4f8370816083e042278cf88fb0fe6",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "fb4929986784daadad33ec31065483a60ea60c4e39f12d8db71f5e04468ae2a4",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "7aca981f1639476ff55074c9cb2c1918be917f54ae77e2cea34a1f26e3cc7514",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "4c6711286ab2f19f0e8160e64111c6572f0c63fe7d2e012affc5ca973516f54f",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "b4b1accb08b50dd21909874f26bfa1927e78a9614e92b12ae4322bfd2022dd46",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "b74c9cd7561a8b5bedf37bb67e4d720fb03fb2125b26b350988d77ba08fc7e73",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "1d1ebef8a03f33a56e6adcad00fd7cdc125e3e3f84bf4f5f362ddddc097acacb",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "61b4a0cd1a76fbe0668a0a57bed1e01856da6d6d90df886fc4520207d51da173",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "3b2a037056b1f654685fa59ac994c4bacb1e6a9b91f3afe66fedb437c04354b7",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "b16443414b2a5f3a5f7b51457e8e595461acee2c0aa8ba2d9ccae52262bf4891",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "52757501e6e19da9babdb00956e1cba853679dbad1875c0e93cab5a14e9b4ea2",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "b9a7062893a01ff9b2c057a041d983fd7277a662065c9e3b0ff24813dcac91c1",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "26078ebe4f4c23995a6681bb9d2562785ffcb93b73e274dc5d65efb8bd139975",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "0797851eb1c6c09402bd503ec2d22a60649c8a245f43c1519cfc6e9bdfdee2ba",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "6857748cd91a0b77a494002aecc76b1c022c2fe7603fbac66fd87372f4f6a507",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "584d1dbbf79782ea2c709c2cda31450e4cce8c97e008bcf48fc6babb8b51875e",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "31a57acfd4e045ba3e6223cc6d3cb2ae8c6b5e893d2c87268a51cf2603172bc6",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "48d4fad81a95be7c72f4c2f706915be3852ecfff002cc8160bba455ace53dcf7",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "10221e78490d49482149fd340a78380afafb0775ecfe61cd22ac780f49794b4d",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "8f35219ae5d81f6a59a9801558db84ea8ee7bcdca6426cc3124a916ad9d2c95a",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "a3dd564ad15ceb391325b531b10b4849acdab16bfcf600c5f62d754928b6a340",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "f1a02b1a102ebf7b51469f5f10321dd9d3cc5757846ccb8265344a666cb58144",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "c5ba2cb3509e2ea56aac22b8563b5adbc288f3f9561ba2c29942bd89e8783d61",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "a1b84e030b0e72a477305dea51390a134bd7f29eb798991ad5fe4be6012e7a11",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "7ab6c49f8de8a192039998259f6e23fd95e2e4a904bf0911c9c58e4108908b88",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "1c0990d5752c45766fb33f0f4085c465ae41d57291dcb6714a9a4869f3ecd9e2",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "5d49b7a732e07cd2a3dc3f355b0dd3b354e57377d73906bb90e7cd7b4e628272",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "f8935e0df4afc9c1397c528ff7ab61735d409626043355384a43a8d7428569b9",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "85413034e046ca790a01f439814ac4b27c42b6876520c3d8920642d5b6efbc28",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "3ab36429487b14df35359f571ad02ec68bb95af36e4a271de54770c851c3e56f",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "769d800038b679cde8bfd9463e56c77f9aa9ef6a0d4e1dfa5e3e80d687b50ae1",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "c82652b18fb50388dacf71c9079a9f2965660f8db0e88461f96f43860dbcafb9",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "bc4d76238f44b9d02bce1173b165412ac3ba9406485711b1fd4928593aeb9755",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "d806636c02381fd46d3c8edade772bf3f82e429a0994ce23ace0d68004923e9f",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "9235566d482316de22b5971c22588da453af595c5aa1906ed994b733dfbba224",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "32f6c1cb718ca0ca6de9f3e3b3268f7952eca1390635137f1f79b01382ce2ef8",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "597e9cc945addfea1f3309567791cb020601057ad5e0f6892dc95862f70ded16",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "67e1e1b2fe2d908e00821e0877e76aaf5c38b8fa195e0dc0ef437fc7f2efb35d",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "a5ed666de7df686cad010fb6acf50e0e5a1ef84258e0c41e04144e6f4ef1c264",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "27111d5d6e7b0d946bb4432de41e54969757ca0b551d4e4487072676c0cc6cb3",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "901d9ab1faac5cd1258807209b4cd4421d525febd553a4e1eec6e677dc7d94d4",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "2e58e99272e2d7188907e7a9279032419aa6fcb027ab8ede6d464f5ab8241fcc",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "ea0c60658aa3b81afeb9a9df7ee2de1e41445b7faa828d94450fe52c1d1a71e7",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "2b3bb2fb66b1b873bed638d2f6ecbb79fc5eaf739aa57a2249689e2be0af1154",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "56b22dee30456cdbce3e035551833dcc2dfa45307a08919530a7eedf2469290a",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "f315f9daeeefb4d2627a30575e0a1f07f52d0303a804f370d0d37bc72c3e3289",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "0e380b6d59d0aedb839d27fe6b4ab6bae1464a6d0a88c1f08c8f699f31e3f81d",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "b0c7fb337415ece27321c88670ee6f3966f925e510b1ab191ed7b291493d657b",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "bfee5a9f7f3123bf6bf1938572d6add561e70ff87d849c9a6c2ca2ed15fd1a2b",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "5f1ed3f82244802547e614ff0773c9a2ca4df539be5d6cdebedf9546b85880bc",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "0b91f15f71a4923e22795aa6033f65e5e0130a198793c82d34e5719385588c91",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "38197d47cb0e21826e38a879641c44c32de85cb6cc92e98932e8012a79750017",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "f7273fee369228197f1406a2d3003d63ef7bada25aae2f53eb019f965872e6b5",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "2d7ff9890213fae9ecdd220687794f20881f075164ad5f99687b565951f2f57d",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "eec371f2c9ff3927c0820400d5728ee499b6b02172415f203bb4224ed066f6b3",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "7823423fc102f8a439eade1e8172f8b79b4fefd8ebfb9188cdeb7d140036215b",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "4d7c22715830c4215579422e9790b85576188af9977885bbd40d85957e8ef4c5",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "1cab1d78d4c1fb736c2778696eff92c0d25889cfecf06de117cf410b02f0d978",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "730621cae97ad9729907411cf59563548eae3ad925fe298672c710ddd98e213d",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "8a6bb0a1d796809c79b1ff87942bd04da2494770199cab2fe8a76be8ad6b27fd",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "841fcd6537e0c3fcb2f8b6bbcae8d10e0fe8d197867a4d756f5364f50e01f836",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "a96a4cfd0e5f4edb01be5592e848eae58b41290aa8862b1cd60a21176e537564",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "19d86009b7723f1e0c1964eeff3544729421e9d7fc6e565e1b6b769dccae0dd6",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "c17cca27604c9dcada6f8250f77a3742231c3946c9d3b7ae6bc9c71c79b15e39",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "a832dc69c1146e79da8dbc6869e91c10a1a2c98a3b8e8748fc2fe93019fb6a41",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "189b51a14df709e5b6afaeb3004a34cc4e5af8d044ae174de5481aaabd13596e",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "b3786ad59e86f9336d1cde25be5e3c3e2e2f99983601a06dd0b11a3edb5a7c63",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "8be5e11a351aae53eb63aa33b90be5ef225eb7bb92ea8caa9bb21e7f8d28cd70",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "cfa81e18e9ac5c6e7142630cb336ff77fce841316dff803d332373d1250b5a71",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "446d575e6591858a62a12392028a9572995e088ae96c310e95a557d9aa184f2a",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "3f13d7c84120e4e7c49443393a612b0b262b014a4f20eeb16dc14d62398623ad",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "824b262e49a810efc5993f3c6ed7af28c80d4a0a4ade2beef35f5da2a4fb85cf",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "36fddf27e27eb743bd290e2412a510c1173a6d9803e93d2558718fe712dc1e08",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "baabd1fef71497afc8c491232d6816097fdd8bca6dd15bfa37948649b3a4dc54",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "f9e298da9f83663d2aa450b692761707622f16d0688a675fbb7477817dd7f9ca",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "7501426f6a1e8ca5fe0d25e09a324424af8f0edcf0e417e0610368cd822a024e",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "8987c34f18e7b88eba37c249d4a4d95fd5733b61d8e5ee924392e4a88a58d58a",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "redacted_display": "https://███████.googleapis.com/███",
        "fingerprint": "abff861d9e0218de8a3e3f2a182754109450459b8c82fc29d095dd5ae2f1fe7b",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 20,
        "severity": "low",
        "title": "Google API key (client-shipped; restriction unverified)",
        "redacted_display": "AIza•••••••• (21–40 chars, redacted)",
        "fingerprint": "05523d925115ff89e8d2e872558650831e22320569f196c3d9eaa7cc921d18d0",
        "verified": false,
        "cwe": [
          "CWE-798"
        ],
        "masvs": [
          "MASVS-STORAGE-1"
        ],
        "remediation": "Restrict the API key (application + API restrictions in Google Cloud Console); a client-shipped key is public, so restriction is the control."
      },
      {
        "finding_type": 53,
        "severity": "low",
        "title": "Firebase Storage bucket reference",
        "redacted_display": "████████████",
        "fingerprint": "f0b2cb072a67fe4ab146b1a1aa6b2ad478d6f2c5858e4d76adffa246c179bce7",
        "verified": false,
        "cwe": [
          "CWE-200",
          "CWE-284"
        ],
        "masvs": [
          "MASVS-STORAGE-2"
        ],
        "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
      },
      {
        "finding_type": 57,
        "severity": "medium",
        "title": "Short signing key (RSA 1024-bit)",
        "redacted_display": "RSA-1024",
        "fingerprint": "eff7d2f7607ae274d531546d1e828faf234bca919325efac0bbe80b2f250d041",
        "verified": false,
        "cwe": [
          "CWE-326"
        ],
        "masvs": [
          "MASVS-CRYPTO-1"
        ],
        "remediation": "Use an RSA key of at least 2048 bits or an EC P-256 key for signing."
      }
    ],
    "live_verification": {
      "verified_count": 0,
      "items": []
    },
    "trackers_count": 10,
    "pii": {
      "sources": 7,
      "identifiers": [
        "Advertising ID (AAID)",
        "Android ID",
        "Device ID / IMEI"
      ],
      "destinations": 8
    },
    "sbom": {
      "component_count": 111,
      "vuln_count": 0,
      "components": [
        {
          "name": "androidx.activity:activity",
          "version": "1.10.1",
          "cves": []
        },
        {
          "name": "androidx.activity:activity-compose",
          "version": "1.10.1",
          "cves": []
        },
        {
          "name": "androidx.activity:activity-ktx",
          "version": "1.10.1",
          "cves": []
        },
        {
          "name": "androidx.annotation:annotation-experimental",
          "version": "1.4.1",
          "cves": []
        },
        {
          "name": "androidx.appcompat:appcompat",
          "version": "1.7.1",
          "cves": []
        },
        {
          "name": "androidx.appcompat:appcompat-resources",
          "version": "1.7.1",
          "cves": []
        },
        {
          "name": "androidx.asynclayoutinflater:asynclayoutinflater",
          "version": "1.0.0",
          "cves": []
        },
        {
          "name": "androidx.autofill:autofill",
          "version": "1.0.0",
          "cves": []
        },
        {
          "name": "androidx.browser:browser",
          "version": "1.8.0",
          "cves": []
        },
        {
          "name": "androidx.cardview:cardview",
          "version": "1.0.0",
          "cves": []
        },
        {
          "name": "androidx.compose.animation:animation",
          "version": "1.9.3",
          "cves": []
        },
        {
          "name": "androidx.compose.animation:animation-core",
          "version": "1.9.3",
          "cves": []
        },
        {
          "name": "androidx.compose.foundation:foundation",
          "version": "1.9.3",
          "cves": []
        },
        {
          "name": "androidx.compose.foundation:foundation-layout",
          "version": "1.9.3",
          "cves": []
        },
        {
          "name": "androidx.compose.material:material",
          "version": "1.9.3",
          "cves": []
        },
        {
          "name": "androidx.compose.material:material-ripple",
          "version": "1.8.2",
          "cves": []
        },
        {
          "name": "androidx.compose.runtime:runtime",
          "version": "1.9.3",
          "cves": []
        },
        {
          "name": "androidx.compose.runtime:runtime-annotation",
          "version": "1.9.3",
          "cves": []
        },
        {
          "name": "androidx.compose.runtime:runtime-saveable",
          "version": "1.9.3",
          "cves": []
        },
        {
          "name": "androidx.compose.ui:ui",
          "version": "1.9.3",
          "cves": []
        },
        {
          "name": "androidx.compose.ui:ui-geometry",
          "version": "1.9.3",
          "cves": []
        },
        {
          "name": "androidx.compose.ui:ui-graphics",
          "version": "1.9.3",
          "cves": []
        },
        {
          "name": "androidx.compose.ui:ui-text",
          "version": "1.9.3",
          "cves": []
        },
        {
          "name": "androidx.compose.ui:ui-tooling",
          "version": "1.9.3",
          "cves": []
        },
        {
          "name": "androidx.compose.ui:ui-tooling-data",
          "version": "1.9.3",
          "cves": []
        },
        {
          "name": "androidx.compose.ui:ui-tooling-preview",
          "version": "1.9.3",
          "cves": []
        },
        {
          "name": "androidx.compose.ui:ui-unit",
          "version": "1.9.3",
          "cves": []
        },
        {
          "name": "androidx.compose.ui:ui-util",
          "version": "1.9.3",
          "cves": []
        },
        {
          "name": "androidx.constraintlayout:constraintlayout",
          "version": "2.2.1",
          "cves": []
        },
        {
          "name": "androidx.constraintlayout:constraintlayout-compose",
          "version": "1.1.1",
          "cves": []
        },
        {
          "name": "androidx.coordinatorlayout:coordinatorlayout",
          "version": "1.3.0",
          "cves": []
        },
        {
          "name": "androidx.core:core",
          "version": "1.17.0",
          "cves": []
        },
        {
          "name": "androidx.core:core-ktx",
          "version": "1.17.0",
          "cves": []
        },
        {
          "name": "androidx.core:core-splashscreen",
          "version": "1.0.1",
          "cves": []
        },
        {
          "name": "androidx.core:core-viewtree",
          "version": "1.0.0",
          "cves": []
        },
        {
          "name": "androidx.cursoradapter:cursoradapter",
          "version": "1.0.0",
          "cves": []
        },
        {
          "name": "androidx.customview:customview",
          "version": "1.1.0",
          "cves": []
        },
        {
          "name": "androidx.customview:customview-poolingcontainer",
          "version": "1.0.0",
          "cves": []
        },
        {
          "name": "androidx.databinding:viewbinding",
          "version": "9.3.1",
          "cves": []
        },
        {
          "name": "androidx.datastore:datastore",
          "version": "1.1.3",
          "cves": []
        },
        {
          "name": "androidx.datastore:datastore-core",
          "version": "1.1.3",
          "cves": []
        },
        {
          "name": "androidx.datastore:datastore-preferences",
          "version": "1.1.3",
          "cves": []
        },
        {
          "name": "androidx.documentfile:documentfile",
          "version": "1.0.0",
          "cves": []
        },
        {
          "name": "androidx.drawerlayout:drawerlayout",
          "version": "1.1.1",
          "cves": []
        },
        {
          "name": "androidx.dynamicanimation:dynamicanimation",
          "version": "1.1.0",
          "cves": []
        },
        {
          "name": "androidx.emoji2:emoji2",
          "version": "1.4.0",
          "cves": []
        },
        {
          "name": "androidx.emoji2:emoji2-views-helper",
          "version": "1.4.0",
          "cves": []
        },
        {
          "name": "androidx.exifinterface:exifinterface",
          "version": "1.4.0",
          "cves": []
        },
        {
          "name": "androidx.fragment:fragment",
          "version": "1.5.4",
          "cves": []
        },
        {
          "name": "androidx.graphics:graphics-path",
          "version": "1.0.1",
          "cves": []
        },
        {
          "name": "androidx.graphics:graphics-shapes",
          "version": "1.0.1",
          "cves": []
        },
        {
          "name": "androidx.interpolator:interpolator",
          "version": "1.0.0",
          "cves": []
        },
        {
          "name": "androidx.legacy:legacy-support-core-ui",
          "version": "1.0.0",
          "cves": []
        },
        {
          "name": "androidx.legacy:legacy-support-core-utils",
          "version": "1.0.0",
          "cves": []
        },
        {
          "name": "androidx.legacy:legacy-support-v4",
          "version": "1.0.0",
          "cves": []
        },
        {
          "name": "androidx.lifecycle:lifecycle-livedata",
          "version": "2.9.4",
          "cves": []
        },
        {
          "name": "androidx.lifecycle:lifecycle-livedata-core",
          "version": "2.9.4",
          "cves": []
        },
        {
          "name": "androidx.lifecycle:lifecycle-livedata-core-ktx",
          "version": "2.9.4",
          "cves": []
        },
        {
          "name": "androidx.lifecycle:lifecycle-livedata-ktx",
          "version": "2.9.4",
          "cves": []
        },
        {
          "name": "androidx.lifecycle:lifecycle-process",
          "version": "2.9.4",
          "cves": []
        },
        {
          "name": "androidx.lifecycle:lifecycle-runtime",
          "version": "2.9.4",
          "cves": []
        },
        {
          "name": "androidx.lifecycle:lifecycle-runtime-compose",
          "version": "2.9.4",
          "cves": []
        },
        {
          "name": "androidx.lifecycle:lifecycle-runtime-ktx",
          "version": "2.9.4",
          "cves": []
        },
        {
          "name": "androidx.lifecycle:lifecycle-service",
          "version": "2.9.4",
          "cves": []
        },
        {
          "name": "androidx.lifecycle:lifecycle-viewmodel",
          "version": "2.9.4",
          "cves": []
        },
        {
          "name": "androidx.lifecycle:lifecycle-viewmodel-compose",
          "version": "2.9.4",
          "cves": []
        },
        {
          "name": "androidx.lifecycle:lifecycle-viewmodel-ktx",
          "version": "2.9.4",
          "cves": []
        },
        {
          "name": "androidx.lifecycle:lifecycle-viewmodel-savedstate",
          "version": "2.9.4",
          "cves": []
        },
        {
          "name": "androidx.loader:loader",
          "version": "1.0.0",
          "cves": []
        },
        {
          "name": "androidx.localbroadcastmanager:localbroadcastmanager",
          "version": "1.0.0",
          "cves": []
        },
        {
          "name": "androidx.media:media",
          "version": "1.0.0",
          "cves": []
        },
        {
          "name": "androidx.navigation:navigation-common",
          "version": "2.8.9",
          "cves": []
        },
        {
          "name": "androidx.navigation:navigation-common-ktx",
          "version": "2.8.9",
          "cves": []
        },
        {
          "name": "androidx.navigation:navigation-compose",
          "version": "2.8.9",
          "cves": []
        },
        {
          "name": "androidx.navigation:navigation-runtime",
          "version": "2.8.9",
          "cves": []
        },
        {
          "name": "androidx.navigation:navigation-runtime-ktx",
          "version": "2.8.9",
          "cves": []
        },
        {
          "name": "androidx.navigation:navigation-ui",
          "version": "2.8.9",
          "cves": []
        },
        {
          "name": "androidx.paging:paging-common",
          "version": "3.3.6",
          "cves": []
        },
        {
          "name": "androidx.paging:paging-runtime",
          "version": "3.3.6",
          "cves": []
        },
        {
          "name": "androidx.print:print",
          "version": "1.0.0",
          "cves": []
        },
        {
          "name": "androidx.privacysandbox.ads:ads-adservices",
          "version": "1.1.0-beta11",
          "cves": []
        },
        {
          "name": "androidx.privacysandbox.ads:ads-adservices-java",
          "version": "1.1.0-beta11",
          "cves": []
        },
        {
          "name": "androidx.profileinstaller:profileinstaller",
          "version": "1.4.0",
          "cves": []
        },
        {
          "name": "androidx.recyclerview:recyclerview",
          "version": "1.4.0",
          "cves": []
        },
        {
          "name": "androidx.room:room-ktx",
          "version": "2.7.0",
          "cves": []
        },
        {
          "name": "androidx.room:room-runtime",
          "version": "2.7.0",
          "cves": []
        },
        {
          "name": "androidx.savedstate:savedstate",
          "version": "1.3.3",
          "cves": []
        },
        {
          "name": "androidx.savedstate:savedstate-compose",
          "version": "1.3.3",
          "cves": []
        },
        {
          "name": "androidx.savedstate:savedstate-ktx",
          "version": "1.3.3",
          "cves": []
        },
        {
          "name": "androidx.security:security-crypto",
          "version": "1.0.0",
          "cves": []
        },
        {
          "name": "androidx.slidingpanelayout:slidingpanelayout",
          "version": "1.0.0",
          "cves": []
        },
        {
          "name": "androidx.sqlite:sqlite",
          "version": "2.5.0",
          "cves": []
        },
        {
          "name": "androidx.sqlite:sqlite-framework",
          "version": "2.5.0",
          "cves": []
        },
        {
          "name": "androidx.startup:startup-runtime",
          "version": "1.1.1",
          "cves": []
        },
        {
          "name": "androidx.swiperefreshlayout:swiperefreshlayout",
          "version": "1.0.0",
          "cves": []
        },
        {
          "name": "androidx.tracing:tracing",
          "version": "1.2.0",
          "cves": []
        },
        {
          "name": "androidx.transition:transition",
          "version": "1.5.0",
          "cves": []
        },
        {
          "name": "androidx.vectordrawable:vectordrawable",
          "version": "1.2.0",
          "cves": []
        },
        {
          "name": "androidx.vectordrawable:vectordrawable-animated",
          "version": "1.2.0",
          "cves": []
        },
        {
          "name": "androidx.versionedparcelable:versionedparcelable",
          "version": "1.1.1",
          "cves": []
        },
        {
          "name": "androidx.viewpager2:viewpager2",
          "version": "1.1.0",
          "cves": []
        },
        {
          "name": "androidx.viewpager:viewpager",
          "version": "1.0.0",
          "cves": []
        },
        {
          "name": "androidx.webkit:webkit",
          "version": "1.12.1",
          "cves": []
        },
        {
          "name": "androidx.work:work-runtime",
          "version": "2.9.1",
          "cves": []
        },
        {
          "name": "com.google.android.material:material",
          "version": "1.13.0",
          "cves": []
        },
        {
          "name": "com.google.dagger:dagger",
          "version": "2.60.1",
          "cves": []
        },
        {
          "name": "com.squareup.okhttp3:okhttp",
          "version": "4.12.0",
          "cves": []
        },
        {
          "name": "kotlinx:coroutines_android",
          "version": "1.11.0",
          "cves": []
        },
        {
          "name": "kotlinx:coroutines_core",
          "version": "1.11.0",
          "cves": []
        },
        {
          "name": "kotlinx:coroutines_guava",
          "version": "1.11.0",
          "cves": []
        },
        {
          "name": "kotlinx:coroutines_play_services",
          "version": "1.11.0",
          "cves": []
        }
      ]
    },
    "control_coverage": {
      "schema": "apk-scanner.coverage/v1",
      "framework": "OWASP MASVS v2",
      "disclaimer": "Static, metadata-only analysis. Each control is scored evidence-for / gap-signal / requires-manual-testing. This is evidence toward a MASVS assessment, NOT a certification — apk-scanner.com is not an authorized assessment lab. Absence of a static finding does not prove a control passes.",
      "rows": [
        {
          "control": "MASVS-STORAGE-1",
          "category": "STORAGE",
          "title": "The app securely stores sensitive data.",
          "static": "partial",
          "status": "gap-detected",
          "count": 3,
          "findings": [
            {
              "finding_type": 79,
              "key": "basic_auth_url",
              "title": "Hardcoded credentials in a URL",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            },
            {
              "finding_type": 37,
              "key": "allow_backup",
              "title": "Application data is backup-enabled",
              "severity": "info",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                530,
                312
              ]
            },
            {
              "finding_type": 20,
              "key": "google_api_key",
              "title": "Google API key (client-shipped; restriction unverified)",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                798
              ]
            }
          ]
        },
        {
          "control": "MASVS-STORAGE-2",
          "category": "STORAGE",
          "title": "The app prevents leakage of sensitive data.",
          "static": "partial",
          "status": "gap-detected",
          "count": 107,
          "findings": [
            {
              "finding_type": 37,
              "key": "allow_backup",
              "title": "Application data is backup-enabled",
              "severity": "info",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                530,
                312
              ]
            },
            {
              "finding_type": 2,
              "key": "firebase_rtdb",
              "title": "Firebase Realtime Database reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 3,
              "key": "gcs_bucket",
              "title": "Google Cloud Storage reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            },
            {
              "finding_type": 53,
              "key": "firebase_storage",
              "title": "Firebase Storage bucket reference",
              "severity": "low",
              "verified": false,
              "relationship": "gap-signal",
              "cwe": [
                200,
                284
              ]
            }
          ]
        },
        {
          "control": "MASVS-CRYPTO-1",
          "category": "CRYPTO",
          "title": "The app employs current strong cryptography and uses it according to best practices.",
          "static": "partial",
          "status": "gap-detected",
          "count": 1,
          "findings": [
            {
              "finding_type": 57,
              "key": "short_key",
              "title": "Short signing key (RSA 1024-bit)",
              "severity": "medium",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                326
              ]
            }
          ]
        },
        {
          "control": "MASVS-CRYPTO-2",
          "category": "CRYPTO",
          "title": "The app performs key management according to best practices.",
          "static": "partial",
          "status": "no-static-findings",
          "count": 0,
          "findings": []
        },
        {
          "control": "MASVS-AUTH-1",
          "category": "AUTH",
          "title": "The app uses secure authentication and authorization protocols.",
          "static": "manual",
          "status": "gap-detected",
          "count": 1,
          "findings": [
            {
              "finding_type": 79,
              "key": "basic_auth_url",
              "title": "Hardcoded credentials in a URL",
              "severity": "high",
              "verified": false,
              "relationship": "gap-confirmed",
              "cwe": [
                798
              ]
            }
          ]
        },
        {
          "control": "MASVS-AUTH-2",
          "category": "AUTH",
          "title": "The app performs local authentication securely.",
          "static": "manual",
          "status": "requires-manual-testing",
          "count": 0,
          "findings": []
        },
        {
          "control": "MASVS-AUTH-3",
          "category": "AUTH",
          "title": "The app secures sensitive operations with additional authentication.",
          "static": "manual",
          "status": "requires-manual-testing",
          "count": 0,
          "findings": []
        },
        {
          "control": "MASVS-NETWORK-1",
          "category": "NETWORK",
          "title": "The app secures all network traffic according to current best practices.",
          "static": "yes",
          "status": "no-static-findings",
          "count": 0,
          "findings": []
        },
        {
          "control": "MASVS-NETWORK-2",
          "category": "NETWORK",
          "title": "The app verifies the identity of the remote endpoint (e.g. certificate pinning).",
          "static": "partial",
          "status": "no-static-findings",
          "count": 0,
          "findings": []
        },
        {
          "control": "MASVS-PLATFORM-1",
          "category": "PLATFORM",
          "title": "The app uses IPC mechanisms securely.",
          "static": "yes",
          "status": "no-static-findings",
          "count": 0,
          "findings": []
        },
        {
          "control": "MASVS-PLATFORM-2",
          "category": "PLATFORM",
          "title": "The app uses WebViews securely.",
          "static": "partial",
          "status": "no-static-findings",
          "count": 0,
          "findings": []
        },
        {
          "control": "MASVS-PLATFORM-3",
          "category": "PLATFORM",
          "title": "The app uses the user interface securely.",
          "static": "manual",
          "status": "requires-manual-testing",
          "count": 0,
          "findings": []
        },
        {
          "control": "MASVS-CODE-1",
          "category": "CODE",
          "title": "The app requires an up-to-date platform version.",
          "static": "yes",
          "status": "no-static-findings",
          "count": 0,
          "findings": []
        },
        {
          "control": "MASVS-CODE-2",
          "category": "CODE",
          "title": "The app has a mechanism for enforcing updates.",
          "static": "manual",
          "status": "requires-manual-testing",
          "count": 0,
          "findings": []
        },
        {
          "control": "MASVS-CODE-3",
          "category": "CODE",
          "title": "The app only uses software components without known vulnerabilities.",
          "static": "yes",
          "status": "no-static-findings",
          "count": 0,
          "findings": []
        },
        {
          "control": "MASVS-CODE-4",
          "category": "CODE",
          "title": "The app validates and sanitizes all untrusted inputs and follows secure-coding practice.",
          "static": "partial",
          "status": "no-static-findings",
          "count": 0,
          "findings": []
        },
        {
          "control": "MASVS-RESILIENCE-1",
          "category": "RESILIENCE",
          "title": "The app validates the integrity of the platform.",
          "static": "manual",
          "status": "requires-manual-testing",
          "count": 0,
          "findings": []
        },
        {
          "control": "MASVS-RESILIENCE-2",
          "category": "RESILIENCE",
          "title": "The app implements anti-tampering mechanisms.",
          "static": "manual",
          "status": "requires-manual-testing",
          "count": 0,
          "findings": []
        },
        {
          "control": "MASVS-RESILIENCE-3",
          "category": "RESILIENCE",
          "title": "The app implements anti-static-analysis mechanisms.",
          "static": "manual",
          "status": "requires-manual-testing",
          "count": 0,
          "findings": []
        },
        {
          "control": "MASVS-RESILIENCE-4",
          "category": "RESILIENCE",
          "title": "The app implements anti-dynamic-analysis techniques.",
          "static": "manual",
          "status": "requires-manual-testing",
          "count": 0,
          "findings": []
        },
        {
          "control": "MASVS-PRIVACY-1",
          "category": "PRIVACY",
          "title": "The app minimizes access to sensitive data and resources.",
          "static": "yes",
          "status": "no-static-findings",
          "count": 0,
          "findings": []
        },
        {
          "control": "MASVS-PRIVACY-2",
          "category": "PRIVACY",
          "title": "The app prevents identification of the user.",
          "static": "yes",
          "status": "no-static-findings",
          "count": 0,
          "findings": []
        },
        {
          "control": "MASVS-PRIVACY-3",
          "category": "PRIVACY",
          "title": "The app is transparent about data collection and usage.",
          "static": "yes",
          "status": "no-static-findings",
          "count": 0,
          "findings": []
        },
        {
          "control": "MASVS-PRIVACY-4",
          "category": "PRIVACY",
          "title": "The app offers user control over their data.",
          "static": "manual",
          "status": "requires-manual-testing",
          "count": 0,
          "findings": []
        }
      ],
      "categories": [
        {
          "category": "STORAGE",
          "controls": 2,
          "gaps": 2,
          "verified": 0,
          "manual": 0
        },
        {
          "category": "CRYPTO",
          "controls": 2,
          "gaps": 1,
          "verified": 0,
          "manual": 0
        },
        {
          "category": "AUTH",
          "controls": 3,
          "gaps": 1,
          "verified": 0,
          "manual": 2
        },
        {
          "category": "NETWORK",
          "controls": 2,
          "gaps": 0,
          "verified": 0,
          "manual": 0
        },
        {
          "category": "PLATFORM",
          "controls": 3,
          "gaps": 0,
          "verified": 0,
          "manual": 1
        },
        {
          "category": "CODE",
          "controls": 4,
          "gaps": 0,
          "verified": 0,
          "manual": 1
        },
        {
          "category": "RESILIENCE",
          "controls": 4,
          "gaps": 0,
          "verified": 0,
          "manual": 4
        },
        {
          "category": "PRIVACY",
          "controls": 4,
          "gaps": 0,
          "verified": 0,
          "manual": 1
        }
      ]
    }
  },
  "proof": {
    "alg": "ed25519",
    "key_id": "IE6LeZNX4dAAPLGr",
    "digest_sha256": "342a09794127cfafcdec900c6c5971128b95984eb45333258aca7c05c8463416",
    "signature": "/CVnX1VLjcs9+hrk3ftFUABGsA4aOIgOTv5854pMiBt6llg5gytWvHL4KMYO823h9okbvisJR1E6bJqoqNk9DA==",
    "public_key_pem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAwH2fYdYB5nD0CQslDtG3FgafcJBoOX2OGoT80Woksrk=\n-----END PUBLIC KEY-----\n",
    "verify_url": "https://apk-scanner.com/verify"
  }
}