{
  "ok": true,
  "app_id": "com.disruptorbeam.StarTrekTimelines",
  "comparable": false,
  "comparison_status": "limited_coverage",
  "regressed": true,
  "grade_delta": null,
  "score_delta": null,
  "from": {
    "scan_id": "47a3183f-76eb-4e71-842c-d21fe65f91b0",
    "version": "12.2.1",
    "analysis": {
      "status": "unknown"
    },
    "provenance": {},
    "grade": "B",
    "score": 77,
    "scanned_at": "2026-09-02T11:40:55.100Z"
  },
  "to": {
    "scan_id": "064c2176-b5e6-40f5-bf87-f86b98bebf7d",
    "version": "12.2.1",
    "analysis": {
      "issues": [],
      "stages": {
        "pii": "complete",
        "sbom": "complete",
        "signing": "certificate_parsed",
        "strings": "complete",
        "manifest": "complete"
      },
      "status": "complete",
      "grading": {
        "policy": "static-coverage-v1",
        "blockers": [],
        "eligible": true
      },
      "timings_ms": {
        "total": 32929.463,
        "harvest": 13406.284000000005,
        "detectors": 16763.124000000167
      },
      "bytes_total": 291256906,
      "bytes_scanned": 291256906,
      "bytes_skipped": 0,
      "files_processed": 1879,
      "coverage_version": 2,
      "string_encodings": [
        "ascii",
        "utf16le"
      ],
      "signature_validation": "not_performed"
    },
    "provenance": {
      "mode": "static",
      "artifacts": [
        {
          "name": "base.apk",
          "sha256": "468bbb74a5ced1a54033ef20a2d02b2da3cfac1ace4c03bf7acb451f32415387"
        }
      ],
      "ruleset_sha256": "3bb79cc3710b0fb021feaa322578f4cffe08396a97c51b34df092b5a05891d5e"
    },
    "grade": "F",
    "score": 0,
    "scanned_at": "2026-10-06T15:19:46.397Z"
  },
  "findings": {
    "added": [
      {
        "finding_type": 20,
        "severity": "low",
        "title": "Google API key (client-shipped; restriction unverified)",
        "fingerprint": "9f7f4b3bee594833be958422b4e4b69362685235b9f5812b48f05ea24a02bd1a",
        "verified": false
      },
      {
        "finding_type": 2,
        "severity": "low",
        "title": "Firebase Realtime Database reference",
        "fingerprint": "acc3bf8e545b89eb10d75045c314fda7ddf0bd7bd0f72a95cd83bf3199957c05",
        "verified": false
      },
      {
        "finding_type": 53,
        "severity": "low",
        "title": "Firebase Storage bucket reference",
        "fingerprint": "cfbda3394ee51ff6a92a931fca252b7e11298bd590d598cdf73e1be7bbf2b93f",
        "verified": false
      },
      {
        "finding_type": 20,
        "severity": "low",
        "title": "Google API key (client-shipped; restriction unverified)",
        "fingerprint": "f115b02cef580d486b5d444d4742966edc13aa315aeb298bb4a5a4db26075bff",
        "verified": false
      },
      {
        "finding_type": 20,
        "severity": "low",
        "title": "Google API key (client-shipped; restriction unverified)",
        "fingerprint": "a3ebf64432ff55cc5a2a447637e0a1a6675d733e62ec0cb111e5e613c7705f95",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "3ceda7075d17d8ddff7d37bdc268703afa78167b0b9c7c6b937e0a9f4c98169f",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "6f02951153cab9e9fbbbaac12ba0f757386a341baf190b44080b1d9065eb4a37",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "fa4f860c0b7ae030b7f2ea0b3331c9081b2ee1b95237cf27fc3c851f4037006c",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "critical",
        "title": "Amazon S3 bucket reference — confirmed publicly readable",
        "fingerprint": "202f9e9a7e28c6a99719c3ed59e828efa3fcee039833f29453575db046ede160",
        "verified": true
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "6a142577b5efef61e8768ff63d5f9e0804cb3a15cab9b8c97e9517310b4720aa",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "48be593145e6c6e996388df16e053b9120c8695fcfebdad7c16c9a2d288fbcab",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "4a7fe5f4686280cd1ebb3f786121b64317e6f5a40d5f763db81ffcc672f577a9",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "dfe190e297cdaf29605ca2b5e18931f8a82cc5ce9e0b520b08eba5b77dc2f64b",
        "verified": false
      },
      {
        "finding_type": 72,
        "severity": "low",
        "title": "Sentry DSN",
        "fingerprint": "d18e245293641e2aba63991d8fb8f0c027f38fde34970de7904dc1fa7fd91acf",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "critical",
        "title": "Amazon S3 bucket reference — confirmed publicly readable",
        "fingerprint": "3d73d5d3ca29c8af1227ec5790e9625fcc77c842db71273f5e356bdeb03e9767",
        "verified": true
      },
      {
        "finding_type": 34,
        "severity": "medium",
        "title": "Cleartext (HTTP) traffic permitted",
        "fingerprint": "94025ca91177232efea2d52d976e37f967866402c6e01f481a8de610b8e478e7",
        "verified": false
      },
      {
        "finding_type": 35,
        "severity": "low",
        "title": "Exported content provider without permission (third-party library artifact, shared across 403 unrelated developers)",
        "fingerprint": "b369abc903581edba05e9ec1a5fc46d6b3e7ae316db05c5f7a90becac10e388b",
        "verified": false
      },
      {
        "finding_type": 62,
        "severity": "medium",
        "title": "com.squareup.okhttp3:okhttp 3.12.13 — CVE-2021-0341",
        "fingerprint": "b35496237e28b68c8e0d69cddebe93abcbdeb329cec963569542cc48edb144a4",
        "verified": false
      }
    ],
    "removed": [
      {
        "finding_type": 20,
        "severity": "low",
        "title": "Google API key (client-shipped; restriction unverified)",
        "fingerprint": "3e4a79dc5ddc31352f75f4926303fc58318abd226b21dd978eb5f47a95309f91",
        "verified": false
      },
      {
        "finding_type": 2,
        "severity": "low",
        "title": "Firebase Realtime Database reference",
        "fingerprint": "0545c41f2c4d684c571090473f160494b366a5922a3f325ae1acd8868b2458a2",
        "verified": false
      },
      {
        "finding_type": 53,
        "severity": "low",
        "title": "Firebase Storage bucket reference",
        "fingerprint": "37443fb2735cdcec3eba5ee2b7f6f417bd6754129b34893cde1d496cfe6a9f55",
        "verified": false
      },
      {
        "finding_type": 20,
        "severity": "low",
        "title": "Google API key (client-shipped; restriction unverified)",
        "fingerprint": "abdd96e2f0a64b6e7839b09cb1c1aba74a4bfa3760b7a7da14dd97201edb9b57",
        "verified": false
      },
      {
        "finding_type": 20,
        "severity": "low",
        "title": "Google API key (client-shipped; restriction unverified)",
        "fingerprint": "f9827b81f865defe901b1d809f964040f4dca5b72d2863dcdd4bb639c6f8785f",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "a3f51bebcd5731c71d895071f22468b871e3c62cd5a07a77d53ae583e772e2f8",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "34ff3624b6dbcf2828450d8193d836119066c7e2b291c163e97ec1edf84596da",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "182b427beb6fa951e8bec8808f51fa39730ef9842a4c7a9362cd7bd756f01401",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "0a5da985d52c44b840f720e4fb5cbd8e2bef920ba51dd2300dc2d74e7528b8bc",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "0f449adea795adb6d32d0d5ab30f31929b9f1f86ab29508f54a3c1204cc6f769",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "3153be29ac9c852cdb9cbad224feec22747c855156d42ba2a4c0d4e5729cde54",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "66b99df54ba55352050b8022b36e2748139ffd6cccffc138cabc295fbfc68afd",
        "verified": false
      },
      {
        "finding_type": 72,
        "severity": "low",
        "title": "Sentry DSN",
        "fingerprint": "92814c978c2f536273c8094fdd9098cc8a9bfee80594717eb6d56a8bd4ddca52",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "ce87206e81592ac3a783b42a83434025ae77a59a71c247f3740b934037183e5e",
        "verified": false
      },
      {
        "finding_type": 34,
        "severity": "medium",
        "title": "Cleartext (HTTP) traffic permitted",
        "fingerprint": "cb46c44cd0500b927ddd01f9e4dcfa5c6d153e5e0bc975b6b15004181d0e1387",
        "verified": false
      },
      {
        "finding_type": 35,
        "severity": "medium",
        "title": "Exported content provider without permission",
        "fingerprint": "de3f0513bb4b9980c9277a48ac61554dc65eab801866ead10fb441b6859ee875",
        "verified": false
      },
      {
        "finding_type": 62,
        "severity": "medium",
        "title": "com.squareup.okhttp3:okhttp 3.12.13 — CVE-2021-0341",
        "fingerprint": "04d0e65e525ffd5a1f89ea8950a2107d9f4ff1a5cc483b38e1ba7afd21517dcf",
        "verified": false
      }
    ],
    "persisting_count": 0,
    "added_by_sev": {
      "critical": 2,
      "high": 0,
      "medium": 2,
      "low": 14
    },
    "removed_by_sev": {
      "critical": 0,
      "high": 0,
      "medium": 3,
      "low": 14
    }
  },
  "trackers": {
    "added": [
      "Mintegral",
      "Pangle (ByteDance)",
      "Google Analytics for Firebase",
      "Google UMP (consent)",
      "IAB TCF"
    ],
    "removed": [
      "Google AdServices"
    ]
  },
  "known_vulns": {
    "from": 1,
    "to": 1,
    "delta": 0,
    "from_recorded": true,
    "to_recorded": true
  }
}