{
  "ok": true,
  "app_id": "com.duaag.android",
  "comparable": false,
  "comparison_status": "limited_coverage",
  "regressed": null,
  "grade_delta": null,
  "score_delta": null,
  "from": {
    "scan_id": "f4e10b6c-17dc-4ceb-8be3-e866a93f1856",
    "version": "5.1.9",
    "analysis": {
      "status": "unknown"
    },
    "provenance": {},
    "grade": "B",
    "score": 88,
    "scanned_at": "2026-09-03T00:25:16.315Z"
  },
  "to": {
    "scan_id": "e6641694-f7b9-4dc9-9a7d-fc4798717a55",
    "version": "5.2.0",
    "analysis": {
      "issues": [],
      "stages": {
        "pii": "complete",
        "sbom": "complete",
        "signing": "certificate_parsed",
        "strings": "complete",
        "manifest": "complete"
      },
      "status": "complete",
      "grading": {
        "policy": "static-coverage-v1",
        "blockers": [],
        "eligible": true
      },
      "timings_ms": {
        "total": 26576.639,
        "harvest": 7035.071999999993,
        "detectors": 16145.006999999856
      },
      "bytes_total": 124690061,
      "bytes_scanned": 124690061,
      "bytes_skipped": 0,
      "files_processed": 7639,
      "coverage_version": 2,
      "string_encodings": [
        "ascii",
        "utf16le"
      ],
      "signature_validation": "not_performed"
    },
    "provenance": {
      "mode": "static",
      "artifacts": [
        {
          "name": "base.apk",
          "sha256": "d26f505e3d1cfba9659d67ca54c169df857564bc8cdb1a0ebf5d221802e2e333"
        },
        {
          "name": "config.arm64_v8a.apk",
          "sha256": "697cdf69c3f96a21ae26d226100677b59ca22c5aa94154fa6d9aaad74e621e61"
        },
        {
          "name": "config.en.apk",
          "sha256": "29dbacb963f0d8986fdaa6e2d93e5079fcb8edd14d7d267575ab75577603db30"
        },
        {
          "name": "config.xxhdpi.apk",
          "sha256": "f996001ef0e058ee2ec6487767a910a4fbdf12495127218a90890266b3f9c020"
        }
      ],
      "ruleset_sha256": "3bb79cc3710b0fb021feaa322578f4cffe08396a97c51b34df092b5a05891d5e"
    },
    "grade": "B",
    "score": 88,
    "scanned_at": "2026-10-06T20:40:17.811Z"
  },
  "findings": {
    "added": [
      {
        "finding_type": 20,
        "severity": "low",
        "title": "Google API key (client-shipped; restriction unverified)",
        "fingerprint": "d6f49b5c03e9680a08d2d3d6a8c077ffbd8604343e51b1630ba5e77ef33916e3",
        "verified": false
      },
      {
        "finding_type": 20,
        "severity": "low",
        "title": "Google API key (client-shipped; restriction unverified)",
        "fingerprint": "23e6e4b6194d1344ad0bf09065b4a02c782e71f895c15f2eab83ecbc5de97851",
        "verified": false
      },
      {
        "finding_type": 2,
        "severity": "low",
        "title": "Firebase Realtime Database reference",
        "fingerprint": "91eecc290e7ea574b2c128e79c2d73059a4b613458569cfffecfa4bec952454f",
        "verified": false
      },
      {
        "finding_type": 53,
        "severity": "low",
        "title": "Firebase Storage bucket reference",
        "fingerprint": "a4c37bb0780ee74eb30a2baef34ee7f6d5888c8ae9b6b6155d67708dd02d89f4",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "6d3265bf2f5e1221c48d93b1c227e7ca5f10732ade5bc66fdfaf8eac1681c80b",
        "verified": false
      },
      {
        "finding_type": 72,
        "severity": "low",
        "title": "Sentry DSN",
        "fingerprint": "d3e02993088abf5857d2e05e4e0e5d157f6ce62701506a4cea4d7cd06cfcfe7d",
        "verified": false
      },
      {
        "finding_type": 34,
        "severity": "medium",
        "title": "Cleartext (HTTP) traffic permitted",
        "fingerprint": "94025ca91177232efea2d52d976e37f967866402c6e01f481a8de610b8e478e7",
        "verified": false
      },
      {
        "finding_type": 60,
        "severity": "low",
        "title": "Background location access with advertising SDKs present",
        "fingerprint": "0c010d775be9542eee48043eb496c06888f9b8e8fcdf3af66a6b84e99192f6ce",
        "verified": false
      }
    ],
    "removed": [
      {
        "finding_type": 20,
        "severity": "low",
        "title": "Google API key (client-shipped; restriction unverified)",
        "fingerprint": "3522e13b2c4243d4c211442ca50d385dcbbe6154be3f131fdbe6339286be8c9b",
        "verified": false
      },
      {
        "finding_type": 2,
        "severity": "low",
        "title": "Firebase Realtime Database reference",
        "fingerprint": "4bebaca78da876d55417786b9d2cc52344ce33d0f43024f8ca3d46cafe25033d",
        "verified": false
      },
      {
        "finding_type": 53,
        "severity": "low",
        "title": "Firebase Storage bucket reference",
        "fingerprint": "e468eed64217ade6e0e794620960919022f9fdbf6f354eb5e568b66dc1e7aae7",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "235a4e576184b9c8a365616036ea6d059582916088a598a3ac690577d0ba174d",
        "verified": false
      },
      {
        "finding_type": 72,
        "severity": "low",
        "title": "Sentry DSN",
        "fingerprint": "487eaf4147341c701c8621a347d633f7ca28432b4ab373e91d282e8bbc2e24cd",
        "verified": false
      },
      {
        "finding_type": 34,
        "severity": "medium",
        "title": "Cleartext (HTTP) traffic permitted",
        "fingerprint": "cb46c44cd0500b927ddd01f9e4dcfa5c6d153e5e0bc975b6b15004181d0e1387",
        "verified": false
      },
      {
        "finding_type": 60,
        "severity": "low",
        "title": "Background location access with advertising SDKs present",
        "fingerprint": "fb67d0eee43d47ebaf2986da1c709b5c711f77a5b4416768a75918f9d061990e",
        "verified": false
      }
    ],
    "persisting_count": 0,
    "added_by_sev": {
      "critical": 0,
      "high": 0,
      "medium": 1,
      "low": 7
    },
    "removed_by_sev": {
      "critical": 0,
      "high": 0,
      "medium": 1,
      "low": 6
    }
  },
  "trackers": {
    "added": [
      "Mintegral",
      "Yandex Ads",
      "Google Analytics for Firebase",
      "IAB TCF"
    ],
    "removed": [
      "Google AdServices"
    ]
  },
  "known_vulns": {
    "from": 0,
    "to": 0,
    "delta": 0,
    "from_recorded": true,
    "to_recorded": true
  }
}