{
  "ok": true,
  "app_id": "com.fnoex.fan.hsnewestside",
  "comparable": false,
  "comparison_status": "limited_coverage",
  "regressed": true,
  "grade_delta": null,
  "score_delta": null,
  "from": {
    "scan_id": "435d4d57-8dc4-4e74-b832-284706c387cf",
    "version": "172.24.1",
    "analysis": {
      "status": "unknown"
    },
    "provenance": {},
    "grade": "D",
    "score": 36,
    "scanned_at": "2026-09-02T11:51:42.537Z"
  },
  "to": {
    "scan_id": "d78e813c-d0bf-482d-8488-59f172cb662e",
    "version": "172.24.1",
    "analysis": {
      "issues": [],
      "stages": {
        "pii": "complete",
        "sbom": "complete",
        "signing": "certificate_parsed",
        "strings": "complete",
        "manifest": "complete"
      },
      "status": "complete",
      "grading": {
        "policy": "static-coverage-v1",
        "blockers": [],
        "eligible": true
      },
      "timings_ms": {
        "total": 38110.475,
        "harvest": 9505.11299999996,
        "detectors": 26269.765999998697
      },
      "bytes_total": 177311260,
      "bytes_scanned": 177311260,
      "bytes_skipped": 0,
      "files_processed": 4575,
      "coverage_version": 2,
      "string_encodings": [
        "ascii",
        "utf16le"
      ],
      "signature_validation": "not_performed"
    },
    "provenance": {
      "mode": "static",
      "artifacts": [
        {
          "name": "base.apk",
          "sha256": "b3e71a7625f67ba188a95d0e1d8b6b1b873a03243dbf7cc44de4d9e8b1ea5abd"
        },
        {
          "name": "config.arm64_v8a.apk",
          "sha256": "2fe8fb7a7930663336af28df2b6ecdccd703ed83280776a04264eaa2121b4bcf"
        },
        {
          "name": "config.en.apk",
          "sha256": "11b881c75633076476a42032fb5fc8ab529b98e070b01622279d5e17f1c06374"
        },
        {
          "name": "config.xxhdpi.apk",
          "sha256": "f58cf8e676ab3e0bde0ea79960740d5be7775a372eb21e8a7daa655943821cc7"
        }
      ],
      "ruleset_sha256": "3bb79cc3710b0fb021feaa322578f4cffe08396a97c51b34df092b5a05891d5e"
    },
    "grade": "F",
    "score": 0,
    "scanned_at": "2026-10-06T16:08:48.550Z"
  },
  "findings": {
    "added": [
      {
        "finding_type": 1,
        "severity": "critical",
        "title": "Amazon S3 bucket reference — confirmed publicly readable",
        "fingerprint": "656630671ce9ec18ba5ac5a66dbac31e7140c125754dd39b88e1743c89f566c4",
        "verified": true
      },
      {
        "finding_type": 1,
        "severity": "critical",
        "title": "Amazon S3 bucket reference — confirmed publicly readable",
        "fingerprint": "957a5b6fe02800582dd15666ac6fb3efe181585e29284659ec2ba5879f70c6d3",
        "verified": true
      },
      {
        "finding_type": 20,
        "severity": "low",
        "title": "Google API key (client-shipped; restriction unverified)",
        "fingerprint": "f236fc3b794cc18d1610eb5c763762aea94da2d9b50af8a2c351a628307b65c8",
        "verified": false
      },
      {
        "finding_type": 20,
        "severity": "low",
        "title": "Google API key (client-shipped; restriction unverified)",
        "fingerprint": "693996f107c3acd158286ba1ee8625b1535a78bdab296db23e5a817f3bcbfab4",
        "verified": false
      },
      {
        "finding_type": 20,
        "severity": "low",
        "title": "Google API key (client-shipped; restriction unverified)",
        "fingerprint": "94c31ce9d079c8832e8b0d1746c3eb9f3a283816707c6242ede172c2bf4efd01",
        "verified": false
      },
      {
        "finding_type": 53,
        "severity": "low",
        "title": "Firebase Storage bucket reference",
        "fingerprint": "d43de5b21d38b4f743627a0298ef68b087aa1092b247a19bf69cdfacaa08a191",
        "verified": false
      },
      {
        "finding_type": 72,
        "severity": "low",
        "title": "Sentry DSN",
        "fingerprint": "e917d14fa637ff5fd3b3e82bedee85f505b5739d0f80d405d1b394f91652c88e",
        "verified": false
      },
      {
        "finding_type": 53,
        "severity": "low",
        "title": "Firebase Storage bucket reference",
        "fingerprint": "6da605c01a32d6178ae1e6876876e3de02277efaeb0bf30b781056b6efdcc7a8",
        "verified": false
      },
      {
        "finding_type": 53,
        "severity": "low",
        "title": "Firebase Storage bucket reference",
        "fingerprint": "b6e2cb8eb4bf3d0a7bcb1c02e7aaa6b80181f3fefcd2655ab608c7c76f9d6977",
        "verified": false
      },
      {
        "finding_type": 6,
        "severity": "low",
        "title": "Private key material (third-party library artifact, shared across 35 unrelated developers)",
        "fingerprint": "c1a462d35e9d998542f260b9f5a31118a3bd6ff10f693669e49e3ed5ab96b879",
        "verified": false
      },
      {
        "finding_type": 6,
        "severity": "low",
        "title": "Private key material (third-party library artifact, shared across 35 unrelated developers)",
        "fingerprint": "bf16f96c797ac5c41b335521fd3988134b858c59b7e729bc85ffb51435e0567a",
        "verified": false
      },
      {
        "finding_type": 6,
        "severity": "low",
        "title": "Private key material (third-party library artifact, shared across 35 unrelated developers)",
        "fingerprint": "f2a88cfd724792cb46afa0446f6159bc9e1d9a0f797bd2ed033792a0d2126c50",
        "verified": false
      },
      {
        "finding_type": 6,
        "severity": "low",
        "title": "Private key material (third-party library artifact, shared across 38 unrelated developers)",
        "fingerprint": "3189648d5bf63b56f1e623ad34abfd31b5aafb8386cd0e339f686035f6b89661",
        "verified": false
      },
      {
        "finding_type": 34,
        "severity": "medium",
        "title": "Cleartext (HTTP) traffic permitted",
        "fingerprint": "94025ca91177232efea2d52d976e37f967866402c6e01f481a8de610b8e478e7",
        "verified": false
      },
      {
        "finding_type": 77,
        "severity": "low",
        "title": "Data Safety label omits Calendar",
        "fingerprint": "2a94ef25c6a64a2fcc33bcb8d2ada6376b418ddfa745771aa213e568d5afb277",
        "verified": false
      },
      {
        "finding_type": 77,
        "severity": "low",
        "title": "Data Safety label omits Contacts",
        "fingerprint": "52d6df5eafe80ad7de0275ee425de0bf8d715439e92a9026117bea4d546827d0",
        "verified": false
      }
    ],
    "removed": [
      {
        "finding_type": 1,
        "severity": "critical",
        "title": "Amazon S3 bucket reference — confirmed publicly readable",
        "fingerprint": "90a5c488b06d1eb9e7b6ac6ee975c4c94a0e567fe5c86700419f54c5a1ac1e7c",
        "verified": true
      },
      {
        "finding_type": 20,
        "severity": "low",
        "title": "Google API key (client-shipped; restriction unverified)",
        "fingerprint": "bf39d36c8d50a5a62d54b01a08267fe719d951224b46ae1cfac6997592fe33f8",
        "verified": false
      },
      {
        "finding_type": 53,
        "severity": "low",
        "title": "Firebase Storage bucket reference",
        "fingerprint": "3b1f61e8980230833bf7d411149f878811d07abf71e1ff14889d67d585ae051c",
        "verified": false
      },
      {
        "finding_type": 72,
        "severity": "low",
        "title": "Sentry DSN",
        "fingerprint": "2554bdf1a84741a802e7ffb6cb84e7aad160c2277b42f87caaa507718d6d43f9",
        "verified": false
      },
      {
        "finding_type": 53,
        "severity": "low",
        "title": "Firebase Storage bucket reference",
        "fingerprint": "9d4be2254319c988e5df02c147df9a8e1a8ca7ec3e0bbbe4aee9e15abdec0a33",
        "verified": false
      },
      {
        "finding_type": 53,
        "severity": "low",
        "title": "Firebase Storage bucket reference",
        "fingerprint": "17b713574b29d02a8b1ceb56674afa24af24553eee325b356fcd00c32ad8459a",
        "verified": false
      },
      {
        "finding_type": 34,
        "severity": "medium",
        "title": "Cleartext (HTTP) traffic permitted",
        "fingerprint": "cb46c44cd0500b927ddd01f9e4dcfa5c6d153e5e0bc975b6b15004181d0e1387",
        "verified": false
      }
    ],
    "persisting_count": 0,
    "added_by_sev": {
      "critical": 2,
      "high": 0,
      "medium": 1,
      "low": 13
    },
    "removed_by_sev": {
      "critical": 1,
      "high": 0,
      "medium": 1,
      "low": 5
    }
  },
  "trackers": {
    "added": [
      "Google Analytics for Firebase",
      "Google UMP (consent)",
      "IAB TCF"
    ],
    "removed": [
      "Google AdServices"
    ]
  },
  "known_vulns": {
    "from": 0,
    "to": 0,
    "delta": 0,
    "from_recorded": true,
    "to_recorded": true
  }
}