{
  "ok": true,
  "app_id": "com.fnoex.fan.ncaawcws",
  "comparable": false,
  "comparison_status": "limited_coverage",
  "regressed": true,
  "grade_delta": null,
  "score_delta": null,
  "from": {
    "scan_id": "07ab7a38-35e5-4019-b926-c85c3a373d11",
    "version": "172.24.2",
    "analysis": {
      "status": "unknown"
    },
    "provenance": {},
    "grade": "D",
    "score": 35,
    "scanned_at": "2026-09-03T06:56:50.521Z"
  },
  "to": {
    "scan_id": "b935e209-f5e3-43e1-b563-18708d33ae8c",
    "version": "172.24.3",
    "analysis": {
      "issues": [],
      "stages": {
        "pii": "complete",
        "sbom": "complete",
        "signing": "certificate_parsed",
        "strings": "complete",
        "manifest": "complete"
      },
      "status": "complete",
      "grading": {
        "policy": "static-coverage-v1",
        "blockers": [],
        "eligible": true
      },
      "timings_ms": {
        "total": 25029.911,
        "harvest": 7190.710999999969,
        "detectors": 15033.10399999991
      },
      "bytes_total": 146384809,
      "bytes_scanned": 146384809,
      "bytes_skipped": 0,
      "files_processed": 5456,
      "coverage_version": 2,
      "string_encodings": [
        "ascii",
        "utf16le"
      ],
      "signature_validation": "not_performed"
    },
    "provenance": {
      "mode": "static",
      "artifacts": [
        {
          "name": "base.apk",
          "sha256": "c59dc0036b951ef37c017eac3c03609136203bb02c7c92de3b6dc09eedb3ce21"
        },
        {
          "name": "config.arm64_v8a.apk",
          "sha256": "d3eb7b856a4a02ac942c4a6c670e71626148ce960333857a43523776018292f3"
        },
        {
          "name": "config.en.apk",
          "sha256": "ce94ee0e329a5916b1b750da566d025a2be5cb4177790aade687eb41d05e519d"
        },
        {
          "name": "config.xxhdpi.apk",
          "sha256": "b0fc1611c4f71842804022a21a14f9865cc4a4fdad17ed1c6c5d926e91c375c9"
        }
      ],
      "ruleset_sha256": "3bb79cc3710b0fb021feaa322578f4cffe08396a97c51b34df092b5a05891d5e"
    },
    "grade": "F",
    "score": 0,
    "scanned_at": "2026-10-06T23:39:27.175Z"
  },
  "findings": {
    "added": [
      {
        "finding_type": 1,
        "severity": "critical",
        "title": "Amazon S3 bucket reference — confirmed publicly readable",
        "fingerprint": "656630671ce9ec18ba5ac5a66dbac31e7140c125754dd39b88e1743c89f566c4",
        "verified": true
      },
      {
        "finding_type": 1,
        "severity": "critical",
        "title": "Amazon S3 bucket reference — confirmed publicly readable",
        "fingerprint": "957a5b6fe02800582dd15666ac6fb3efe181585e29284659ec2ba5879f70c6d3",
        "verified": true
      },
      {
        "finding_type": 20,
        "severity": "low",
        "title": "Google API key (client-shipped; restriction unverified)",
        "fingerprint": "08281c7534d91e8be375c08b621650c857d31e8aa2f325f31e393a3d24e1fd5c",
        "verified": false
      },
      {
        "finding_type": 20,
        "severity": "low",
        "title": "Google API key (client-shipped; restriction unverified)",
        "fingerprint": "e783c582cc8f62a14c7f6911df7e87ed6b8ab2a2af3dbc2b928a031323ec3b18",
        "verified": false
      },
      {
        "finding_type": 53,
        "severity": "low",
        "title": "Firebase Storage bucket reference",
        "fingerprint": "cc210fb45e047cacd0728096a22f3608d8196f02a15cfc605c1505353890d4fc",
        "verified": false
      },
      {
        "finding_type": 72,
        "severity": "low",
        "title": "Sentry DSN",
        "fingerprint": "e917d14fa637ff5fd3b3e82bedee85f505b5739d0f80d405d1b394f91652c88e",
        "verified": false
      },
      {
        "finding_type": 53,
        "severity": "low",
        "title": "Firebase Storage bucket reference",
        "fingerprint": "6da605c01a32d6178ae1e6876876e3de02277efaeb0bf30b781056b6efdcc7a8",
        "verified": false
      },
      {
        "finding_type": 53,
        "severity": "low",
        "title": "Firebase Storage bucket reference",
        "fingerprint": "b6e2cb8eb4bf3d0a7bcb1c02e7aaa6b80181f3fefcd2655ab608c7c76f9d6977",
        "verified": false
      },
      {
        "finding_type": 34,
        "severity": "medium",
        "title": "Cleartext (HTTP) traffic permitted",
        "fingerprint": "94025ca91177232efea2d52d976e37f967866402c6e01f481a8de610b8e478e7",
        "verified": false
      },
      {
        "finding_type": 77,
        "severity": "low",
        "title": "Data Safety label omits Calendar",
        "fingerprint": "2a94ef25c6a64a2fcc33bcb8d2ada6376b418ddfa745771aa213e568d5afb277",
        "verified": false
      },
      {
        "finding_type": 77,
        "severity": "low",
        "title": "Data Safety label omits Contacts",
        "fingerprint": "52d6df5eafe80ad7de0275ee425de0bf8d715439e92a9026117bea4d546827d0",
        "verified": false
      }
    ],
    "removed": [
      {
        "finding_type": 1,
        "severity": "critical",
        "title": "Amazon S3 bucket reference — confirmed publicly readable",
        "fingerprint": "90a5c488b06d1eb9e7b6ac6ee975c4c94a0e567fe5c86700419f54c5a1ac1e7c",
        "verified": true
      },
      {
        "finding_type": 20,
        "severity": "low",
        "title": "Google API key (client-shipped; restriction unverified)",
        "fingerprint": "8045ef1250757784725cee3f89aaaa27fad5f8b5b45209b2cbeb6604e6ee2388",
        "verified": false
      },
      {
        "finding_type": 53,
        "severity": "low",
        "title": "Firebase Storage bucket reference",
        "fingerprint": "3d203b64d759f65946de0c67ae8a7827cd1d504b067d85100188a5e4e0851446",
        "verified": false
      },
      {
        "finding_type": 72,
        "severity": "low",
        "title": "Sentry DSN",
        "fingerprint": "2554bdf1a84741a802e7ffb6cb84e7aad160c2277b42f87caaa507718d6d43f9",
        "verified": false
      },
      {
        "finding_type": 53,
        "severity": "low",
        "title": "Firebase Storage bucket reference",
        "fingerprint": "9d4be2254319c988e5df02c147df9a8e1a8ca7ec3e0bbbe4aee9e15abdec0a33",
        "verified": false
      },
      {
        "finding_type": 53,
        "severity": "low",
        "title": "Firebase Storage bucket reference",
        "fingerprint": "17b713574b29d02a8b1ceb56674afa24af24553eee325b356fcd00c32ad8459a",
        "verified": false
      },
      {
        "finding_type": 34,
        "severity": "medium",
        "title": "Cleartext (HTTP) traffic permitted",
        "fingerprint": "cb46c44cd0500b927ddd01f9e4dcfa5c6d153e5e0bc975b6b15004181d0e1387",
        "verified": false
      },
      {
        "finding_type": 77,
        "severity": "low",
        "title": "Data Safety label omits Health and fitness",
        "fingerprint": "4897c7093e5b9566493ccf0dd0faff134f263df12c10fe0ec25a837702474e01",
        "verified": false
      },
      {
        "finding_type": 77,
        "severity": "low",
        "title": "Data Safety label omits Calendar",
        "fingerprint": "482ebc4e4be9a3b1e5ff0cdb1eaaba10030f5bc5aef0bdfaabadcf14a2ac6d8c",
        "verified": false
      },
      {
        "finding_type": 77,
        "severity": "low",
        "title": "Data Safety label omits Contacts",
        "fingerprint": "38151aa20c8ccd2e1d72f12d1735b09ff5ac035bcec20c1114af2739bcabc70f",
        "verified": false
      }
    ],
    "persisting_count": 0,
    "added_by_sev": {
      "critical": 2,
      "high": 0,
      "medium": 1,
      "low": 8
    },
    "removed_by_sev": {
      "critical": 1,
      "high": 0,
      "medium": 1,
      "low": 8
    }
  },
  "trackers": {
    "added": [
      "Google Analytics for Firebase",
      "Google UMP (consent)",
      "IAB TCF"
    ],
    "removed": [
      "Google AdServices"
    ]
  },
  "known_vulns": {
    "from": 0,
    "to": 0,
    "delta": 0,
    "from_recorded": true,
    "to_recorded": true
  }
}