{
  "ok": true,
  "app_id": "com.geniemd.geniemd.oem.amg",
  "comparable": false,
  "comparison_status": "limited_coverage",
  "regressed": true,
  "grade_delta": null,
  "score_delta": null,
  "from": {
    "scan_id": "add13da5-5cc6-46fc-9509-8b4f430807c5",
    "version": "2.3.83",
    "analysis": {
      "status": "unknown"
    },
    "provenance": {},
    "grade": "D",
    "score": 53,
    "scanned_at": "2026-09-02T12:50:40.914Z"
  },
  "to": {
    "scan_id": "8d898c4f-6a69-4c7e-a6ad-ac4576674e79",
    "version": "2.3.84",
    "analysis": {
      "issues": [],
      "stages": {
        "pii": "complete",
        "sbom": "complete",
        "signing": "certificate_parsed",
        "strings": "complete",
        "manifest": "complete"
      },
      "status": "complete",
      "grading": {
        "policy": "static-coverage-v1",
        "blockers": [],
        "eligible": true
      },
      "timings_ms": {
        "total": 29430.478,
        "harvest": 10922.28499999998,
        "detectors": 16009.098000000087
      },
      "bytes_total": 219666522,
      "bytes_scanned": 219666522,
      "bytes_skipped": 0,
      "files_processed": 4325,
      "coverage_version": 2,
      "string_encodings": [
        "ascii",
        "utf16le"
      ],
      "signature_validation": "not_performed"
    },
    "provenance": {
      "mode": "static",
      "artifacts": [
        {
          "name": "base.apk",
          "sha256": "1969c2a2da3b2c8c6f89c06d53973287989d1f771a3f3f27aa30ca1c40871c95"
        },
        {
          "name": "config.arm64_v8a.apk",
          "sha256": "52eb3483fe711fae40002abe12d6461ac9c5ad8886b364a6f850bd68ff0f8a74"
        },
        {
          "name": "config.en.apk",
          "sha256": "cf00f25a79866ef444ad98d05fda9825798269234fc1f180e4e116b94a4300f5"
        },
        {
          "name": "config.xxhdpi.apk",
          "sha256": "2d5eee7161b69370ed3cd13942040b81090b07e38bbec145d89828eb888954fb"
        }
      ],
      "ruleset_sha256": "3bb79cc3710b0fb021feaa322578f4cffe08396a97c51b34df092b5a05891d5e"
    },
    "grade": "F",
    "score": 21,
    "scanned_at": "2026-10-06T20:12:37.321Z"
  },
  "findings": {
    "added": [
      {
        "finding_type": 4,
        "severity": "high",
        "title": "AWS access key ID",
        "fingerprint": "9e3de6bff710a65860270fc537102122db5e5d2d7ebbe855fa87a7c6ce3986cb",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "fa1913ff451ae3e451148f498391395274fc113b881d640638dc102a54d10036",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "240a0146309cbd750939a64fd65c29526056b68cca63da98dcef902c2a0c684b",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "critical",
        "title": "Amazon S3 bucket reference — confirmed publicly readable",
        "fingerprint": "05101b549c170f069c2a2a36d41bbf14f3c87c44c92cec8f04a8c9b17ee5d7db",
        "verified": true
      },
      {
        "finding_type": 53,
        "severity": "low",
        "title": "Firebase Storage bucket reference",
        "fingerprint": "85ab9a33ccef9468e839ffdca41a6fa8b0dbc34c65f7db35280f22f51cfc5372",
        "verified": false
      },
      {
        "finding_type": 6,
        "severity": "low",
        "title": "Private key material (third-party library artifact, shared across 185 unrelated developers)",
        "fingerprint": "62a91e02911570689478feddb8e4a248b9f061c782ed638a6f16cd7234cf99d3",
        "verified": false
      },
      {
        "finding_type": 6,
        "severity": "low",
        "title": "Private key material (third-party library artifact, shared across 185 unrelated developers)",
        "fingerprint": "b3a7390831348120a1fa906e96355885d14f7987e784904a539fe5b3582cdb20",
        "verified": false
      },
      {
        "finding_type": 20,
        "severity": "low",
        "title": "Google API key (client-shipped; restriction unverified)",
        "fingerprint": "85f0b5ff1c42ac24c093d6316e34eb2771047a57032db76ac09b53d2665ed819",
        "verified": false
      },
      {
        "finding_type": 2,
        "severity": "low",
        "title": "Firebase Realtime Database reference",
        "fingerprint": "a7c278e980b7f83ead46ee9dca0fc5ebef0ae6651f0d8cd5e701ccc3e18cb311",
        "verified": false
      },
      {
        "finding_type": 53,
        "severity": "low",
        "title": "Firebase Storage bucket reference",
        "fingerprint": "5c8174e34f22f9bf7994a7c7a4d3ab5dbf2f9a60b5dc5f09e0a7d7f1a7d32e37",
        "verified": false
      },
      {
        "finding_type": 20,
        "severity": "low",
        "title": "Google API key (client-shipped; restriction unverified)",
        "fingerprint": "8cae71359dc0cd8085c8e28f93a267bcf6ee9af987a129789f7195af6c1c0d82",
        "verified": false
      },
      {
        "finding_type": 72,
        "severity": "low",
        "title": "Sentry DSN",
        "fingerprint": "9271f5834cbfb6180ac059369f69b72c5455a9eb61e75e48aac1034275b660d0",
        "verified": false
      }
    ],
    "removed": [
      {
        "finding_type": 4,
        "severity": "high",
        "title": "AWS access key ID",
        "fingerprint": "8a1dd14403ea862f826c90296976fe20b128742814a591ce7c9b07c1805886cd",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "f5fc184b17c048354fc766dacac1d0fd7b6da4f68e1d04c321614221e2fc8f59",
        "verified": false
      },
      {
        "finding_type": 53,
        "severity": "low",
        "title": "Firebase Storage bucket reference",
        "fingerprint": "938086713bd804dcde27d3f021065ddd6f2c7f42b240efb5634f56c4576af6f1",
        "verified": false
      },
      {
        "finding_type": 6,
        "severity": "high",
        "title": "Private key material",
        "fingerprint": "0db39116c3f24ab010f5874d1a476422c45aca5dba9d2c81765a3fdc27c5622c",
        "verified": false
      },
      {
        "finding_type": 20,
        "severity": "low",
        "title": "Google API key (client-shipped; restriction unverified)",
        "fingerprint": "67a05300a6379cd879911346af6ab6b12c8191871946a5bebd2972fa2f14ecf4",
        "verified": false
      },
      {
        "finding_type": 2,
        "severity": "low",
        "title": "Firebase Realtime Database reference",
        "fingerprint": "513e2539da0a145674cddbaae64e295286108120e30a87faa99ecf60bd40619a",
        "verified": false
      },
      {
        "finding_type": 53,
        "severity": "low",
        "title": "Firebase Storage bucket reference",
        "fingerprint": "55bbe19767497ecdf102355743c5dc3567b60a2e412305c663565ef2de0b0b29",
        "verified": false
      },
      {
        "finding_type": 20,
        "severity": "low",
        "title": "Google API key (client-shipped; restriction unverified)",
        "fingerprint": "f7cecd448a213208591b3f6dde8ab5c12470ab741a77fee435173729b38ffd7f",
        "verified": false
      },
      {
        "finding_type": 72,
        "severity": "low",
        "title": "Sentry DSN",
        "fingerprint": "bc94836936adba9b889567c279dfc5e4dc4be6d8240fab8f336a98b770e622a4",
        "verified": false
      },
      {
        "finding_type": 34,
        "severity": "medium",
        "title": "Cleartext (HTTP) traffic permitted",
        "fingerprint": "cb46c44cd0500b927ddd01f9e4dcfa5c6d153e5e0bc975b6b15004181d0e1387",
        "verified": false
      }
    ],
    "persisting_count": 0,
    "added_by_sev": {
      "critical": 1,
      "high": 1,
      "medium": 0,
      "low": 10
    },
    "removed_by_sev": {
      "critical": 0,
      "high": 2,
      "medium": 1,
      "low": 7
    }
  },
  "trackers": {
    "added": [
      "Google Analytics for Firebase"
    ],
    "removed": [
      "Google AdServices"
    ]
  },
  "known_vulns": {
    "from": 1,
    "to": 0,
    "delta": -1,
    "from_recorded": true,
    "to_recorded": true
  }
}