{
  "ok": true,
  "app_id": "com.hellofresh.androidapp",
  "comparable": true,
  "comparison_status": "comparable",
  "regressed": true,
  "grade_delta": "D ← D",
  "score_delta": 0,
  "from": {
    "scan_id": "6d2c8ac0-4afb-4194-9d4f-40a020dbef70",
    "version": "26.40",
    "analysis": {
      "issues": [],
      "stages": {
        "pii": "complete",
        "sbom": "complete",
        "signing": "certificate_parsed",
        "strings": "complete",
        "manifest": "complete"
      },
      "status": "complete",
      "grading": {
        "policy": "static-coverage-v1",
        "blockers": [],
        "eligible": true
      },
      "timings_ms": {
        "total": 60781.535,
        "harvest": 13932.316999999985,
        "detectors": 43696.68100000001
      },
      "bytes_total": 293063827,
      "bytes_scanned": 293063827,
      "bytes_skipped": 0,
      "files_processed": 4429,
      "coverage_version": 2,
      "string_encodings": [
        "ascii",
        "utf16le"
      ],
      "signature_validation": "not_performed"
    },
    "provenance": {
      "mode": "static",
      "artifacts": [
        {
          "name": "base.apk",
          "sha256": "f620c508d1acafe21814c6697cd4ef56fdd4f594853e71c2e5cc6f57f883d492"
        },
        {
          "name": "config.arm64_v8a.apk",
          "sha256": "af59d63114649eed87f5823d4ee5403327a3c8fa37ad6f4212aae56eb586f888"
        },
        {
          "name": "config.xxhdpi.apk",
          "sha256": "460df1ec41c469e62b79cebf5fe62475141192ed2273e05542c87f0e2734c2d2"
        }
      ],
      "ruleset_sha256": "3bb79cc3710b0fb021feaa322578f4cffe08396a97c51b34df092b5a05891d5e"
    },
    "grade": "D",
    "score": 40,
    "scanned_at": "2026-10-05T08:41:18.064Z"
  },
  "to": {
    "scan_id": "c47dc1b4-73df-4c83-8ea4-70c173a66257",
    "version": "26.41.1",
    "analysis": {
      "issues": [],
      "stages": {
        "pii": "complete",
        "sbom": "complete",
        "signing": "certificate_parsed",
        "strings": "complete",
        "manifest": "complete"
      },
      "status": "complete",
      "grading": {
        "policy": "static-coverage-v1",
        "blockers": [],
        "eligible": true
      },
      "timings_ms": {
        "total": 56328.155,
        "harvest": 13855.140999999929,
        "detectors": 39483.22099999997
      },
      "bytes_total": 281438902,
      "bytes_scanned": 281438902,
      "bytes_skipped": 0,
      "files_processed": 4332,
      "coverage_version": 2,
      "string_encodings": [
        "ascii",
        "utf16le"
      ],
      "signature_validation": "not_performed"
    },
    "provenance": {
      "mode": "static",
      "artifacts": [
        {
          "name": "base.apk",
          "sha256": "c85e8d0d29a949afe5c29c2b6c62b515ed2aa0fe988a3bffa1f85d91934a24fa"
        },
        {
          "name": "config.arm64_v8a.apk",
          "sha256": "14e145f4b9b883b7f5fb25e52589cb6c27043cb2e4f8eaddc70869c904c55e23"
        },
        {
          "name": "config.xxhdpi.apk",
          "sha256": "1716f3d30b03cf29aa634da5df1466eae148ea8c9d71058a4b819050205cdb56"
        }
      ],
      "ruleset_sha256": "3bb79cc3710b0fb021feaa322578f4cffe08396a97c51b34df092b5a05891d5e"
    },
    "grade": "D",
    "score": 40,
    "scanned_at": "2026-10-12T08:43:23.594Z"
  },
  "findings": {
    "added": [
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "4fa9658b68a0e480f3b8a54afdecb830b27396ac3fbd3781978c559e666b07a6",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "critical",
        "title": "Amazon S3 bucket reference — confirmed publicly readable",
        "fingerprint": "d5a2f7680196062a9650f33ac605c973797c98762d891cda184543fbacfce644",
        "verified": true
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "83a6f876a33bc20d172c7e684bab2d40e1abc7781e4b08d6d142c717451f9808",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "bfb2eca1274d5cf69edcfdd3eb29e5a5d127c1b3bf1f1cebaed3526071a67d41",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "69df8e798c3972e8f9d6669dfb6e0ac96cf890dfc1676c0c37b7386539a9ebe5",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "41fc4caba5c5134a48b87a219d6b9c7506ce402ffee6a8d146525d031563e039",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "38acceecc55830d05573c2a8633b8e186bbf4940db042e3dc860ac34f9658ee0",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "1ae0fb5d539c70c5b1b91df0d54619759663e8c5d7d43b33ff2bdb7b41c7515b",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "55a3cf49f68dcf3ae82ececb918cf71055533df2d0b9bb0a2afafa1cedfabbca",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "d2b669c533aa0cfdfc58ccbaf71459978010c839655a83a8b68b3be96098a618",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "367fe16c4a7cfa211f770f1e272a5abf179c68b69a2419f5ee7b504b3e840893",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "e7f825417d087f9896ccced390208e68c12a90f695d693820044b5b21168c3db",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "0c4f0f658d75b56b6f83006ccad61ea8388712e8e584baf9c5e85271c4fae871",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "1fbc121f8235b3c7795801b9d4c42631c520d6fafadcc461264f4b68c1a749af",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "6fdfeaba7272bd5751c98cb55fe3ad0d6a2936578470d2c5d8a96f5c0283f610",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "6783d497053678a5ab092d3e8cea043b621f5aa2d50386a65df67eaf9b4838ec",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "e676f16beafc00ba3bdb0142f3da99f57f21f74cf0ea76ebee961d365059b3d7",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "dd6f5489d41eff70753f336a0b47b15ffdfd23bb72c0c760825c27e26c90dfd1",
        "verified": false
      }
    ],
    "removed": [
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "17dd183cf5d485683182e83cd5d25605ee06dd7e885a4278ac185a162d85c3f3",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "4d4db31258f629ce7cd60c2e08ea6e1bf6aaa273e37ab3f18647fbbb3880cd83",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "94ea0ffefb4f8e5a4ff27c6a359bd0f0382caa2b14abaa716ed85e03219bc09d",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "fda88c87798f8291631076972939bd40276df9cd4991ed3d3d0e46c11fdfcbf6",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "critical",
        "title": "Amazon S3 bucket reference — confirmed publicly readable",
        "fingerprint": "5628e01ce106b93b2b3ae2270afc064089a8db9b73914c9a1df33f5b8c06c76e",
        "verified": true
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "bc3a87d14bccac364f5cdedb75cd39f38a1bdb8d0a20323623274ce73c6ab631",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "62b560b0258f67d8b1e59fff2ae2177f1bc6c30f1504d8240547bee76f31429b",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "ef91fee4ba9322a0320b35316bcada7745d7be2f2eeb2fc7d177b35b253a639d",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "cb69a1d3f4ceacaeaf27dfdb813e3af9cd32f1172369670eeb0604b30444e0b5",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "78288dc1dc6888d347a42ea527476984e6a50f6fdf148c122bb2c60b636314f1",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "00cba11ef0c7183dd197b9398ac8819f3a27d3851a1d81114750b98c542f53eb",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "517dbbd3e1570514a7e616caeaff50a4f01b1991ca1429a668cc3da4fcb6e350",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "17a248112fa9750c466f3d02bac60419d6118cf7ef86fd104eabe6abada2731a",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "2efc56e14fc491d6b4d7d30758983394d1736776a4b7eb840d5e687d20c656c2",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "917f087fa722a153adbab2ff0cbfb5452da921abe75ca6a6d937cee7007f57d2",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "0d2f429af47e5ba125be6a9c9afc746f07147e73677512b572a0d892787b5e1f",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "1512d2c80b4ec95ac35e4b71107ff0d9aec24c5459883d9b07d2448e3baac797",
        "verified": false
      }
    ],
    "persisting_count": 10,
    "added_by_sev": {
      "critical": 1,
      "high": 0,
      "medium": 0,
      "low": 17
    },
    "removed_by_sev": {
      "critical": 1,
      "high": 0,
      "medium": 0,
      "low": 16
    }
  },
  "trackers": {
    "added": [],
    "removed": []
  },
  "known_vulns": {
    "from": 0,
    "to": 0,
    "delta": 0,
    "from_recorded": true,
    "to_recorded": true
  }
}