Earlier scan
Build 2.8.20
2026-09-29 10:27 UTCA · 91/100Static analysis completeLater scan
Build 3.1.1
2026-10-14 04:55 UTCA · 95/100Static analysis completeBoth scans record complete static analysis. Changes describe detections, not confirmed fixes.
Finding changes
Newly detectedlowGoogle API key (client-shipped; restriction unverified)
Recorded in the selected newer scan. Review the finding in context.
View latest categoryNewly detectedlowAmazon S3 bucket reference
Recorded in the selected newer scan. Review the finding in context.
View latest categoryNewly detectedlowExported content provider without permission (third-party library artifact, shared across 232 unrelated developers)
Recorded in the selected newer scan. Review the finding in context.
View latest categoryNo longer detectedlowGoogle API key (client-shipped; restriction unverified)
Absent from the selected newer scan. This alone does not confirm a fix; coverage and build contents may differ.
No longer detectedlowFirebase Storage bucket reference
Absent from the selected newer scan. This alone does not confirm a fix; coverage and build contents may differ.
No longer detectedmediumCleartext (HTTP) traffic permitted
Absent from the selected newer scan. This alone does not confirm a fix; coverage and build contents may differ.
No matching records. Change or clear your filters.
SDK & advisory changes
Tracking SDKs newly detected
AppLovin, Meta Audience Network, Vungle, Yandex Ads, ironSource, Google Tag Manager, Yandex Metrica, Singular, Google UMP (consent), Google Crashlytics
Tracking SDKs no longer detected
None recorded
Recorded advisory matches: 0 → 0. Missing inventories cannot establish absence.