Earlier scan
Build 1.28.0
2026-09-03 00:35 UTCB · 84/100Historical · coverage unknownLater scan
Build 1.28.0
2026-10-06 21:19 UTCB · 84/100Static analysis completeComparison is limited: one or both scans have incomplete or unknown coverage. Missing findings cannot establish improvement.
Finding changes
Newly detectedlowGoogle API key (client-shipped; restriction unverified)
Recorded in the selected newer scan. Review the finding in context.
View latest categoryNewly detectedlowFirebase Realtime Database reference
Recorded in the selected newer scan. Review the finding in context.
View latest categoryNewly detectedlowDigitalOcean Spaces reference
Recorded in the selected newer scan. Review the finding in context.
View latest categoryNewly detectedlowExported content provider without permission (third-party library artifact, shared across 402 unrelated developers)
Recorded in the selected newer scan. Review the finding in context.
View latest categoryNewly detectedmediumShort signing key (RSA 1024-bit)
Recorded in the selected newer scan. Review the finding in context.
View latest categoryNewly detectedmediumcom.squareup.okhttp3:okhttp 3.12.13 — CVE-2021-0341
Recorded in the selected newer scan. Review the finding in context.
View latest categoryNo longer detectedlowGoogle API key (client-shipped; restriction unverified)
Absent from the selected newer scan. This alone does not confirm a fix; coverage and build contents may differ.
No longer detectedlowFirebase Realtime Database reference
Absent from the selected newer scan. This alone does not confirm a fix; coverage and build contents may differ.
No longer detectedlowDigitalOcean Spaces reference
Absent from the selected newer scan. This alone does not confirm a fix; coverage and build contents may differ.
No longer detectedlowExported content provider without permission (third-party library artifact, shared across 3 unrelated developers)
Absent from the selected newer scan. This alone does not confirm a fix; coverage and build contents may differ.
No longer detectedmediumShort signing key (RSA 1024-bit)
Absent from the selected newer scan. This alone does not confirm a fix; coverage and build contents may differ.
No longer detectedmediumcom.squareup.okhttp3:okhttp 3.12.13 — CVE-2021-0341
Absent from the selected newer scan. This alone does not confirm a fix; coverage and build contents may differ.
No matching records. Change or clear your filters.
SDK & advisory changes
Tracking SDKs newly detected
Mintegral, Pangle (ByteDance), Yandex Ads, Google Analytics for Firebase, Google UMP (consent), IAB TCF
Tracking SDKs no longer detected
Google AdServices
Recorded advisory matches: 1 → 1. Missing inventories cannot establish absence.