{
  "ok": true,
  "app_id": "com.milkbasket.app",
  "comparable": true,
  "comparison_status": "comparable",
  "regressed": true,
  "grade_delta": "D ← A",
  "score_delta": -55,
  "from": {
    "scan_id": "f4496cf4-4558-4760-9627-d9cd4a34f2e8",
    "version": "9.0.5",
    "analysis": {
      "issues": [],
      "stages": {
        "pii": "complete",
        "sbom": "complete",
        "signing": "certificate_parsed",
        "strings": "complete",
        "manifest": "complete"
      },
      "status": "complete",
      "grading": {
        "policy": "static-coverage-v1",
        "blockers": [],
        "eligible": true
      },
      "timings_ms": {
        "total": 15555.175,
        "harvest": 3354.4920000000043,
        "detectors": 11456.680000000013
      },
      "bytes_total": 79892746,
      "bytes_scanned": 79892746,
      "bytes_skipped": 0,
      "files_processed": 1214,
      "coverage_version": 2,
      "string_encodings": [
        "ascii",
        "utf16le"
      ],
      "signature_validation": "not_performed"
    },
    "provenance": {
      "mode": "static",
      "artifacts": [
        {
          "name": "base.apk",
          "sha256": "16fa819440ea25879db2cdcd8513b8b6fd54731d9a1d5ddc97a7650dec7cc4c2"
        },
        {
          "name": "config.arm64_v8a.apk",
          "sha256": "31e7063ff6e02a63dfc8a917e6024afb87708302e01410d24b0f357c1249d0f1"
        },
        {
          "name": "config.xxhdpi.apk",
          "sha256": "be4dff29827709b382068a0c9a3adf5be11095363fb074444d7a2525a39e6931"
        }
      ],
      "ruleset_sha256": "fb649a88cc2e66d8cb5b3c389ee4628bf97383e131015c594e187dc06eabcef7"
    },
    "grade": "A",
    "score": 95,
    "scanned_at": "2026-09-13T11:20:41.812Z"
  },
  "to": {
    "scan_id": "872d3660-7324-4287-9196-abd8802412ea",
    "version": "9.0.7",
    "analysis": {
      "issues": [],
      "stages": {
        "pii": "complete",
        "sbom": "complete",
        "signing": "certificate_parsed",
        "strings": "complete",
        "manifest": "complete"
      },
      "status": "complete",
      "grading": {
        "policy": "static-coverage-v1",
        "blockers": [],
        "eligible": true
      },
      "timings_ms": {
        "total": 14905.547,
        "harvest": 3070.325999999999,
        "detectors": 11193.67599999998
      },
      "bytes_total": 79908932,
      "bytes_scanned": 79908932,
      "bytes_skipped": 0,
      "files_processed": 1214,
      "coverage_version": 2,
      "string_encodings": [
        "ascii",
        "utf16le"
      ],
      "signature_validation": "not_performed"
    },
    "provenance": {
      "mode": "static",
      "artifacts": [
        {
          "name": "base.apk",
          "sha256": "d8e857142c02ef10320745927036764bdee3eb39d311ed607286582f157afb35"
        },
        {
          "name": "config.arm64_v8a.apk",
          "sha256": "4bae3a7eb269b68a5b4771d7d94465d264e0aa22a94fabbeaeca6b03a6e80bd9"
        },
        {
          "name": "config.xxhdpi.apk",
          "sha256": "60a6132c75e91c7b65d65cea2aef8ea1ecf2ed4e964cf75ca9cde69aec35994e"
        }
      ],
      "ruleset_sha256": "ab3c4fcdbb80449695ea8ed46a12abf272aebe072e8ca1ffa301019c3d559bee"
    },
    "grade": "D",
    "score": 40,
    "scanned_at": "2026-09-30T09:26:14.635Z"
  },
  "findings": {
    "added": [
      {
        "finding_type": 2,
        "severity": "low",
        "title": "Firebase Realtime Database reference",
        "fingerprint": "9d2ae106b96938fc98cffe48ec3065b3d250dce432e83d852bb51a853e19a4bb",
        "verified": false
      }
    ],
    "removed": [
      {
        "finding_type": 2,
        "severity": "low",
        "title": "Firebase Realtime Database reference",
        "fingerprint": "4b2924d7f44a3d582b441db342fcc749400b3a5590a3552daf8c815742756d3e",
        "verified": false
      }
    ],
    "persisting_count": 13,
    "added_by_sev": {
      "critical": 0,
      "high": 0,
      "medium": 0,
      "low": 1
    },
    "removed_by_sev": {
      "critical": 0,
      "high": 0,
      "medium": 0,
      "low": 1
    }
  },
  "trackers": {
    "added": [
      "Google Analytics for Firebase"
    ],
    "removed": [
      "Google AdServices"
    ]
  },
  "known_vulns": {
    "from": 0,
    "to": 0,
    "delta": 0,
    "from_recorded": true,
    "to_recorded": true
  }
}