{
  "ok": true,
  "app_id": "com.netpulse.mobile.crymca",
  "comparable": false,
  "comparison_status": "limited_coverage",
  "regressed": true,
  "grade_delta": null,
  "score_delta": null,
  "from": {
    "scan_id": "7d4a7d92-9069-44b6-8ff7-c4799606a8e1",
    "version": "1.10",
    "analysis": {
      "status": "unknown"
    },
    "provenance": {},
    "grade": "B",
    "score": 83,
    "scanned_at": "2026-09-03T00:27:33.503Z"
  },
  "to": {
    "scan_id": "69dd4444-fcdd-4f80-a78a-8017bfac5250",
    "version": "1.10",
    "analysis": {
      "issues": [],
      "stages": {
        "pii": "complete",
        "sbom": "complete",
        "signing": "certificate_parsed",
        "strings": "complete",
        "manifest": "complete"
      },
      "status": "complete",
      "grading": {
        "policy": "static-coverage-v1",
        "blockers": [],
        "eligible": true
      },
      "timings_ms": {
        "total": 20036.481,
        "harvest": 5519.185000000002,
        "detectors": 12673.635000000118
      },
      "bytes_total": 107851655,
      "bytes_scanned": 107851655,
      "bytes_skipped": 0,
      "files_processed": 4142,
      "coverage_version": 2,
      "string_encodings": [
        "ascii",
        "utf16le"
      ],
      "signature_validation": "not_performed"
    },
    "provenance": {
      "mode": "static",
      "artifacts": [
        {
          "name": "base.apk",
          "sha256": "983179f678a00c0048099b0c2fa4760297731c26eb0e1f55ed7218a88dc97377"
        },
        {
          "name": "config.arm64_v8a.apk",
          "sha256": "66df38ef31de0ccd26a239e979eb30a190dff18fe7dcc061c2b838b02d4d4037"
        },
        {
          "name": "config.en.apk",
          "sha256": "ee8a3eae0d45b707c9fb5065b032988a1e41d18fec39e2883e9581e2cffc145b"
        },
        {
          "name": "config.xxhdpi.apk",
          "sha256": "145fc0d9990864f0517029a2be14f11183cb4c32a917ef827d0553661b0cacc6"
        }
      ],
      "ruleset_sha256": "3bb79cc3710b0fb021feaa322578f4cffe08396a97c51b34df092b5a05891d5e"
    },
    "grade": "F",
    "score": 0,
    "scanned_at": "2026-10-06T20:47:35.685Z"
  },
  "findings": {
    "added": [
      {
        "finding_type": 1,
        "severity": "critical",
        "title": "Amazon S3 bucket reference — confirmed publicly readable",
        "fingerprint": "a4c9c4f2f4f5729e50d525c7c6ab16cfea7f06242c3b82c2a4f3ba4eb72c9e8e",
        "verified": true
      },
      {
        "finding_type": 1,
        "severity": "critical",
        "title": "Amazon S3 bucket reference — confirmed publicly readable",
        "fingerprint": "42844aec55a5723168f04a267ed5ab772ed8d854721350e65c5bd7e1b7f10b37",
        "verified": true
      },
      {
        "finding_type": 1,
        "severity": "critical",
        "title": "Amazon S3 bucket reference — confirmed publicly readable",
        "fingerprint": "8e93545afb15ab153acecb25d65c2775337e544a7e4b6093ce8775266386b469",
        "verified": true
      },
      {
        "finding_type": 1,
        "severity": "critical",
        "title": "Amazon S3 bucket reference — confirmed publicly readable",
        "fingerprint": "3a76b00e171c24d2213b9e7185c12d04d863344e1d798c5d6c80740f6917033c",
        "verified": true
      },
      {
        "finding_type": 1,
        "severity": "critical",
        "title": "Amazon S3 bucket reference — confirmed publicly readable",
        "fingerprint": "ba1745aee5750107b494e9daa3d3c319f6a6fa4366b1ac6290f5e17c29f2f394",
        "verified": true
      },
      {
        "finding_type": 20,
        "severity": "low",
        "title": "Google API key (client-shipped; restriction unverified)",
        "fingerprint": "848123f2611a7266ba94efdecc8ec8fa4e200935250759b3dcdcf9a5e167293f",
        "verified": false
      },
      {
        "finding_type": 20,
        "severity": "low",
        "title": "Google API key (client-shipped; restriction unverified)",
        "fingerprint": "f25f952926f6b4bf1345eaefefe5be12f2ae0f2abe9fd325b37117afb39c4baa",
        "verified": false
      },
      {
        "finding_type": 2,
        "severity": "low",
        "title": "Firebase Realtime Database reference",
        "fingerprint": "a80745c829b1aaaa150f729c1137b772450d9bb0de9ddabe4978e03909dcad4c",
        "verified": false
      },
      {
        "finding_type": 53,
        "severity": "low",
        "title": "Firebase Storage bucket reference",
        "fingerprint": "f291e7d2455cfd3f506587c179693b002843937cf69be40405403b06ada60e5a",
        "verified": false
      },
      {
        "finding_type": 72,
        "severity": "low",
        "title": "Sentry DSN",
        "fingerprint": "164b71dbaab27d8dc33038c85de1258d6b0883b473848bd1e0c6c7e4e764a1a1",
        "verified": false
      },
      {
        "finding_type": 34,
        "severity": "medium",
        "title": "Cleartext (HTTP) traffic permitted",
        "fingerprint": "94025ca91177232efea2d52d976e37f967866402c6e01f481a8de610b8e478e7",
        "verified": false
      },
      {
        "finding_type": 35,
        "severity": "medium",
        "title": "Exported content provider without permission",
        "fingerprint": "d35f86a46da1699fed9c0652891636ff31a2f849b070c4ef808e5d112d208db7",
        "verified": false
      },
      {
        "finding_type": 77,
        "severity": "low",
        "title": "Data Safety label omits Calendar",
        "fingerprint": "2a94ef25c6a64a2fcc33bcb8d2ada6376b418ddfa745771aa213e568d5afb277",
        "verified": false
      }
    ],
    "removed": [
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "a0d473420a3ecdfa087da2b4c5601efa25592d5712c11700cecce0e63a33d3ad",
        "verified": false
      },
      {
        "finding_type": 20,
        "severity": "low",
        "title": "Google API key (client-shipped; restriction unverified)",
        "fingerprint": "88f0a48a7e9ed2764adeb892cc6f2c95a6420faf22bd1199f6540f8bc6538756",
        "verified": false
      },
      {
        "finding_type": 2,
        "severity": "low",
        "title": "Firebase Realtime Database reference",
        "fingerprint": "064e6b4d9f2ad8e570cc64446067f2e996cb809bec31c6b765bde997c8f0586f",
        "verified": false
      },
      {
        "finding_type": 53,
        "severity": "low",
        "title": "Firebase Storage bucket reference",
        "fingerprint": "6841c311fe63440f44416ed9a16b3c4887c3ba43265fa67f72360f3e311122c9",
        "verified": false
      },
      {
        "finding_type": 72,
        "severity": "low",
        "title": "Sentry DSN",
        "fingerprint": "c519471403dcfa420388eab9159cfbe1b376c2cd037e27c30359bbe04a812969",
        "verified": false
      },
      {
        "finding_type": 34,
        "severity": "medium",
        "title": "Cleartext (HTTP) traffic permitted",
        "fingerprint": "cb46c44cd0500b927ddd01f9e4dcfa5c6d153e5e0bc975b6b15004181d0e1387",
        "verified": false
      },
      {
        "finding_type": 35,
        "severity": "medium",
        "title": "Exported content provider without permission",
        "fingerprint": "ff2f8dfa0764561763020fd1f82cf6f1cb7d76d3d21eead94ec9191805712041",
        "verified": false
      }
    ],
    "persisting_count": 0,
    "added_by_sev": {
      "critical": 5,
      "high": 0,
      "medium": 2,
      "low": 6
    },
    "removed_by_sev": {
      "critical": 0,
      "high": 0,
      "medium": 2,
      "low": 5
    }
  },
  "trackers": {
    "added": [
      "Google Analytics for Firebase",
      "IAB TCF"
    ],
    "removed": [
      "Google AdServices"
    ]
  },
  "known_vulns": {
    "from": 0,
    "to": 0,
    "delta": 0,
    "from_recorded": true,
    "to_recorded": true
  }
}