{
  "ok": true,
  "app_id": "com.outfit7.gingersbirthdayfree",
  "comparable": true,
  "comparison_status": "comparable",
  "regressed": true,
  "grade_delta": "F ← C",
  "score_delta": -74,
  "from": {
    "scan_id": "eed1fb24-410e-4cee-adb1-d3af7e827fb4",
    "version": "3.7.2.611",
    "analysis": {
      "issues": [],
      "stages": {
        "pii": "complete",
        "sbom": "complete",
        "signing": "certificate_parsed",
        "strings": "complete",
        "manifest": "complete"
      },
      "status": "complete",
      "grading": {
        "policy": "static-coverage-v1",
        "blockers": [],
        "eligible": true
      },
      "timings_ms": {
        "total": 19789.722,
        "harvest": 5920.637999999977,
        "detectors": 12261.291000000077
      },
      "bytes_total": 115273347,
      "bytes_scanned": 115273347,
      "bytes_skipped": 0,
      "files_processed": 3662,
      "coverage_version": 2,
      "string_encodings": [
        "ascii",
        "utf16le"
      ],
      "signature_validation": "not_performed"
    },
    "provenance": {
      "mode": "static",
      "artifacts": [
        {
          "name": "base.apk",
          "sha256": "733ca4975f2161b804fa63cd75937f396fe0bec39f24256abc98c1f15064cfda"
        },
        {
          "name": "config.arm64_v8a.apk",
          "sha256": "a8f4d36d3a1a7c6387c61ced738b347b962096a67f72157f14a46057abdb46c4"
        },
        {
          "name": "config.xxhdpi.apk",
          "sha256": "fee2c70f4cd823a482b867a0251df6f3926462b783d6174f5c5dc3c2ba71d4e0"
        }
      ],
      "ruleset_sha256": "6627311253eb54bc361d5dd9a0abc2a0fe556e390d6b2031bca75e1800928ccd"
    },
    "grade": "C",
    "score": 74,
    "scanned_at": "2026-09-23T20:44:55.218Z"
  },
  "to": {
    "scan_id": "c4c11f64-62a8-4e04-bf9f-16336881efeb",
    "version": "3.8.1.686",
    "analysis": {
      "issues": [],
      "stages": {
        "pii": "complete",
        "sbom": "complete",
        "signing": "certificate_parsed",
        "strings": "complete",
        "manifest": "complete"
      },
      "status": "complete",
      "grading": {
        "policy": "static-coverage-v1",
        "blockers": [],
        "eligible": true
      },
      "timings_ms": {
        "total": 20653.925,
        "harvest": 5809.577000000003,
        "detectors": 13289.584000000083
      },
      "bytes_total": 114961092,
      "bytes_scanned": 114961092,
      "bytes_skipped": 0,
      "files_processed": 3644,
      "coverage_version": 2,
      "string_encodings": [
        "ascii",
        "utf16le"
      ],
      "signature_validation": "not_performed"
    },
    "provenance": {
      "mode": "static",
      "artifacts": [
        {
          "name": "base.apk",
          "sha256": "b1eb288caba220bf1a025f2e46a69f682ff2fded0cf4f5ad6c9f36dd1efb0436"
        },
        {
          "name": "config.arm64_v8a.apk",
          "sha256": "4e731920e1e4aa08ac2a736d8608a546c4c6af9f5b0e13db09fccbdec170ce42"
        },
        {
          "name": "config.xxhdpi.apk",
          "sha256": "9fe1d00650224579ff61f94a78c6e7a751ead73290c661fdda085d8c24e9818d"
        }
      ],
      "ruleset_sha256": "3bb79cc3710b0fb021feaa322578f4cffe08396a97c51b34df092b5a05891d5e"
    },
    "grade": "F",
    "score": 0,
    "scanned_at": "2026-10-07T10:45:28.713Z"
  },
  "findings": {
    "added": [
      {
        "finding_type": 1,
        "severity": "critical",
        "title": "Amazon S3 bucket reference — confirmed publicly readable",
        "fingerprint": "0f087b24f203c1b25f24330664d0f5f232676d3cc51dbf3de51a9dcf46d95ebb",
        "verified": true
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "e1efaa56b007ee313a3a7002f596c518aff96e4ae43b89ca0444435cd0cff7b7",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "2dfb6a303c9587c99f7f71360a44d6f1e940a8648418a83e453fd7262d4386b2",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "critical",
        "title": "Amazon S3 bucket reference — confirmed publicly readable",
        "fingerprint": "92d26cd1aaa758c2da02c39b3d5fb474a4b76c65c2065fc31d09e3c8b70f2a27",
        "verified": true
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "38c64051a745968b35b42020d694165fcac0b086b4850ef90e724b478543d71f",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "844eaad0c53143d9b7ce28efdb9a439d4686d31276d18fee5c21efe46387b31e",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "094218415683646695bd7aa16148df69d5e037243be0949c417714cb04ce16db",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "4cee650b952e8d8ca107b51fe2361935a5f95573a19993382f2b3c6402886c9b",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "93697f94c36f37a511bea5f7df0ad9f5fe83b8fddb19ce547cd129f19ca40b73",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "9231253014320e1f05256fcdbf8e0ea20076d9190f8cc7559287c24badadd55f",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "d6765e2396379e00135baceff0f1fac1a8540d7365da88bba739c921c46dac6c",
        "verified": false
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "fingerprint": "592cedd8a4a4d82e50955adc4c8f5799930de90f4b21a6b0d402682ae4aa3854",
        "verified": false
      },
      {
        "finding_type": 3,
        "severity": "critical",
        "title": "Google Cloud Storage reference — confirmed publicly readable",
        "fingerprint": "05e7ab037aa65bc6401e177bbb40aa855a10fae4c30e58766221d31fb7067e1a",
        "verified": true
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "fingerprint": "9d751b441685de326226c6d7d70a1f13456a2c02b2cb7232e96c59cb43a2779f",
        "verified": false
      }
    ],
    "removed": [
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "a4194767db3a49d9b5cf00d036d6b1bfb4ba7776fe36ba43be26acbcdacd8de8",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "34206ee194186e0e29aee226c630cbe43f66eba3a8ca979165b134a0e9424a6a",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "5b3ca0e774652702f65bffa73a1741866d11604b2c0350dc5b7a5120f09d1cb1",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "6d5628dd514c07a831c3fb506560e93834611d32e9fe85054a5410866df32f84",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "8e133851e6f10df3677d8eb0b4ec098876fa4d98df38f94991f0ca4a04c2f588",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "9388405a7cfbfd0de64f3b150d723565b7e7be5c963d4017f4eb973e517dfaf3",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "9e31d8fa015eecc97afef8bb0a0c525ddb265f74c5669c23df6f7a8d48af335e",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "f8323ad774aad11cad56fe2e3da12b6d6a7e2575196622fc434bc1f1167a2659",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "411ead85e3c3de46dc974bdd7a94bbc1f0375781f29c8397f4bd46ac20853c5d",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "9516a19f2ab0977bfc3388fbb5c91abab0565bb8cb97b326b7ad0fa189ce2188",
        "verified": false
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "fingerprint": "433d5383816ffce70c69026f97571baa5963ec510b9352333999984502eab17a",
        "verified": false
      },
      {
        "finding_type": 77,
        "severity": "low",
        "title": "Data Safety label omits Contacts",
        "fingerprint": "52d6df5eafe80ad7de0275ee425de0bf8d715439e92a9026117bea4d546827d0",
        "verified": false
      }
    ],
    "persisting_count": 47,
    "added_by_sev": {
      "critical": 3,
      "high": 0,
      "medium": 0,
      "low": 11
    },
    "removed_by_sev": {
      "critical": 0,
      "high": 0,
      "medium": 0,
      "low": 12
    }
  },
  "trackers": {
    "added": [
      "Google Analytics for Firebase"
    ],
    "removed": [
      "Google AdServices"
    ]
  },
  "known_vulns": {
    "from": 1,
    "to": 1,
    "delta": 0,
    "from_recorded": true,
    "to_recorded": true
  }
}