{
  "ok": true,
  "app_id": "com.sentrilock.sentrismart",
  "comparable": false,
  "comparison_status": "limited_coverage",
  "regressed": null,
  "grade_delta": null,
  "score_delta": null,
  "from": {
    "scan_id": "4a932b69-e341-4f9d-88d1-e860754edaa3",
    "version": "5.136.1",
    "analysis": {
      "status": "unknown"
    },
    "provenance": {},
    "grade": "B",
    "score": 77,
    "scanned_at": "2026-09-02T12:16:56.639Z"
  },
  "to": {
    "scan_id": "364161fb-9954-4478-9ca2-35341c198078",
    "version": "5.140.0",
    "analysis": {
      "issues": [],
      "stages": {
        "pii": "complete",
        "sbom": "complete",
        "signing": "certificate_parsed",
        "strings": "complete",
        "manifest": "complete"
      },
      "status": "complete",
      "grading": {
        "policy": "static-coverage-v1",
        "blockers": [],
        "eligible": true
      },
      "timings_ms": {
        "total": 10875.872,
        "harvest": 3983.111000000008,
        "detectors": 5837.367999999996
      },
      "bytes_total": 84772533,
      "bytes_scanned": 84772533,
      "bytes_skipped": 0,
      "files_processed": 2398,
      "coverage_version": 2,
      "string_encodings": [
        "ascii",
        "utf16le"
      ],
      "signature_validation": "not_performed"
    },
    "provenance": {
      "mode": "static",
      "artifacts": [
        {
          "name": "base.apk",
          "sha256": "e842819aa604f433adad2225256c35f1c4aa939a95a63cfbaa269be435c2d85d"
        }
      ],
      "ruleset_sha256": "3bb79cc3710b0fb021feaa322578f4cffe08396a97c51b34df092b5a05891d5e"
    },
    "grade": "A",
    "score": 94,
    "scanned_at": "2026-10-06T17:53:43.915Z"
  },
  "findings": {
    "added": [
      {
        "finding_type": 20,
        "severity": "low",
        "title": "Google API key (client-shipped; restriction unverified)",
        "fingerprint": "73f258aa2b706fb6c2a1251d267b23da169acf5d2aa3b85c60c29f2d73c26494",
        "verified": false
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "fingerprint": "d621ee2d7fe3c84d0b1f8d4b978d5a5055469b070003508612faf539eba70f28",
        "verified": false
      },
      {
        "finding_type": 20,
        "severity": "low",
        "title": "Google API key (client-shipped; restriction unverified)",
        "fingerprint": "bed455a06e96932f3eae470bdddaf1926cdf0997f08fccaa419882e68055ca2e",
        "verified": false
      },
      {
        "finding_type": 2,
        "severity": "low",
        "title": "Firebase Realtime Database reference",
        "fingerprint": "f17fd1288713b51feb4bc81320c71e70c235f7682c5a22ff9e3813bab9a65f03",
        "verified": false
      },
      {
        "finding_type": 53,
        "severity": "low",
        "title": "Firebase Storage bucket reference",
        "fingerprint": "677eca817c8456adca1c3196e7f3b8d04813adc30b66a7c605613ae18a51de68",
        "verified": false
      },
      {
        "finding_type": 6,
        "severity": "low",
        "title": "Private key material (third-party library artifact, shared across 185 unrelated developers)",
        "fingerprint": "62a91e02911570689478feddb8e4a248b9f061c782ed638a6f16cd7234cf99d3",
        "verified": false
      },
      {
        "finding_type": 6,
        "severity": "low",
        "title": "Private key material (third-party library artifact, shared across 185 unrelated developers)",
        "fingerprint": "b3a7390831348120a1fa906e96355885d14f7987e784904a539fe5b3582cdb20",
        "verified": false
      },
      {
        "finding_type": 20,
        "severity": "low",
        "title": "Google API key (client-shipped; restriction unverified)",
        "fingerprint": "7b0672200e8ab4f78582f9452e38a0652277f04a8a7d8748db8c9a64b47f3420",
        "verified": false
      },
      {
        "finding_type": 53,
        "severity": "low",
        "title": "Firebase Storage bucket reference",
        "fingerprint": "7397322c6ef9b85381dfd14c00bd4b4180c69df0c9e175f0f8301c16dd2c6a9c",
        "verified": false
      },
      {
        "finding_type": 20,
        "severity": "low",
        "title": "Google API key (client-shipped; restriction unverified)",
        "fingerprint": "f8f2bc3b8b1501821ad669ff937052c25cb599021034d9f4833721671f9c1074",
        "verified": false
      },
      {
        "finding_type": 2,
        "severity": "low",
        "title": "Firebase Realtime Database reference",
        "fingerprint": "3f17b66f96856a7d24d35d109b5a02af6c75a5a6ff21c66ffae097640489f4ac",
        "verified": false
      },
      {
        "finding_type": 53,
        "severity": "low",
        "title": "Firebase Storage bucket reference",
        "fingerprint": "358cbffc31eb019569d3720f71b792a7c33b0713fae2a2bd3ef55b3e1adb8a82",
        "verified": false
      },
      {
        "finding_type": 53,
        "severity": "low",
        "title": "Firebase Storage bucket reference",
        "fingerprint": "62741913e455267b91cc83e89fffcb00a6c6749e05dd843db201691dbd7896ce",
        "verified": false
      },
      {
        "finding_type": 60,
        "severity": "low",
        "title": "Background location access with advertising SDKs present",
        "fingerprint": "0c010d775be9542eee48043eb496c06888f9b8e8fcdf3af66a6b84e99192f6ce",
        "verified": false
      }
    ],
    "removed": [
      {
        "finding_type": 20,
        "severity": "low",
        "title": "Google API key (client-shipped; restriction unverified)",
        "fingerprint": "4c506681393f4a1bda2765c78103dac5a188213fcc8c88d05e5e0097df92de86",
        "verified": false
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "fingerprint": "4c2a6f1a9c384d3562050771b8f063528c8c1211ddfc272996e9d5a6daf60035",
        "verified": false
      },
      {
        "finding_type": 20,
        "severity": "low",
        "title": "Google API key (client-shipped; restriction unverified)",
        "fingerprint": "e96921dca1e4286c81f416c567234b0ab3f5e7af07e8e3e3d4a5ee170ceef867",
        "verified": false
      },
      {
        "finding_type": 2,
        "severity": "low",
        "title": "Firebase Realtime Database reference",
        "fingerprint": "f8d1c34226e661511394d33fb831b9434c81a4040d3f8482c184ee34f1c6aac5",
        "verified": false
      },
      {
        "finding_type": 53,
        "severity": "low",
        "title": "Firebase Storage bucket reference",
        "fingerprint": "43d48db21729bd2fcc78c2ee66613b42e8af516ec636122d909d3cd0f8712317",
        "verified": false
      },
      {
        "finding_type": 6,
        "severity": "high",
        "title": "Private key material",
        "fingerprint": "0db39116c3f24ab010f5874d1a476422c45aca5dba9d2c81765a3fdc27c5622c",
        "verified": false
      },
      {
        "finding_type": 20,
        "severity": "low",
        "title": "Google API key (client-shipped; restriction unverified)",
        "fingerprint": "ad28ea403b9f953fc302687606b2b43ebd651bbbef8a2c78869590ae9395d95f",
        "verified": false
      },
      {
        "finding_type": 53,
        "severity": "low",
        "title": "Firebase Storage bucket reference",
        "fingerprint": "693ff73605e1c20bd96e28a2131852a744ea05fa71dcb5a1a88e0e64143b80b7",
        "verified": false
      },
      {
        "finding_type": 20,
        "severity": "low",
        "title": "Google API key (client-shipped; restriction unverified)",
        "fingerprint": "1ae969ccae6e192ca2874485bdc228c5f968059c2be8cbf486bcb9b44b8cb4ef",
        "verified": false
      },
      {
        "finding_type": 2,
        "severity": "low",
        "title": "Firebase Realtime Database reference",
        "fingerprint": "b41d7d3abdb0b19834435b1bd9fbef454ddcef6cb455354a42c7ddc5dc4b98b8",
        "verified": false
      },
      {
        "finding_type": 53,
        "severity": "low",
        "title": "Firebase Storage bucket reference",
        "fingerprint": "190079a494230d45bf10eb83dfeae8d092f032f32f466e5928a795f9789d77ec",
        "verified": false
      },
      {
        "finding_type": 53,
        "severity": "low",
        "title": "Firebase Storage bucket reference",
        "fingerprint": "4eee8128afd56d8e64d13c4459adf3b2a7ca0f3d587fa259764bc70133d7d23b",
        "verified": false
      },
      {
        "finding_type": 60,
        "severity": "low",
        "title": "Background location access with advertising SDKs present",
        "fingerprint": "fb67d0eee43d47ebaf2986da1c709b5c711f77a5b4416768a75918f9d061990e",
        "verified": false
      }
    ],
    "persisting_count": 0,
    "added_by_sev": {
      "critical": 0,
      "high": 0,
      "medium": 0,
      "low": 14
    },
    "removed_by_sev": {
      "critical": 0,
      "high": 1,
      "medium": 0,
      "low": 12
    }
  },
  "trackers": {
    "added": [
      "Google Analytics for Firebase",
      "IAB TCF"
    ],
    "removed": [
      "Google AdServices"
    ]
  },
  "known_vulns": {
    "from": 0,
    "to": 0,
    "delta": 0,
    "from_recorded": true,
    "to_recorded": true
  }
}