{
  "ok": true,
  "app_id": "com.sezzle.sezzlemobile",
  "comparable": true,
  "comparison_status": "comparable",
  "regressed": true,
  "grade_delta": "F ← B",
  "score_delta": -72,
  "from": {
    "scan_id": "e9223191-92f7-4305-adc0-4328c715a5e2",
    "version": "5.3.8",
    "analysis": {
      "issues": [],
      "stages": {
        "pii": "complete",
        "sbom": "complete",
        "signing": "certificate_parsed",
        "strings": "complete",
        "manifest": "complete"
      },
      "status": "complete",
      "grading": {
        "policy": "static-coverage-v1",
        "blockers": [],
        "eligible": true
      },
      "timings_ms": {
        "total": 35890.696,
        "harvest": 10924.808000000021,
        "detectors": 23032.38199999973
      },
      "bytes_total": 230114315,
      "bytes_scanned": 230114315,
      "bytes_skipped": 0,
      "files_processed": 4160,
      "coverage_version": 2,
      "string_encodings": [
        "ascii",
        "utf16le"
      ],
      "signature_validation": "not_performed"
    },
    "provenance": {
      "mode": "static",
      "artifacts": [
        {
          "name": "base.apk",
          "sha256": "e8273313889b1b6dad0fb893ba566c3a1b86b96dd98a5798b2684a3294424e18"
        },
        {
          "name": "config.arm64_v8a.apk",
          "sha256": "06cf84f93f09277f22ad548e082fc7bc6cab4b28c02dbb6f44cc9c6367dfa439"
        },
        {
          "name": "config.en.apk",
          "sha256": "e5eadb6c9ba33c4044e64a120c7775afa7f4729bf4f730fc5cfe22ad44f1b67a"
        },
        {
          "name": "config.xxhdpi.apk",
          "sha256": "6a5f229645e8d4298a67c58f75cd3579d9dbf9374e5871dbba8dd885ce096ffb"
        }
      ],
      "ruleset_sha256": "fb649a88cc2e66d8cb5b3c389ee4628bf97383e131015c594e187dc06eabcef7"
    },
    "grade": "B",
    "score": 87,
    "scanned_at": "2026-09-12T09:15:18.128Z"
  },
  "to": {
    "scan_id": "9d630a89-c94a-48a6-b4d5-933828703132",
    "version": "5.3.11",
    "analysis": {
      "issues": [],
      "stages": {
        "pii": "complete",
        "sbom": "complete",
        "signing": "certificate_parsed",
        "strings": "complete",
        "manifest": "complete"
      },
      "status": "complete",
      "grading": {
        "policy": "static-coverage-v1",
        "blockers": [],
        "eligible": true
      },
      "timings_ms": {
        "total": 26316.958,
        "harvest": 9089.373999999998,
        "detectors": 15716.933999999937
      },
      "bytes_total": 216673588,
      "bytes_scanned": 216673588,
      "bytes_skipped": 0,
      "files_processed": 3276,
      "coverage_version": 2,
      "string_encodings": [
        "ascii",
        "utf16le"
      ],
      "signature_validation": "not_performed"
    },
    "provenance": {
      "mode": "static",
      "artifacts": [
        {
          "name": "base.apk",
          "sha256": "08dd40f29a5f4109d8c9e74a2432ec4bdb541de9afda3f54bde132760f1119b2"
        },
        {
          "name": "config.arm64_v8a.apk",
          "sha256": "fef014f7a20f3b086d1273e0c23249608d747f11acff4dbf243270efe03ed50c"
        },
        {
          "name": "config.en.apk",
          "sha256": "23f12562e73e19fd17a515c873ecf91cdeb8fdca349bac99f1ce622e8d8a22ec"
        },
        {
          "name": "config.xxhdpi.apk",
          "sha256": "07197c7b5b22d0a8f30937fb8532bcfb04b655bf6fadf45cb0049e552c5b80b0"
        }
      ],
      "ruleset_sha256": "a4c4120389ccc4b44afa23b5786f6b8d2bf3dc47ca546355bb3ef6da4a54b513"
    },
    "grade": "F",
    "score": 15,
    "scanned_at": "2026-09-30T19:48:41.238Z"
  },
  "findings": {
    "added": [
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "4352abf19432efd320d7a8347547d8f5b7a79a66474f094e0e77733403ff2956",
        "verified": false
      },
      {
        "finding_type": 3,
        "severity": "critical",
        "title": "Google Cloud Storage reference — confirmed publicly readable",
        "fingerprint": "67de5a54eedb49885048aa65abc3d9243fff4918fd6558ceeb30409fc4baadba",
        "verified": true
      },
      {
        "finding_type": 79,
        "severity": "high",
        "title": "Hardcoded credentials in a URL",
        "fingerprint": "70e199def4553fd3682ff329fec880c61683b924766bd9e6b350132b05d03cb2",
        "verified": false
      }
    ],
    "removed": [
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "8d0838dc37a431512ea2f157b0f8490051e6145c126f4784cd9765112de8cc13",
        "verified": false
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "fingerprint": "bf34b8cb090f19729fc4ebb455123fa67c1e7a9869e918e24709496c99087896",
        "verified": false
      }
    ],
    "persisting_count": 9,
    "added_by_sev": {
      "critical": 1,
      "high": 1,
      "medium": 0,
      "low": 1
    },
    "removed_by_sev": {
      "critical": 0,
      "high": 0,
      "medium": 0,
      "low": 2
    }
  },
  "trackers": {
    "added": [
      "Google Analytics for Firebase"
    ],
    "removed": [
      "Google AdServices"
    ]
  },
  "known_vulns": {
    "from": 0,
    "to": 0,
    "delta": 0,
    "from_recorded": true,
    "to_recorded": true
  }
}