{
  "ok": true,
  "app_id": "com.subsplashconsulting.s_HQ8CDQ",
  "comparable": false,
  "comparison_status": "limited_coverage",
  "regressed": null,
  "grade_delta": null,
  "score_delta": null,
  "from": {
    "scan_id": "4b652e2b-0067-4d6f-8d9e-e95c55312fd0",
    "version": "6.10.20",
    "analysis": {
      "status": "unknown"
    },
    "provenance": {},
    "grade": "B",
    "score": 89,
    "scanned_at": "2026-09-03T00:33:30.342Z"
  },
  "to": {
    "scan_id": "9e81f945-508d-4aaf-800e-4eb12b1e29ac",
    "version": "6.10.20",
    "analysis": {
      "issues": [],
      "stages": {
        "pii": "complete",
        "sbom": "complete",
        "signing": "certificate_parsed",
        "strings": "complete",
        "manifest": "complete"
      },
      "status": "complete",
      "grading": {
        "policy": "static-coverage-v1",
        "blockers": [],
        "eligible": true
      },
      "timings_ms": {
        "total": 12529.304,
        "harvest": 2835.602999999995,
        "detectors": 8701.517999999965
      },
      "bytes_total": 54278406,
      "bytes_scanned": 54278406,
      "bytes_skipped": 0,
      "files_processed": 2067,
      "coverage_version": 2,
      "string_encodings": [
        "ascii",
        "utf16le"
      ],
      "signature_validation": "not_performed"
    },
    "provenance": {
      "mode": "static",
      "artifacts": [
        {
          "name": "base.apk",
          "sha256": "3aed65aa406630b84dc604395ce6140a26f341bdce1a0dcf482395d1bdd6d63e"
        },
        {
          "name": "config.arm64_v8a.apk",
          "sha256": "7f66e53acd48f2aaf010b634a3d5397248fe604a2503a449dd2e915b7235ca0e"
        },
        {
          "name": "config.en.apk",
          "sha256": "ec7575493718d8d876028ec49a90ad96bd7f3c489f5d44d3b48801c1496b83e0"
        },
        {
          "name": "config.xxhdpi.apk",
          "sha256": "03214e8e18df226c09f1c9435238797811dafb6dc1779c22494a7c933dee81cb"
        }
      ],
      "ruleset_sha256": "3bb79cc3710b0fb021feaa322578f4cffe08396a97c51b34df092b5a05891d5e"
    },
    "grade": "A",
    "score": 94,
    "scanned_at": "2026-10-06T21:14:43.467Z"
  },
  "findings": {
    "added": [
      {
        "finding_type": 20,
        "severity": "low",
        "title": "Google API key (client-shipped; restriction unverified)",
        "fingerprint": "82d094d4e1fff1216c13b20a87e6adf7a13f2e934206256f384e4b1d555b6dbc",
        "verified": false
      },
      {
        "finding_type": 2,
        "severity": "low",
        "title": "Firebase Realtime Database reference",
        "fingerprint": "076d2d51d694a8e7db900df8fd6bce8bfa7d2435586ce5f04a30f39a9ca5165a",
        "verified": false
      },
      {
        "finding_type": 53,
        "severity": "low",
        "title": "Firebase Storage bucket reference",
        "fingerprint": "15ecf4e0537add92d1a798c9c9212ae3b1a031372ab0d3123e391174c060b251",
        "verified": false
      },
      {
        "finding_type": 20,
        "severity": "low",
        "title": "Google API key (client-shipped; restriction unverified)",
        "fingerprint": "82add60a412a735c666da354d9f3a6319965c3f71e85bb1f95a4f0d9c326b00f",
        "verified": false
      },
      {
        "finding_type": 20,
        "severity": "low",
        "title": "Google API key (client-shipped; restriction unverified)",
        "fingerprint": "50e9f1a7200b3eaeb4341f095d4a3afdd5c17183fefd4c9fb21e2e555ca68698",
        "verified": false
      },
      {
        "finding_type": 72,
        "severity": "low",
        "title": "Sentry DSN",
        "fingerprint": "d9434ec0a35b31e1b86f649828a49d0bf47dc3c417d1f57d35606ea6d1cf3b99",
        "verified": false
      },
      {
        "finding_type": 53,
        "severity": "low",
        "title": "Firebase Storage bucket reference",
        "fingerprint": "65a4055a11f898e6794b2b7f44365407b107224c657841c4b7026821d7cffc15",
        "verified": false
      },
      {
        "finding_type": 37,
        "severity": "info",
        "title": "Application data is backup-enabled",
        "fingerprint": "68d134f0bcd98a9559d6dd5275f80a3928e4a6490ac4a0f1bd16f87683bd49f8",
        "verified": false
      },
      {
        "finding_type": 35,
        "severity": "low",
        "title": "Exported content provider without permission (third-party library artifact, shared across 9 unrelated developers)",
        "fingerprint": "e2a5569a96c71aff4825d217ef972a82967ee0bb5db7590d4075ee7143d32cca",
        "verified": false
      },
      {
        "finding_type": 77,
        "severity": "low",
        "title": "Data Safety label omits Location",
        "fingerprint": "cacfd47daa7d0aafb7cbd1791f3964ef2850687203797b5e24429c41acdf7290",
        "verified": false
      },
      {
        "finding_type": 77,
        "severity": "low",
        "title": "Data Safety label omits Contacts",
        "fingerprint": "52d6df5eafe80ad7de0275ee425de0bf8d715439e92a9026117bea4d546827d0",
        "verified": false
      },
      {
        "finding_type": 77,
        "severity": "low",
        "title": "Data Safety label omits Calendar",
        "fingerprint": "2a94ef25c6a64a2fcc33bcb8d2ada6376b418ddfa745771aa213e568d5afb277",
        "verified": false
      }
    ],
    "removed": [
      {
        "finding_type": 20,
        "severity": "low",
        "title": "Google API key (client-shipped; restriction unverified)",
        "fingerprint": "caa8be31ed4813da1b0ce6aa0b29d66c8b90efd5890c91ed180a0ace16dabb95",
        "verified": false
      },
      {
        "finding_type": 2,
        "severity": "low",
        "title": "Firebase Realtime Database reference",
        "fingerprint": "72197dea3c20e135295293e17ace4ef90d584d6a7f60a297d61cf35c85483155",
        "verified": false
      },
      {
        "finding_type": 53,
        "severity": "low",
        "title": "Firebase Storage bucket reference",
        "fingerprint": "3fea194fafa1495211729e77d3c5fab3a03f6f90cc9e9f889665bd54ee7ead9f",
        "verified": false
      },
      {
        "finding_type": 20,
        "severity": "low",
        "title": "Google API key (client-shipped; restriction unverified)",
        "fingerprint": "60b9352b58299f2cd92ca7fe37ff9ddbd997c4a9c6252a5e2e3a2643e42f6466",
        "verified": false
      },
      {
        "finding_type": 20,
        "severity": "low",
        "title": "Google API key (client-shipped; restriction unverified)",
        "fingerprint": "fb645a233b3c81ae7b4327a424f8fb8e5119ef02b6d0673205c349a6719acd47",
        "verified": false
      },
      {
        "finding_type": 72,
        "severity": "low",
        "title": "Sentry DSN",
        "fingerprint": "f4eeb72fbe489d8f0b495b688de6e68e8b1056e47d67392fa2cb7451e7fcff71",
        "verified": false
      },
      {
        "finding_type": 53,
        "severity": "low",
        "title": "Firebase Storage bucket reference",
        "fingerprint": "8318697daa33b39ca92d3c813cb1338195887798baab321baa1bde0a8f77f0e8",
        "verified": false
      },
      {
        "finding_type": 37,
        "severity": "low",
        "title": "Application data is backup-enabled",
        "fingerprint": "d3416964a26a93aeec0126ea1bb43b17c4aba66f0c76c2dc8ebd02d06ec4ef49",
        "verified": false
      },
      {
        "finding_type": 35,
        "severity": "medium",
        "title": "Exported content provider without permission",
        "fingerprint": "21ba2cc366a72c2ee359865113bda7dc955c2f47afb32bf5d0e9ec1158f65899",
        "verified": false
      }
    ],
    "persisting_count": 0,
    "added_by_sev": {
      "critical": 0,
      "high": 0,
      "medium": 0,
      "low": 11
    },
    "removed_by_sev": {
      "critical": 0,
      "high": 0,
      "medium": 1,
      "low": 8
    }
  },
  "trackers": {
    "added": [
      "Google Analytics for Firebase"
    ],
    "removed": [
      "Google AdServices"
    ]
  },
  "known_vulns": {
    "from": 0,
    "to": 0,
    "delta": 0,
    "from_recorded": true,
    "to_recorded": true
  }
}