{
  "ok": true,
  "app_id": "com.texty.sms",
  "comparable": false,
  "comparison_status": "limited_coverage",
  "regressed": null,
  "grade_delta": null,
  "score_delta": null,
  "from": {
    "scan_id": "25424aa7-57bd-4af3-a5a3-e39c16588c06",
    "version": "17.05",
    "analysis": {
      "status": "unknown"
    },
    "provenance": {},
    "grade": "B",
    "score": 85,
    "scanned_at": "2026-09-02T12:49:39.787Z"
  },
  "to": {
    "scan_id": "8108d97b-f2a5-44dc-859b-2913f080ea9d",
    "version": "17.05",
    "analysis": {
      "issues": [],
      "stages": {
        "pii": "complete",
        "sbom": "complete",
        "signing": "certificate_parsed",
        "strings": "complete",
        "manifest": "complete"
      },
      "status": "complete",
      "grading": {
        "policy": "static-coverage-v1",
        "blockers": [],
        "eligible": true
      },
      "timings_ms": {
        "total": 1826.938,
        "harvest": 498.6040000000008,
        "detectors": 1014.1009999999987
      },
      "bytes_total": 10605254,
      "bytes_scanned": 10605254,
      "bytes_skipped": 0,
      "files_processed": 920,
      "coverage_version": 2,
      "string_encodings": [
        "ascii",
        "utf16le"
      ],
      "signature_validation": "not_performed"
    },
    "provenance": {
      "mode": "static",
      "artifacts": [
        {
          "name": "base.apk",
          "sha256": "7c7e72cd5033c5c76933f2ab6c5d7f61a4e3759ceaf435d5cda92e3a3bc4096b"
        }
      ],
      "ruleset_sha256": "69544396ce47de08b97fb3d04080662e1cbb38c704bd5aa3d4b7e5489cde22e8"
    },
    "grade": "B",
    "score": 85,
    "scanned_at": "2026-09-29T20:01:38.106Z"
  },
  "findings": {
    "added": [
      {
        "finding_type": 20,
        "severity": "low",
        "title": "Google API key (client-shipped; restriction unverified)",
        "fingerprint": "658c9fe34c8703607f0db12c4697443318bf386fe8cfcdfe26a4b107f3ccf9e7",
        "verified": false
      },
      {
        "finding_type": 2,
        "severity": "low",
        "title": "Firebase Realtime Database reference",
        "fingerprint": "6ff5f84937a09880a3cfbe99c56391c100b73170de258470e69427255917d835",
        "verified": false
      },
      {
        "finding_type": 53,
        "severity": "low",
        "title": "Firebase Storage bucket reference",
        "fingerprint": "df525897db7b3e840be11df3e959bc5a6726a840f6bdb3dd8fccf659a854bc70",
        "verified": false
      },
      {
        "finding_type": 53,
        "severity": "low",
        "title": "Firebase Storage bucket reference",
        "fingerprint": "94b9f9419511f1f5d7c4a7825073738bcc037645049da45cf02b7a9627738dfa",
        "verified": false
      },
      {
        "finding_type": 53,
        "severity": "low",
        "title": "Firebase Storage bucket reference",
        "fingerprint": "aa9bf615a897554e71f98e7070d192f2d3656a9fbddf02d7242cb8f736215216",
        "verified": false
      },
      {
        "finding_type": 53,
        "severity": "low",
        "title": "Firebase Storage bucket reference",
        "fingerprint": "4f12cef37b46d70a7f87e9fd4bc0b21f9d3d48da514af34ea1036c578e58e270",
        "verified": false
      },
      {
        "finding_type": 53,
        "severity": "low",
        "title": "Firebase Storage bucket reference",
        "fingerprint": "50d8b082a5f8a9e911b12321aa2cd4c6255581cd381e9d891a0ec53def62f2bc",
        "verified": false
      },
      {
        "finding_type": 53,
        "severity": "low",
        "title": "Firebase Storage bucket reference",
        "fingerprint": "e96680f733452e192a0bd554c17edab87c71517dfb120fc39f11e028fa48bc42",
        "verified": false
      },
      {
        "finding_type": 35,
        "severity": "medium",
        "title": "Exported content provider without permission",
        "fingerprint": "08a1df0cd9eebf96b8e6b38261c5b7e8d5098b031a71065921513a2b36de11d7",
        "verified": false
      },
      {
        "finding_type": 57,
        "severity": "medium",
        "title": "Short signing key (RSA 1024-bit)",
        "fingerprint": "eff7d2f7607ae274d531546d1e828faf234bca919325efac0bbe80b2f250d041",
        "verified": false
      }
    ],
    "removed": [
      {
        "finding_type": 20,
        "severity": "low",
        "title": "Google API key (client-shipped; restriction unverified)",
        "fingerprint": "1c9bd592e3877ea520edcf2599e57fd3c9c0d37e9f3c819cf14a69516701f9aa",
        "verified": false
      },
      {
        "finding_type": 2,
        "severity": "low",
        "title": "Firebase Realtime Database reference",
        "fingerprint": "ee91f77178720ce87350c589b5033ecaf5b29c777375f0c8d8b224faecfe85d8",
        "verified": false
      },
      {
        "finding_type": 53,
        "severity": "low",
        "title": "Firebase Storage bucket reference",
        "fingerprint": "02f6bd768e72d69483e11e5d32b991598b3b96906752da1cdd0eb9227f07af9c",
        "verified": false
      },
      {
        "finding_type": 53,
        "severity": "low",
        "title": "Firebase Storage bucket reference",
        "fingerprint": "07ffc9e61d6f29a4624097a8cd4102611f6d3f25a00dff90ebbc73234be50322",
        "verified": false
      },
      {
        "finding_type": 35,
        "severity": "medium",
        "title": "Exported content provider without permission",
        "fingerprint": "20745a0c5759b9c41b1aef5ef4b7743f83720f2bcb671b14c8938a31fd939e58",
        "verified": false
      },
      {
        "finding_type": 57,
        "severity": "medium",
        "title": "Short signing key (RSA 1024-bit)",
        "fingerprint": "c0908fb30fa18324ad43f60111957be428de82cb1baf73a54edd1ca8d185e47e",
        "verified": false
      }
    ],
    "persisting_count": 0,
    "added_by_sev": {
      "critical": 0,
      "high": 0,
      "medium": 2,
      "low": 8
    },
    "removed_by_sev": {
      "critical": 0,
      "high": 0,
      "medium": 2,
      "low": 4
    }
  },
  "trackers": {
    "added": [
      "Google Analytics for Firebase"
    ],
    "removed": [
      "Google AdServices"
    ]
  },
  "known_vulns": {
    "from": 0,
    "to": 0,
    "delta": 0,
    "from_recorded": true,
    "to_recorded": true
  }
}