{
  "ok": true,
  "app_id": "com.venuenext.broadwayintucson",
  "comparable": false,
  "comparison_status": "limited_coverage",
  "regressed": null,
  "grade_delta": null,
  "score_delta": null,
  "from": {
    "scan_id": "5063f2b7-bde4-46b1-a801-f21697ef42d6",
    "version": "4.7.18",
    "analysis": {
      "status": "unknown"
    },
    "provenance": {},
    "grade": "A",
    "score": 92,
    "scanned_at": "2026-09-03T00:33:09.430Z"
  },
  "to": {
    "scan_id": "80ef685e-db39-4b3d-8f9d-37f89049a99b",
    "version": "4.7.20",
    "analysis": {
      "issues": [],
      "stages": {
        "pii": "complete",
        "sbom": "complete",
        "signing": "certificate_parsed",
        "strings": "complete",
        "manifest": "complete"
      },
      "status": "complete",
      "grading": {
        "policy": "static-coverage-v1",
        "blockers": [],
        "eligible": true
      },
      "timings_ms": {
        "total": 34080.595,
        "harvest": 8715.50599999998,
        "detectors": 23832.412999999666
      },
      "bytes_total": 176438985,
      "bytes_scanned": 176438985,
      "bytes_skipped": 0,
      "files_processed": 2762,
      "coverage_version": 2,
      "string_encodings": [
        "ascii",
        "utf16le"
      ],
      "signature_validation": "not_performed"
    },
    "provenance": {
      "mode": "static",
      "artifacts": [
        {
          "name": "base.apk",
          "sha256": "84e4ce4b3a4a9d4a79165feef3a6f4b48a8a5f2ad5f47d74bc805d897ab02923"
        },
        {
          "name": "config.arm64_v8a.apk",
          "sha256": "19eebeaab2c53fbc9f9f8411ab21ef7c0cd502f848754d722b295b10ffb9a1b9"
        },
        {
          "name": "config.en.apk",
          "sha256": "01224fba5b5da2c357f84bcfa96e74e591a6d5ad6f8cee167ecad28fde8591fb"
        },
        {
          "name": "config.xxhdpi.apk",
          "sha256": "86986a6f796b1e79221b7d3e19da6fa1f5742953e5e4247cab7e3592f04af5ce"
        }
      ],
      "ruleset_sha256": "3bb79cc3710b0fb021feaa322578f4cffe08396a97c51b34df092b5a05891d5e"
    },
    "grade": "A",
    "score": 96,
    "scanned_at": "2026-10-06T21:13:14.551Z"
  },
  "findings": {
    "added": [
      {
        "finding_type": 77,
        "severity": "low",
        "title": "Data Safety label omits Contacts",
        "fingerprint": "52d6df5eafe80ad7de0275ee425de0bf8d715439e92a9026117bea4d546827d0",
        "verified": false
      },
      {
        "finding_type": 20,
        "severity": "low",
        "title": "Google API key (client-shipped; restriction unverified)",
        "fingerprint": "fa7497023bb163f8b4809bbd1aada3f95bbbd98badc8760d32741fe80ab60184",
        "verified": false
      },
      {
        "finding_type": 20,
        "severity": "low",
        "title": "Google API key (client-shipped; restriction unverified)",
        "fingerprint": "6a4da205290ecf2f5a5d2cabe047c1cd200916e9bf94416f6c8f171c363ffdc6",
        "verified": false
      },
      {
        "finding_type": 37,
        "severity": "info",
        "title": "Application data is backup-enabled",
        "fingerprint": "68d134f0bcd98a9559d6dd5275f80a3928e4a6490ac4a0f1bd16f87683bd49f8",
        "verified": false
      },
      {
        "finding_type": 35,
        "severity": "low",
        "title": "Exported content provider without permission (third-party library artifact, shared across 9 unrelated developers)",
        "fingerprint": "1f686f5f4c5420822cef6b6e03804ee69232950b0ab3b6411ac21ee374d4e41f",
        "verified": false
      },
      {
        "finding_type": 60,
        "severity": "low",
        "title": "Background location access with advertising SDKs present",
        "fingerprint": "0c010d775be9542eee48043eb496c06888f9b8e8fcdf3af66a6b84e99192f6ce",
        "verified": false
      }
    ],
    "removed": [
      {
        "finding_type": 20,
        "severity": "low",
        "title": "Google API key (client-shipped; restriction unverified)",
        "fingerprint": "6eb6007ddbab124f7a788912b6a7d826e7da21d07619482e8ea482b8278ce4ae",
        "verified": false
      },
      {
        "finding_type": 20,
        "severity": "low",
        "title": "Google API key (client-shipped; restriction unverified)",
        "fingerprint": "c9e35c17a2f009daf57fa049639ed8abf082e7ec3173b0b58957d8da715cc166",
        "verified": false
      },
      {
        "finding_type": 35,
        "severity": "medium",
        "title": "Exported content provider without permission",
        "fingerprint": "d8e2bf0d0b26bb355585296aa331866d11c554673420f9170576bbd3f5f736fb",
        "verified": false
      },
      {
        "finding_type": 60,
        "severity": "low",
        "title": "Background location access with advertising SDKs present",
        "fingerprint": "fb67d0eee43d47ebaf2986da1c709b5c711f77a5b4416768a75918f9d061990e",
        "verified": false
      }
    ],
    "persisting_count": 0,
    "added_by_sev": {
      "critical": 0,
      "high": 0,
      "medium": 0,
      "low": 5
    },
    "removed_by_sev": {
      "critical": 0,
      "high": 0,
      "medium": 1,
      "low": 3
    }
  },
  "trackers": {
    "added": [
      "Google Analytics for Firebase",
      "Google UMP (consent)",
      "IAB TCF"
    ],
    "removed": [
      "Google AdServices"
    ]
  },
  "known_vulns": {
    "from": 0,
    "to": 0,
    "delta": 0,
    "from_recorded": true,
    "to_recorded": true
  }
}