{
  "ok": true,
  "app_id": "com.yinzcam.nfl.jets",
  "comparable": false,
  "comparison_status": "limited_coverage",
  "regressed": true,
  "grade_delta": null,
  "score_delta": null,
  "from": {
    "scan_id": "bbb0775d-5a72-4d0e-8483-6a49d9e73c67",
    "version": "10.9.0",
    "analysis": {
      "status": "unknown"
    },
    "provenance": {},
    "grade": "C",
    "score": 64,
    "scanned_at": "2026-09-02T12:28:14.292Z"
  },
  "to": {
    "scan_id": "a4e10bed-2eaf-4506-9465-32318df799ac",
    "version": "10.9.1",
    "analysis": {
      "issues": [],
      "stages": {
        "pii": "complete",
        "sbom": "complete",
        "signing": "certificate_parsed",
        "strings": "complete",
        "manifest": "complete"
      },
      "status": "complete",
      "grading": {
        "policy": "static-coverage-v1",
        "blockers": [],
        "eligible": true
      },
      "timings_ms": {
        "total": 39008.153,
        "harvest": 9899.096999999892,
        "detectors": 26227.237000001067
      },
      "bytes_total": 189459178,
      "bytes_scanned": 189459178,
      "bytes_skipped": 0,
      "files_processed": 6789,
      "coverage_version": 2,
      "string_encodings": [
        "ascii",
        "utf16le"
      ],
      "signature_validation": "not_performed"
    },
    "provenance": {
      "mode": "static",
      "artifacts": [
        {
          "name": "base.apk",
          "sha256": "1384e3630a5f31815976181b9814870e4765ea06b62d8adb0aa36b5859470d19"
        },
        {
          "name": "config.arm64_v8a.apk",
          "sha256": "de2ff529c8402b984f1e534e2fa7424d1f69569ea9022e8c377136e3ba75db5f"
        },
        {
          "name": "config.en.apk",
          "sha256": "1c2249c695c275f2a4b4776eb3ab7a0d36640cdd246508cf6995898802208da4"
        },
        {
          "name": "config.xxhdpi.apk",
          "sha256": "b1787251c020101e891cd21c44114c2ace4618bd9253f587afb841835be93281"
        }
      ],
      "ruleset_sha256": "3bb79cc3710b0fb021feaa322578f4cffe08396a97c51b34df092b5a05891d5e"
    },
    "grade": "C",
    "score": 63,
    "scanned_at": "2026-10-06T18:41:41.943Z"
  },
  "findings": {
    "added": [
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "c81061276cda100ad628eeb1c1b6d4e8f5a519f78294ee2dfa158ca5aa885ec5",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "33ea94f91e10da42bf512bf56f8491353daa6c82f296f64316bae10bcf1a25ba",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "e66ea36a5945fa71545430af16cc6e5bf97ccc34e9af05baf4278c81b7317792",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "ee93f634d467c16c3de8a718e8cebe423025e5e2d68499a9f46bf8d720cfb201",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "862258df675ec0c69bac3327dc9dd86afc461c1273b6c91963faa324366cc4cf",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "11c37e851ff3bbc192f11dea0f0e668cd27eee17f5de1d5f3941c179d2599488",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "3c8f4b1b9fcb4f71bb00768bb80f7e36e10555c2b504474e311f2059b8c9f4a7",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "4ec8269d6dc3f8dd11e07a564d2d5a918d5edc620816c699e34601332fb98e44",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "c67b15c1783ad68fa3d094efe5fae37ce28e522542d2ebe4f33502e4fea06da5",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "b60e120c9e924d93a4c5bb80e9be6a7d95b3ca92ba06ba4093d345c3d7aa707f",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "8902be76019fed4106c5edac1097ca839f861ebaa6c671d895acb7da7881c163",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "48e7fece5abd2b5e48ce39644b99c633b23d86dbdcfa8562e5f2b07eb1623f6c",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "e629850fa0d7456f768a143f66de8d5a84c284800747fc9b2a727bf49981be46",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "3f8f0676211d23a8c8ac859b233a6680adb8d3e1e68fb798b034e34be1daa9f9",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "da95146fb6d1e55a57b5be3d3f507bc86496bcbcadac0dc28cbd159fba1f7028",
        "verified": false
      },
      {
        "finding_type": 20,
        "severity": "low",
        "title": "Google API key (client-shipped; restriction unverified)",
        "fingerprint": "06904f6757a672c4f7d798580bf75cfb0a921afe1bb0f4ced92ec08333a3ab74",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "2c4b3eea207df7371c585da4d69069310c7d86b43d829a1d79ea8af0ce10f68b",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "b8ba581523b5c4d7687bb42918ebd85ecdc7dcb20ee849ddb3e1b9b1e61d489c",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "069ec3d57005431f5bc4c335dffc02a1c39b9fe0e39a52b97d63148c43e01a61",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "a863c3113842fff22398a75af69a2968be6d8b207c0c70b27d1a1affd69a2761",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "38f8192276867a86ca2834cfaba25528f6caa4b50faff507d38bc13f0d4e9c1e",
        "verified": false
      },
      {
        "finding_type": 2,
        "severity": "low",
        "title": "Firebase Realtime Database reference",
        "fingerprint": "530c267f8838e0d97f5604a470be2d876785bca72ad8d8777b06032d521c4a9a",
        "verified": false
      },
      {
        "finding_type": 53,
        "severity": "low",
        "title": "Firebase Storage bucket reference",
        "fingerprint": "fac8e589a2471b2ef53a596fd39fa43bb20e94d29622dc9aa8837ab3f385a63c",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "6d3265bf2f5e1221c48d93b1c227e7ca5f10732ade5bc66fdfaf8eac1681c80b",
        "verified": false
      },
      {
        "finding_type": 20,
        "severity": "low",
        "title": "Google API key (client-shipped; restriction unverified)",
        "fingerprint": "f894861714b3d67cf8e680e564d5282e993264ffee3af90ac5765c7c2a8ef2ea",
        "verified": false
      },
      {
        "finding_type": 6,
        "severity": "high",
        "title": "Private key material",
        "fingerprint": "0f5dfc99bbeea8a50a92981d39340119bcf8b76215d0514d1565e57bf0366885",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "ac1cf61fcb9c2c9f74f1f4546317f5156f8844c86bba00d9c60a9454d2d108e1",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "3bc9d39404d1918443c6d457e2557a268ddf1accaeffbed6628d7fec794f9bb3",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "daf93b09a3a64fb2f6ef31130b6484de7a1a45f64113e677f0dae8e1ddc5078e",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "371aba3217c6890f88d8f4674337194d4402dbc405024b14a0562029b67dc491",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "a2008058a33bb6bcfd71eba8b24b6a5d2e520795af10a8bb6f35d47b891d5d84",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "d9f646b623b183ee2b4e78f9156717d8ec884488a4394f8fb857919656f1367e",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "0a6ff6f26d5239b07115b56b902388275099c8dbaad1b00ac28c0a313a9a23e8",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "bc9b38df00220a0129350b26fb10feb83e4d1bb7d1d1a461f35418a4f30431f3",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "20bc461884811137eda6b8de43defba1f11a42857f0400ca66a5df545ea4de47",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "43ba98364d490a0aa4edc3ec350616123f73942229ca96bc15f4cca97512ae2c",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "37beb628827f6d127e07b739a8e618a1160cf03cca89facaa6e9c870e29d785e",
        "verified": false
      },
      {
        "finding_type": 37,
        "severity": "info",
        "title": "Application data is backup-enabled",
        "fingerprint": "68d134f0bcd98a9559d6dd5275f80a3928e4a6490ac4a0f1bd16f87683bd49f8",
        "verified": false
      },
      {
        "finding_type": 35,
        "severity": "low",
        "title": "Exported content provider without permission (third-party library artifact, shared across 8 unrelated developers)",
        "fingerprint": "1f686f5f4c5420822cef6b6e03804ee69232950b0ab3b6411ac21ee374d4e41f",
        "verified": false
      },
      {
        "finding_type": 35,
        "severity": "medium",
        "title": "Exported content provider without permission",
        "fingerprint": "162b88d4086c32adaebcb3d053c8ada91d7f1d0d9f744d18e3880877a568e4f5",
        "verified": false
      },
      {
        "finding_type": 35,
        "severity": "low",
        "title": "Exported content provider without permission (third-party library artifact, shared across 4 unrelated developers)",
        "fingerprint": "4fb7acec558ac5d1f335ba3d188747e6cf4f1c69e3de5a0b6621d904460c136e",
        "verified": false
      },
      {
        "finding_type": 57,
        "severity": "medium",
        "title": "Short signing key (RSA 1024-bit)",
        "fingerprint": "eff7d2f7607ae274d531546d1e828faf234bca919325efac0bbe80b2f250d041",
        "verified": false
      },
      {
        "finding_type": 60,
        "severity": "low",
        "title": "Background location access with advertising SDKs present",
        "fingerprint": "0c010d775be9542eee48043eb496c06888f9b8e8fcdf3af66a6b84e99192f6ce",
        "verified": false
      },
      {
        "finding_type": 77,
        "severity": "low",
        "title": "Data Safety label omits Contacts",
        "fingerprint": "52d6df5eafe80ad7de0275ee425de0bf8d715439e92a9026117bea4d546827d0",
        "verified": false
      }
    ],
    "removed": [
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "8fd856fdaf77727e11eea7b4ff719c95f572c4adca2238b4ca9c7475f7b85b6d",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "0fe65335b00ab2bc6f2d16c4be73864338722687728823666996367a92cab7f1",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "235a4e576184b9c8a365616036ea6d059582916088a598a3ac690577d0ba174d",
        "verified": false
      },
      {
        "finding_type": 20,
        "severity": "low",
        "title": "Google API key (client-shipped; restriction unverified)",
        "fingerprint": "41824818d4df5488d88b284de9f13a34dcb7d907a35601f4dde35adba1cfcc7b",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "71dce338cf198a090879dc676871f8014b0789c9c0f2da0ec81c8f6561d831b8",
        "verified": false
      },
      {
        "finding_type": 2,
        "severity": "low",
        "title": "Firebase Realtime Database reference",
        "fingerprint": "a3f8f3225c11c1ab99f83be5ec3f6d4a83e445123be62818c814d8b6a321b672",
        "verified": false
      },
      {
        "finding_type": 53,
        "severity": "low",
        "title": "Firebase Storage bucket reference",
        "fingerprint": "b3531c840281e5b3b5eeafad9705d7e2fd8d415e70898ebe973d32a2b5ab1636",
        "verified": false
      },
      {
        "finding_type": 20,
        "severity": "low",
        "title": "Google API key (client-shipped; restriction unverified)",
        "fingerprint": "72d538e9264f3b59d092847d9acd7aa49afcf47d1e692b5df826c7c753cac5f6",
        "verified": false
      },
      {
        "finding_type": 6,
        "severity": "high",
        "title": "Private key material",
        "fingerprint": "aed723d4c01f3b27ab449f230d6acffe42b7bafddd10bcd7863a688b455c5a84",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "fd8b5422192661c8b8e1b297b69f430e247f843687f32dec63eb2dac13a7aa7a",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "ead1fbf6e9deb945082f94e515267368153bf32740af7de60f8ae762e6002bca",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "26b2b6da7606a9fdbefb84a0cadbc1ddf1cfa7a719d81d143d03b4ac53aa9790",
        "verified": false
      },
      {
        "finding_type": 37,
        "severity": "low",
        "title": "Application data is backup-enabled",
        "fingerprint": "d3416964a26a93aeec0126ea1bb43b17c4aba66f0c76c2dc8ebd02d06ec4ef49",
        "verified": false
      },
      {
        "finding_type": 35,
        "severity": "medium",
        "title": "Exported content provider without permission",
        "fingerprint": "d8e2bf0d0b26bb355585296aa331866d11c554673420f9170576bbd3f5f736fb",
        "verified": false
      },
      {
        "finding_type": 35,
        "severity": "medium",
        "title": "Exported content provider without permission",
        "fingerprint": "e8b38fa91eb50cfce8937b499aa53aaa7b8426e563021b02139b7755a19d4b45",
        "verified": false
      },
      {
        "finding_type": 57,
        "severity": "medium",
        "title": "Short signing key (RSA 1024-bit)",
        "fingerprint": "c0908fb30fa18324ad43f60111957be428de82cb1baf73a54edd1ca8d185e47e",
        "verified": false
      },
      {
        "finding_type": 60,
        "severity": "low",
        "title": "Background location access with advertising SDKs present",
        "fingerprint": "fb67d0eee43d47ebaf2986da1c709b5c711f77a5b4416768a75918f9d061990e",
        "verified": false
      }
    ],
    "persisting_count": 0,
    "added_by_sev": {
      "critical": 0,
      "high": 1,
      "medium": 2,
      "low": 40
    },
    "removed_by_sev": {
      "critical": 0,
      "high": 1,
      "medium": 3,
      "low": 13
    }
  },
  "trackers": {
    "added": [
      "Google Analytics for Firebase",
      "Google UMP (consent)",
      "IAB TCF",
      "OneTrust CMP"
    ],
    "removed": [
      "Google AdServices"
    ]
  },
  "known_vulns": {
    "from": 0,
    "to": 0,
    "delta": 0,
    "from_recorded": true,
    "to_recorded": true
  }
}