Earlier scan
Build 0.49.0
2026-09-03 00:26 UTCC · 66/100Historical · coverage unknownLater scan
Build 0.49.0
2026-10-06 20:45 UTCC · 71/100Static analysis completeComparison is limited: one or both scans have incomplete or unknown coverage. Missing findings cannot establish improvement.
Finding changes
Newly detectedlowGoogle API key (client-shipped; restriction unverified)
Recorded in the selected newer scan. Review the finding in context.
View latest categoryNewly detectedlowGoogle API key (client-shipped; restriction unverified)
Recorded in the selected newer scan. Review the finding in context.
View latest categoryNewly detectedlowFirebase Storage bucket reference
Recorded in the selected newer scan. Review the finding in context.
View latest categoryNewly detectedhighSlack token
Recorded in the selected newer scan. Review the finding in context.
View latest categoryNewly detectedlowAmazon S3 bucket reference
Recorded in the selected newer scan. Review the finding in context.
View latest categoryNewly detectedlowFirebase Realtime Database reference
Recorded in the selected newer scan. Review the finding in context.
View latest categoryNewly detectedlowExported content provider without permission (third-party library artifact, shared across 403 unrelated developers)
Recorded in the selected newer scan. Review the finding in context.
View latest categoryNewly detectedmediumcom.squareup.okhttp3:okhttp 3.12.13 — CVE-2021-0341
Recorded in the selected newer scan. Review the finding in context.
View latest categoryNo longer detectedlowGoogle API key (client-shipped; restriction unverified)
Absent from the selected newer scan. This alone does not confirm a fix; coverage and build contents may differ.
No longer detectedlowGoogle API key (client-shipped; restriction unverified)
Absent from the selected newer scan. This alone does not confirm a fix; coverage and build contents may differ.
No longer detectedlowFirebase Storage bucket reference
Absent from the selected newer scan. This alone does not confirm a fix; coverage and build contents may differ.
No longer detectedhighSlack token
Absent from the selected newer scan. This alone does not confirm a fix; coverage and build contents may differ.
No longer detectedlowAmazon S3 bucket reference
Absent from the selected newer scan. This alone does not confirm a fix; coverage and build contents may differ.
No longer detectedlowFirebase Realtime Database reference
Absent from the selected newer scan. This alone does not confirm a fix; coverage and build contents may differ.
No longer detectedmediumExported content provider without permission
Absent from the selected newer scan. This alone does not confirm a fix; coverage and build contents may differ.
No longer detectedmediumcom.squareup.okhttp3:okhttp 3.12.13 — CVE-2021-0341
Absent from the selected newer scan. This alone does not confirm a fix; coverage and build contents may differ.
No matching records. Change or clear your filters.
SDK & advisory changes
Tracking SDKs newly detected
Mintegral, Yandex Ads, Google Analytics for Firebase, Google UMP (consent), IAB TCF
Tracking SDKs no longer detected
Google AdServices
Recorded advisory matches: 1 → 1. Missing inventories cannot establish absence.