{
  "ok": true,
  "app_id": "mil.dod.mcfp.chilldrills",
  "comparable": false,
  "comparison_status": "limited_coverage",
  "regressed": true,
  "grade_delta": null,
  "score_delta": null,
  "from": {
    "scan_id": "f52dce82-a3fb-4d80-8777-63a58381ba99",
    "version": "1.3.7",
    "analysis": {
      "status": "unknown"
    },
    "provenance": {},
    "grade": "A",
    "score": 98,
    "scanned_at": "2026-09-03T03:29:54.936Z"
  },
  "to": {
    "scan_id": "26da538e-2894-41f5-a0e1-2a8c7a3151f7",
    "version": "1.3.8",
    "analysis": {
      "issues": [],
      "stages": {
        "pii": "complete",
        "sbom": "complete",
        "signing": "certificate_parsed",
        "strings": "complete",
        "manifest": "complete"
      },
      "status": "complete",
      "grading": {
        "policy": "static-coverage-v1",
        "blockers": [],
        "eligible": true
      },
      "timings_ms": {
        "total": 3970.715,
        "harvest": 2103.673000000002,
        "detectors": 1434.6720000000041
      },
      "bytes_total": 39883381,
      "bytes_scanned": 39883381,
      "bytes_skipped": 0,
      "files_processed": 789,
      "coverage_version": 2,
      "string_encodings": [
        "ascii",
        "utf16le"
      ],
      "signature_validation": "not_performed"
    },
    "provenance": {
      "mode": "static",
      "artifacts": [
        {
          "name": "base.apk",
          "sha256": "9ad6800ec3638b17772417cf2bcd7d6ecb02611df1a7bcfa123eef30c08f4534"
        },
        {
          "name": "config.arm64_v8a.apk",
          "sha256": "04d2ed71065737acead55bdfd9b64c374e3a260b21f7efb04fee41ff320b6428"
        },
        {
          "name": "config.xxhdpi.apk",
          "sha256": "7763efe7bd327f1f783f5a491c0d7babb2b8ae36ddfb73385dba2e8ab2d2fb77"
        }
      ],
      "ruleset_sha256": "3bb79cc3710b0fb021feaa322578f4cffe08396a97c51b34df092b5a05891d5e"
    },
    "grade": "C",
    "score": 62,
    "scanned_at": "2026-10-06T22:32:15.214Z"
  },
  "findings": {
    "added": [
      {
        "finding_type": 20,
        "severity": "low",
        "title": "Google API key (client-shipped; restriction unverified)",
        "fingerprint": "2481b4e6c2f20ffdb760945c98a183fd636b56a0b2a0a9fef31f97ecaefc3a11",
        "verified": false
      },
      {
        "finding_type": 53,
        "severity": "low",
        "title": "Firebase Storage bucket reference",
        "fingerprint": "8b8e65d8fc312774d74e938ee57f8c4e5e6d84d7cd599cbdac01f688544a2fda",
        "verified": false
      },
      {
        "finding_type": 87,
        "severity": "high",
        "title": "Hardcoded HTTP Basic-auth credentials",
        "fingerprint": "d02383a4eab371636b21149f7d756cbcd2992e43b635d1f3734c0e48b9e00ead",
        "verified": false
      },
      {
        "finding_type": 87,
        "severity": "high",
        "title": "Hardcoded HTTP Basic-auth credentials",
        "fingerprint": "c4482da6401ed45a350faa1f07937dfe65bd5438060ffd3c0ee97d88d59d3ce6",
        "verified": false
      }
    ],
    "removed": [
      {
        "finding_type": 20,
        "severity": "low",
        "title": "Google API key (client-shipped; restriction unverified)",
        "fingerprint": "487fd5bdb564b3996121d715268fe98b5d8e0740e96ba030bf30a9e822d88a59",
        "verified": false
      },
      {
        "finding_type": 53,
        "severity": "low",
        "title": "Firebase Storage bucket reference",
        "fingerprint": "09bb6dfdecb2dd51329ff6ee0003f726e646bdde5066a8303211b15571829ea8",
        "verified": false
      }
    ],
    "persisting_count": 0,
    "added_by_sev": {
      "critical": 0,
      "high": 2,
      "medium": 0,
      "low": 2
    },
    "removed_by_sev": {
      "critical": 0,
      "high": 0,
      "medium": 0,
      "low": 2
    }
  },
  "trackers": {
    "added": [
      "Google Analytics for Firebase",
      "IAB TCF"
    ],
    "removed": [
      "Google AdServices"
    ]
  },
  "known_vulns": {
    "from": 0,
    "to": 0,
    "delta": 0,
    "from_recorded": true,
    "to_recorded": true
  }
}