{
  "ok": true,
  "app_id": "nz.co.newworld.clubcard",
  "comparable": true,
  "comparison_status": "comparable",
  "regressed": false,
  "grade_delta": "A ← A",
  "score_delta": 1,
  "from": {
    "scan_id": "25349f95-935e-4705-b302-54110b23858d",
    "version": "5.4.0",
    "analysis": {
      "issues": [],
      "stages": {
        "pii": "complete",
        "sbom": "complete",
        "signing": "certificate_parsed",
        "strings": "complete",
        "manifest": "complete"
      },
      "status": "complete",
      "grading": {
        "policy": "static-coverage-v1",
        "blockers": [],
        "eligible": true
      },
      "timings_ms": {
        "total": 17800.35,
        "harvest": 4863.815000000012,
        "detectors": 12017.113000000025
      },
      "bytes_total": 105396713,
      "bytes_scanned": 105396713,
      "bytes_skipped": 0,
      "files_processed": 1754,
      "coverage_version": 2,
      "string_encodings": [
        "ascii",
        "utf16le"
      ],
      "signature_validation": "not_performed"
    },
    "provenance": {
      "mode": "static",
      "artifacts": [
        {
          "name": "base.apk",
          "sha256": "4cc49e249d156b1ab067c149d60daac2ba12917af0412305343529ea1618e284"
        },
        {
          "name": "config.arm64_v8a.apk",
          "sha256": "f0972e449f9a3ce630b6f18d9fef4c849ba77a5f40c1d10c8f161ae138d0f6c2"
        },
        {
          "name": "config.en.apk",
          "sha256": "fab6e55e79f5bbad5b6566a226f3683f9bf7fa2afb3f5a247e9585cc664bbc38"
        },
        {
          "name": "config.xxhdpi.apk",
          "sha256": "2b07eb626ffb260b7a581fa3cdaabdefaa00920345b3327391a9af4bd4e862e4"
        }
      ],
      "ruleset_sha256": "6627311253eb54bc361d5dd9a0abc2a0fe556e390d6b2031bca75e1800928ccd"
    },
    "grade": "A",
    "score": 93,
    "scanned_at": "2026-09-20T15:42:03.872Z"
  },
  "to": {
    "scan_id": "6c6cd855-4dc1-4dcd-899f-39ba5afb9f40",
    "version": "5.5.0",
    "analysis": {
      "issues": [],
      "stages": {
        "pii": "complete",
        "sbom": "complete",
        "signing": "certificate_parsed",
        "strings": "complete",
        "manifest": "complete"
      },
      "status": "complete",
      "grading": {
        "policy": "static-coverage-v1",
        "blockers": [],
        "eligible": true
      },
      "timings_ms": {
        "total": 18389.833,
        "harvest": 4953.829999999995,
        "detectors": 12426.52499999997
      },
      "bytes_total": 107215495,
      "bytes_scanned": 107215495,
      "bytes_skipped": 0,
      "files_processed": 1801,
      "coverage_version": 2,
      "string_encodings": [
        "ascii",
        "utf16le"
      ],
      "signature_validation": "not_performed"
    },
    "provenance": {
      "mode": "static",
      "artifacts": [
        {
          "name": "base.apk",
          "sha256": "82e94bb48c60e5e0fb5d676bfc304b3f8d047da4d07e6d96db387766798f7fb9"
        },
        {
          "name": "config.arm64_v8a.apk",
          "sha256": "c8a7424b009b92ff2a7e324cad3bcad9ecd2e04250d9094a2f58a4aba5fb85ae"
        },
        {
          "name": "config.en.apk",
          "sha256": "b2d8ceabcbcd0bcb2ed250130fc4e168802285916262dbacf93512baa1bd104f"
        },
        {
          "name": "config.xxhdpi.apk",
          "sha256": "f08e47c395a8dfe017ad9f186b0ef783bffc38de1207efdcca2407b83fb3948d"
        }
      ],
      "ruleset_sha256": "3bb79cc3710b0fb021feaa322578f4cffe08396a97c51b34df092b5a05891d5e"
    },
    "grade": "A",
    "score": 94,
    "scanned_at": "2026-10-07T04:51:54.786Z"
  },
  "findings": {
    "added": [
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "1fe5ea48553fc56fa4a37c85e13e5c6af93f7ced4921c39c3c66d74c945239ac",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "697667010f10d092fb1aaaf6977cce11a7e808b55b7a7343246e10ccb778d019",
        "verified": false
      }
    ],
    "removed": [
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "e4849071b3c10a6b6fedebd7a5e5fc25caaec90f423dd1642e2e6b5b5053b495",
        "verified": false
      },
      {
        "finding_type": 1,
        "severity": "low",
        "title": "Amazon S3 bucket reference",
        "fingerprint": "b66a9e4758d609e211be8dfdeba359a3b60756cd4e7d13814528087a5da011a9",
        "verified": false
      },
      {
        "finding_type": 77,
        "severity": "low",
        "title": "Data Safety label omits Contacts",
        "fingerprint": "52d6df5eafe80ad7de0275ee425de0bf8d715439e92a9026117bea4d546827d0",
        "verified": false
      }
    ],
    "persisting_count": 10,
    "added_by_sev": {
      "critical": 0,
      "high": 0,
      "medium": 0,
      "low": 2
    },
    "removed_by_sev": {
      "critical": 0,
      "high": 0,
      "medium": 0,
      "low": 3
    }
  },
  "trackers": {
    "added": [
      "Google Analytics for Firebase"
    ],
    "removed": [
      "Google AdServices"
    ]
  },
  "known_vulns": {
    "from": 0,
    "to": 0,
    "delta": 0,
    "from_recorded": true,
    "to_recorded": true
  }
}