{
  "ok": true,
  "app_id": "pl.gswierczynski.motolog",
  "comparable": false,
  "comparison_status": "limited_coverage",
  "regressed": null,
  "grade_delta": null,
  "score_delta": null,
  "from": {
    "scan_id": "d95bb767-a3a5-41ba-b292-523575e49a03",
    "version": "4.3.1",
    "analysis": {
      "status": "unknown"
    },
    "provenance": {},
    "grade": "A",
    "score": 90,
    "scanned_at": "2026-09-02T12:07:09.179Z"
  },
  "to": {
    "scan_id": "5c737012-309a-45c1-948d-7785e8a21807",
    "version": "4.4.0",
    "analysis": {
      "issues": [],
      "stages": {
        "pii": "complete",
        "sbom": "complete",
        "signing": "certificate_parsed",
        "strings": "complete",
        "manifest": "complete"
      },
      "status": "complete",
      "grading": {
        "policy": "static-coverage-v1",
        "blockers": [],
        "eligible": true
      },
      "timings_ms": {
        "total": 3311.094,
        "harvest": 1142.3019999999997,
        "detectors": 1807.3110000000065
      },
      "bytes_total": 23059950,
      "bytes_scanned": 23059950,
      "bytes_skipped": 0,
      "files_processed": 814,
      "coverage_version": 2,
      "string_encodings": [
        "ascii",
        "utf16le"
      ],
      "signature_validation": "not_performed"
    },
    "provenance": {
      "mode": "static",
      "artifacts": [
        {
          "name": "base.apk",
          "sha256": "f2294e8d18120999296a29748e4844232104a55448bdd39734bd691f9414516d"
        },
        {
          "name": "config.arm64_v8a.apk",
          "sha256": "190191c85d4c4663d741d3f702234a23c275aa46bdea6db055c8328370c34b7e"
        },
        {
          "name": "config.en.apk",
          "sha256": "7b85ccb43fd7f9fa06fa6232bafa724f4eb9d785b9a2335c5e547c161157a7ef"
        },
        {
          "name": "config.xxhdpi.apk",
          "sha256": "ec90d97b22aaafb11575480e8540b38608dfcce84c6d2b4a3eeaf89377b745b6"
        }
      ],
      "ruleset_sha256": "3bb79cc3710b0fb021feaa322578f4cffe08396a97c51b34df092b5a05891d5e"
    },
    "grade": "A",
    "score": 90,
    "scanned_at": "2026-10-06T17:12:46.373Z"
  },
  "findings": {
    "added": [
      {
        "finding_type": 20,
        "severity": "low",
        "title": "Google API key (client-shipped; restriction unverified)",
        "fingerprint": "f8df1dd5f40f9114d3cb524c4ee5f2ad55feeea61ab1ae7f29a3c73c5b371456",
        "verified": false
      },
      {
        "finding_type": 2,
        "severity": "low",
        "title": "Firebase Realtime Database reference",
        "fingerprint": "4730f279a525fe645d27dcef82f74184c12d87c15da1257975362a6453276bb7",
        "verified": false
      },
      {
        "finding_type": 53,
        "severity": "low",
        "title": "Firebase Storage bucket reference",
        "fingerprint": "75fd5768c988510435d0a5d7bf547b990c8c99e2b8c1085b75ac01e955ea77d4",
        "verified": false
      },
      {
        "finding_type": 20,
        "severity": "low",
        "title": "Google API key (client-shipped; restriction unverified)",
        "fingerprint": "0ba365f8d9f13dadbc8b5ab00791dba80305a9f5cebd9c03b3184050db69237c",
        "verified": false
      },
      {
        "finding_type": 20,
        "severity": "low",
        "title": "Google API key (client-shipped; restriction unverified)",
        "fingerprint": "1b6032a69c4438b38667ca4de10c0ad677f7bae6ed4f423af0ca4c4ec622843f",
        "verified": false
      },
      {
        "finding_type": 57,
        "severity": "medium",
        "title": "Short signing key (RSA 1024-bit)",
        "fingerprint": "eff7d2f7607ae274d531546d1e828faf234bca919325efac0bbe80b2f250d041",
        "verified": false
      },
      {
        "finding_type": 60,
        "severity": "low",
        "title": "Background location access with advertising SDKs present",
        "fingerprint": "0c010d775be9542eee48043eb496c06888f9b8e8fcdf3af66a6b84e99192f6ce",
        "verified": false
      }
    ],
    "removed": [
      {
        "finding_type": 20,
        "severity": "low",
        "title": "Google API key (client-shipped; restriction unverified)",
        "fingerprint": "95af8f935a162e684ba22bf131d6e0a9c34247c45f6416c31590ffea7c8cf87d",
        "verified": false
      },
      {
        "finding_type": 53,
        "severity": "low",
        "title": "Firebase Storage bucket reference",
        "fingerprint": "dfd94a34746cb59bafabeb123818db7bf258099f3c57079aae4dbc0d2c6971ab",
        "verified": false
      },
      {
        "finding_type": 20,
        "severity": "low",
        "title": "Google API key (client-shipped; restriction unverified)",
        "fingerprint": "7fe2101f7c690df4dfa1e3ca6d9b0cd8d540f46b5ac8bd6a792136cc5782001b",
        "verified": false
      },
      {
        "finding_type": 2,
        "severity": "low",
        "title": "Firebase Realtime Database reference",
        "fingerprint": "c5d823ae2090ff35336fdcd80d6b2f5a6c76b86ceda490fe16e3c9a09979714b",
        "verified": false
      },
      {
        "finding_type": 20,
        "severity": "low",
        "title": "Google API key (client-shipped; restriction unverified)",
        "fingerprint": "e7bc0ce4deaec9eb28d402a99f03dc9ef1cb4db70cf50d1eb0ab69bd92889ed6",
        "verified": false
      },
      {
        "finding_type": 57,
        "severity": "medium",
        "title": "Short signing key (RSA 1024-bit)",
        "fingerprint": "c0908fb30fa18324ad43f60111957be428de82cb1baf73a54edd1ca8d185e47e",
        "verified": false
      },
      {
        "finding_type": 60,
        "severity": "low",
        "title": "Background location access with advertising SDKs present",
        "fingerprint": "fb67d0eee43d47ebaf2986da1c709b5c711f77a5b4416768a75918f9d061990e",
        "verified": false
      }
    ],
    "persisting_count": 0,
    "added_by_sev": {
      "critical": 0,
      "high": 0,
      "medium": 1,
      "low": 6
    },
    "removed_by_sev": {
      "critical": 0,
      "high": 0,
      "medium": 1,
      "low": 6
    }
  },
  "trackers": {
    "added": [
      "Google Analytics for Firebase",
      "IAB TCF"
    ],
    "removed": [
      "Google AdServices"
    ]
  },
  "known_vulns": {
    "from": 0,
    "to": 0,
    "delta": 0,
    "from_recorded": true,
    "to_recorded": true
  }
}