{
  "ok": true,
  "app_id": "pl.netigen.drumloops.ultimate",
  "comparable": false,
  "comparison_status": "limited_coverage",
  "regressed": null,
  "grade_delta": null,
  "score_delta": null,
  "from": {
    "scan_id": "75be43f2-f3e6-477e-958a-3ad79c0ea5ca",
    "version": "4.12.2",
    "analysis": {
      "status": "unknown"
    },
    "provenance": {},
    "grade": "A",
    "score": 90,
    "scanned_at": "2026-09-03T06:37:55.458Z"
  },
  "to": {
    "scan_id": "80eaf033-b110-4637-afd3-d632c2900ca9",
    "version": "5.1.1",
    "analysis": {
      "issues": [],
      "stages": {
        "pii": "complete",
        "sbom": "complete",
        "signing": "certificate_parsed",
        "strings": "complete",
        "manifest": "complete"
      },
      "status": "complete",
      "grading": {
        "policy": "static-coverage-v1",
        "blockers": [],
        "eligible": true
      },
      "timings_ms": {
        "total": 16555.166,
        "harvest": 9635.93699999999,
        "detectors": 5687.986999999983
      },
      "bytes_total": 196897568,
      "bytes_scanned": 196897568,
      "bytes_skipped": 0,
      "files_processed": 1860,
      "coverage_version": 2,
      "string_encodings": [
        "ascii",
        "utf16le"
      ],
      "signature_validation": "not_performed"
    },
    "provenance": {
      "mode": "static",
      "artifacts": [
        {
          "name": "base.apk",
          "sha256": "af61e89d5d83412cbe55b276aaf6b6dd27ef487d51233e51c099bf6b78de7b8c"
        },
        {
          "name": "config.arm64_v8a.apk",
          "sha256": "1a6f79607b58d3fae96dd7f5f3aae96e9c51ef25796e6a34ff22cfe2f0beb97a"
        },
        {
          "name": "config.en.apk",
          "sha256": "f23d24f95c69935cd67c263253cf09f8fedaf2a3dd210018dbe135be9c84fd8c"
        },
        {
          "name": "config.xxhdpi.apk",
          "sha256": "5d2a1e75b7c3a67580b1b02fbcd14c26fc3f1055d2967571e89446b6c41e3d33"
        }
      ],
      "ruleset_sha256": "3bb79cc3710b0fb021feaa322578f4cffe08396a97c51b34df092b5a05891d5e"
    },
    "grade": "A",
    "score": 98,
    "scanned_at": "2026-10-06T23:31:55.556Z"
  },
  "findings": {
    "added": [
      {
        "finding_type": 20,
        "severity": "low",
        "title": "Google API key (client-shipped; restriction unverified)",
        "fingerprint": "2bd96421eddb2ea8828e609bb52f76405f03269f3ea1874615105d430e3085b4",
        "verified": false
      },
      {
        "finding_type": 37,
        "severity": "info",
        "title": "Application data is backup-enabled",
        "fingerprint": "68d134f0bcd98a9559d6dd5275f80a3928e4a6490ac4a0f1bd16f87683bd49f8",
        "verified": false
      },
      {
        "finding_type": 35,
        "severity": "low",
        "title": "Exported content provider without permission (third-party library artifact, shared across 232 unrelated developers)",
        "fingerprint": "e510d1eb34e8724fb89c83162bddb9cb7decb566898c4cfb5f1fc0556fb56332",
        "verified": false
      }
    ],
    "removed": [
      {
        "finding_type": 20,
        "severity": "low",
        "title": "Google API key (client-shipped; restriction unverified)",
        "fingerprint": "8e283ebf73663b63697717608e328b4e9be10be077ddd73913bbc46a8e7f3459",
        "verified": false
      },
      {
        "finding_type": 2,
        "severity": "low",
        "title": "Firebase Realtime Database reference",
        "fingerprint": "5caab90df8cb7791d4f3db35a005f46ffc475d1925bcdd5a217dea283860a3a7",
        "verified": false
      },
      {
        "finding_type": 53,
        "severity": "low",
        "title": "Firebase Storage bucket reference",
        "fingerprint": "6ad6673a32015da42a546b28c8a8b307aa6536ad74e39d5b5a50b5fc1ef707a1",
        "verified": false
      },
      {
        "finding_type": 37,
        "severity": "low",
        "title": "Application data is backup-enabled",
        "fingerprint": "d3416964a26a93aeec0126ea1bb43b17c4aba66f0c76c2dc8ebd02d06ec4ef49",
        "verified": false
      },
      {
        "finding_type": 35,
        "severity": "medium",
        "title": "Exported content provider without permission",
        "fingerprint": "d064f345da95da143a123ca0eab11119a69a06eca10c929f4b477d817c08ace0",
        "verified": false
      }
    ],
    "persisting_count": 0,
    "added_by_sev": {
      "critical": 0,
      "high": 0,
      "medium": 0,
      "low": 2
    },
    "removed_by_sev": {
      "critical": 0,
      "high": 0,
      "medium": 1,
      "low": 4
    }
  },
  "trackers": {
    "added": [
      "AppLovin",
      "Meta Audience Network",
      "Vungle",
      "Yandex Ads",
      "ironSource",
      "Google Analytics for Firebase",
      "Singular",
      "Google UMP (consent)",
      "IAB TCF"
    ],
    "removed": [
      "Google AdServices"
    ]
  },
  "known_vulns": {
    "from": 0,
    "to": 0,
    "delta": 0,
    "from_recorded": true,
    "to_recorded": true
  }
}