{
  "schema_version": 1,
  "app_id": "io.thepeoples.ProtonMail",
  "slug": "proton-mail",
  "version": "1.14.0",
  "scanned_at": "2026-09-27T07:34:05Z",
  "scanner": {
    "name": "trivy",
    "version": "0.73.0",
    "db_updated_at": "2026-09-27T00:40:58Z"
  },
  "input": {
    "kind": "rpm",
    "filename": "ProtonMail-desktop-beta.rpm",
    "sha256": "6c429e8d94ea57da24b83a49cbe98ce3f37f11d72b4dc0e314a473ce7d03c4b0",
    "extracted_without_scripts": true
  },
  "gate": {
    "result": "pass",
    "fail_on": "wrap CRITICAL"
  },
  "counts": {
    "wrap": {
      "critical": 0,
      "high": 0,
      "medium": 0,
      "low": 0,
      "unknown": 0
    },
    "vendor": {
      "critical": 0,
      "high": 0,
      "medium": 0,
      "low": 0,
      "unknown": 0
    }
  },
  "coverage": {
    "packages_seen": 12,
    "wrap": {
      "status": "inventoried",
      "packages_seen": 0,
      "notes": []
    },
    "vendor": {
      "status": "inventoried",
      "packages_seen": 12,
      "notes": [
        "electron version file present (42.9.0)",
        "electron asar",
        "package.json uses yarn workspace protocol",
        "electron 42.9.0 from version file",
        "electron 42.9.0 from package.json",
        "skipped workspace protocol package.json deps",
        "read 1 package.json file(s)",
        "trivy sbom on 12 derived PURLs"
      ]
    }
  },
  "findings": []
}