{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "SEC031", "name": "[SEC031] Catastrophic Backtracking Regex (ReDoS): Regex contains nested quantifiers like `(a+)+` or quantified alternati", "shortDescription": {"text": "[SEC031] Catastrophic Backtracking Regex (ReDoS): Regex contains nested quantifiers like `(a+)+` or quantified alternation with overlapping branches. On adversarial input these patterns exhibit exponential backtracking, freezing the process"}, "fullDescription": {"text": "Three options, pick one:\n  1. Rewrite the pattern to avoid nested quantifiers. E.g. `(a+)+` is      functionally equivalent to `a+` for matching purposes.\n  2. Use Google's re2 (`pip install google-re2`): linear-time, drop-in      replacement for `re` for most use cases.\n  3. Set a hard timeout: `signal.alarm(1)` before regex eval.\nTest patterns against `safe-regex` or `redos-detector` before shipping."}, "properties": {"scanner": "repobility-threat-engine", "category": "redos", "severity": "medium", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "SEC136", "name": "[SEC136] AI-typical over-broad exception handler swallowing all errors: Catch-all exception block that silently returns ", "shortDescription": {"text": "[SEC136] AI-typical over-broad exception handler swallowing all errors: Catch-all exception block that silently returns success or no-ops. AI agents reach for this pattern when a flaky test or an unfamiliar API throws \u2014 wrap, swallow, retur"}, "fullDescription": {"text": "Catch the specific exception type, log at error level with full exception info, and return a failure-shaped result. If the operation is genuinely best-effort, log at warning and document why in a comment so the next reader (or scanner) knows."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "medium", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "DEPCUR-NPM", "name": "npm package `vscode-languageclient` is 1 major version(s) behind (9.0.1 -> 10.0.0)", "shortDescription": {"text": "npm package `vscode-languageclient` is 1 major version(s) behind (9.0.1 -> 10.0.0)"}, "fullDescription": {"text": "`vscode-languageclient` is pinned/resolved at 9.0.1 but the latest stable release on the npm registry is 10.0.0 (1 major version(s) behind). Outdated dependencies accumulate unpatched bugs and make future security upgrades harder. This is the version-currency signal Dependabot version-update PRs raise."}, "properties": {"scanner": "repobility-dependency-currency", "category": "dependency", "severity": "medium", "confidence": 0.9, "cwe": "", "owasp": ""}}, {"id": "MINED111", "name": "Bare except continues silently", "shortDescription": {"text": "Bare except continues silently"}, "fullDescription": {"text": "Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"scanner": "repobility-ast-engine", "category": "quality", "severity": "medium", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "COMP001", "name": "[COMP001] High cognitive complexity: Function `example_scanning` has cognitive complexity 13 (SonarSource scale). Cognit", "shortDescription": {"text": "[COMP001] High cognitive complexity: Function `example_scanning` has cognitive complexity 13 (SonarSource scale). Cognitive complexity measures how hard the function is for a human to understand \u2014 nested branches, boolean chains, and recurs"}, "fullDescription": {"text": "Extract nested branches into named helper functions; flatten early-return / guard clauses; replace long if/elif chains with dispatch dicts or polymorphism. SonarQube's threshold for 'should refactor' is 15 \u2014 yours is 13."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "low", "confidence": 0.95, "cwe": "", "owasp": ""}}, {"id": "AIC003", "name": "Duplicated implementation block across source files", "shortDescription": {"text": "Duplicated implementation block across source files"}, "fullDescription": {"text": "Duplicated blocks are a common artifact when generated code is pasted or recreated instead of reused. They increase maintenance cost because every future bug fix must be found in multiple locations."}, "properties": {"scanner": "repobility-ai-code-hygiene", "category": "quality", "severity": "low", "confidence": 0.86, "cwe": "", "owasp": ""}}, {"id": "MINED076", "name": "[MINED076] Catch And Reraise Noop: except X: raise X \u2014 adds no value, hides traceback if AI accidentally changes message", "shortDescription": {"text": "[MINED076] Catch And Reraise Noop: except X: raise X \u2014 adds no value, hides traceback if AI accidentally changes message."}, "fullDescription": {"text": "Review and fix per the pattern semantics."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "info", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "MINED073", "name": "[MINED073] Redos Greedy Quantifier: Pattern with nested quantifiers like (a+)+ applied to network/user data \u2014 denial of ", "shortDescription": {"text": "[MINED073] Redos Greedy Quantifier: Pattern with nested quantifiers like (a+)+ applied to network/user data \u2014 denial of service."}, "fullDescription": {"text": "Review and fix per the pattern semantics. See CWE-1333,CWE-400 / A06:2021 for context."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "info", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "SEC128", "name": "[SEC128] Async function without await \u2014 fire-and-forget Promise (AI mistake) (and 2 more): Same pattern found in 2 addit", "shortDescription": {"text": "[SEC128] Async function without await \u2014 fire-and-forget Promise (AI mistake) (and 2 more): Same pattern found in 2 additional files. Review if needed."}, "fullDescription": {"text": "Add `await` before each async call, or chain with `.then`. If you intentionally want fire-and-forget, prefix with `void` (TS) or assign to `_` (Python with `asyncio.create_task`) to make the intent explicit and survive lint."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "info", "confidence": 0.2, "cwe": "", "owasp": ""}}, {"id": "MINED050", "name": "[MINED050] Stub Only Function (and 8 more): Same pattern found in 8 additional files. Review if needed.", "shortDescription": {"text": "[MINED050] Stub Only Function (and 8 more): Same pattern found in 8 additional files. Review if needed."}, "fullDescription": {"text": "Review and fix per the pattern semantics. See CWE-1188 /  for context."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "info", "confidence": 0.2, "cwe": "", "owasp": ""}}, {"id": "MINED062", "name": "[MINED062] Python Dataclass No Fields (and 42 more): Same pattern found in 42 additional files. Review if needed.", "shortDescription": {"text": "[MINED062] Python Dataclass No Fields (and 42 more): Same pattern found in 42 additional files. Review if needed."}, "fullDescription": {"text": "Review and fix per the pattern semantics."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "info", "confidence": 0.2, "cwe": "", "owasp": ""}}, {"id": "MINED079", "name": "[MINED079] Off By One Slice: range(len(x)+1), arr[i+1:i+n+1], or while i<=len(arr) \u2014 off-by-one risk.", "shortDescription": {"text": "[MINED079] Off By One Slice: range(len(x)+1), arr[i+1:i+n+1], or while i<=len(arr) \u2014 off-by-one risk."}, "fullDescription": {"text": "Review and fix per the pattern semantics. See CWE-193 /  for context."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "info", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "MINED043", "name": "[MINED043] Http Not Https: Hardcoded http:// (not localhost) for endpoints that handle credentials or data.", "shortDescription": {"text": "[MINED043] Http Not Https: Hardcoded http:// (not localhost) for endpoints that handle credentials or data."}, "fullDescription": {"text": "Review and fix per the pattern semantics. See CWE-319 / A02:2021 for context."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "info", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "SEC013", "name": "[SEC013] Path Traversal \u2014 User Input in File Path: User-controlled input used in file path without sanitization. Allows ", "shortDescription": {"text": "[SEC013] Path Traversal \u2014 User Input in File Path: User-controlled input used in file path without sanitization. Allows reading arbitrary files."}, "fullDescription": {"text": "Use os.path.realpath() and verify the path starts with your expected base directory. Use secure_filename() for uploads."}, "properties": {"scanner": "repobility-threat-engine", "category": "path_traversal", "severity": "high", "confidence": 0.8, "cwe": "", "owasp": ""}}, {"id": "SEC004", "name": "[SEC004] SQL Injection Risk: String interpolation in SQL execution. Allows SQL injection.", "shortDescription": {"text": "[SEC004] SQL Injection Risk: String interpolation in SQL execution. Allows SQL injection."}, "fullDescription": {"text": "Use parameterized queries: cursor.execute('SELECT * FROM t WHERE id = %s', [id]). For dynamic table or column names, choose identifiers from a hard-coded allowlist and keep values in parameters."}, "properties": {"scanner": "repobility-threat-engine", "category": "injection", "severity": "high", "confidence": 0.5, "cwe": "", "owasp": ""}}, {"id": "SEC103", "name": "[SEC103] LDAP injection \u2014 non-constant search filter: User input concatenated into an LDAP search filter. Attackers inje", "shortDescription": {"text": "[SEC103] LDAP injection \u2014 non-constant search filter: User input concatenated into an LDAP search filter. Attackers inject `*)(uid=*` style payloads to bypass auth or enumerate accounts."}, "fullDescription": {"text": "Escape with javax.naming.ldap.Rdn.escapeValue or equivalent. For python-ldap, use ldap.filter.escape_filter_chars. Better: use parameterized search APIs (Spring LdapTemplate filter encoders)."}, "properties": {"scanner": "repobility-threat-engine", "category": "injection", "severity": "high", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "MINED001", "name": "[MINED001] Bare Except Pass: except: pass or except Exception: pass \u2014 silently swallows everything including KeyboardInt", "shortDescription": {"text": "[MINED001] Bare Except Pass: except: pass or except Exception: pass \u2014 silently swallows everything including KeyboardInterrupt and bugs."}, "fullDescription": {"text": "Review and fix per the pattern semantics. See CWE-755 /  for context."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "high", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "MINED006", "name": "[MINED006] Overcatch Baseexception: except BaseException: ... \u2014 prevents Ctrl+C and SystemExit from working.", "shortDescription": {"text": "[MINED006] Overcatch Baseexception: except BaseException: ... \u2014 prevents Ctrl+C and SystemExit from working."}, "fullDescription": {"text": "Review and fix per the pattern semantics. See CWE-705 /  for context."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "high", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "MINED004", "name": "[MINED004] Weak Crypto: MD5/SHA1/DES/RC4 used for security context (not just checksums).", "shortDescription": {"text": "[MINED004] Weak Crypto: MD5/SHA1/DES/RC4 used for security context (not just checksums)."}, "fullDescription": {"text": "Review and fix per the pattern semantics. See CWE-327 / A02:2021 for context."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "high", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "MINED115", "name": "Action `pypa/gh-action-pypi-publish` pinned to mutable ref `@release/v1`", "shortDescription": {"text": "Action `pypa/gh-action-pypi-publish` pinned to mutable ref `@release/v1`"}, "fullDescription": {"text": "`uses: pypa/gh-action-pypi-publish@release/v1` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the tj-actions/changed-files compromise (2025) instantly affect ~23K repos. Pin to a 40-char commit SHA + lock with Dependabot or renovate."}, "properties": {"scanner": "repobility-supply-chain", "category": "dependency", "severity": "high", "confidence": 0.9, "cwe": "", "owasp": ""}}, {"id": "MINED106", "name": "Phantom test coverage: test_json_serializer_rejects_invalid_input_path_types", "shortDescription": {"text": "Phantom test coverage: test_json_serializer_rejects_invalid_input_path_types"}, "fullDescription": {"text": "Test function `test_json_serializer_rejects_invalid_input_path_types` runs code but contains no assert / expect / should call \u2014 it passes regardless of behaviour. Adds line coverage without verifying anything."}, "properties": {"scanner": "repobility-ast-engine", "category": "quality", "severity": "high", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "MINED108", "name": "`self.take_snapshot` used but never assigned in __init__", "shortDescription": {"text": "`self.take_snapshot` used but never assigned in __init__"}, "fullDescription": {"text": "Method `profile_streaming_parser` of class `MemoryProfiler` reads `self.take_snapshot`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance."}, "properties": {"scanner": "repobility-ast-engine", "category": "quality", "severity": "high", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "MINED107", "name": "Missing import: `string` used but not imported", "shortDescription": {"text": "Missing import: `string` used but not imported"}, "fullDescription": {"text": "The file uses `string.something(...)` but never imports `string`. This raises NameError at runtime the first time the line executes."}, "properties": {"scanner": "repobility-ast-engine", "category": "quality", "severity": "critical", "confidence": 1.0, "cwe": "", "owasp": ""}}]}}, "automationDetails": {"id": "repobility/1246"}, "properties": {"repository": "seifreed/yaraast", "repoUrl": "https://github.com/seifreed/yaraast", "branch": "main"}, "results": [{"ruleId": "SEC031", "level": "warning", "message": {"text": "[SEC031] Catastrophic Backtracking Regex (ReDoS): Regex contains nested quantifiers like `(a+)+` or quantified alternation with overlapping branches. On adversarial input these patterns exhibit exponential backtracking, freezing the process. CWE-1333. Real CVEs: CVE-2017-16129 (minimatch), CVE-2021-3807 (ansi-regex), and dozens more."}, "properties": {"repobilityId": 125864, "scanner": "repobility-threat-engine", "fingerprint": "48ee69ab47111d4ed8d0d91b3812a01f5414759fb76c833f5eac3fae8582e70a", "category": "redos", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": "re.compile(r\"[a-zA-Z_][a-zA-Z0-9_]*(\\.[a-zA-Z_][a-zA-Z0-9_]*)+", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC031", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "fp|48ee69ab47111d4ed8d0d91b3812a01f5414759fb76c833f5eac3fae8582e70a"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "yaraast/yaral/lexer_tables.py"}, "region": {"startLine": 63}}}]}, {"ruleId": "SEC031", "level": "warning", "message": {"text": "[SEC031] Catastrophic Backtracking Regex (ReDoS): Regex contains nested quantifiers like `(a+)+` or quantified alternation with overlapping branches. On adversarial input these patterns exhibit exponential backtracking, freezing the process. CWE-1333. Real CVEs: CVE-2017-16129 (minimatch), CVE-2021-3807 (ansi-regex), and dozens more."}, "properties": {"repobilityId": 125863, "scanner": "repobility-threat-engine", "fingerprint": "a8ca893df92deae32c82bc4d4d90c3c41eaf1f8f71bebcd52ed1be5d7d8b5f1c", "category": "redos", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": "re.match(r\"(\\$\\w+)\\s*=\\s*/((?:\\\\/|[^/])*", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC031", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "fp|a8ca893df92deae32c82bc4d4d90c3c41eaf1f8f71bebcd52ed1be5d7d8b5f1c"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "yaraast/parser/error_tolerant_recovery.py"}, "region": {"startLine": 172}}}]}, {"ruleId": "SEC136", "level": "warning", "message": {"text": "[SEC136] AI-typical over-broad exception handler swallowing all errors: Catch-all exception block that silently returns success or no-ops. AI agents reach for this pattern when a flaky test or an unfamiliar API throws \u2014 wrap, swallow, return success. Real bugs are masked, observability is destroyed, and callers think the operation worked. CWE-396 (improperly-generalized exception). Distinct from intentional fallback because there's no log line and the success value is fabricated."}, "properties": {"repobilityId": 125860, "scanner": "repobility-threat-engine", "fingerprint": "50cdce81c8d6fd119aa463c800f21434ad96c9f4f8a68e02fac52f8754b98c7d", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": "try:\n            ast = Parser(source).parse()\n            return CodeGenerator().generate(ast), None", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC136", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "fp|50cdce81c8d6fd119aa463c800f21434ad96c9f4f8a68e02fac52f8754b98c7d"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "yaraast/conformance/differential.py"}, "region": {"startLine": 57}}}]}, {"ruleId": "DEPCUR-NPM", "level": "warning", "message": {"text": "npm package `vscode-languageclient` is 1 major version(s) behind (9.0.1 -> 10.0.0)"}, "properties": {"repobilityId": 125829, "scanner": "repobility-dependency-currency", "fingerprint": "8bf362146478e6d07d011ebaef26969f1877203538e3c1b8bc7165f45a8b3ccb", "category": "dependency", "severity": "medium", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"gap": "1 major version(s) behind", "signal": "currency", "cwe_ids": [], "package": "vscode-languageclient", "scanner": "repobility-dependency-currency", "ecosystem": "npm", "languages": ["javascript"], "latest_version": "10.0.0", "correlation_key": "fp|8bf362146478e6d07d011ebaef26969f1877203538e3c1b8bc7165f45a8b3ccb", "current_version": "9.0.1"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "vscode-yaraast/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "Bare except continues silently"}, "properties": {"repobilityId": 125811, "scanner": "repobility-ast-engine", "fingerprint": "579385e97d304dc289fe9f2cdf1bf31c7f3f0dec877f9a5ef08fd4b37e17f875", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|579385e97d304dc289fe9f2cdf1bf31c7f3f0dec877f9a5ef08fd4b37e17f875"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "yaraast/performance/parallel_execution.py"}, "region": {"startLine": 103}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "Bare except continues silently"}, "properties": {"repobilityId": 125810, "scanner": "repobility-ast-engine", "fingerprint": "713e9fcda6e88294421c95983b4ab91b566a29f13f8ad54aa8fa991bb4ff5182", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|713e9fcda6e88294421c95983b4ab91b566a29f13f8ad54aa8fa991bb4ff5182"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "yaraast/performance/parallel_execution.py"}, "region": {"startLine": 81}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "Bare except continues silently"}, "properties": {"repobilityId": 125809, "scanner": "repobility-ast-engine", "fingerprint": "2cad10c34766e1e2c975c67ad6fc508bdb438c951bedd8689d26c5a752b9e1a7", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|2cad10c34766e1e2c975c67ad6fc508bdb438c951bedd8689d26c5a752b9e1a7"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "yaraast/performance/parallel_execution.py"}, "region": {"startLine": 51}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "Bare except continues silently"}, "properties": {"repobilityId": 125808, "scanner": "repobility-ast-engine", "fingerprint": "f5e4e3d5caf81755b40d0017cde72be28f5fcef33d1847dbebe347af37341b71", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|f5e4e3d5caf81755b40d0017cde72be28f5fcef33d1847dbebe347af37341b71"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "yaraast/performance/batch_processor.py"}, "region": {"startLine": 164}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "Bare except continues silently"}, "properties": {"repobilityId": 125807, "scanner": "repobility-ast-engine", "fingerprint": "3172ac71d8af69129f217a949495bdab7bd68f5665afdc8c1a97bce9fbb62dac", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|3172ac71d8af69129f217a949495bdab7bd68f5665afdc8c1a97bce9fbb62dac"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "yaraast/yaral/enhanced_parser.py"}, "region": {"startLine": 55}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "Bare except continues silently"}, "properties": {"repobilityId": 125806, "scanner": "repobility-ast-engine", "fingerprint": "cad80ea2a6030d5437bf7114c82d643dfec3298399e016ab115c7f65af773745", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|cad80ea2a6030d5437bf7114c82d643dfec3298399e016ab115c7f65af773745"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "yaraast/metrics/dependency_graph_helpers.py"}, "region": {"startLine": 68}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "Bare except continues silently"}, "properties": {"repobilityId": 125805, "scanner": "repobility-ast-engine", "fingerprint": "7d4a8a2f288834a0e7480c3c650542278823724aa9d8541b2f9ee55c2d6af933", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|7d4a8a2f288834a0e7480c3c650542278823724aa9d8541b2f9ee55c2d6af933"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "yaraast/metrics/string_diagrams_graph_builders.py"}, "region": {"startLine": 43}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "Bare except continues silently"}, "properties": {"repobilityId": 125804, "scanner": "repobility-ast-engine", "fingerprint": "debd3c99ab3002e67386128b1d0dd68374b07f050859bc51f6246323c56e302d", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|debd3c99ab3002e67386128b1d0dd68374b07f050859bc51f6246323c56e302d"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "yaraast/metrics/workflows.py"}, "region": {"startLine": 144}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "Bare except continues silently"}, "properties": {"repobilityId": 125803, "scanner": "repobility-ast-engine", "fingerprint": "069785e634e07224b275149a1d789921dd77f2150eb2dd46e8b87cdd68af3135", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|069785e634e07224b275149a1d789921dd77f2150eb2dd46e8b87cdd68af3135"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "yaraast/metrics/workflows.py"}, "region": {"startLine": 138}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "Bare except continues silently"}, "properties": {"repobilityId": 125802, "scanner": "repobility-ast-engine", "fingerprint": "3f72f423d911c44c70fba53e5c91c6efc994165d90bb3968e2f3fb3d1fff4742", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|3f72f423d911c44c70fba53e5c91c6efc994165d90bb3968e2f3fb3d1fff4742"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "yaraast/lsp/document_context.py"}, "region": {"startLine": 195}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "Bare except continues silently"}, "properties": {"repobilityId": 125801, "scanner": "repobility-ast-engine", "fingerprint": "811c11c4e0d9441ac197c726cccfefb003b13625c5ce5a21bccae08a22671f93", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|811c11c4e0d9441ac197c726cccfefb003b13625c5ce5a21bccae08a22671f93"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "yaraast/lsp/diagnostics.py"}, "region": {"startLine": 125}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "Bare except continues silently"}, "properties": {"repobilityId": 125800, "scanner": "repobility-ast-engine", "fingerprint": "8a0cbac5fccbfdc3693eba6eb1a0557afa7f1c0210144a3056a6834a64e3823d", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|8a0cbac5fccbfdc3693eba6eb1a0557afa7f1c0210144a3056a6834a64e3823d"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/test_cli_lsp_command.py"}, "region": {"startLine": 16}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "Bare except continues silently"}, "properties": {"repobilityId": 125799, "scanner": "repobility-ast-engine", "fingerprint": "d5e9aa5b0093c2678b3c72491c0a5731eabe4f9ba0cdcc10a74058428fbd0faa", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|d5e9aa5b0093c2678b3c72491c0a5731eabe4f9ba0cdcc10a74058428fbd0faa"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/test_parser_hypothesis.py"}, "region": {"startLine": 87}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "Bare except continues silently"}, "properties": {"repobilityId": 125798, "scanner": "repobility-ast-engine", "fingerprint": "a80c960447ebd73abddb954fb5cbc8892e082389a06d33ae0083210eb2e46edd", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|a80c960447ebd73abddb954fb5cbc8892e082389a06d33ae0083210eb2e46edd"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/test_lsp_server_real.py"}, "region": {"startLine": 24}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "Bare except continues silently"}, "properties": {"repobilityId": 125750, "scanner": "repobility-ast-engine", "fingerprint": "aaf873fc23436d145cb3d494b372d55089f540b67fc0a501f9968d20f09a0a64", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|aaf873fc23436d145cb3d494b372d55089f540b67fc0a501f9968d20f09a0a64"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "benchmarks/run_all_benchmarks.py"}, "region": {"startLine": 325}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "Bare except continues silently"}, "properties": {"repobilityId": 125749, "scanner": "repobility-ast-engine", "fingerprint": "ea42dcc81adcc1883eed2d370826e012aaf0ef2c43ca0a274db7306dea61fe52", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|ea42dcc81adcc1883eed2d370826e012aaf0ef2c43ca0a274db7306dea61fe52"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "benchmarks/run_all_benchmarks.py"}, "region": {"startLine": 207}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "Bare except continues silently"}, "properties": {"repobilityId": 125748, "scanner": "repobility-ast-engine", "fingerprint": "bf01fa3e240051133516eab897254e73259024fcb39f98de62325a9adc5d0053", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|bf01fa3e240051133516eab897254e73259024fcb39f98de62325a9adc5d0053"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "benchmarks/run_all_benchmarks.py"}, "region": {"startLine": 170}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "Bare except continues silently"}, "properties": {"repobilityId": 125747, "scanner": "repobility-ast-engine", "fingerprint": "4c450da405c8d9ddbbeb66504c63cebd8f5efe9f4308ca234bb5625815a59b5b", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|4c450da405c8d9ddbbeb66504c63cebd8f5efe9f4308ca234bb5625815a59b5b"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "benchmarks/run_all_benchmarks.py"}, "region": {"startLine": 128}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "Bare except continues silently"}, "properties": {"repobilityId": 125746, "scanner": "repobility-ast-engine", "fingerprint": "8a23a2d26276414bf8fb675e282db18c59353ed5b019a1ec2c65dbfbec4e7ab1", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|8a23a2d26276414bf8fb675e282db18c59353ed5b019a1ec2c65dbfbec4e7ab1"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "benchmarks/run_all_benchmarks.py"}, "region": {"startLine": 96}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "Bare except continues silently"}, "properties": {"repobilityId": 125745, "scanner": "repobility-ast-engine", "fingerprint": "580b892dfef5ad4f3dc61ae8f3033f455fdf2c381b6c829ea70940a96f9bb3c1", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|580b892dfef5ad4f3dc61ae8f3033f455fdf2c381b6c829ea70940a96f9bb3c1"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "benchmarks/memory_profiler.py"}, "region": {"startLine": 214}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "Bare except continues silently"}, "properties": {"repobilityId": 125744, "scanner": "repobility-ast-engine", "fingerprint": "cbc2b0564cb5d709d82c1808ef7f10338bf9e9e19428ec7a6c16d928c9cf8118", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|cbc2b0564cb5d709d82c1808ef7f10338bf9e9e19428ec7a6c16d928c9cf8118"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "benchmarks/memory_profiler.py"}, "region": {"startLine": 152}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "Bare except continues silently"}, "properties": {"repobilityId": 125734, "scanner": "repobility-ast-engine", "fingerprint": "8b9880b1f5860db1d877dd01df81e4695581502eb2a0f8c3ffeb58e26bcdcdc6", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|8b9880b1f5860db1d877dd01df81e4695581502eb2a0f8c3ffeb58e26bcdcdc6"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "benchmarks/benchmark_large_files.py"}, "region": {"startLine": 179}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "Bare except continues silently"}, "properties": {"repobilityId": 125733, "scanner": "repobility-ast-engine", "fingerprint": "bcedd9622f0f3405821165437ca48254d9fbd1222b99ae154eb2f52ce0fa7af7", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|bcedd9622f0f3405821165437ca48254d9fbd1222b99ae154eb2f52ce0fa7af7"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "benchmarks/benchmark_large_files.py"}, "region": {"startLine": 94}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "Bare except continues silently"}, "properties": {"repobilityId": 125732, "scanner": "repobility-ast-engine", "fingerprint": "ee99cedef3c2497fb578dadf32ec1d97cceae19a28e40a92c3153daafda07392", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|ee99cedef3c2497fb578dadf32ec1d97cceae19a28e40a92c3153daafda07392"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "benchmarks/benchmark_large_files.py"}, "region": {"startLine": 221}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "Bare except continues silently"}, "properties": {"repobilityId": 125731, "scanner": "repobility-ast-engine", "fingerprint": "a215401fe54acf243b43bc3ec8024c50088ecf7d3d73e8863226afc692a60aea", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|a215401fe54acf243b43bc3ec8024c50088ecf7d3d73e8863226afc692a60aea"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "benchmarks/benchmark_large_files.py"}, "region": {"startLine": 135}}}]}, {"ruleId": "COMP001", "level": "note", "message": {"text": "[COMP001] High cognitive complexity: Function `example_scanning` has cognitive complexity 13 (SonarSource scale). Cognitive complexity measures how hard the function is for a human to understand \u2014 nested branches, boolean chains, and recursion all weigh in. Breakdown: else=1, for=3, if=3, nested_bonus=6."}, "properties": {"repobilityId": 125834, "scanner": "repobility-threat-engine", "fingerprint": "010c54ba383897d510c09d4912c25d97338783da74274717cd37e6ba10b78970", "category": "quality", "severity": "low", "confidence": 0.95, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "AST-derived cognitive complexity score = 13 (severity threshold for low: 8+).", "evidence": {"scanner": "repobility-threat-engine", "function": "example_scanning", "breakdown": {"if": 3, "for": 3, "else": 1, "nested_bonus": 6}, "complexity": 13, "correlation_key": "fp|010c54ba383897d510c09d4912c25d97338783da74274717cd37e6ba10b78970"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "examples/libyara_integration.py"}, "region": {"startLine": 63}}}]}, {"ruleId": "COMP001", "level": "note", "message": {"text": "[COMP001] High cognitive complexity: Function `generate_summary_report` has cognitive complexity 9 (SonarSource scale). Cognitive complexity measures how hard the function is for a human to understand \u2014 nested branches, boolean chains, and recursion all weigh in. Breakdown: for=3, if=3, nested_bonus=3."}, "properties": {"repobilityId": 125833, "scanner": "repobility-threat-engine", "fingerprint": "37daa8a823d492a01a9f845936553a74fb14fc68c8648ff7aa59107b6408f6ac", "category": "quality", "severity": "low", "confidence": 0.95, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "AST-derived cognitive complexity score = 9 (severity threshold for low: 8+).", "evidence": {"scanner": "repobility-threat-engine", "function": "generate_summary_report", "breakdown": {"if": 3, "for": 3, "nested_bonus": 3}, "complexity": 9, "correlation_key": "fp|37daa8a823d492a01a9f845936553a74fb14fc68c8648ff7aa59107b6408f6ac"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "benchmarks/run_all_benchmarks.py"}, "region": {"startLine": 215}}}]}, {"ruleId": "COMP001", "level": "note", "message": {"text": "[COMP001] High cognitive complexity: Function `main` has cognitive complexity 13 (SonarSource scale). Cognitive complexity measures how hard the function is for a human to understand \u2014 nested branches, boolean chains, and recursion all weigh in. Breakdown: else=1, except=1, for=2, if=5, nested_bonus=4."}, "properties": {"repobilityId": 125832, "scanner": "repobility-threat-engine", "fingerprint": "7c737792bbe08331b2c814107595ee89dc89472e7c5f202aebbf5203c7a1a01f", "category": "quality", "severity": "low", "confidence": 0.95, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "AST-derived cognitive complexity score = 13 (severity threshold for low: 8+).", "evidence": {"scanner": "repobility-threat-engine", "function": "main", "breakdown": {"if": 5, "for": 2, "else": 1, "except": 1, "nested_bonus": 4}, "complexity": 13, "correlation_key": "fp|7c737792bbe08331b2c814107595ee89dc89472e7c5f202aebbf5203c7a1a01f"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "benchmarks/run_all_benchmarks.py"}, "region": {"startLine": 284}}}]}, {"ruleId": "DEPCUR-NPM", "level": "note", "message": {"text": "npm package `@types/vscode` is minor version(s) behind (1.110.0 -> 1.120.0)"}, "properties": {"repobilityId": 125830, "scanner": "repobility-dependency-currency", "fingerprint": "12bab28bcc1f73901900c4025439f4716852f200c206549d7c16aeb34e72e5f9", "category": "dependency", "severity": "low", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"gap": "minor version(s) behind", "signal": "currency", "cwe_ids": [], "package": "@types/vscode", "scanner": "repobility-dependency-currency", "ecosystem": "npm", "languages": ["javascript"], "latest_version": "1.120.0", "correlation_key": "fp|12bab28bcc1f73901900c4025439f4716852f200c206549d7c16aeb34e72e5f9", "current_version": "1.110.0"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "vscode-yaraast/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 125711, "scanner": "repobility-ai-code-hygiene", "fingerprint": "b87139aad0783e309e8351755a0d3b62bf68731b2170c1aa8c6ce976c4c0dcbf", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "yaraast/parser/_expressions_postfix.py", "duplicate_line": 29, "correlation_key": "fp|b87139aad0783e309e8351755a0d3b62bf68731b2170c1aa8c6ce976c4c0dcbf"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "yaraast/types/_registry_builtins.py"}, "region": {"startLine": 4}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 125710, "scanner": "repobility-ai-code-hygiene", "fingerprint": "6f0053d6e2db77358fdd868fd62423d05c3e4a49a8dbb55d59e4710e5395ef00", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "yaraast/builder/expression_builder.py", "duplicate_line": 6, "correlation_key": "fp|6f0053d6e2db77358fdd868fd62423d05c3e4a49a8dbb55d59e4710e5395ef00"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "yaraast/types/_expr_inference.py"}, "region": {"startLine": 13}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 125709, "scanner": "repobility-ai-code-hygiene", "fingerprint": "1bc71c0a1c7a13eb89500e45ff5b3994eb5524a868f2f4ce027c35ba1b6fb395", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "yaraast/cli/visitors/dumper.py", "duplicate_line": 7, "correlation_key": "fp|1bc71c0a1c7a13eb89500e45ff5b3994eb5524a868f2f4ce027c35ba1b6fb395"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "yaraast/types/_expr_inference.py"}, "region": {"startLine": 8}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 125708, "scanner": "repobility-ai-code-hygiene", "fingerprint": "e1104a52e0be46d7108a64185981db6cd3b5150c1b367b757e59812a8d31802b", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "yaraast/performance/memory_optimizer.py", "duplicate_line": 73, "correlation_key": "fp|e1104a52e0be46d7108a64185981db6cd3b5150c1b367b757e59812a8d31802b"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "yaraast/types/_expr_inference.py"}, "region": {"startLine": 6}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 125707, "scanner": "repobility-ai-code-hygiene", "fingerprint": "21e4d6c6af61afcf8870ee740a7ed915c18c34a5d494231199764a311c0a47db", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "yaraast/performance/optimizer.py", "duplicate_line": 25, "correlation_key": "fp|21e4d6c6af61afcf8870ee740a7ed915c18c34a5d494231199764a311c0a47db"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "yaraast/shared/ast_analysis.py"}, "region": {"startLine": 23}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 125706, "scanner": "repobility-ai-code-hygiene", "fingerprint": "1196dffadc019b8a5c058b014535fbbccc28c215a7ddd983002712e793991976", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "yaraast/performance/optimizer.py", "duplicate_line": 24, "correlation_key": "fp|1196dffadc019b8a5c058b014535fbbccc28c215a7ddd983002712e793991976"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "yaraast/serialization/serializer_helpers.py"}, "region": {"startLine": 34}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 125705, "scanner": "repobility-ai-code-hygiene", "fingerprint": "4194957b8f4c8660aae2cbb8710f0e13f84a3eb21932f77003622b9c44cf7f6e", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "yaraast/serialization/_serialization_primitives.py", "duplicate_line": 27, "correlation_key": "fp|4194957b8f4c8660aae2cbb8710f0e13f84a3eb21932f77003622b9c44cf7f6e"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "yaraast/serialization/json_serializer.py"}, "region": {"startLine": 91}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 125704, "scanner": "repobility-ai-code-hygiene", "fingerprint": "bdf48b99604ab8d3610cada958f39901300addf82a7f31ee3ce15becd1dce588", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "yaraast/performance/batch_processor_ops.py", "duplicate_line": 154, "correlation_key": "fp|bdf48b99604ab8d3610cada958f39901300addf82a7f31ee3ce15becd1dce588"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "yaraast/performance/parallel_job_helpers.py"}, "region": {"startLine": 68}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 125703, "scanner": "repobility-ai-code-hygiene", "fingerprint": "0a1a916f1baa534e82a033215631d24bbf99cfc5fcf56b5654dc5325a4c646d7", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "yaraast/performance/memory_optimizer.py", "duplicate_line": 73, "correlation_key": "fp|0a1a916f1baa534e82a033215631d24bbf99cfc5fcf56b5654dc5325a4c646d7"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "yaraast/performance/memory_transformer_visitors.py"}, "region": {"startLine": 9}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 125702, "scanner": "repobility-ai-code-hygiene", "fingerprint": "2195c1e11827e2e23487892912e4d668dda072389ba5a5de8356c9fe88f03783", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "yaraast/parser/comment_aware_parser.py", "duplicate_line": 61, "correlation_key": "fp|2195c1e11827e2e23487892912e4d668dda072389ba5a5de8356c9fe88f03783"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "yaraast/parser/parser.py"}, "region": {"startLine": 94}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 125701, "scanner": "repobility-ai-code-hygiene", "fingerprint": "a0bb67acd74a07689dc90d345b898a814ab8b3866eee65544ea75f8f1dccd497", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "yaraast/parser/_strings.py", "duplicate_line": 47, "correlation_key": "fp|a0bb67acd74a07689dc90d345b898a814ab8b3866eee65544ea75f8f1dccd497"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "yaraast/parser/comment_aware_parser.py"}, "region": {"startLine": 331}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 125700, "scanner": "repobility-ai-code-hygiene", "fingerprint": "ac8f4c39a9ae276e55df9ec72abc1ba206900af27f79ae862b9546320fab9537", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "yaraast/parser/_rules.py", "duplicate_line": 294, "correlation_key": "fp|ac8f4c39a9ae276e55df9ec72abc1ba206900af27f79ae862b9546320fab9537"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "yaraast/parser/comment_aware_parser.py"}, "region": {"startLine": 210}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 125699, "scanner": "repobility-ai-code-hygiene", "fingerprint": "a7ad3ecdf41368d3412dbfc1530e6e44ee7e52dc39e0a2514c950b5a6be0fbde", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "yaraast/parser/_expressions_for.py", "duplicate_line": 284, "correlation_key": "fp|a7ad3ecdf41368d3412dbfc1530e6e44ee7e52dc39e0a2514c950b5a6be0fbde"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "yaraast/parser/_expressions_postfix.py"}, "region": {"startLine": 162}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 125698, "scanner": "repobility-ai-code-hygiene", "fingerprint": "410021af881db0ebc0c71b3dad1dcb72b37817a8a3b6cd840391b99bc9e41f78", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "yaraast/optimization/dead_code_eliminator.py", "duplicate_line": 581, "correlation_key": "fp|410021af881db0ebc0c71b3dad1dcb72b37817a8a3b6cd840391b99bc9e41f78"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "yaraast/optimization/expression_optimizer.py"}, "region": {"startLine": 373}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 125697, "scanner": "repobility-ai-code-hygiene", "fingerprint": "a37aa674542cf957fbe65593d922c9fd847f8139d4899c682e72576fa152a45e", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "yaraast/metrics/string_diagrams_helpers.py", "duplicate_line": 17, "correlation_key": "fp|a37aa674542cf957fbe65593d922c9fd847f8139d4899c682e72576fa152a45e"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "yaraast/metrics/string_diagrams_render.py"}, "region": {"startLine": 70}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 125696, "scanner": "repobility-ai-code-hygiene", "fingerprint": "4327124de4813135abd21bef714c0fae6016fd8be470d975d38d1aad20a62881", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "yaraast/analysis/dependency_analyzer.py", "duplicate_line": 304, "correlation_key": "fp|4327124de4813135abd21bef714c0fae6016fd8be470d975d38d1aad20a62881"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "yaraast/metrics/dependency_graph_finder.py"}, "region": {"startLine": 133}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 125695, "scanner": "repobility-ai-code-hygiene", "fingerprint": "f646673934091f7725742ca5970ebf8eae3efe316015deec62351afde0a97a43", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "yaraast/metrics/dependency_graph.py", "duplicate_line": 225, "correlation_key": "fp|f646673934091f7725742ca5970ebf8eae3efe316015deec62351afde0a97a43"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "yaraast/metrics/dependency_graph_finder.py"}, "region": {"startLine": 23}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 125694, "scanner": "repobility-ai-code-hygiene", "fingerprint": "d688d877ca967b79846980a5d158742d9bc905502c0cc2f9229d33f8775ba0d6", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "yaraast/analysis/dependency_analyzer.py", "duplicate_line": 234, "correlation_key": "fp|d688d877ca967b79846980a5d158742d9bc905502c0cc2f9229d33f8775ba0d6"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "yaraast/metrics/dependency_graph.py"}, "region": {"startLine": 278}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 125693, "scanner": "repobility-ai-code-hygiene", "fingerprint": "f138889422a0cf86e15127dfc7f9c71a70dbc3ae42a0c759480fcac7edc0d116", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "yaraast/analysis/best_practices.py", "duplicate_line": 293, "correlation_key": "fp|f138889422a0cf86e15127dfc7f9c71a70dbc3ae42a0c759480fcac7edc0d116"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "yaraast/metrics/complexity.py"}, "region": {"startLine": 173}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 125692, "scanner": "repobility-ai-code-hygiene", "fingerprint": "3fc3cd3d6655ae6cbe06d0d251fbc93028a94cd3197fd20e78c71b8771d9da87", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "yaraast/lsp/lsp_types.py", "duplicate_line": 8, "correlation_key": "fp|3fc3cd3d6655ae6cbe06d0d251fbc93028a94cd3197fd20e78c71b8771d9da87"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "yaraast/lsp/server_features.py"}, "region": {"startLine": 4}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 125691, "scanner": "repobility-ai-code-hygiene", "fingerprint": "d5c7d117baa544bae5524069631d1832c8cc9f57934c303761e5274ccee5ebc8", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "yaraast/lsp/lsp_types.py", "duplicate_line": 16, "correlation_key": "fp|d5c7d117baa544bae5524069631d1832c8cc9f57934c303761e5274ccee5ebc8"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "yaraast/lsp/server_feature_language_handlers.py"}, "region": {"startLine": 10}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 125690, "scanner": "repobility-ai-code-hygiene", "fingerprint": "f141526a7ffb41a1202784b4e54ecb9a3520eacfa4b6ddc21ff0f81f28851d11", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "yaraast/lsp/definition.py", "duplicate_line": 24, "correlation_key": "fp|f141526a7ffb41a1202784b4e54ecb9a3520eacfa4b6ddc21ff0f81f28851d11"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "yaraast/lsp/references.py"}, "region": {"startLine": 38}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 125689, "scanner": "repobility-ai-code-hygiene", "fingerprint": "7bd2191f529f4ed523dc07eb7984964de44b84c68de07d5dbfc86fb12347cff3", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "yaraast/lsp/authoring_actions_rewrites.py", "duplicate_line": 68, "correlation_key": "fp|7bd2191f529f4ed523dc07eb7984964de44b84c68de07d5dbfc86fb12347cff3"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "yaraast/lsp/authoring_actions_sorting.py"}, "region": {"startLine": 21}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 125688, "scanner": "repobility-ai-code-hygiene", "fingerprint": "e5c225f5a53ced06087e5f63bd6886b9731e9fb5e2dc7757b4d6c4b0de95edb6", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "yaraast/builder/expression_builder.py", "duplicate_line": 6, "correlation_key": "fp|e5c225f5a53ced06087e5f63bd6886b9731e9fb5e2dc7757b4d6c4b0de95edb6"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "yaraast/cli/visitors/dumper.py"}, "region": {"startLine": 12}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 125687, "scanner": "repobility-ai-code-hygiene", "fingerprint": "d85c4301d61c0b2ed7e854a79b8a1b3e96354f97a514dabc007c9626b6b6e4dd", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "yaraast/cli/roundtrip_reporting.py", "duplicate_line": 10, "correlation_key": "fp|d85c4301d61c0b2ed7e854a79b8a1b3e96354f97a514dabc007c9626b6b6e4dd"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "yaraast/cli/serialize_reporting.py"}, "region": {"startLine": 14}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 125686, "scanner": "repobility-ai-code-hygiene", "fingerprint": "dfb6609a7cf6a054aae70dc88bbb63ece22001b8d0bd33e0f9587d79794e099e", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "yaraast/cli/ast_tools.py", "duplicate_line": 30, "correlation_key": "fp|dfb6609a7cf6a054aae70dc88bbb63ece22001b8d0bd33e0f9587d79794e099e"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "yaraast/cli/ast_visualization.py"}, "region": {"startLine": 100}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 125685, "scanner": "repobility-ai-code-hygiene", "fingerprint": "4f4607e71db839174cd64242ad8a2dbf6b9fd876c1e0d7b6bd0d1d8935204b5c", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "yaraast/builder/condition_builder.py", "duplicate_line": 22, "correlation_key": "fp|4f4607e71db839174cd64242ad8a2dbf6b9fd876c1e0d7b6bd0d1d8935204b5c"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "yaraast/builder/expression_builder.py"}, "region": {"startLine": 21}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 125684, "scanner": "repobility-ai-code-hygiene", "fingerprint": "8a4a296c4fa9365b3ec6a6b744c20dbafb28fab4294e29cd1c53c4eccce65314", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "yaraast/analysis/best_practices.py", "duplicate_line": 398, "correlation_key": "fp|8a4a296c4fa9365b3ec6a6b744c20dbafb28fab4294e29cd1c53c4eccce65314"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "yaraast/analysis/string_usage.py"}, "region": {"startLine": 211}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 125683, "scanner": "repobility-ai-code-hygiene", "fingerprint": "098d8ab3dca172bf581139ed250e9190f52d251b20a12ad8eafbad41e56f507d", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "yaraast/analysis/best_practices.py", "duplicate_line": 429, "correlation_key": "fp|098d8ab3dca172bf581139ed250e9190f52d251b20a12ad8eafbad41e56f507d"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "yaraast/analysis/optimization.py"}, "region": {"startLine": 202}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 125682, "scanner": "repobility-ai-code-hygiene", "fingerprint": "622fbff544834cf5c73a9accd8917669ce35f3559b87b8c814e0cb4ecd7a089c", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "vscode-yaraast/out/extension.js", "duplicate_line": 26, "correlation_key": "fp|622fbff544834cf5c73a9accd8917669ce35f3559b87b8c814e0cb4ecd7a089c"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "vscode-yaraast/src/extension.ts"}, "region": {"startLine": 51}}}]}, {"ruleId": "MINED076", "level": "none", "message": {"text": "[MINED076] Catch And Reraise Noop: except X: raise X \u2014 adds no value, hides traceback if AI accidentally changes message."}, "properties": {"repobilityId": 125865, "scanner": "repobility-threat-engine", "fingerprint": "65807187e78652bc257dd27d4ae274e686b6ecd2232809592730e40b6c44bdd2", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "catch-and-reraise-noop", "owasp": null, "cwe_ids": [], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348079+00:00", "triaged_in_corpus": 10, "observations_count": 8333, "ai_coder_pattern_id": 45}, "scanner": "repobility-threat-engine", "correlation_key": "fp|65807187e78652bc257dd27d4ae274e686b6ecd2232809592730e40b6c44bdd2"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "yaraast/resolution/include_resolver.py"}, "region": {"startLine": 163}}}]}, {"ruleId": "MINED073", "level": "none", "message": {"text": "[MINED073] Redos Greedy Quantifier: Pattern with nested quantifiers like (a+)+ applied to network/user data \u2014 denial of service."}, "properties": {"repobilityId": 125859, "scanner": "repobility-threat-engine", "fingerprint": "3652a67d4c1e2d91cf16769791d953061c5ae23f2db11533c11cb809b278a62a", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "redos-greedy-quantifier", "owasp": "A06:2021", "cwe_ids": ["CWE-1333", "CWE-400"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348072+00:00", "triaged_in_corpus": 12, "observations_count": 12702, "ai_coder_pattern_id": 35}, "scanner": "repobility-threat-engine", "correlation_key": "fp|3652a67d4c1e2d91cf16769791d953061c5ae23f2db11533c11cb809b278a62a"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "yaraast/cli/yarax_services.py"}, "region": {"startLine": 123}}}]}, {"ruleId": "SEC128", "level": "none", "message": {"text": "[SEC128] Async function without await \u2014 fire-and-forget Promise (AI mistake) (and 2 more): Same pattern found in 2 additional files. Review if needed."}, "properties": {"repobilityId": 125853, "scanner": "repobility-threat-engine", "fingerprint": "2cd220107759c389357ea1e0b2a749255d62455820f15b6cc9e05e77d2c17c58", "category": "quality", "severity": "info", "confidence": 0.2, "triageState": "false_positive", "verdict": "likely_fp", "isResolved": true, "reason": "Deduplicated summary only: 2 additional occurrences found. The top occurrences remain visible as actionable findings.", "evidence": {"reason": "Deduplicated summary only: 2 additional occurrences found. The top occurrences remain visible as actionable findings.", "rule_id": "SEC128", "scanner": "repobility-threat-engine", "confidence": 0.2, "correlation_key": "fp|2cd220107759c389357ea1e0b2a749255d62455820f15b6cc9e05e77d2c17c58"}}}, {"ruleId": "MINED050", "level": "none", "message": {"text": "[MINED050] Stub Only Function (and 8 more): Same pattern found in 8 additional files. Review if needed."}, "properties": {"repobilityId": 125849, "scanner": "repobility-threat-engine", "fingerprint": "26a20ec3af6c1bf844f4aaed7ed4016813a12e74cf2ca0c954b4690d78374bea", "category": "quality", "severity": "info", "confidence": 0.2, "triageState": "false_positive", "verdict": "likely_fp", "isResolved": true, "reason": "Deduplicated summary only: 8 additional occurrences found. The top occurrences remain visible as actionable findings.", "evidence": {"mined": true, "mining": {"slug": "stub-only-function", "owasp": null, "cwe_ids": ["CWE-1188"], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348017+00:00", "triaged_in_corpus": 12, "observations_count": 633513, "ai_coder_pattern_id": 2}, "scanner": "repobility-threat-engine", "aggregated": true, "correlation_key": "fp|26a20ec3af6c1bf844f4aaed7ed4016813a12e74cf2ca0c954b4690d78374bea", "aggregated_count": 8}}}, {"ruleId": "MINED050", "level": "none", "message": {"text": "[MINED050] Stub Only Function: Function declared but body is just pass, return None, raise NotImplementedError, or TODO comment."}, "properties": {"repobilityId": 125848, "scanner": "repobility-threat-engine", "fingerprint": "15e5d1fb2c22d474a2bb1f06f60f1b6207672ffb822577c0b627fb76a0e0d4f2", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "stub-only-function", "owasp": null, "cwe_ids": ["CWE-1188"], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348017+00:00", "triaged_in_corpus": 12, "observations_count": 633513, "ai_coder_pattern_id": 2}, "scanner": "repobility-threat-engine", "correlation_key": "fp|15e5d1fb2c22d474a2bb1f06f60f1b6207672ffb822577c0b627fb76a0e0d4f2"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "yaraast/cli/metrics_reporting.py"}, "region": {"startLine": 160}}}]}, {"ruleId": "MINED050", "level": "none", "message": {"text": "[MINED050] Stub Only Function: Function declared but body is just pass, return None, raise NotImplementedError, or TODO comment."}, "properties": {"repobilityId": 125847, "scanner": "repobility-threat-engine", "fingerprint": "2f57cf4b6dc95cbc0a374589ab26925fb841c92dafcb678c7aa048a86742a39f", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "stub-only-function", "owasp": null, "cwe_ids": ["CWE-1188"], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348017+00:00", "triaged_in_corpus": 12, "observations_count": 633513, "ai_coder_pattern_id": 2}, "scanner": "repobility-threat-engine", "correlation_key": "fp|2f57cf4b6dc95cbc0a374589ab26925fb841c92dafcb678c7aa048a86742a39f"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "yaraast/cli/commands/yarax.py"}, "region": {"startLine": 30}}}]}, {"ruleId": "MINED050", "level": "none", "message": {"text": "[MINED050] Stub Only Function: Function declared but body is just pass, return None, raise NotImplementedError, or TODO comment."}, "properties": {"repobilityId": 125846, "scanner": "repobility-threat-engine", "fingerprint": "88016d41a19e8209d2b8157b7b72784ea353a1f10461b8f60c1e2accbb7e0e66", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "stub-only-function", "owasp": null, "cwe_ids": ["CWE-1188"], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348017+00:00", "triaged_in_corpus": 12, "observations_count": 633513, "ai_coder_pattern_id": 2}, "scanner": "repobility-threat-engine", "correlation_key": "fp|88016d41a19e8209d2b8157b7b72784ea353a1f10461b8f60c1e2accbb7e0e66"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "yaraast/cli/commands/yaral.py"}, "region": {"startLine": 50}}}]}, {"ruleId": "MINED062", "level": "none", "message": {"text": "[MINED062] Python Dataclass No Fields (and 42 more): Same pattern found in 42 additional files. Review if needed."}, "properties": {"repobilityId": 125844, "scanner": "repobility-threat-engine", "fingerprint": "d5b34fdca4709619ee4f1d9b86207af4f5b16c59aac36602bb3109dbb339cac5", "category": "quality", "severity": "info", "confidence": 0.2, "triageState": "false_positive", "verdict": "likely_fp", "isResolved": true, "reason": "Deduplicated summary only: 42 additional occurrences found. The top occurrences remain visible as actionable findings.", "evidence": {"mined": true, "mining": {"slug": "python-dataclass-no-fields", "owasp": null, "cwe_ids": [], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348046+00:00", "triaged_in_corpus": 10, "observations_count": 92448, "ai_coder_pattern_id": 144}, "scanner": "repobility-threat-engine", "aggregated": true, "correlation_key": "fp|d5b34fdca4709619ee4f1d9b86207af4f5b16c59aac36602bb3109dbb339cac5", "aggregated_count": 42}}}, {"ruleId": "MINED062", "level": "none", "message": {"text": "[MINED062] Python Dataclass No Fields: @dataclass over an empty class \u2014 unfinished model."}, "properties": {"repobilityId": 125843, "scanner": "repobility-threat-engine", "fingerprint": "053510acf9ba6760ac4d82a8a6276cd716c6068592cef61e121663e98a3f4706", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "python-dataclass-no-fields", "owasp": null, "cwe_ids": [], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348046+00:00", "triaged_in_corpus": 10, "observations_count": 92448, "ai_coder_pattern_id": 144}, "scanner": "repobility-threat-engine", "correlation_key": "fp|053510acf9ba6760ac4d82a8a6276cd716c6068592cef61e121663e98a3f4706"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "yaraast/ast/conditions.py"}, "region": {"startLine": 23}}}]}, {"ruleId": "MINED062", "level": "none", "message": {"text": "[MINED062] Python Dataclass No Fields: @dataclass over an empty class \u2014 unfinished model."}, "properties": {"repobilityId": 125842, "scanner": "repobility-threat-engine", "fingerprint": "e727e91f10a794416abfaf051483292f6147f6bca6d07332cd7842dab8f71997", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "python-dataclass-no-fields", "owasp": null, "cwe_ids": [], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348046+00:00", "triaged_in_corpus": 10, "observations_count": 92448, "ai_coder_pattern_id": 144}, "scanner": "repobility-threat-engine", "correlation_key": "fp|e727e91f10a794416abfaf051483292f6147f6bca6d07332cd7842dab8f71997"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "yaraast/ast/comments.py"}, "region": {"startLine": 9}}}]}, {"ruleId": "MINED062", "level": "none", "message": {"text": "[MINED062] Python Dataclass No Fields: @dataclass over an empty class \u2014 unfinished model."}, "properties": {"repobilityId": 125841, "scanner": "repobility-threat-engine", "fingerprint": "e59c3b18d03e795d0c170e6cd05e8970f517cb755d2be3c9ade227ffbb38338f", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "python-dataclass-no-fields", "owasp": null, "cwe_ids": [], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348046+00:00", "triaged_in_corpus": 10, "observations_count": 92448, "ai_coder_pattern_id": 144}, "scanner": "repobility-threat-engine", "correlation_key": "fp|e59c3b18d03e795d0c170e6cd05e8970f517cb755d2be3c9ade227ffbb38338f"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "yaraast/ast/base.py"}, "region": {"startLine": 21}}}]}, {"ruleId": "MINED079", "level": "none", "message": {"text": "[MINED079] Off By One Slice: range(len(x)+1), arr[i+1:i+n+1], or while i<=len(arr) \u2014 off-by-one risk."}, "properties": {"repobilityId": 125840, "scanner": "repobility-threat-engine", "fingerprint": "6497ff62c2105e9023c89f6d8adec62298f4009f6aa38b2324752426c7a838f2", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "off-by-one-slice", "owasp": null, "cwe_ids": ["CWE-193"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348121+00:00", "triaged_in_corpus": 12, "observations_count": 6443, "ai_coder_pattern_id": 19}, "scanner": "repobility-threat-engine", "correlation_key": "fp|6497ff62c2105e9023c89f6d8adec62298f4009f6aa38b2324752426c7a838f2"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "yaraast/analysis/best_practices_helpers.py"}, "region": {"startLine": 42}}}]}, {"ruleId": "MINED043", "level": "none", "message": {"text": "[MINED043] Http Not Https: Hardcoded http:// (not localhost) for endpoints that handle credentials or data."}, "properties": {"repobilityId": 125839, "scanner": "repobility-threat-engine", "fingerprint": "f6bdb0b0b41410d024cce09f3c995b02d8d777a59102da1dcaa9ca0e2018861f", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "http-not-https", "owasp": "A02:2021", "cwe_ids": ["CWE-319"], "precision": 0.917, "promoted_at": "2026-05-18T14:01:32.347999+00:00", "triaged_in_corpus": 12, "observations_count": 4113831, "ai_coder_pattern_id": 15}, "scanner": "repobility-threat-engine", "correlation_key": "fp|f6bdb0b0b41410d024cce09f3c995b02d8d777a59102da1dcaa9ca0e2018861f"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "examples/vt_livehunt_demo.py"}, "region": {"startLine": 31}}}]}, {"ruleId": "COMP001", "level": "none", "message": {"text": "[COMP001] High cognitive complexity (and 229 more): Same pattern found in 229 additional files. Review if needed."}, "properties": {"repobilityId": 125835, "scanner": "repobility-threat-engine", "fingerprint": "60c0a358a626dd87156158addd6c912748537d2a8e7c65f1e45d3d9993a89781", "category": "quality", "severity": "info", "confidence": 0.2, "triageState": "false_positive", "verdict": "likely_fp", "isResolved": true, "reason": "Deduplicated summary only: 229 additional occurrences found. The top occurrences remain visible as actionable findings.", "evidence": {"scanner": "repobility-threat-engine", "function": "main", "breakdown": {"if": 5, "for": 2, "else": 1, "except": 1, "nested_bonus": 4}, "aggregated": true, "complexity": 13, "correlation_key": "fp|60c0a358a626dd87156158addd6c912748537d2a8e7c65f1e45d3d9993a89781", "aggregated_count": 229}}}, {"ruleId": "DEPCUR-NPM", "level": "none", "message": {"text": "npm package `@vscode/vsce` is patch version(s) behind (3.9.1 -> 3.9.2)"}, "properties": {"repobilityId": 125831, "scanner": "repobility-dependency-currency", "fingerprint": "72955aada7effd1104caf267714204febc237035303da2e25c2879250d2577a0", "category": "dependency", "severity": "info", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"gap": "patch version(s) behind", "signal": "currency", "cwe_ids": [], "package": "@vscode/vsce", "scanner": "repobility-dependency-currency", "ecosystem": "npm", "languages": ["javascript"], "latest_version": "3.9.2", "correlation_key": "fp|72955aada7effd1104caf267714204febc237035303da2e25c2879250d2577a0", "current_version": "3.9.1"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "vscode-yaraast/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "SEC013", "level": "error", "message": {"text": "[SEC013] Path Traversal \u2014 User Input in File Path: User-controlled input used in file path without sanitization. Allows reading arbitrary files."}, "properties": {"repobilityId": 125862, "scanner": "repobility-threat-engine", "fingerprint": "ad0e55c04da947527b2610442fb027c0a3d40fc2529a3f6a40bc2b09980cc1a4", "category": "path_traversal", "severity": "high", "confidence": 0.8, "triageState": "open", "verdict": "likely", "isResolved": false, "reason": "User-controlled input detected in file path construction", "evidence": {"match": "open(ls: Any, params: DidOpenTextDocumentParams", "reason": "User-controlled input detected in file path construction", "rule_id": "SEC013", "scanner": "repobility-threat-engine", "confidence": 0.8, "correlation_key": "code|path_traversal|token|42|sec013"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "yaraast/lsp/server_feature_document_handlers.py"}, "region": {"startLine": 42}}}]}, {"ruleId": "SEC004", "level": "error", "message": {"text": "[SEC004] SQL Injection Risk: String interpolation in SQL execution. Allows SQL injection."}, "properties": {"repobilityId": 125861, "scanner": "repobility-threat-engine", "fingerprint": "946f3dd4d4af9fcf43accb08e53cbeeaccebe7108b183a1962bac87cf8927b11", "category": "injection", "severity": "high", "confidence": 0.5, "triageState": "open", "verdict": "needs_review", "isResolved": false, "reason": "SQL string interpolation found, but user-controlled taint was not proven from local context.", "evidence": {"match": "preview=f\"Insert", "reason": "SQL string interpolation found, but user-controlled taint was not proven from local context.", "rule_id": "SEC004", "scanner": "repobility-threat-engine", "confidence": 0.5, "correlation_key": "code|injection|token|104|sec004"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "yaraast/lsp/authoring_actions_basic.py"}, "region": {"startLine": 104}}}]}, {"ruleId": "SEC103", "level": "error", "message": {"text": "[SEC103] LDAP injection \u2014 non-constant search filter: User input concatenated into an LDAP search filter. Attackers inject `*)(uid=*` style payloads to bypass auth or enumerate accounts."}, "properties": {"repobilityId": 125858, "scanner": "repobility-threat-engine", "fingerprint": "ba4a2fd1cc61ec433b479fd56430150a07bc7b04b365158156855f8c6d0eef75", "category": "injection", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": ".search(\n        r\"undefined identifier[: ]+['\\\"]?([^'\\\"\\n]+)", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC103", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "code|injection|token|62|sec103"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "yaraast/lsp/diagnostics_helpers.py"}, "region": {"startLine": 62}}}]}, {"ruleId": "SEC103", "level": "error", "message": {"text": "[SEC103] LDAP injection \u2014 non-constant search filter: User input concatenated into an LDAP search filter. Attackers inject `*)(uid=*` style payloads to bypass auth or enumerate accounts."}, "properties": {"repobilityId": 125857, "scanner": "repobility-threat-engine", "fingerprint": "3244c111bd5c5e97bb782369539571c38add40238bbc8ca8fe8719af75a1e625", "category": "injection", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": ".search(r\"Module '(\\w+)", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC103", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "code|injection|token|131|sec103"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "yaraast/lsp/code_action_semantic.py"}, "region": {"startLine": 131}}}]}, {"ruleId": "SEC103", "level": "error", "message": {"text": "[SEC103] LDAP injection \u2014 non-constant search filter: User input concatenated into an LDAP search filter. Attackers inject `*)(uid=*` style payloads to bypass auth or enumerate accounts."}, "properties": {"repobilityId": 125856, "scanner": "repobility-threat-engine", "fingerprint": "32fc3758faf75cb928f44595e7daf2fb671f198c9fa0dd9acd4dc497525f72cf", "category": "injection", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": ".search(\n        r\"\\{[^{}:]+:[^{}]+\\bfor\\s+\\w+(?:\\s*,\\s*\\w+)", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC103", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "code|injection|token|109|sec103"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "yaraast/cli/yarax_services.py"}, "region": {"startLine": 109}}}]}, {"ruleId": "MINED001", "level": "error", "message": {"text": "[MINED001] Bare Except Pass: except: pass or except Exception: pass \u2014 silently swallows everything including KeyboardInterrupt and bugs."}, "properties": {"repobilityId": 125855, "scanner": "repobility-threat-engine", "fingerprint": "32c5b4ad06d0651bf649eb496fd263977e8e1d70ed3f0422ba0ceb3f04e6adfb", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "bare-except-pass", "owasp": null, "cwe_ids": ["CWE-755"], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.347744+00:00", "triaged_in_corpus": 15, "observations_count": 1550824, "ai_coder_pattern_id": 6}, "scanner": "repobility-threat-engine", "correlation_key": "fp|32c5b4ad06d0651bf649eb496fd263977e8e1d70ed3f0422ba0ceb3f04e6adfb"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "yaraast/libyara/ast_optimizer.py"}, "region": {"startLine": 152}}}]}, {"ruleId": "MINED001", "level": "error", "message": {"text": "[MINED001] Bare Except Pass: except: pass or except Exception: pass \u2014 silently swallows everything including KeyboardInterrupt and bugs."}, "properties": {"repobilityId": 125854, "scanner": "repobility-threat-engine", "fingerprint": "9e3e52b61391d55d412b99c640b18bec70e6fd2bd90f987fc6fd7556b35e8e53", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "bare-except-pass", "owasp": null, "cwe_ids": ["CWE-755"], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.347744+00:00", "triaged_in_corpus": 15, "observations_count": 1550824, "ai_coder_pattern_id": 6}, "scanner": "repobility-threat-engine", "correlation_key": "fp|9e3e52b61391d55d412b99c640b18bec70e6fd2bd90f987fc6fd7556b35e8e53"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "yaraast/cli/metrics_reporting.py"}, "region": {"startLine": 159}}}]}, {"ruleId": "SEC128", "level": "error", "message": {"text": "[SEC128] Async function without await \u2014 fire-and-forget Promise (AI mistake): Async call invoked without `await` returns an unhandled Promise. The outer function resolves before the inner work completes \u2014 DB writes lost, emails not sent, race conditions. This is one of the top-3 errors AI coders make: they understand async-shape but drop the await keyword when chaining multiple ops. Surfaces as flaky tests or silently dropped data in production."}, "properties": {"repobilityId": 125852, "scanner": "repobility-threat-engine", "fingerprint": "382f358a521c668cb1508227ae12e0d21c461cacb6ba6b10125cee464c95b57c", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": "self.dependencies.update(\n            rule_name\n            for rule_name in sorted(self.al", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC128", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "fp|382f358a521c668cb1508227ae12e0d21c461cacb6ba6b10125cee464c95b57c"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "yaraast/metrics/dependency_graph_finder.py"}, "region": {"startLine": 118}}}]}, {"ruleId": "SEC128", "level": "error", "message": {"text": "[SEC128] Async function without await \u2014 fire-and-forget Promise (AI mistake): Async call invoked without `await` returns an unhandled Promise. The outer function resolves before the inner work completes \u2014 DB writes lost, emails not sent, race conditions. This is one of the top-3 errors AI coders make: they understand async-shape but drop the await keyword when chaining multiple ops. Surfaces as flaky tests or silently dropped data in production."}, "properties": {"repobilityId": 125851, "scanner": "repobility-threat-engine", "fingerprint": "3592343e8b8699434d414f6c4b5e1ef44f78c3115a39a41a8978e3818cbf5b82", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": "self.save()", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC128", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "fp|3592343e8b8699434d414f6c4b5e1ef44f78c3115a39a41a8978e3818cbf5b82"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "yaraast/lsp/workspace_index.py"}, "region": {"startLine": 104}}}]}, {"ruleId": "SEC128", "level": "error", "message": {"text": "[SEC128] Async function without await \u2014 fire-and-forget Promise (AI mistake): Async call invoked without `await` returns an unhandled Promise. The outer function resolves before the inner work completes \u2014 DB writes lost, emails not sent, race conditions. This is one of the top-3 errors AI coders make: they understand async-shape but drop the await keyword when chaining multiple ops. Surfaces as flaky tests or silently dropped data in production."}, "properties": {"repobilityId": 125850, "scanner": "repobility-threat-engine", "fingerprint": "cc5537ab3da8dbdde57eea93e0faeb7ea75078f677b18a9676c8499261b72eb2", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": "result.compiled_rules.save(output)", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC128", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "fp|cc5537ab3da8dbdde57eea93e0faeb7ea75078f677b18a9676c8499261b72eb2"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "yaraast/cli/libyara_handlers_compile.py"}, "region": {"startLine": 38}}}]}, {"ruleId": "MINED006", "level": "error", "message": {"text": "[MINED006] Overcatch Baseexception: except BaseException: ... \u2014 prevents Ctrl+C and SystemExit from working."}, "properties": {"repobilityId": 125845, "scanner": "repobility-threat-engine", "fingerprint": "93966095a55a4808262077d49b38c7d753568968979a16c901f155b73b699680", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "overcatch-baseexception", "owasp": null, "cwe_ids": ["CWE-705"], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.347911+00:00", "triaged_in_corpus": 15, "observations_count": 230624, "ai_coder_pattern_id": 8}, "scanner": "repobility-threat-engine", "correlation_key": "fp|93966095a55a4808262077d49b38c7d753568968979a16c901f155b73b699680"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "yaraast/cli/commands/performance.py"}, "region": {"startLine": 227}}}]}, {"ruleId": "MINED004", "level": "error", "message": {"text": "[MINED004] Weak Crypto: MD5/SHA1/DES/RC4 used for security context (not just checksums)."}, "properties": {"repobilityId": 125838, "scanner": "repobility-threat-engine", "fingerprint": "2f283672b72d8987786b10ae9efef6f87aceb53c50558ddf5591886dc65d7a8b", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "weak-crypto", "owasp": "A02:2021", "cwe_ids": ["CWE-327"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.347906+00:00", "triaged_in_corpus": 15, "observations_count": 303181, "ai_coder_pattern_id": 13}, "scanner": "repobility-threat-engine", "correlation_key": "fp|2f283672b72d8987786b10ae9efef6f87aceb53c50558ddf5591886dc65d7a8b"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "yaraast/lsp/signature_help.py"}, "region": {"startLine": 63}}}]}, {"ruleId": "MINED004", "level": "error", "message": {"text": "[MINED004] Weak Crypto: MD5/SHA1/DES/RC4 used for security context (not just checksums)."}, "properties": {"repobilityId": 125837, "scanner": "repobility-threat-engine", "fingerprint": "1252228faddecb3c89fd2fac2aab6e063831f735b42ba53fb44ba6f8464c4573", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "weak-crypto", "owasp": "A02:2021", "cwe_ids": ["CWE-327"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.347906+00:00", "triaged_in_corpus": 15, "observations_count": 303181, "ai_coder_pattern_id": 13}, "scanner": "repobility-threat-engine", "correlation_key": "fp|1252228faddecb3c89fd2fac2aab6e063831f735b42ba53fb44ba6f8464c4573"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "yaraast/lsp/lsp_docs.py"}, "region": {"startLine": 56}}}]}, {"ruleId": "MINED004", "level": "error", "message": {"text": "[MINED004] Weak Crypto: MD5/SHA1/DES/RC4 used for security context (not just checksums)."}, "properties": {"repobilityId": 125836, "scanner": "repobility-threat-engine", "fingerprint": "853f9d7e4fe128ef4deecb416dc37ae47fd93ccc1a8eb6589fa68d4f8797505d", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "weak-crypto", "owasp": "A02:2021", "cwe_ids": ["CWE-327"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.347906+00:00", "triaged_in_corpus": 15, "observations_count": 303181, "ai_coder_pattern_id": 13}, "scanner": "repobility-threat-engine", "correlation_key": "fp|853f9d7e4fe128ef4deecb416dc37ae47fd93ccc1a8eb6589fa68d4f8797505d"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "examples/vt_livehunt_demo.py"}, "region": {"startLine": 91}}}]}, {"ruleId": "MINED115", "level": "error", "message": {"text": "Action `pypa/gh-action-pypi-publish` pinned to mutable ref `@release/v1`"}, "properties": {"repobilityId": 125828, "scanner": "repobility-supply-chain", "fingerprint": "3bd4932dfc44e3bc2f340c8c30fbea16c57c6866e19d88cb57cc86d4019820bc", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-mutable-ref", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|3bd4932dfc44e3bc2f340c8c30fbea16c57c6866e19d88cb57cc86d4019820bc"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release.yml"}, "region": {"startLine": 142}}}]}, {"ruleId": "MINED115", "level": "error", "message": {"text": "Action `actions/download-artifact` pinned to mutable ref `@v4`"}, "properties": {"repobilityId": 125827, "scanner": "repobility-supply-chain", "fingerprint": "f3e6c7bd8216d9b0b1ba95e5a71da56cf0b27c1aa66da875d9557fe0f051e404", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-mutable-ref", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|f3e6c7bd8216d9b0b1ba95e5a71da56cf0b27c1aa66da875d9557fe0f051e404"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release.yml"}, "region": {"startLine": 136}}}]}, {"ruleId": "MINED115", "level": "error", "message": {"text": "Action `softprops/action-gh-release` pinned to mutable ref `@v2`"}, "properties": {"repobilityId": 125826, "scanner": "repobility-supply-chain", "fingerprint": "85926dab3c7f0051887d05236c908fba98d9056e3da5c46db9521f988423b521", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-mutable-ref", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|85926dab3c7f0051887d05236c908fba98d9056e3da5c46db9521f988423b521"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release.yml"}, "region": {"startLine": 116}}}]}, {"ruleId": "MINED115", "level": "error", "message": {"text": "Action `actions/download-artifact` pinned to mutable ref `@v4`"}, "properties": {"repobilityId": 125825, "scanner": "repobility-supply-chain", "fingerprint": "a9798b6072c0b60226ac2752640415ca3aa231d2aa8fc36bd71f30498dc6630c", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-mutable-ref", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|a9798b6072c0b60226ac2752640415ca3aa231d2aa8fc36bd71f30498dc6630c"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release.yml"}, "region": {"startLine": 82}}}]}, {"ruleId": "MINED115", "level": "error", "message": {"text": "Action `actions/checkout` pinned to mutable ref `@v4`"}, "properties": {"repobilityId": 125824, "scanner": "repobility-supply-chain", "fingerprint": "524bb06a52f7452f631b60ac5d623f9d07a20228f6a3abcdf850b73edf874ccd", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-mutable-ref", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|524bb06a52f7452f631b60ac5d623f9d07a20228f6a3abcdf850b73edf874ccd"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release.yml"}, "region": {"startLine": 79}}}]}, {"ruleId": "MINED115", "level": "error", "message": {"text": "Action `actions/upload-artifact` pinned to mutable ref `@v4`"}, "properties": {"repobilityId": 125823, "scanner": "repobility-supply-chain", "fingerprint": "f5938b5452ac7d86e8d5487e93e4f18c85d26646d16b5a3c84ffe6b330a71468", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-mutable-ref", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|f5938b5452ac7d86e8d5487e93e4f18c85d26646d16b5a3c84ffe6b330a71468"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release.yml"}, "region": {"startLine": 67}}}]}, {"ruleId": "MINED115", "level": "error", "message": {"text": "Action `actions/setup-python` pinned to mutable ref `@v5`"}, "properties": {"repobilityId": 125822, "scanner": "repobility-supply-chain", "fingerprint": "60436961ed5937f2a939612aac56edadb252cf7f0fad08a1eef76e60a012a8c8", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-mutable-ref", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|60436961ed5937f2a939612aac56edadb252cf7f0fad08a1eef76e60a012a8c8"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release.yml"}, "region": {"startLine": 49}}}]}, {"ruleId": "MINED115", "level": "error", "message": {"text": "Action `actions/checkout` pinned to mutable ref `@v4`"}, "properties": {"repobilityId": 125821, "scanner": "repobility-supply-chain", "fingerprint": "6be1fa0257c02db840dd1ab05f9f9acefbd7d28a8beab422e333ae33b53e738e", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-mutable-ref", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|6be1fa0257c02db840dd1ab05f9f9acefbd7d28a8beab422e333ae33b53e738e"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release.yml"}, "region": {"startLine": 46}}}]}, {"ruleId": "MINED115", "level": "error", "message": {"text": "Action `actions/setup-python` pinned to mutable ref `@v5`"}, "properties": {"repobilityId": 125820, "scanner": "repobility-supply-chain", "fingerprint": "0840c7c72f45b7c3a62af40b91450a54cddeaed0b05ce46cfa231ed5f3a6ed12", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-mutable-ref", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|0840c7c72f45b7c3a62af40b91450a54cddeaed0b05ce46cfa231ed5f3a6ed12"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release.yml"}, "region": {"startLine": 20}}}]}, {"ruleId": "MINED115", "level": "error", "message": {"text": "Action `actions/checkout` pinned to mutable ref `@v4`"}, "properties": {"repobilityId": 125819, "scanner": "repobility-supply-chain", "fingerprint": "c6366c5bfdf07a9588f9a1b8ccdfcb655b3d7d5a66863d090afbd1409425a5c3", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-mutable-ref", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|c6366c5bfdf07a9588f9a1b8ccdfcb655b3d7d5a66863d090afbd1409425a5c3"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release.yml"}, "region": {"startLine": 17}}}]}, {"ruleId": "MINED115", "level": "error", "message": {"text": "Action `actions/setup-python` pinned to mutable ref `@v5`"}, "properties": {"repobilityId": 125818, "scanner": "repobility-supply-chain", "fingerprint": "73d7066df9b8d7eb72873345c0cdd1bd9a82104321b9233d5db8222cf7ea04a8", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-mutable-ref", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|73d7066df9b8d7eb72873345c0cdd1bd9a82104321b9233d5db8222cf7ea04a8"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 105}}}]}, {"ruleId": "MINED115", "level": "error", "message": {"text": "Action `actions/checkout` pinned to mutable ref `@v4`"}, "properties": {"repobilityId": 125817, "scanner": "repobility-supply-chain", "fingerprint": "78e01bdacf0c4bd011c53650e6d62c4862bacfd0263468edd5a42905e721cce9", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-mutable-ref", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|78e01bdacf0c4bd011c53650e6d62c4862bacfd0263468edd5a42905e721cce9"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 102}}}]}, {"ruleId": "MINED115", "level": "error", "message": {"text": "Action `actions/setup-python` pinned to mutable ref `@v5`"}, "properties": {"repobilityId": 125816, "scanner": "repobility-supply-chain", "fingerprint": "a90c48603a280183c995fb991c399f0db5675aeb7b26dd3ae8451a19e07a7def", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-mutable-ref", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|a90c48603a280183c995fb991c399f0db5675aeb7b26dd3ae8451a19e07a7def"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 80}}}]}, {"ruleId": "MINED115", "level": "error", "message": {"text": "Action `actions/checkout` pinned to mutable ref `@v4`"}, "properties": {"repobilityId": 125815, "scanner": "repobility-supply-chain", "fingerprint": "b7d3a0c6c72f635f90240789db915076dbbbc20c79c9b4dca8949a6abfd29870", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-mutable-ref", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|b7d3a0c6c72f635f90240789db915076dbbbc20c79c9b4dca8949a6abfd29870"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 77}}}]}, {"ruleId": "MINED115", "level": "error", "message": {"text": "Action `actions/cache` pinned to mutable ref `@v4`"}, "properties": {"repobilityId": 125814, "scanner": "repobility-supply-chain", "fingerprint": "6f8242a5f48d73adf9df1c15480551b37577fe63729875668fc2cb1f6f982d7a", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-mutable-ref", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|6f8242a5f48d73adf9df1c15480551b37577fe63729875668fc2cb1f6f982d7a"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 51}}}]}, {"ruleId": "MINED115", "level": "error", "message": {"text": "Action `actions/setup-python` pinned to mutable ref `@v5`"}, "properties": {"repobilityId": 125813, "scanner": "repobility-supply-chain", "fingerprint": "8c593c116ae7b8592c5328bd7ca2e996e9d050410e0527593c0af988035835cd", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-mutable-ref", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|8c593c116ae7b8592c5328bd7ca2e996e9d050410e0527593c0af988035835cd"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 46}}}]}, {"ruleId": "MINED115", "level": "error", "message": {"text": "Action `actions/checkout` pinned to mutable ref `@v4`"}, "properties": {"repobilityId": 125812, "scanner": "repobility-supply-chain", "fingerprint": "50b46b2fc86cb1c69341b57d5390f05a58db88d66665cdec378a21522f7367db", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-mutable-ref", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|50b46b2fc86cb1c69341b57d5390f05a58db88d66665cdec378a21522f7367db"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 43}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "Phantom test coverage: test_json_serializer_rejects_invalid_input_path_types"}, "properties": {"repobilityId": 125777, "scanner": "repobility-ast-engine", "fingerprint": "cdf0ce0a890e787f869ee4ee40bbfce262d6477f5f15a965116d86f602e4bd01", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|cdf0ce0a890e787f869ee4ee40bbfce262d6477f5f15a965116d86f602e4bd01"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/test_serialization_json_serializer.py"}, "region": {"startLine": 61}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "Phantom test coverage: test_json_serializer_rejects_non_string_input"}, "properties": {"repobilityId": 125776, "scanner": "repobility-ast-engine", "fingerprint": "63dfd08c72265c744ab7e198f89d72c57af57981e83e32f0e991aeda23c27593", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|63dfd08c72265c744ab7e198f89d72c57af57981e83e32f0e991aeda23c27593"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/test_serialization_json_serializer.py"}, "region": {"startLine": 54}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "Phantom test coverage: test_json_serializer_missing_input"}, "properties": {"repobilityId": 125775, "scanner": "repobility-ast-engine", "fingerprint": "64be3cdc20a4e30f95b7e3651633c70f82102a5b7b510a4bc1301013d68744e1", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|64be3cdc20a4e30f95b7e3651633c70f82102a5b7b510a4bc1301013d68744e1"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/test_serialization_json_serializer.py"}, "region": {"startLine": 47}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "Phantom test coverage: test_from_hex_string_rejects_odd_length"}, "properties": {"repobilityId": 125774, "scanner": "repobility-ast-engine", "fingerprint": "f1d96acaf20c0ba371252510e2c7dab24229bad2d271c323a43c8328f6c43e7a", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|f1d96acaf20c0ba371252510e2c7dab24229bad2d271c323a43c8328f6c43e7a"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/test_hex_string_builder.py"}, "region": {"startLine": 854}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "Phantom test coverage: test_pattern_rejects_invalid_jump_ranges"}, "properties": {"repobilityId": 125773, "scanner": "repobility-ast-engine", "fingerprint": "0fc44a6c4d449777f3a9352dad1791b91970985ba339de5eb9e50d21502235da", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|0fc44a6c4d449777f3a9352dad1791b91970985ba339de5eb9e50d21502235da"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/test_hex_string_builder.py"}, "region": {"startLine": 779}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "Phantom test coverage: test_group_rejects_non_callable_builder_function"}, "properties": {"repobilityId": 125772, "scanner": "repobility-ast-engine", "fingerprint": "e4936b53240abc4b06668294606acb22b3a1bebf3f7f3fa739ee061fe4c6bbba", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|e4936b53240abc4b06668294606acb22b3a1bebf3f7f3fa739ee061fe4c6bbba"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/test_hex_string_builder.py"}, "region": {"startLine": 643}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "Phantom test coverage: test_alternative_invalid_value_in_list"}, "properties": {"repobilityId": 125771, "scanner": "repobility-ast-engine", "fingerprint": "6cd1adefdc3016b12521f86e1a8476fc268b3b879349ab89678a75307a9ade8a", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|6cd1adefdc3016b12521f86e1a8476fc268b3b879349ab89678a75307a9ade8a"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/test_hex_string_builder.py"}, "region": {"startLine": 584}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "Phantom test coverage: test_alternative_invalid_type"}, "properties": {"repobilityId": 125770, "scanner": "repobility-ast-engine", "fingerprint": "016c619df28633c19f21d75bed034f398f7e5a7f1cf403f5e4cf5a40c7be3a2f", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|016c619df28633c19f21d75bed034f398f7e5a7f1cf403f5e4cf5a40c7be3a2f"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/test_hex_string_builder.py"}, "region": {"startLine": 577}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "Phantom test coverage: test_jump_rejects_boolean_bounds"}, "properties": {"repobilityId": 125769, "scanner": "repobility-ast-engine", "fingerprint": "d1dcb5c5a2050bf10c888b4ed91d880934cf2a3fa4fa5b223d54c4b51aa2803c", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|d1dcb5c5a2050bf10c888b4ed91d880934cf2a3fa4fa5b223d54c4b51aa2803c"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/test_hex_string_builder.py"}, "region": {"startLine": 481}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "Phantom test coverage: test_jump_rejects_invalid_bounds"}, "properties": {"repobilityId": 125768, "scanner": "repobility-ast-engine", "fingerprint": "7369287331cd5c4bb30c8cda48471c775198c8f9e3a1dcbb06d362f6963ba03e", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|7369287331cd5c4bb30c8cda48471c775198c8f9e3a1dcbb06d362f6963ba03e"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/test_hex_string_builder.py"}, "region": {"startLine": 454}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "Phantom test coverage: test_nibble_pattern_invalid_hex_digit"}, "properties": {"repobilityId": 125767, "scanner": "repobility-ast-engine", "fingerprint": "30a027a94a3c8d4de3c1f22b89979a1ab3a3b3090e941f7d18f8ebc920fde30e", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|30a027a94a3c8d4de3c1f22b89979a1ab3a3b3090e941f7d18f8ebc920fde30e"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/test_hex_string_builder.py"}, "region": {"startLine": 372}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "Phantom test coverage: test_nibble_pattern_no_wildcard"}, "properties": {"repobilityId": 125766, "scanner": "repobility-ast-engine", "fingerprint": "92f67702c3e95e4243ab04fd24d6b2a2db414a346b02c3ac01c970c4977aa6a5", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|92f67702c3e95e4243ab04fd24d6b2a2db414a346b02c3ac01c970c4977aa6a5"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/test_hex_string_builder.py"}, "region": {"startLine": 365}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "Phantom test coverage: test_nibble_pattern_double_wildcard"}, "properties": {"repobilityId": 125765, "scanner": "repobility-ast-engine", "fingerprint": "f0e3958e5aac1d058674a32f4974c568e8db28182eab711976b3cf0a7d7dc4f2", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|f0e3958e5aac1d058674a32f4974c568e8db28182eab711976b3cf0a7d7dc4f2"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/test_hex_string_builder.py"}, "region": {"startLine": 358}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "Phantom test coverage: test_nibble_pattern_wrong_length"}, "properties": {"repobilityId": 125764, "scanner": "repobility-ast-engine", "fingerprint": "becd1c226a5ea8da3bb5cc019dbca9e0b9b806694f1bb567ccafb474bb2bdf36", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|becd1c226a5ea8da3bb5cc019dbca9e0b9b806694f1bb567ccafb474bb2bdf36"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/test_hex_string_builder.py"}, "region": {"startLine": 351}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "Phantom test coverage: test_wildcard_rejects_invalid_count_types"}, "properties": {"repobilityId": 125763, "scanner": "repobility-ast-engine", "fingerprint": "67f2aca646578a4c4a2b76076f66a75002d54a84015c2dc2f3582d4a66c57736", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|67f2aca646578a4c4a2b76076f66a75002d54a84015c2dc2f3582d4a66c57736"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/test_hex_string_builder.py"}, "region": {"startLine": 280}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "Phantom test coverage: test_wildcard_rejects_non_positive_counts"}, "properties": {"repobilityId": 125762, "scanner": "repobility-ast-engine", "fingerprint": "99bb9f921bd86870a30cd238f82dd39e32b55dfad33f4ecd024c7253e23ec547", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|99bb9f921bd86870a30cd238f82dd39e32b55dfad33f4ecd024c7253e23ec547"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/test_hex_string_builder.py"}, "region": {"startLine": 272}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "Phantom test coverage: test_add_invalid_type"}, "properties": {"repobilityId": 125761, "scanner": "repobility-ast-engine", "fingerprint": "74a6f1e602ead44285d7ed0400b45d3461549b7e7de6eec422b1e763c404fb00", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|74a6f1e602ead44285d7ed0400b45d3461549b7e7de6eec422b1e763c404fb00"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/test_hex_string_builder.py"}, "region": {"startLine": 237}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "Phantom test coverage: test_add_hex_string_rejects_non_prefix_0x_markers"}, "properties": {"repobilityId": 125760, "scanner": "repobility-ast-engine", "fingerprint": "506686114ee65d1cd17e18d005d90f5d21298629c1f4ba7f11e05325110f2f6a", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|506686114ee65d1cd17e18d005d90f5d21298629c1f4ba7f11e05325110f2f6a"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/test_hex_string_builder.py"}, "region": {"startLine": 229}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "Phantom test coverage: test_add_hex_string_invalid_characters"}, "properties": {"repobilityId": 125759, "scanner": "repobility-ast-engine", "fingerprint": "00577e64c1c82e38af7a62b077d38b854e0ee9c07198cf611b1cc7a5e347501b", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|00577e64c1c82e38af7a62b077d38b854e0ee9c07198cf611b1cc7a5e347501b"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/test_hex_string_builder.py"}, "region": {"startLine": 222}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "Phantom test coverage: test_add_hex_string_wrong_length"}, "properties": {"repobilityId": 125758, "scanner": "repobility-ast-engine", "fingerprint": "d3ce594bd2154e2069c9b86509da9954484599b2ffbb23f93e445d5ad323a269", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|d3ce594bd2154e2069c9b86509da9954484599b2ffbb23f93e445d5ad323a269"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/test_hex_string_builder.py"}, "region": {"startLine": 215}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "Phantom test coverage: test_add_byte_value_negative"}, "properties": {"repobilityId": 125757, "scanner": "repobility-ast-engine", "fingerprint": "816e9194fdf19b04e86f4793bd7bf87c28ac1a961f61702ac36affbd8ea716a7", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|816e9194fdf19b04e86f4793bd7bf87c28ac1a961f61702ac36affbd8ea716a7"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/test_hex_string_builder.py"}, "region": {"startLine": 208}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "Phantom test coverage: test_add_byte_value_too_large"}, "properties": {"repobilityId": 125756, "scanner": "repobility-ast-engine", "fingerprint": "705e617ca90316558d148f6515c40bc6ea53a8d586490d3e3d9cc7abfd141295", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|705e617ca90316558d148f6515c40bc6ea53a8d586490d3e3d9cc7abfd141295"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/test_hex_string_builder.py"}, "region": {"startLine": 201}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "Phantom test coverage: test_parse_file_missing_raises_real"}, "properties": {"repobilityId": 125754, "scanner": "repobility-ast-engine", "fingerprint": "ea470933130a47722cd985e714e74e39c154cf2e36cdc5696d5790d622ee188d", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|ea470933130a47722cd985e714e74e39c154cf2e36cdc5696d5790d622ee188d"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/test_unified_parser_streaming.py"}, "region": {"startLine": 164}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "Phantom test coverage: test_parse_file_force_streaming_surfaces_malformed_rule"}, "properties": {"repobilityId": 125753, "scanner": "repobility-ast-engine", "fingerprint": "cdc0b96192cc89a935406495b2900040f57439c047c983ee9bba58d713ccd9d6", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|cdc0b96192cc89a935406495b2900040f57439c047c983ee9bba58d713ccd9d6"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/test_unified_parser_streaming.py"}, "region": {"startLine": 65}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self.take_snapshot` used but never assigned in __init__"}, "properties": {"repobilityId": 125743, "scanner": "repobility-ast-engine", "fingerprint": "157e431bbb6189dc0c1ce7e3089d488179c8483de8813f258f895a1bbd22213a", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|157e431bbb6189dc0c1ce7e3089d488179c8483de8813f258f895a1bbd22213a"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "benchmarks/memory_profiler.py"}, "region": {"startLine": 201}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self.take_snapshot` used but never assigned in __init__"}, "properties": {"repobilityId": 125742, "scanner": "repobility-ast-engine", "fingerprint": "e36ae8e2281ed18cc78c57a769ec3a224b252292c57cf7a3004c164e9db87457", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|e36ae8e2281ed18cc78c57a769ec3a224b252292c57cf7a3004c164e9db87457"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "benchmarks/memory_profiler.py"}, "region": {"startLine": 181}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self.take_snapshot` used but never assigned in __init__"}, "properties": {"repobilityId": 125741, "scanner": "repobility-ast-engine", "fingerprint": "c141f0d1fec2fc00072e79eb8a167fc6443e6b8cf2a625923d3c379260d42a90", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|c141f0d1fec2fc00072e79eb8a167fc6443e6b8cf2a625923d3c379260d42a90"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "benchmarks/memory_profiler.py"}, "region": {"startLine": 155}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self.take_snapshot` used but never assigned in __init__"}, "properties": {"repobilityId": 125740, "scanner": "repobility-ast-engine", "fingerprint": "efea41f45c095addd7b3e368e51db2f3a23be7d59cefe6d3a24c4cd69eef6227", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|efea41f45c095addd7b3e368e51db2f3a23be7d59cefe6d3a24c4cd69eef6227"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "benchmarks/memory_profiler.py"}, "region": {"startLine": 148}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self.take_snapshot` used but never assigned in __init__"}, "properties": {"repobilityId": 125739, "scanner": "repobility-ast-engine", "fingerprint": "9bf02d0f71fc1bd00b624c3debf301f639e374b2f355cd78657c6cf7daed112d", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|9bf02d0f71fc1bd00b624c3debf301f639e374b2f355cd78657c6cf7daed112d"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "benchmarks/memory_profiler.py"}, "region": {"startLine": 133}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self.take_snapshot` used but never assigned in __init__"}, "properties": {"repobilityId": 125738, "scanner": "repobility-ast-engine", "fingerprint": "60cf912a7ec93b44958c609912e104e55c896afaf745cdb1624a6f2dbb61b386", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|60cf912a7ec93b44958c609912e104e55c896afaf745cdb1624a6f2dbb61b386"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "benchmarks/memory_profiler.py"}, "region": {"startLine": 128}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self.take_snapshot` used but never assigned in __init__"}, "properties": {"repobilityId": 125737, "scanner": "repobility-ast-engine", "fingerprint": "f2ac81be3ac0b546b29b79ccf6c4ae0ac5fb4ca9fbf3b1a171b13efec771a96a", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|f2ac81be3ac0b546b29b79ccf6c4ae0ac5fb4ca9fbf3b1a171b13efec771a96a"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "benchmarks/memory_profiler.py"}, "region": {"startLine": 139}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self.take_snapshot` used but never assigned in __init__"}, "properties": {"repobilityId": 125736, "scanner": "repobility-ast-engine", "fingerprint": "6b373832bdcf72565b7097c79afb809a3a6ae09a3ef92dcf1ca9d9c3d7a7ac3f", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|6b373832bdcf72565b7097c79afb809a3a6ae09a3ef92dcf1ca9d9c3d7a7ac3f"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "benchmarks/memory_profiler.py"}, "region": {"startLine": 120}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "Phantom test coverage: test_data_dir"}, "properties": {"repobilityId": 125735, "scanner": "repobility-ast-engine", "fingerprint": "c92931730836169bdf02e8a17a4f350984404d2eff1bb31d68550281cec7f505", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|c92931730836169bdf02e8a17a4f350984404d2eff1bb31d68550281cec7f505"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "benchmarks/conftest.py"}, "region": {"startLine": 38}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self.benchmark_comparison` used but never assigned in __init__"}, "properties": {"repobilityId": 125730, "scanner": "repobility-ast-engine", "fingerprint": "85f36bd3c29043e6d59bd1573c928d69c4e10a3d0fa7b1806153f4b1143ed6a4", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|85f36bd3c29043e6d59bd1573c928d69c4e10a3d0fa7b1806153f4b1143ed6a4"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "benchmarks/benchmark_large_files.py"}, "region": {"startLine": 361}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self._print_comparison` used but never assigned in __init__"}, "properties": {"repobilityId": 125729, "scanner": "repobility-ast-engine", "fingerprint": "46df0cb5152dab3c6b14472dfe827c628a5b387ca6449e946945e5e60e3d0c30", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|46df0cb5152dab3c6b14472dfe827c628a5b387ca6449e946945e5e60e3d0c30"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "benchmarks/benchmark_large_files.py"}, "region": {"startLine": 271}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self.benchmark_streaming_parser` used but never assigned in __init__"}, "properties": {"repobilityId": 125728, "scanner": "repobility-ast-engine", "fingerprint": "a68cc99f56d6830c93e064697968510ca44c2403e7ba25a6706e70af257d2725", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|a68cc99f56d6830c93e064697968510ca44c2403e7ba25a6706e70af257d2725"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "benchmarks/benchmark_large_files.py"}, "region": {"startLine": 268}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self.benchmark_standard_parser` used but never assigned in __init__"}, "properties": {"repobilityId": 125727, "scanner": "repobility-ast-engine", "fingerprint": "954c2a9feed81d03d567b9abc4a040da225923a68df2cca74436b3d7e5defb9d", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|954c2a9feed81d03d567b9abc4a040da225923a68df2cca74436b3d7e5defb9d"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "benchmarks/benchmark_large_files.py"}, "region": {"startLine": 261}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self.measure_memory` used but never assigned in __init__"}, "properties": {"repobilityId": 125726, "scanner": "repobility-ast-engine", "fingerprint": "188d762a7e891dfa3e0d1a70065f5b189c3368639ba1c792787c76a81764a9ee", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|188d762a7e891dfa3e0d1a70065f5b189c3368639ba1c792787c76a81764a9ee"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "benchmarks/benchmark_large_files.py"}, "region": {"startLine": 192}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self.measure_memory` used but never assigned in __init__"}, "properties": {"repobilityId": 125725, "scanner": "repobility-ast-engine", "fingerprint": "a393fe5152ef0866dec9e5a48c2055d6f4da573c9877fed8fb7ccff6b673d287", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|a393fe5152ef0866dec9e5a48c2055d6f4da573c9877fed8fb7ccff6b673d287"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "benchmarks/benchmark_large_files.py"}, "region": {"startLine": 184}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self.measure_memory` used but never assigned in __init__"}, "properties": {"repobilityId": 125724, "scanner": "repobility-ast-engine", "fingerprint": "c09c65442fcab5d09f146506cd371dcc8725513d8158e7c1d1db7a07edd9d709", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|c09c65442fcab5d09f146506cd371dcc8725513d8158e7c1d1db7a07edd9d709"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "benchmarks/benchmark_large_files.py"}, "region": {"startLine": 108}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self.measure_memory` used but never assigned in __init__"}, "properties": {"repobilityId": 125723, "scanner": "repobility-ast-engine", "fingerprint": "67a50bfe60a6349bb2e6d8658b162e7d4254616b3f47f23bb1d23e22017b37be", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|67a50bfe60a6349bb2e6d8658b162e7d4254616b3f47f23bb1d23e22017b37be"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "benchmarks/benchmark_large_files.py"}, "region": {"startLine": 99}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self.visit` used but never assigned in __init__"}, "properties": {"repobilityId": 125720, "scanner": "repobility-ast-engine", "fingerprint": "d856c69b02554ccd0fe4b35948fb409a8886cedc366ee290b545f97b0ac68e10", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|d856c69b02554ccd0fe4b35948fb409a8886cedc366ee290b545f97b0ac68e10"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "examples/custom_visitor.py"}, "region": {"startLine": 219}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self.visit` used but never assigned in __init__"}, "properties": {"repobilityId": 125719, "scanner": "repobility-ast-engine", "fingerprint": "d79271fd99c0f268fd65df41fc01a7dd195ca088347274f2f5a6912907be949c", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|d79271fd99c0f268fd65df41fc01a7dd195ca088347274f2f5a6912907be949c"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "examples/custom_visitor.py"}, "region": {"startLine": 214}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self._count_modifiers` used but never assigned in __init__"}, "properties": {"repobilityId": 125718, "scanner": "repobility-ast-engine", "fingerprint": "e2a8f9b4b89dbba14b6f3afc6d91c9dbca01edbe60d11c1cd73b146de9c9061a", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|e2a8f9b4b89dbba14b6f3afc6d91c9dbca01edbe60d11c1cd73b146de9c9061a"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "examples/custom_visitor.py"}, "region": {"startLine": 85}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self._count_modifiers` used but never assigned in __init__"}, "properties": {"repobilityId": 125717, "scanner": "repobility-ast-engine", "fingerprint": "f6d77fb12cd924a73d410accc54c7547ef73fda8b66af6aee15947775746fc0b", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|f6d77fb12cd924a73d410accc54c7547ef73fda8b66af6aee15947775746fc0b"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "examples/custom_visitor.py"}, "region": {"startLine": 80}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self._count_modifiers` used but never assigned in __init__"}, "properties": {"repobilityId": 125716, "scanner": "repobility-ast-engine", "fingerprint": "94db9db60e283e66ac1a63ce1fa0917cd75a03d9a77b2fec77f0aeb9720985d9", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|94db9db60e283e66ac1a63ce1fa0917cd75a03d9a77b2fec77f0aeb9720985d9"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "examples/custom_visitor.py"}, "region": {"startLine": 75}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self._is_simple_condition` used but never assigned in __init__"}, "properties": {"repobilityId": 125715, "scanner": "repobility-ast-engine", "fingerprint": "e282b0111f4e550e0b0218d03dd08d8d17d5a788ce37e93396935adb930e2f70", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|e282b0111f4e550e0b0218d03dd08d8d17d5a788ce37e93396935adb930e2f70"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "examples/custom_visitor.py"}, "region": {"startLine": 67}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self.visit` used but never assigned in __init__"}, "properties": {"repobilityId": 125714, "scanner": "repobility-ast-engine", "fingerprint": "2a7bd9909e6ee8fe54efabd898a7bcbffac6d8a69341c57369f7abb5238fa903", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|2a7bd9909e6ee8fe54efabd898a7bcbffac6d8a69341c57369f7abb5238fa903"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "examples/custom_visitor.py"}, "region": {"startLine": 63}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self.visit` used but never assigned in __init__"}, "properties": {"repobilityId": 125713, "scanner": "repobility-ast-engine", "fingerprint": "bc9c0a2315616aeb69dfce51ac199b3ef9f6a414efbfed47606ef80958099568", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|bc9c0a2315616aeb69dfce51ac199b3ef9f6a414efbfed47606ef80958099568"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "examples/custom_visitor.py"}, "region": {"startLine": 44}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self.visit` used but never assigned in __init__"}, "properties": {"repobilityId": 125712, "scanner": "repobility-ast-engine", "fingerprint": "3747700c38735c54389d4a0f47c57ead3eb866c983ee250271b449f339636810", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|3747700c38735c54389d4a0f47c57ead3eb866c983ee250271b449f339636810"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "examples/custom_visitor.py"}, "region": {"startLine": 42}}}]}, {"ruleId": "MINED107", "level": "error", "message": {"text": "Missing import: `string` used but not imported"}, "properties": {"repobilityId": 125797, "scanner": "repobility-ast-engine", "fingerprint": "92ad4fdec26e264e86cb282fd2bad45b01d9d4f651bc943fb67b79d7dd2ba491", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "missing-import-python", "owasp": "A06:2021", "cwe_ids": ["CWE-1075"], "languages": ["python"], "observations_count": 2192}, "scanner": "repobility-ast-engine", "correlation_key": "fp|92ad4fdec26e264e86cb282fd2bad45b01d9d4f651bc943fb67b79d7dd2ba491"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/test_parser_comment_aware_more2.py"}, "region": {"startLine": 173}}}]}, {"ruleId": "MINED107", "level": "error", "message": {"text": "Missing import: `ast` used but not imported"}, "properties": {"repobilityId": 125796, "scanner": "repobility-ast-engine", "fingerprint": "c778015da013b27e3b92e9ea2961a70e3f6e056ec4cfbc791783b811f1d83e76", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "missing-import-python", "owasp": "A06:2021", "cwe_ids": ["CWE-1075"], "languages": ["python"], "observations_count": 2192}, "scanner": "repobility-ast-engine", "correlation_key": "fp|c778015da013b27e3b92e9ea2961a70e3f6e056ec4cfbc791783b811f1d83e76"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/test_parser_comment_aware_more2.py"}, "region": {"startLine": 31}}}]}, {"ruleId": "MINED107", "level": "error", "message": {"text": "Missing import: `string` used but not imported"}, "properties": {"repobilityId": 125795, "scanner": "repobility-ast-engine", "fingerprint": "a73d01a50f3c5551d10b4d025aec8c3e48a41d0164b0e0d44aeccd397a451962", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "missing-import-python", "owasp": "A06:2021", "cwe_ids": ["CWE-1075"], "languages": ["python"], "observations_count": 2192}, "scanner": "repobility-ast-engine", "correlation_key": "fp|a73d01a50f3c5551d10b4d025aec8c3e48a41d0164b0e0d44aeccd397a451962"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/test_serialization_json_serializer_more3.py"}, "region": {"startLine": 164}}}]}, {"ruleId": "MINED107", "level": "error", "message": {"text": "Missing import: `ast` used but not imported"}, "properties": {"repobilityId": 125794, "scanner": "repobility-ast-engine", "fingerprint": "e115b6d178192f87888f658a278cc94fb40d2557fad1fb8bee76677a2104003b", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "missing-import-python", "owasp": "A06:2021", "cwe_ids": ["CWE-1075"], "languages": ["python"], "observations_count": 2192}, "scanner": "repobility-ast-engine", "correlation_key": "fp|e115b6d178192f87888f658a278cc94fb40d2557fad1fb8bee76677a2104003b"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/test_performance_string_analyzer_more.py"}, "region": {"startLine": 99}}}]}, {"ruleId": "MINED107", "level": "error", "message": {"text": "Missing import: `ast` used but not imported"}, "properties": {"repobilityId": 125793, "scanner": "repobility-ast-engine", "fingerprint": "374e224da079ce9b09f5260cf7fc81b00a9d07a14197050755388d54b69eab58", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "missing-import-python", "owasp": "A06:2021", "cwe_ids": ["CWE-1075"], "languages": ["python"], "observations_count": 2192}, "scanner": "repobility-ast-engine", "correlation_key": "fp|374e224da079ce9b09f5260cf7fc81b00a9d07a14197050755388d54b69eab58"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/test_yaral_enhanced_parser_more.py"}, "region": {"startLine": 43}}}]}, {"ruleId": "MINED107", "level": "error", "message": {"text": "Missing import: `ast` used but not imported"}, "properties": {"repobilityId": 125792, "scanner": "repobility-ast-engine", "fingerprint": "fe2a6c186332095daeea8a5b083a975742818a17582a47a4cb64364731b6355e", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "missing-import-python", "owasp": "A06:2021", "cwe_ids": ["CWE-1075"], "languages": ["python"], "observations_count": 2192}, "scanner": "repobility-ast-engine", "correlation_key": "fp|fe2a6c186332095daeea8a5b083a975742818a17582a47a4cb64364731b6355e"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/test_performance_parallel_analyzer_more.py"}, "region": {"startLine": 20}}}]}, {"ruleId": "MINED107", "level": "error", "message": {"text": "Missing import: `ast` used but not imported"}, "properties": {"repobilityId": 125791, "scanner": "repobility-ast-engine", "fingerprint": "7bbcbcfc5e52ea0d4dbe0e1b1985b0403460d598f67aab71f11ae9c0bd14e337", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "missing-import-python", "owasp": "A06:2021", "cwe_ids": ["CWE-1075"], "languages": ["python"], "observations_count": 2192}, "scanner": "repobility-ast-engine", "correlation_key": "fp|7bbcbcfc5e52ea0d4dbe0e1b1985b0403460d598f67aab71f11ae9c0bd14e337"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/test_metrics_complexity_more2.py"}, "region": {"startLine": 77}}}]}, {"ruleId": "MINED107", "level": "error", "message": {"text": "Missing import: `ast` used but not imported"}, "properties": {"repobilityId": 125790, "scanner": "repobility-ast-engine", "fingerprint": "d6fafcbd23824019ceed6ee1b4a40747e042074f677d1d3ddca33a4b3a566b23", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "missing-import-python", "owasp": "A06:2021", "cwe_ids": ["CWE-1075"], "languages": ["python"], "observations_count": 2192}, "scanner": "repobility-ast-engine", "correlation_key": "fp|d6fafcbd23824019ceed6ee1b4a40747e042074f677d1d3ddca33a4b3a566b23"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/test_yaral_enhanced_parser.py"}, "region": {"startLine": 34}}}]}, {"ruleId": "MINED107", "level": "error", "message": {"text": "Missing import: `ast` used but not imported"}, "properties": {"repobilityId": 125789, "scanner": "repobility-ast-engine", "fingerprint": "5917b62befa4863943a746e80fffb893977819b3b3f5f8c010491a82fb35115b", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "missing-import-python", "owasp": "A06:2021", "cwe_ids": ["CWE-1075"], "languages": ["python"], "observations_count": 2192}, "scanner": "repobility-ast-engine", "correlation_key": "fp|5917b62befa4863943a746e80fffb893977819b3b3f5f8c010491a82fb35115b"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/test_enhanced_parser_error_tolerant_more5.py"}, "region": {"startLine": 20}}}]}, {"ruleId": "MINED107", "level": "error", "message": {"text": "Missing import: `ast` used but not imported"}, "properties": {"repobilityId": 125788, "scanner": "repobility-ast-engine", "fingerprint": "fd998775f384efd6c5a579fe4d21fd1686c4fc56c10e3d6f969d24d4db3f9e32", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "missing-import-python", "owasp": "A06:2021", "cwe_ids": ["CWE-1075"], "languages": ["python"], "observations_count": 2192}, "scanner": "repobility-ast-engine", "correlation_key": "fp|fd998775f384efd6c5a579fe4d21fd1686c4fc56c10e3d6f969d24d4db3f9e32"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/test_serialization_roundtrip_more3.py"}, "region": {"startLine": 106}}}]}, {"ruleId": "MINED107", "level": "error", "message": {"text": "Missing import: `ast` used but not imported"}, "properties": {"repobilityId": 125787, "scanner": "repobility-ast-engine", "fingerprint": "790d4d4045e794fc11c8e66d7aa380855e063e7c0b3b183c464d29e95bd90ee5", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "missing-import-python", "owasp": "A06:2021", "cwe_ids": ["CWE-1075"], "languages": ["python"], "observations_count": 2192}, "scanner": "repobility-ast-engine", "correlation_key": "fp|790d4d4045e794fc11c8e66d7aa380855e063e7c0b3b183c464d29e95bd90ee5"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/test_yaral_modules_basic.py"}, "region": {"startLine": 168}}}]}, {"ruleId": "MINED107", "level": "error", "message": {"text": "Missing import: `ast` used but not imported"}, "properties": {"repobilityId": 125786, "scanner": "repobility-ast-engine", "fingerprint": "6ebc19fa40a02d9c5746b4b7b443c0b7033ce05d8515038ee77666d619ac7e8a", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "missing-import-python", "owasp": "A06:2021", "cwe_ids": ["CWE-1075"], "languages": ["python"], "observations_count": 2192}, "scanner": "repobility-ast-engine", "correlation_key": "fp|6ebc19fa40a02d9c5746b4b7b443c0b7033ce05d8515038ee77666d619ac7e8a"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/test_types_semantic_validator_more2.py"}, "region": {"startLine": 698}}}]}, {"ruleId": "MINED107", "level": "error", "message": {"text": "Missing import: `ast` used but not imported"}, "properties": {"repobilityId": 125785, "scanner": "repobility-ast-engine", "fingerprint": "0ba061789d576e9c9a055a3a65113af054771f632ce622839672ff64a5160af4", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "missing-import-python", "owasp": "A06:2021", "cwe_ids": ["CWE-1075"], "languages": ["python"], "observations_count": 2192}, "scanner": "repobility-ast-engine", "correlation_key": "fp|0ba061789d576e9c9a055a3a65113af054771f632ce622839672ff64a5160af4"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/test_metrics_complexity_extra.py"}, "region": {"startLine": 148}}}]}, {"ruleId": "MINED107", "level": "error", "message": {"text": "Missing import: `ast` used but not imported"}, "properties": {"repobilityId": 125784, "scanner": "repobility-ast-engine", "fingerprint": "ea47c89dc563c8cf66614dde2fb2264f28f81d53198a16061f5511de70614524", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "missing-import-python", "owasp": "A06:2021", "cwe_ids": ["CWE-1075"], "languages": ["python"], "observations_count": 2192}, "scanner": "repobility-ast-engine", "correlation_key": "fp|ea47c89dc563c8cf66614dde2fb2264f28f81d53198a16061f5511de70614524"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/test_yaral_enhanced_parser_events_real.py"}, "region": {"startLine": 123}}}]}, {"ruleId": "MINED107", "level": "error", "message": {"text": "Missing import: `ast` used but not imported"}, "properties": {"repobilityId": 125783, "scanner": "repobility-ast-engine", "fingerprint": "a8946a5604f2fecd22cf05b8eeb38e615a51143e821e56f061edd4f3a77e22fc", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "missing-import-python", "owasp": "A06:2021", "cwe_ids": ["CWE-1075"], "languages": ["python"], "observations_count": 2192}, "scanner": "repobility-ast-engine", "correlation_key": "fp|a8946a5604f2fecd22cf05b8eeb38e615a51143e821e56f061edd4f3a77e22fc"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/test_function_call_indexed_receiver.py"}, "region": {"startLine": 108}}}]}, {"ruleId": "MINED107", "level": "error", "message": {"text": "Missing import: `ast` used but not imported"}, "properties": {"repobilityId": 125782, "scanner": "repobility-ast-engine", "fingerprint": "780df29d16e5c01ace7aa4bf763e1d5a1968b5d49e5ecaa28c8efce2b7f80e5e", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "missing-import-python", "owasp": "A06:2021", "cwe_ids": ["CWE-1075"], "languages": ["python"], "observations_count": 2192}, "scanner": "repobility-ast-engine", "correlation_key": "fp|780df29d16e5c01ace7aa4bf763e1d5a1968b5d49e5ecaa28c8efce2b7f80e5e"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/test_cli_visitors_more2.py"}, "region": {"startLine": 23}}}]}, {"ruleId": "MINED107", "level": "error", "message": {"text": "Missing import: `ast` used but not imported"}, "properties": {"repobilityId": 125781, "scanner": "repobility-ast-engine", "fingerprint": "09177c2a1e9dbe2129cd0945be5c6a4a876b99716b15f39fa76b1592f1dfd2a6", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "missing-import-python", "owasp": "A06:2021", "cwe_ids": ["CWE-1075"], "languages": ["python"], "observations_count": 2192}, "scanner": "repobility-ast-engine", "correlation_key": "fp|09177c2a1e9dbe2129cd0945be5c6a4a876b99716b15f39fa76b1592f1dfd2a6"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/test_comment_preservation.py"}, "region": {"startLine": 36}}}]}, {"ruleId": "MINED107", "level": "error", "message": {"text": "Missing import: `ast` used but not imported"}, "properties": {"repobilityId": 125780, "scanner": "repobility-ast-engine", "fingerprint": "42aa143505c9f7d3295def3257a8bde0391e5dd10c9c65738056dbf3cb11a795", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "missing-import-python", "owasp": "A06:2021", "cwe_ids": ["CWE-1075"], "languages": ["python"], "observations_count": 2192}, "scanner": "repobility-ast-engine", "correlation_key": "fp|42aa143505c9f7d3295def3257a8bde0391e5dd10c9c65738056dbf3cb11a795"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/test_types_expr_inference_more3.py"}, "region": {"startLine": 1569}}}]}, {"ruleId": "MINED107", "level": "error", "message": {"text": "Missing import: `ast` used but not imported"}, "properties": {"repobilityId": 125779, "scanner": "repobility-ast-engine", "fingerprint": "15ce83184f73e9ac2bdc87c88128e892a791d195e12f7398b3d25392466ed668", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "missing-import-python", "owasp": "A06:2021", "cwe_ids": ["CWE-1075"], "languages": ["python"], "observations_count": 2192}, "scanner": "repobility-ast-engine", "correlation_key": "fp|15ce83184f73e9ac2bdc87c88128e892a791d195e12f7398b3d25392466ed668"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/test_optimization_rule_optimizer_more.py"}, "region": {"startLine": 67}}}]}, {"ruleId": "MINED107", "level": "error", "message": {"text": "Missing import: `ast` used but not imported"}, "properties": {"repobilityId": 125778, "scanner": "repobility-ast-engine", "fingerprint": "78b91ba349a978b7784151912c2ca31e6fff95c76d271751437ddfcb95d85f07", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "missing-import-python", "owasp": "A06:2021", "cwe_ids": ["CWE-1075"], "languages": ["python"], "observations_count": 2192}, "scanner": "repobility-ast-engine", "correlation_key": "fp|78b91ba349a978b7784151912c2ca31e6fff95c76d271751437ddfcb95d85f07"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/test_yaral_parser_more3.py"}, "region": {"startLine": 46}}}]}, {"ruleId": "MINED107", "level": "error", "message": {"text": "Missing import: `ast` used but not imported"}, "properties": {"repobilityId": 125755, "scanner": "repobility-ast-engine", "fingerprint": "422c654fdbeafda22eca018698bf332162dbb5eefb540b816bc004a6be18964e", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "missing-import-python", "owasp": "A06:2021", "cwe_ids": ["CWE-1075"], "languages": ["python"], "observations_count": 2192}, "scanner": "repobility-ast-engine", "correlation_key": "fp|422c654fdbeafda22eca018698bf332162dbb5eefb540b816bc004a6be18964e"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/test_unified_parser_streaming.py"}, "region": {"startLine": 99}}}]}, {"ruleId": "MINED107", "level": "error", "message": {"text": "Missing import: `ast` used but not imported"}, "properties": {"repobilityId": 125752, "scanner": "repobility-ast-engine", "fingerprint": "d9517951f776c5e31b84c7fa11caab3474a49650c5bc75d4942df7fd67ed1b01", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "missing-import-python", "owasp": "A06:2021", "cwe_ids": ["CWE-1075"], "languages": ["python"], "observations_count": 2192}, "scanner": "repobility-ast-engine", "correlation_key": "fp|d9517951f776c5e31b84c7fa11caab3474a49650c5bc75d4942df7fd67ed1b01"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "benchmarks/test_benchmarks.py"}, "region": {"startLine": 345}}}]}, {"ruleId": "MINED107", "level": "error", "message": {"text": "Missing import: `operator` used but not imported"}, "properties": {"repobilityId": 125751, "scanner": "repobility-ast-engine", "fingerprint": "602de090c38d08d5a349c64b8637a753ae59bdf890a02b28b95ab7fbda6458e2", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "missing-import-python", "owasp": "A06:2021", "cwe_ids": ["CWE-1075"], "languages": ["python"], "observations_count": 2192}, "scanner": "repobility-ast-engine", "correlation_key": "fp|602de090c38d08d5a349c64b8637a753ae59bdf890a02b28b95ab7fbda6458e2"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "benchmarks/test_file_generator.py"}, "region": {"startLine": 253}}}]}, {"ruleId": "MINED107", "level": "error", "message": {"text": "Missing import: `ast` used but not imported"}, "properties": {"repobilityId": 125722, "scanner": "repobility-ast-engine", "fingerprint": "856cbda4dee0335e1000ad556785c046dfb33b1fafd88b3dddd22d9a6f1b301c", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "missing-import-python", "owasp": "A06:2021", "cwe_ids": ["CWE-1075"], "languages": ["python"], "observations_count": 2192}, "scanner": "repobility-ast-engine", "correlation_key": "fp|856cbda4dee0335e1000ad556785c046dfb33b1fafd88b3dddd22d9a6f1b301c"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "benchmarks/benchmark_large_files.py"}, "region": {"startLine": 111}}}]}, {"ruleId": "MINED107", "level": "error", "message": {"text": "Missing import: `ast` used but not imported"}, "properties": {"repobilityId": 125721, "scanner": "repobility-ast-engine", "fingerprint": "bb13bea69246a9cb1866b0c2bc33527e89e071562e48ae373e8eabe7f1d129a4", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "missing-import-python", "owasp": "A06:2021", "cwe_ids": ["CWE-1075"], "languages": ["python"], "observations_count": 2192}, "scanner": "repobility-ast-engine", "correlation_key": "fp|bb13bea69246a9cb1866b0c2bc33527e89e071562e48ae373e8eabe7f1d129a4"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "examples/vt_livehunt_demo.py"}, "region": {"startLine": 42}}}]}]}]}