{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "scanner-5cd1c462f1b7f773", "name": "Insecure pattern 'direct_innerhtml_assignment' in wwh-splash-lock.js:214", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in wwh-splash-lock.js:214"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6eb4c66c4ad0f9d3", "name": "Insecure pattern 'direct_innerhtml_assignment' in wwh-audio-reactive.js:135", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in wwh-audio-reactive.js:135"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4eaa3f4a0a315ba9", "name": "Insecure pattern 'direct_innerhtml_assignment' in wwh-hero-universe.js:105", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in wwh-hero-universe.js:105"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-87ff383daea5f586", "name": "Insecure pattern 'direct_innerhtml_assignment' in wwh-effects.js:369", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in wwh-effects.js:369"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2e9258137de77d54", "name": "Insecure pattern 'direct_innerhtml_assignment' in brand-effects.js:25", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in brand-effects.js:25"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6372cebde0220094", "name": "No auth library detected", "shortDescription": {"text": "No auth library detected"}, "fullDescription": {"text": "The scanner did not find any standard auth library (JWT, OAuth, NextAuth, Auth0, etc.). The repo has auth/admin/session surface indicators, so auth may live in custom code, in a separate service, or be missing."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7d535a2d63f80980", "name": "Very large file: wwh-hero-voxel.js (1391 lines)", "shortDescription": {"text": "Very large file: wwh-hero-voxel.js (1391 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ba212b6b4b8afb17", "name": "Very large file: wwh-hero-monogram.js (1606 lines)", "shortDescription": {"text": "Very large file: wwh-hero-monogram.js (1606 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6893a6c8b0861585", "name": "Very low test-to-source ratio", "shortDescription": {"text": "Very low test-to-source ratio"}, "fullDescription": {"text": "0 test file(s) for 11 source file(s) (ratio 0.00). Consider adding integration or unit tests for critical paths."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-141b30a41e03817b", "name": "No license file detected", "shortDescription": {"text": "No license file detected"}, "fullDescription": {"text": "No LICENSE/COPYING/NOTICE file was found. Generated repositories often omit licensing, which blocks reuse and automated intake."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-faccb9061e9b52a0", "name": "No README detected", "shortDescription": {"text": "No README detected"}, "fullDescription": {"text": "No README file was found. Generated repos without README context are hard to operate, validate, or safely hand off."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b9088664ace7f748", "name": "Composite production-readiness gap", "shortDescription": {"text": "Composite production-readiness gap"}, "fullDescription": {"text": "Multiple low-cost hardening controls are missing together: license, ci, tests, operator-readme. Opus verification showed these co-occurring gaps are a better readiness signal than reading each flag in isolation."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-85222d7260399280", "name": "Commented-code block (6 lines) in wwh-splash-lock.js:253", "shortDescription": {"text": "Commented-code block (6 lines) in wwh-splash-lock.js:253"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-4074a3e758e119c7", "name": "Commented-code block (5 lines) in wwh-paw-trail.js:30", "shortDescription": {"text": "Commented-code block (5 lines) in wwh-paw-trail.js:30"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-9a1eee5276c08f91", "name": "Commented-code block (10 lines) in wwh-hero-canvas.js:91", "shortDescription": {"text": "Commented-code block (10 lines) in wwh-hero-canvas.js:91"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-a4a50ea5100d9d61", "name": "Commented-code block (5 lines) in wwh-hero-voxel.js:166", "shortDescription": {"text": "Commented-code block (5 lines) in wwh-hero-voxel.js:166"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-4143d7c77943b0c7", "name": "Commented-code block (6 lines) in script.js:11", "shortDescription": {"text": "Commented-code block (6 lines) in script.js:11"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-817ffb70cbedce22", "name": "Commented-code block (6 lines) in wwh-audio-reactive.js:227", "shortDescription": {"text": "Commented-code block (6 lines) in wwh-audio-reactive.js:227"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-301a45b8ef540b04", "name": "Commented-code block (12 lines) in wwh-hero-universe.js:472", "shortDescription": {"text": "Commented-code block (12 lines) in wwh-hero-universe.js:472"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-07656c2801d39e45", "name": "Commented-code block (6 lines) in wwh-hero-monogram.js:461", "shortDescription": {"text": "Commented-code block (6 lines) in wwh-hero-monogram.js:461"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-8d0be86cbc2f6f2b", "name": "Commented-code block (7 lines) in brand-effects.js:14", "shortDescription": {"text": "Commented-code block (7 lines) in brand-effects.js:14"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/25542"}, "properties": {"repository": "Dr-WELI/WildWooHooDotCom", "repoUrl": "https://github.com/Dr-WELI/WildWooHooDotCom", "branch": "main"}, "results": [{"ruleId": "scanner-5cd1c462f1b7f773", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in wwh-splash-lock.js:214"}, "properties": {"repobilityId": "b594cdb3192b7bb9", "scanner": "scanner-primary", "fingerprint": "5cd1c462f1b7f773", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "wwh-splash-lock.js"}, "region": {"startLine": 214}}}]}, {"ruleId": "scanner-6eb4c66c4ad0f9d3", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in wwh-audio-reactive.js:135"}, "properties": {"repobilityId": "0286b5942b35c8a4", "scanner": "scanner-primary", "fingerprint": "6eb4c66c4ad0f9d3", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "wwh-audio-reactive.js"}, "region": {"startLine": 135}}}]}, {"ruleId": "scanner-4eaa3f4a0a315ba9", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in wwh-hero-universe.js:105"}, "properties": {"repobilityId": "2679e3fd3c84ac54", "scanner": "scanner-primary", "fingerprint": "4eaa3f4a0a315ba9", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "wwh-hero-universe.js"}, "region": {"startLine": 105}}}]}, {"ruleId": "scanner-87ff383daea5f586", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in wwh-effects.js:369"}, "properties": {"repobilityId": "3ae205e849ff2e68", "scanner": "scanner-primary", "fingerprint": "87ff383daea5f586", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "wwh-effects.js"}, "region": {"startLine": 369}}}]}, {"ruleId": "scanner-2e9258137de77d54", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in brand-effects.js:25"}, "properties": {"repobilityId": "48067d97f2ec1232", "scanner": "scanner-primary", "fingerprint": "2e9258137de77d54", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "brand-effects.js"}, "region": {"startLine": 25}}}]}, {"ruleId": "scanner-6372cebde0220094", "level": "warning", "message": {"text": "No auth library detected"}, "properties": {"repobilityId": "a5b6035a5bbf8054", "scanner": "scanner-primary", "fingerprint": "6372cebde0220094", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["coverage", "auth"]}}, {"ruleId": "scanner-7d535a2d63f80980", "level": "note", "message": {"text": "Very large file: wwh-hero-voxel.js (1391 lines)"}, "properties": {"repobilityId": "f8c8522e7ab954b2", "scanner": "scanner-primary", "fingerprint": "7d535a2d63f80980", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-ba212b6b4b8afb17", "level": "note", "message": {"text": "Very large file: wwh-hero-monogram.js (1606 lines)"}, "properties": {"repobilityId": "34804fa6a0f38988", "scanner": "scanner-primary", "fingerprint": "ba212b6b4b8afb17", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-6893a6c8b0861585", "level": "warning", "message": {"text": "Very low test-to-source ratio"}, "properties": {"repobilityId": "54a7de3f06314bf0", "scanner": "scanner-primary", "fingerprint": "6893a6c8b0861585", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["tests", "coverage"]}}, {"ruleId": "scanner-141b30a41e03817b", "level": "note", "message": {"text": "No license file detected"}, "properties": {"repobilityId": "ad6025040dafc8ff", "scanner": "scanner-primary", "fingerprint": "141b30a41e03817b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["license", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-faccb9061e9b52a0", "level": "note", "message": {"text": "No README detected"}, "properties": {"repobilityId": "d7e8b0f055c16b3e", "scanner": "scanner-primary", "fingerprint": "faccb9061e9b52a0", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["docs", "readme", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-b9088664ace7f748", "level": "warning", "message": {"text": "Composite production-readiness gap"}, "properties": {"repobilityId": "497f24cf910ad428", "scanner": "scanner-primary", "fingerprint": "b9088664ace7f748", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["production-readiness", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-85222d7260399280", "level": "none", "message": {"text": "Commented-code block (6 lines) in wwh-splash-lock.js:253"}, "properties": {"repobilityId": "ca0c2ca864b1361f", "scanner": "scanner-primary", "fingerprint": "85222d7260399280", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-4074a3e758e119c7", "level": "none", "message": {"text": "Commented-code block (5 lines) in wwh-paw-trail.js:30"}, "properties": {"repobilityId": "5a09af0f0e952e2f", "scanner": "scanner-primary", "fingerprint": "4074a3e758e119c7", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-9a1eee5276c08f91", "level": "none", "message": {"text": "Commented-code block (10 lines) in wwh-hero-canvas.js:91"}, "properties": {"repobilityId": "ce529c4c4ddd5efc", "scanner": "scanner-primary", "fingerprint": "9a1eee5276c08f91", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-a4a50ea5100d9d61", "level": "none", "message": {"text": "Commented-code block (5 lines) in wwh-hero-voxel.js:166"}, "properties": {"repobilityId": "7b2c27c76d277b75", "scanner": "scanner-primary", "fingerprint": "a4a50ea5100d9d61", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-4143d7c77943b0c7", "level": "none", "message": {"text": "Commented-code block (6 lines) in script.js:11"}, "properties": {"repobilityId": "146cb7fc0881616e", "scanner": "scanner-primary", "fingerprint": "4143d7c77943b0c7", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-817ffb70cbedce22", "level": "none", "message": {"text": "Commented-code block (6 lines) in wwh-audio-reactive.js:227"}, "properties": {"repobilityId": "5606c0cd2596b96c", "scanner": "scanner-primary", "fingerprint": "817ffb70cbedce22", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-301a45b8ef540b04", "level": "none", "message": {"text": "Commented-code block (12 lines) in wwh-hero-universe.js:472"}, "properties": {"repobilityId": "0670013318527edf", "scanner": "scanner-primary", "fingerprint": "301a45b8ef540b04", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-07656c2801d39e45", "level": "none", "message": {"text": "Commented-code block (6 lines) in wwh-hero-monogram.js:461"}, "properties": {"repobilityId": "f31dc047bd22946e", "scanner": "scanner-primary", "fingerprint": "07656c2801d39e45", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-8d0be86cbc2f6f2b", "level": "none", "message": {"text": "Commented-code block (7 lines) in brand-effects.js:14"}, "properties": {"repobilityId": "6d01b7f6a954ee4e", "scanner": "scanner-primary", "fingerprint": "8d0be86cbc2f6f2b", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}]}]}