{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "scanner-cb396ceb6d0e15bd", "name": "Stray `console.log` in TS/JS \u2014 packages/ee/embed-sdk/src/index.ts:569", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/ee/embed-sdk/src/index.ts:569"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-dc27dd44a76a5e03", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/workable/src/lib/common/get-subdomain.ts:12", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/workable/src/lib/common/get-subdomain.ts:12"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-40bc32260909cebf", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/certopus/src/lib/actions/create-credential.ts:77", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/certopus/src/lib/actions/create-credential.ts:77"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-42df0594a5b55ea7", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/respaid/src/lib/common/index.ts:42", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/respaid/src/lib/common/index.ts:42"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0c9dfe066e054d27", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/discourse/src/lib/actions/create-topic.action.ts:65", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/discourse/src/lib/actions/create-topic.action.ts:65"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-28aa0f2fb4ec9c47", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/shippo/src/lib/triggers/new-order.ts:28", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/shippo/src/lib/triggers/new-order.ts:28"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0a90e6d462cca8de", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/lokalise/src/lib/triggers/key-added.ts:27", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/lokalise/src/lib/triggers/key-added.ts:27"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-bd756d4aaa841dcb", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/outseta/src/action/update-account.ts:85", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/outseta/src/action/update-account.ts:85"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2c205b1f578767ae", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/outseta/src/action/update-person.ts:81", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/outseta/src/action/update-person.ts:81"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7c4f1e21294e5d08", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/vlm-run/src/lib/common/index.ts:52", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/vlm-run/src/lib/common/index.ts:52"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4825bbc906244eed", "name": "TODO/FIXME marker in shipping code \u2014 packages/pieces/community/azure-openai/src/lib/common/index.ts:38", "shortDescription": {"text": "TODO/FIXME marker in shipping code \u2014 packages/pieces/community/azure-openai/src/lib/common/index.ts:38"}, "fullDescription": {"text": "Track in /reviews or /issues, not as a code comment that rots.\n\nWhy: Drift control \u2014 shouldn't be the same as Quality TODO scanner.\nRule id: fq.todo-marker"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-d2debefc8c75f243", "name": "TODO/FIXME marker in shipping code \u2014 packages/pieces/community/bexio/src/lib/actions/create-time-tracking.ts:75", "shortDescription": {"text": "TODO/FIXME marker in shipping code \u2014 packages/pieces/community/bexio/src/lib/actions/create-time-tracking.ts:75"}, "fullDescription": {"text": "Track in /reviews or /issues, not as a code comment that rots.\n\nWhy: Drift control \u2014 shouldn't be the same as Quality TODO scanner.\nRule id: fq.todo-marker"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-6783975d7bec0246", "name": "TODO/FIXME marker in shipping code \u2014 packages/pieces/community/bexio/src/lib/actions/create-product.ts:317", "shortDescription": {"text": "TODO/FIXME marker in shipping code \u2014 packages/pieces/community/bexio/src/lib/actions/create-product.ts:317"}, "fullDescription": {"text": "Track in /reviews or /issues, not as a code comment that rots.\n\nWhy: Drift control \u2014 shouldn't be the same as Quality TODO scanner.\nRule id: fq.todo-marker"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-a034644c781791b8", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/google-drive/src/lib/action/search-folder-or-file.action.ts:107", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/google-drive/src/lib/action/search-folder-or-file.action.ts:107"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4ff5c5de2c0edc7d", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/google-drive/src/lib/action/get-file-by-id.ts:32", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/google-drive/src/lib/action/get-file-by-id.ts:32"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4c4ce6b1f985c8d8", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/serp-api/src/lib/services/serp-api-client.ts:146", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/serp-api/src/lib/services/serp-api-client.ts:146"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d50ff36fcdad03d4", "name": "TODO/FIXME marker in shipping code \u2014 packages/pieces/community/clickup/src/lib/actions/chat/create-channel-in-space-fold", "shortDescription": {"text": "TODO/FIXME marker in shipping code \u2014 packages/pieces/community/clickup/src/lib/actions/chat/create-channel-in-space-folder-list.ts:47"}, "fullDescription": {"text": "Track in /reviews or /issues, not as a code comment that rots.\n\nWhy: Drift control \u2014 shouldn't be the same as Quality TODO scanner.\nRule id: fq.todo-marker"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-ad3357245040975b", "name": "TODO/FIXME marker in shipping code \u2014 packages/pieces/community/clickup/src/lib/actions/chat/create-channel.ts:34", "shortDescription": {"text": "TODO/FIXME marker in shipping code \u2014 packages/pieces/community/clickup/src/lib/actions/chat/create-channel.ts:34"}, "fullDescription": {"text": "Track in /reviews or /issues, not as a code comment that rots.\n\nWhy: Drift control \u2014 shouldn't be the same as Quality TODO scanner.\nRule id: fq.todo-marker"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b5e99be8592c5a6a", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/foreplay-co/src/lib/triggers/new-ad-in-board.ts:39", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/foreplay-co/src/lib/triggers/new-ad-in-board.ts:39"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d9455ee49bf2ed4c", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/foreplay-co/src/lib/triggers/new-swipefile-ad.ts:11", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/foreplay-co/src/lib/triggers/new-swipefile-ad.ts:11"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-510886f953291e46", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/timelines-ai/src/lib/actions/find-chat.ts:77", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/timelines-ai/src/lib/actions/find-chat.ts:77"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0958e663adfb878e", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/quaderno/src/lib/common/client.ts:17", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/quaderno/src/lib/common/client.ts:17"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a009a46dd220513a", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/odoo/src/commom/index.ts:61", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/odoo/src/commom/index.ts:61"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-228a6d2d50cfb399", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/odoo/src/lib/actions/create-company.ts:41", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/odoo/src/lib/actions/create-company.ts:41"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-34c9965140df225b", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/mailchain/src/lib/actions/send-email.ts:27", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/mailchain/src/lib/actions/send-email.ts:27"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-57e351f636402008", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/wufoo/src/lib/triggers/new-form-entry.ts:80", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/wufoo/src/lib/triggers/new-form-entry.ts:80"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ffd81093f35cff5b", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/wufoo/src/lib/triggers/new-form.ts:76", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/wufoo/src/lib/triggers/new-form.ts:76"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-068a415726cd9042", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/microsoft-365-planner/src/lib/common/properties.ts:90", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/microsoft-365-planner/src/lib/common/properties.ts:90"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6265b72992a9ba55", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/oracle-database/src/lib/common/auth.ts:118", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/oracle-database/src/lib/common/auth.ts:118"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-bf72ad6660b6356b", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/oracle-database/src/lib/common/thick-mode.ts:74", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/oracle-database/src/lib/common/thick-mode.ts:74"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-46ff79d171cb205a", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/assembled/src/lib/actions/update-OOO.ts:59", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/assembled/src/lib/actions/update-OOO.ts:59"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-28623dfa2a96791d", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/aminos/src/lib/actions/createUser.ts:43", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/aminos/src/lib/actions/createUser.ts:43"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f419cbcef9a9f17e", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/sitespeakai/src/lib/triggers/new-lead.ts:25", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/sitespeakai/src/lib/triggers/new-lead.ts:25"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1831d176a701611f", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/qdrant/src/lib/actions/delete-points.ts:37", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/qdrant/src/lib/actions/delete-points.ts:37"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-019e7b905610f70f", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/googlechat/src/lib/triggers/new-mention.ts:38", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/googlechat/src/lib/triggers/new-mention.ts:38"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-914685abdaac439b", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/googlechat/src/lib/triggers/new-message.ts:37", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/googlechat/src/lib/triggers/new-message.ts:37"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-86b906cd7677b7eb", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/googlechat/src/lib/common/requests.ts:472", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/googlechat/src/lib/common/requests.ts:472"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0ca387c2d70a8e54", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/okta/src/lib/triggers/new-event.ts:60", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/okta/src/lib/triggers/new-event.ts:60"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ae934812d83fc3b3", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/okta/src/lib/common/common.ts:86", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/okta/src/lib/common/common.ts:86"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-658693e922b07a65", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/beehiiv/src/lib/actions/update-subscription.action.ts:74", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/beehiiv/src/lib/actions/update-subscription.action.ts:74"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8e2319e7248975ce", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/fireflies-ai/src/lib/actions/find-recent-meeting.ts:47", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/fireflies-ai/src/lib/actions/find-recent-meeting.ts:47"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-be53dd4960634516", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/sendinblue/src/lib/actions/create-or-update-contact.ts:93", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/sendinblue/src/lib/actions/create-or-update-contact.ts:93"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-500d33a5eadc3bd8", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/capsule-crm/src/lib/common/client.ts:172", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/capsule-crm/src/lib/common/client.ts:172"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0325e4efb277618f", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/pdf-co/src/lib/actions/add-image-to-pdf.ts:112", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/pdf-co/src/lib/actions/add-image-to-pdf.ts:112"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b6b7cb7bd34caf89", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/quickbase/src/lib/common/props.ts:35", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/quickbase/src/lib/common/props.ts:35"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a382c111622dfab8", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/quickbase/src/lib/actions/find-or-create-record.ts:78", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/quickbase/src/lib/actions/find-or-create-record.ts:78"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2f55b35899194710", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/smartsheet/src/lib/common/index.ts:804", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/smartsheet/src/lib/common/index.ts:804"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1bf27172d7e0db07", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/invoiceninja/src/lib/actions/get-invoices.ts:79", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/invoiceninja/src/lib/actions/get-invoices.ts:79"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a2b4667883455630", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/invoiceninja/src/lib/actions/get-report.ts:63", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/invoiceninja/src/lib/actions/get-report.ts:63"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7f0d792b4a52a705", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/acuity-scheduling/src/lib/triggers/appointment-canceled.ts:117", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/acuity-scheduling/src/lib/triggers/appointment-canceled.ts:117"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fbde209f2e4e1110", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/acuity-scheduling/src/lib/triggers/appointment-scheduled.ts:114", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/acuity-scheduling/src/lib/triggers/appointment-scheduled.ts:114"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8dc0ac0720fc4a62", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/simpliroute/src/lib/auth.ts:10", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/simpliroute/src/lib/auth.ts:10"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-98d87ca89e9eb5a5", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/simpliroute/src/lib/actions/clients/get-clients.ts:26", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/simpliroute/src/lib/actions/clients/get-clients.ts:26"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-28bc802ec81fdf37", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/supabase/src/lib/triggers/new-row.ts:80", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/supabase/src/lib/triggers/new-row.ts:80"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-da34db8c84ca5549", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/supabase/src/lib/common/props.ts:89", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/supabase/src/lib/common/props.ts:89"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ed71cb3ef68c66b1", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/formstack/src/lib/triggers/new-form.ts:33", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/formstack/src/lib/triggers/new-form.ts:33"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a85628512e643f72", "name": "TODO/FIXME marker in shipping code \u2014 packages/pieces/community/convertkit/src/lib/triggers/index.ts:263", "shortDescription": {"text": "TODO/FIXME marker in shipping code \u2014 packages/pieces/community/convertkit/src/lib/triggers/index.ts:263"}, "fullDescription": {"text": "Track in /reviews or /issues, not as a code comment that rots.\n\nWhy: Drift control \u2014 shouldn't be the same as Quality TODO scanner.\nRule id: fq.todo-marker"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-d2d0d3e24b8675b6", "name": "TODO/FIXME marker in shipping code \u2014 packages/pieces/community/convertkit/src/lib/actions/tags.ts:83", "shortDescription": {"text": "TODO/FIXME marker in shipping code \u2014 packages/pieces/community/convertkit/src/lib/actions/tags.ts:83"}, "fullDescription": {"text": "Track in /reviews or /issues, not as a code comment that rots.\n\nWhy: Drift control \u2014 shouldn't be the same as Quality TODO scanner.\nRule id: fq.todo-marker"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2ff6bb0eb0e9a2d3", "name": "TODO/FIXME marker in shipping code \u2014 packages/pieces/community/convertkit/src/lib/actions/purchases.ts:93", "shortDescription": {"text": "TODO/FIXME marker in shipping code \u2014 packages/pieces/community/convertkit/src/lib/actions/purchases.ts:93"}, "fullDescription": {"text": "Track in /reviews or /issues, not as a code comment that rots.\n\nWhy: Drift control \u2014 shouldn't be the same as Quality TODO scanner.\nRule id: fq.todo-marker"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-7db84eeb5e703f9b", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/phantombuster/src/lib/triggers/new-output.ts:76", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/phantombuster/src/lib/triggers/new-output.ts:76"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a5be2a78dedeaf30", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/phantombuster/src/lib/common/client.ts:14", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/phantombuster/src/lib/common/client.ts:14"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9d1c16356281f342", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/phantombuster/src/lib/actions/launch-phantom.ts:73", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/phantombuster/src/lib/actions/launch-phantom.ts:73"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5f3aaa2f4b300504", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/wedof/src/lib/common/wedof.ts:76", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/wedof/src/lib/common/wedof.ts:76"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ab2aa344a1a61d67", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/softr/src/lib/triggers/new-database-record.ts:47", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/softr/src/lib/triggers/new-database-record.ts:47"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e3fcf471359e1ce5", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/podio/src/lib/actions/create-task.ts:97", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/podio/src/lib/actions/create-task.ts:97"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5a787379b5c02aca", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/pinecone/src/lib/actions/create-index.ts:297", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/pinecone/src/lib/actions/create-index.ts:297"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3dc4ce9d77e0a6a4", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/pinecone/src/lib/actions/search-index.ts:87", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/pinecone/src/lib/actions/search-index.ts:87"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9d793856e847c9ec", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/pinecone/src/lib/actions/upsert-vector.ts:243", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/pinecone/src/lib/actions/upsert-vector.ts:243"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1ef6c324b8f2f8de", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/pinecone/src/lib/actions/get-vector.ts:88", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/pinecone/src/lib/actions/get-vector.ts:88"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-677910810ab6484f", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/pinecone/src/lib/actions/search-vector.ts:202", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/pinecone/src/lib/actions/search-vector.ts:202"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-511b8a3639a87363", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/pinecone/src/lib/actions/delete-vector.ts:158", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/pinecone/src/lib/actions/delete-vector.ts:158"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-36677024f0d637bd", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/pinecone/src/lib/actions/update-vector.ts:161", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/pinecone/src/lib/actions/update-vector.ts:161"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-45267ea0cba8c637", "name": "TODO/FIXME marker in shipping code \u2014 packages/pieces/community/openai/src/lib/common/common.ts:122", "shortDescription": {"text": "TODO/FIXME marker in shipping code \u2014 packages/pieces/community/openai/src/lib/common/common.ts:122"}, "fullDescription": {"text": "Track in /reviews or /issues, not as a code comment that rots.\n\nWhy: Drift control \u2014 shouldn't be the same as Quality TODO scanner.\nRule id: fq.todo-marker"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-03ff2f31f5391200", "name": "TODO/FIXME marker in shipping code \u2014 packages/pieces/community/insightly/src/lib/common/props.ts:206", "shortDescription": {"text": "TODO/FIXME marker in shipping code \u2014 packages/pieces/community/insightly/src/lib/common/props.ts:206"}, "fullDescription": {"text": "Track in /reviews or /issues, not as a code comment that rots.\n\nWhy: Drift control \u2014 shouldn't be the same as Quality TODO scanner.\nRule id: fq.todo-marker"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2ff58460be2bf13e", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/moonclerk/src/lib/common/auth.ts:11", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/moonclerk/src/lib/common/auth.ts:11"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e4b482ad4a95e167", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/front/src/lib/common/dropdown.ts:28", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/front/src/lib/common/dropdown.ts:28"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b7feaa85c871c3e9", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/front/src/lib/actions/find-contact.ts:52", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/front/src/lib/actions/find-contact.ts:52"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a893d82a27b41cfe", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/zendesk-sell/src/lib/triggers/deal_enters_stage.ts:94", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/zendesk-sell/src/lib/triggers/deal_enters_stage.ts:94"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7bd4e7852c6056f0", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/mongodb/src/index.ts:87", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/mongodb/src/index.ts:87"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c44f7642b2bb7e65", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/mongodb/src/lib/common/index.ts:48", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/mongodb/src/lib/common/index.ts:48"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5dd69a6ae4052798", "name": "TODO/FIXME marker in shipping code \u2014 packages/pieces/community/drupal/src/lib/common/jsonapi.ts:79", "shortDescription": {"text": "TODO/FIXME marker in shipping code \u2014 packages/pieces/community/drupal/src/lib/common/jsonapi.ts:79"}, "fullDescription": {"text": "Track in /reviews or /issues, not as a code comment that rots.\n\nWhy: Drift control \u2014 shouldn't be the same as Quality TODO scanner.\nRule id: fq.todo-marker"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-6c13e16111ed7274", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/gmail/src/lib/common/props.ts:143", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/gmail/src/lib/common/props.ts:143"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-668b3f5151552ea1", "name": "Custom React Flow node registered without explicit width/height \u2014 packages/pieces/community/zeplin/src/lib/triggers/new-", "shortDescription": {"text": "Custom React Flow node registered without explicit width/height \u2014 packages/pieces/community/zeplin/src/lib/triggers/new-screen.ts:17"}, "fullDescription": {"text": "When you register a custom node type via `nodeTypes`, the RFNode object you build must include `width` and `height` props. Without them, MiniMap renders ZERO mini-nodes for that type and `fitView` underestimates the bounds (cuts off lane labels, etc.). Add `width: \u2026, height: \u2026` to the node object. See P-I.\n\nWhy: P-I in CHECKLIST.md \u2014 RF MiniMap + fitView need explicit dims on custom nodes.\nRule id: fq.rfnode.no-dims"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7046034722a4a53d", "name": "Custom React Flow node registered without explicit width/height \u2014 packages/pieces/community/zeplin/src/lib/triggers/new-", "shortDescription": {"text": "Custom React Flow node registered without explicit width/height \u2014 packages/pieces/community/zeplin/src/lib/triggers/new-note.ts:22"}, "fullDescription": {"text": "When you register a custom node type via `nodeTypes`, the RFNode object you build must include `width` and `height` props. Without them, MiniMap renders ZERO mini-nodes for that type and `fitView` underestimates the bounds (cuts off lane labels, etc.). Add `width: \u2026, height: \u2026` to the node object. See P-I.\n\nWhy: P-I in CHECKLIST.md \u2014 RF MiniMap + fitView need explicit dims on custom nodes.\nRule id: fq.rfnode.no-dims"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-34deb90c0c340dd9", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/mailer-lite/src/triggers/triggers.ts:140", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/mailer-lite/src/triggers/triggers.ts:140"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-be7f3654890e0c69", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/docsbot/src/lib/actions/upload-source-file.ts:14", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/docsbot/src/lib/actions/upload-source-file.ts:14"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-088855d71825d464", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/baserow/src/lib/common/index.ts:336", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/baserow/src/lib/common/index.ts:336"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-89bc81a1bae11149", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/bitly/src/lib/triggers/new-bitlink-created.ts:76", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/bitly/src/lib/triggers/new-bitlink-created.ts:76"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-96aa45b331a166f1", "name": "TODO/FIXME marker in shipping code \u2014 packages/pieces/community/clarifai/src/lib/common/index.ts:65", "shortDescription": {"text": "TODO/FIXME marker in shipping code \u2014 packages/pieces/community/clarifai/src/lib/common/index.ts:65"}, "fullDescription": {"text": "Track in /reviews or /issues, not as a code comment that rots.\n\nWhy: Drift control \u2014 shouldn't be the same as Quality TODO scanner.\nRule id: fq.todo-marker"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-0ae2c220fb2858e9", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/localai/src/lib/actions/send-prompt.ts:204", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/localai/src/lib/actions/send-prompt.ts:204"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-af342a7d1a75e74e", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/tarvent/src/lib/common/index.ts:59", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/tarvent/src/lib/common/index.ts:59"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fd424c906249665c", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/tarvent/src/lib/common/client.ts:383", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/tarvent/src/lib/common/client.ts:383"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-17134954527fb8a2", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/calendly/src/lib/trigger/invitee-created.trigger.ts:82", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/calendly/src/lib/trigger/invitee-created.trigger.ts:82"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3f4492862216b87d", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/zoho-bookings/src/lib/common/index.ts:170", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/zoho-bookings/src/lib/common/index.ts:170"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-78f0341f8a550952", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/zoho-bookings/src/lib/actions/reschedule-appointment.ts:172", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/zoho-bookings/src/lib/actions/reschedule-appointment.ts:172"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d7de75f9ee4134b4", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/pandadoc/src/lib/triggers/document-state-changed.ts:90", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/pandadoc/src/lib/triggers/document-state-changed.ts:90"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8dcdd90d7646078f", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/pandadoc/src/lib/triggers/document-updated.ts:172", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/pandadoc/src/lib/triggers/document-updated.ts:172"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b8f11531f750efdf", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/pandadoc/src/lib/triggers/document-completed.ts:161", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/pandadoc/src/lib/triggers/document-completed.ts:161"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-30e1bee4034fb7ce", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/aidbase/src/lib/triggers/ticket-status-changed.ts:74", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/aidbase/src/lib/triggers/ticket-status-changed.ts:74"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e08c1bf9240e229b", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/claude/src/lib/actions/send-prompt.ts:200", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/claude/src/lib/actions/send-prompt.ts:200"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a70343678c1715f7", "name": "TODO/FIXME marker in shipping code \u2014 packages/pieces/community/webflow/src/lib/triggers/new-form-submitted.ts:27", "shortDescription": {"text": "TODO/FIXME marker in shipping code \u2014 packages/pieces/community/webflow/src/lib/triggers/new-form-submitted.ts:27"}, "fullDescription": {"text": "Track in /reviews or /issues, not as a code comment that rots.\n\nWhy: Drift control \u2014 shouldn't be the same as Quality TODO scanner.\nRule id: fq.todo-marker"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-395836a2b3f4c641", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/mattermost/src/lib/actions/send-message.ts:49", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/mattermost/src/lib/actions/send-message.ts:49"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3ff9ab9682e48651", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/shopify/src/lib/common/register-webhook.ts:54", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/shopify/src/lib/common/register-webhook.ts:54"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-409174dca40bec9c", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/oncehub/src/lib/common/auth.ts:11", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/oncehub/src/lib/common/auth.ts:11"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-721d4e6723e714d0", "name": "TODO/FIXME marker in shipping code \u2014 packages/pieces/community/google-calendar/src/index.ts:56", "shortDescription": {"text": "TODO/FIXME marker in shipping code \u2014 packages/pieces/community/google-calendar/src/index.ts:56"}, "fullDescription": {"text": "Track in /reviews or /issues, not as a code comment that rots.\n\nWhy: Drift control \u2014 shouldn't be the same as Quality TODO scanner.\nRule id: fq.todo-marker"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-c2160ecfd22a4994", "name": "TODO/FIXME marker in shipping code \u2014 packages/pieces/community/google-calendar/src/lib/auth.ts:9", "shortDescription": {"text": "TODO/FIXME marker in shipping code \u2014 packages/pieces/community/google-calendar/src/lib/auth.ts:9"}, "fullDescription": {"text": "Track in /reviews or /issues, not as a code comment that rots.\n\nWhy: Drift control \u2014 shouldn't be the same as Quality TODO scanner.\nRule id: fq.todo-marker"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-c826ac6606aaa7f8", "name": "TODO/FIXME marker in shipping code \u2014 packages/pieces/community/bettermode/src/lib/api.ts:292", "shortDescription": {"text": "TODO/FIXME marker in shipping code \u2014 packages/pieces/community/bettermode/src/lib/api.ts:292"}, "fullDescription": {"text": "Track in /reviews or /issues, not as a code comment that rots.\n\nWhy: Drift control \u2014 shouldn't be the same as Quality TODO scanner.\nRule id: fq.todo-marker"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-ace7c6d31be70de0", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/core/schedule/src/lib/triggers/cron-expression.trigger.ts:37", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/core/schedule/src/lib/triggers/cron-expression.trigger.ts:37"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-764f5364ad85dfa6", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/core/schedule/src/lib/triggers/every-week.trigger.ts:74", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/core/schedule/src/lib/triggers/every-week.trigger.ts:74"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e7d5a9e0b79ece4a", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/core/schedule/src/lib/triggers/every-day.trigger.ts:62", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/core/schedule/src/lib/triggers/every-day.trigger.ts:62"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ea9b792f28b7b4f7", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/core/schedule/src/lib/triggers/every-x-minutes.trigger.ts:45", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/core/schedule/src/lib/triggers/every-x-minutes.trigger.ts:45"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c1c8b48378b599e4", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/core/schedule/src/lib/triggers/every-hour.trigger.ts:38", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/core/schedule/src/lib/triggers/every-hour.trigger.ts:38"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c959c0f8189c6fa8", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/core/schedule/src/lib/triggers/every-month.trigger.ts:74", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/core/schedule/src/lib/triggers/every-month.trigger.ts:74"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ac3ec7530dfae9f3", "name": "Stray `console.log` in TS/JS \u2014 packages/pieces/framework/src/lib/i18n.ts:45", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/framework/src/lib/i18n.ts:45"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c4ab62e1e6dcf0d5", "name": "TODO/FIXME marker in shipping code \u2014 packages/pieces/framework/src/lib/trigger/trigger.ts:116", "shortDescription": {"text": "TODO/FIXME marker in shipping code \u2014 packages/pieces/framework/src/lib/trigger/trigger.ts:116"}, "fullDescription": {"text": "Track in /reviews or /issues, not as a code comment that rots.\n\nWhy: Drift control \u2014 shouldn't be the same as Quality TODO scanner.\nRule id: fq.todo-marker"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-d6fe90afceb23233", "name": "TODO/FIXME marker in shipping code \u2014 packages/pieces/framework/src/lib/property/input/common.ts:32", "shortDescription": {"text": "TODO/FIXME marker in shipping code \u2014 packages/pieces/framework/src/lib/property/input/common.ts:32"}, "fullDescription": {"text": "Track in /reviews or /issues, not as a code comment that rots.\n\nWhy: Drift control \u2014 shouldn't be the same as Quality TODO scanner.\nRule id: fq.todo-marker"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-304d40904e3010f9", "name": "Stray `console.log` in TS/JS \u2014 packages/server/api/vitest.setup.ts:9", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/server/api/vitest.setup.ts:9"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ac05ef5c506c3f20", "name": "Stray `console.log` in TS/JS \u2014 packages/server/api/src/rollback.ts:62", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/server/api/src/rollback.ts:62"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-229ab2cc683a6363", "name": "TODO/FIXME marker in shipping code \u2014 packages/server/api/src/app/workers/job/index.ts:22", "shortDescription": {"text": "TODO/FIXME marker in shipping code \u2014 packages/server/api/src/app/workers/job/index.ts:22"}, "fullDescription": {"text": "Track in /reviews or /issues, not as a code comment that rots.\n\nWhy: Drift control \u2014 shouldn't be the same as Quality TODO scanner.\nRule id: fq.todo-marker"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-8517a6e4e5f95492", "name": "TODO/FIXME marker in shipping code \u2014 packages/server/api/src/app/flags/flag.service.ts:77", "shortDescription": {"text": "TODO/FIXME marker in shipping code \u2014 packages/server/api/src/app/flags/flag.service.ts:77"}, "fullDescription": {"text": "Track in /reviews or /issues, not as a code comment that rots.\n\nWhy: Drift control \u2014 shouldn't be the same as Quality TODO scanner.\nRule id: fq.todo-marker"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-3882165473cfed59", "name": "TODO/FIXME marker in shipping code \u2014 packages/server/api/src/app/ee/connection-keys/connection-key.service.ts:42", "shortDescription": {"text": "TODO/FIXME marker in shipping code \u2014 packages/server/api/src/app/ee/connection-keys/connection-key.service.ts:42"}, "fullDescription": {"text": "Track in /reviews or /issues, not as a code comment that rots.\n\nWhy: Drift control \u2014 shouldn't be the same as Quality TODO scanner.\nRule id: fq.todo-marker"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-9522a2103d1bb843", "name": "TODO/FIXME marker in shipping code \u2014 packages/server/api/src/app/authentication/authentication-utils.ts:242", "shortDescription": {"text": "TODO/FIXME marker in shipping code \u2014 packages/server/api/src/app/authentication/authentication-utils.ts:242"}, "fullDescription": {"text": "Track in /reviews or /issues, not as a code comment that rots.\n\nWhy: Drift control \u2014 shouldn't be the same as Quality TODO scanner.\nRule id: fq.todo-marker"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-8b46df83a543b581", "name": "TODO/FIXME marker in shipping code \u2014 packages/server/api/src/app/core/security/v2/authn/authentication-middleware.ts:8", "shortDescription": {"text": "TODO/FIXME marker in shipping code \u2014 packages/server/api/src/app/core/security/v2/authn/authentication-middleware.ts:8"}, "fullDescription": {"text": "Track in /reviews or /issues, not as a code comment that rots.\n\nWhy: Drift control \u2014 shouldn't be the same as Quality TODO scanner.\nRule id: fq.todo-marker"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-0a8fd8b81614689c", "name": "Stray `console.log` in TS/JS \u2014 packages/server/api/src/app/database/rollback-migrations.ts:21", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/server/api/src/app/database/rollback-migrations.ts:21"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4cd9af135919ab6b", "name": "TODO/FIXME marker in shipping code \u2014 packages/server/api/src/app/tables/table/table.service.ts:224", "shortDescription": {"text": "TODO/FIXME marker in shipping code \u2014 packages/server/api/src/app/tables/table/table.service.ts:224"}, "fullDescription": {"text": "Track in /reviews or /issues, not as a code comment that rots.\n\nWhy: Drift control \u2014 shouldn't be the same as Quality TODO scanner.\nRule id: fq.todo-marker"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-bec251c363d9e9eb", "name": "Stray `console.log` in TS/JS \u2014 packages/server/api/test/integration/ce/flows/flow-run/execute-flow-e2e.test.ts:542", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/server/api/test/integration/ce/flows/flow-run/execute-flow-e2e.test.ts:542"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-00d2c484d4856c7c", "name": "TODO/FIXME marker in shipping code \u2014 packages/server/api/test/integration/cloud/event-destinations/event-destination.tes", "shortDescription": {"text": "TODO/FIXME marker in shipping code \u2014 packages/server/api/test/integration/cloud/event-destinations/event-destination.test.ts:109"}, "fullDescription": {"text": "Track in /reviews or /issues, not as a code comment that rots.\n\nWhy: Drift control \u2014 shouldn't be the same as Quality TODO scanner.\nRule id: fq.todo-marker"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-a445c75c068a630a", "name": "Stray `console.log` in TS/JS \u2014 packages/server/engine/src/lib/core/code/no-op-code-sandbox.ts:52", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/server/engine/src/lib/core/code/no-op-code-sandbox.ts:52"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-27e35174ab0e1248", "name": "Stray `console.log` in TS/JS \u2014 packages/server/engine/test/resources/codes/flowVersionId/stdout_on_failure/index.js:3", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/server/engine/test/resources/codes/flowVersionId/stdout_on_failure/index.js:3"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a06005a891e0c956", "name": "Stray `console.log` in TS/JS \u2014 packages/cli/src/lib/utils/piece-utils.ts:89", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/cli/src/lib/utils/piece-utils.ts:89"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-90ca8096965119b3", "name": "Stray `console.log` in TS/JS \u2014 packages/cli/src/lib/commands/create-piece.ts:8", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/cli/src/lib/commands/create-piece.ts:8"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-92c8f045966286f5", "name": "Stray `console.log` in TS/JS \u2014 packages/cli/src/lib/commands/generate-translation-file-for-piece.ts:24", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/cli/src/lib/commands/generate-translation-file-for-piece.ts:24"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0569a2c42a5baabf", "name": "Stray `console.log` in TS/JS \u2014 packages/cli/src/lib/commands/create-trigger.ts:89", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/cli/src/lib/commands/create-trigger.ts:89"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0aed5399d42b15cd", "name": "Stray `console.log` in TS/JS \u2014 packages/cli/src/lib/commands/create-action.ts:30", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/cli/src/lib/commands/create-action.ts:30"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6029a52861312193", "name": "Stray `console.log` in TS/JS \u2014 packages/cli/src/lib/commands/generate-worker-token.ts:43", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/cli/src/lib/commands/generate-worker-token.ts:43"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-87c7e52488b3b737", "name": "TODO/FIXME marker in shipping code \u2014 packages/shared/src/lib/automation/flows/operations/add-action-util.ts:32", "shortDescription": {"text": "TODO/FIXME marker in shipping code \u2014 packages/shared/src/lib/automation/flows/operations/add-action-util.ts:32"}, "fullDescription": {"text": "Track in /reviews or /issues, not as a code comment that rots.\n\nWhy: Drift control \u2014 shouldn't be the same as Quality TODO scanner.\nRule id: fq.todo-marker"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-d0d06c61674fb8ed", "name": "TODO/FIXME marker in shipping code \u2014 packages/shared/src/lib/automation/flows/actions/action.ts:238", "shortDescription": {"text": "TODO/FIXME marker in shipping code \u2014 packages/shared/src/lib/automation/flows/actions/action.ts:238"}, "fullDescription": {"text": "Track in /reviews or /issues, not as a code comment that rots.\n\nWhy: Drift control \u2014 shouldn't be the same as Quality TODO scanner.\nRule id: fq.todo-marker"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-da3a499ed9d6b1e0", "name": "TODO/FIXME marker in shipping code \u2014 packages/shared/src/lib/automation/app-connection/oauth2-authorization-method.ts:1", "shortDescription": {"text": "TODO/FIXME marker in shipping code \u2014 packages/shared/src/lib/automation/app-connection/oauth2-authorization-method.ts:1"}, "fullDescription": {"text": "Track in /reviews or /issues, not as a code comment that rots.\n\nWhy: Drift control \u2014 shouldn't be the same as Quality TODO scanner.\nRule id: fq.todo-marker"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-83b26532f84d2e83", "name": "TODO/FIXME marker in shipping code \u2014 packages/shared/src/lib/management/platform/platform.model.ts:53", "shortDescription": {"text": "TODO/FIXME marker in shipping code \u2014 packages/shared/src/lib/management/platform/platform.model.ts:53"}, "fullDescription": {"text": "Track in /reviews or /issues, not as a code comment that rots.\n\nWhy: Drift control \u2014 shouldn't be the same as Quality TODO scanner.\nRule id: fq.todo-marker"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-afb38d5105b83c7c", "name": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/app/builder/data-selector/data-selector-node-conte", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/app/builder/data-selector/data-selector-node-content.tsx:155"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-d6560e93dbfda921", "name": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/app/builder/data-selector/variables-tab.tsx:139", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/app/builder/data-selector/variables-tab.tsx:139"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2a3e1fb4f8524416", "name": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/app/builder/piece-properties/text-input-with-menti", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/app/builder/piece-properties/text-input-with-mentions/components/function-search-popover.tsx:211"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-e9b24d80c5cd5461", "name": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/app/builder/step-settings/editable-step-name.tsx:6", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/app/builder/step-settings/editable-step-name.tsx:63"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-90ebebf65774ac1d", "name": "TODO/FIXME marker in shipping code \u2014 packages/web/src/app/builder/step-settings/branch-settings/branch-single-condition.", "shortDescription": {"text": "TODO/FIXME marker in shipping code \u2014 packages/web/src/app/builder/step-settings/branch-settings/branch-single-condition.tsx:142"}, "fullDescription": {"text": "Track in /reviews or /issues, not as a code comment that rots.\n\nWhy: Drift control \u2014 shouldn't be the same as Quality TODO scanner.\nRule id: fq.todo-marker"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-4a3a59d6d81c106b", "name": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/app/builder/step-settings/piece-settings/connectio", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/app/builder/step-settings/piece-settings/connection-select.tsx:212"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2756c14e381d262a", "name": "Stray `console.log` in TS/JS \u2014 packages/web/src/app/builder/flow-canvas/nodes/note-node/note-tools.tsx:142", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/web/src/app/builder/flow-canvas/nodes/note-node/note-tools.tsx:142"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8a2436f48c6c0365", "name": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/app/builder/flow-canvas/edges/branch-label.tsx:146", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/app/builder/flow-canvas/edges/branch-label.tsx:146"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-c800a326934e9eea", "name": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/app/components/sidebar/sidebar-header.tsx:57", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/app/components/sidebar/sidebar-header.tsx:57"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-e8c7581eb22b8d4d", "name": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/app/components/sidebar/sidebar-usage-limits.tsx:10", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/app/components/sidebar/sidebar-usage-limits.tsx:102"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-42caf3fd4328f8f9", "name": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/app/components/sidebar/sidebar-user.tsx:71", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/app/components/sidebar/sidebar-user.tsx:71"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-100d4ef1f464b1ac", "name": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/app/components/sidebar/platform/index.tsx:220", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/app/components/sidebar/platform/index.tsx:220"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-c08d1a9c9beebf79", "name": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/app/components/global-search/search-result-item.ts", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/app/components/global-search/search-result-item.tsx:171"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-c961d7209b8f0397", "name": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/app/connections/replace-connections-dialog.tsx:455", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/app/connections/replace-connections-dialog.tsx:455"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-a8b2ea6bc91a249e", "name": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/app/connections/secret-input.tsx:184", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/app/connections/secret-input.tsx:184"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-ad1be6e6ff9a03c1", "name": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/app/connections/oauth2-connection-settings.tsx:217", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/app/connections/oauth2-connection-settings.tsx:217"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-08bb26f07e3a3916", "name": "Stray `console.log` in TS/JS \u2014 packages/web/src/app/routes/redirect.tsx:27", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/web/src/app/routes/redirect.tsx:27"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f74e6e2d926d126e", "name": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/app/routes/variables/index.tsx:144", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/app/routes/variables/index.tsx:144"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-6eb017ffb637c136", "name": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/app/routes/impact/components/project-select.tsx:81", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/app/routes/impact/components/project-select.tsx:81"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-c9ad2de5bcd1477e", "name": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/app/routes/impact/details/index.tsx:90", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/app/routes/impact/details/index.tsx:90"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-03cefbfb222db4bf", "name": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/app/routes/templates/id/flow-card.tsx:30", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/app/routes/templates/id/flow-card.tsx:30"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-4df44767ad9c144d", "name": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/app/routes/mcp-authorize/index.tsx:177", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/app/routes/mcp-authorize/index.tsx:177"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-d6d608305596914c", "name": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/app/routes/chat-with-ai/index.tsx:217", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/app/routes/chat-with-ai/index.tsx:217"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-87834af4ed6211c1", "name": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/app/routes/chat-with-ai/components/chat-input.tsx:", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/app/routes/chat-with-ai/components/chat-input.tsx:142"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-07f73163d2e73597", "name": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/app/routes/chat-with-ai/components/action-receipt-", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/app/routes/chat-with-ai/components/action-receipt-card.tsx:43"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-c400f61bbc0df8cd", "name": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/app/routes/chat-with-ai/components/chat-empty-stat", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/app/routes/chat-with-ai/components/chat-empty-state.tsx:226"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-cd17e1445eb14d40", "name": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/app/routes/chat-with-ai/components/user-message.ts", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/app/routes/chat-with-ai/components/user-message.tsx:61"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-7edaa5f7c9c16fff", "name": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/app/routes/chat-with-ai/components/connection-pick", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/app/routes/chat-with-ai/components/connection-picker-card.tsx:283"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-7bf69f6a0f32cac9", "name": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/app/routes/connections/index.tsx:191", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/app/routes/connections/index.tsx:191"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-500279444e83dec8", "name": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/app/routes/platform/connections/index.tsx:128", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/app/routes/platform/connections/index.tsx:128"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-61b9f51441f04d4e", "name": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/app/routes/platform/infra/workers/index.tsx:199", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/app/routes/platform/infra/workers/index.tsx:199"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-92fb60b75a3e2669", "name": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/app/routes/platform/projects/columns.tsx:126", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/app/routes/platform/projects/columns.tsx:126"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b60cc497a4155d76", "name": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/components/custom/searchable-select.tsx:170", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/components/custom/searchable-select.tsx:170"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-d324805b2a587758", "name": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/components/custom/multi-select.tsx:533", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/components/custom/multi-select.tsx:533"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-888cdf327fb2877a", "name": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/components/custom/delete-dialog.tsx:84", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/components/custom/delete-dialog.tsx:84"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-81f8de3d6537e15a", "name": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/components/custom/ap-avatar.tsx:85", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/components/custom/ap-avatar.tsx:85"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-98eb6a567f2a2f55", "name": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/components/custom/multi-select-piece-property.tsx:", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/components/custom/multi-select-piece-property.tsx:150"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-3af50f45ea044146", "name": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/components/custom/data-table/data-table-input-popo", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/components/custom/data-table/data-table-input-popover.tsx:40"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-7fb5f85c61819a67", "name": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/components/custom/smart-output-viewer/output-field", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/components/custom/smart-output-viewer/output-field-row.tsx:93"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-ea251127f27a33e5", "name": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/components/custom/smart-output-viewer/output-array", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/components/custom/smart-output-viewer/output-array-list.tsx:17"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-88f116c8f9bbf333", "name": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/components/custom/smart-output-viewer/shared-value", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/components/custom/smart-output-viewer/shared-value-rendering.tsx:68"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-d9f4677c118915ba", "name": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/components/custom/smart-output-viewer/output-schem", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/components/custom/smart-output-viewer/output-schema-array-list.tsx:40"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-1b87ff10698f63e1", "name": "Stray `console.log` in TS/JS \u2014 packages/web/src/components/providers/socket-provider.tsx:33", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/web/src/components/providers/socket-provider.tsx:33"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-877060275ca7f7f8", "name": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/components/prompt-kit/source.tsx:67", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/components/prompt-kit/source.tsx:67"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-0c9cfce5d6e208ae", "name": "`dangerouslySetInnerHTML` used in a React component \u2014 packages/web/src/components/ui/chart.tsx:81", "shortDescription": {"text": "`dangerouslySetInnerHTML` used in a React component \u2014 packages/web/src/components/ui/chart.tsx:81"}, "fullDescription": {"text": "Open XSS surface unless the input is provably trusted. Replace with explicit JSX or sanitize via a vetted library.\n\nWhy: OWASP basics. Already partially flagged by the security analyzer.\nRule id: fq.dangerous-html"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6d2a76e908baeea2", "name": "Stray `console.log` in TS/JS \u2014 packages/web/src/components/ui/sortable.tsx:72", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/web/src/components/ui/sortable.tsx:72"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fec614e360d21a3d", "name": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/features/agents/agent-tools/components/knowledge-b", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/features/agents/agent-tools/components/knowledge-base-tool.tsx:53"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-531346719f3825f3", "name": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/features/agents/agent-tools/components/mcp-tool.ts", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/features/agents/agent-tools/components/mcp-tool.tsx:56"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-c29e48536aa182a2", "name": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/features/agents/agent-tools/components/flow-tool.t", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/features/agents/agent-tools/components/flow-tool.tsx:54"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-568747230553cff3", "name": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/features/agents/agent-tools/flow-tool-dialog/flow-", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/features/agents/agent-tools/flow-tool-dialog/flow-dialog-content.tsx:98"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b0201331fabf70e0", "name": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/features/agents/ai-model/index.tsx:172", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/features/agents/ai-model/index.tsx:172"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-e648fa6907bb4698", "name": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/features/chat/chat-input/file-input-preview.tsx:51", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/features/chat/chat-input/file-input-preview.tsx:51"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-e01992a8df8a37b4", "name": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/features/chat/chat-message/file-message.tsx:35", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/features/chat/chat-message/file-message.tsx:35"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-bcb06d0054204e93", "name": "Stray `console.log` in TS/JS \u2014 packages/web/src/features/flows/components/import-flow-dialog.tsx:160", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/web/src/features/flows/components/import-flow-dialog.tsx:160"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-93e8828583c23ec4", "name": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/features/authentication/components/auth-animation.", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/features/authentication/components/auth-animation.tsx:242"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-8e905333a0110241", "name": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/features/automations/components/multi-select-filte", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/features/automations/components/multi-select-filter.tsx:81"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-11b1cd8c95f15c51", "name": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/features/flow-runs/components/runs-table/failed-re", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/features/flow-runs/components/runs-table/failed-retry-runs-dialog.tsx:63"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-a9d9c6805f874ab2", "name": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/features/flow-runs/components/runs-table/failed-st", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/features/flow-runs/components/runs-table/failed-step-dialog.tsx:83"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-28a6069e219fc612", "name": "Stray `console.log` in TS/JS \u2014 packages/web/src/features/tables/components/dropdown-editor.tsx:25", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/web/src/features/tables/components/dropdown-editor.tsx:25"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-81955ad34beb4e84", "name": "Stray `console.log` in TS/JS \u2014 packages/web/src/features/members/components/accept-invitation.tsx:33", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/web/src/features/members/components/accept-invitation.tsx:33"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0bfc93aefc9d4972", "name": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/features/members/components/invite-user/suggested-", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/features/members/components/invite-user/suggested-user-item.tsx:63"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-f4216a9bc09568ba", "name": "Stray `console.log` in TS/JS \u2014 packages/web/src/lib/api.ts:48", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/web/src/lib/api.ts:48"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-828bddcabce77171", "name": "Stray `console.log` in TS/JS \u2014 packages/tests-e2e/global-setup.ts:8", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/tests-e2e/global-setup.ts:8"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fa5427d1083d101c", "name": "Stray `console.log` in TS/JS \u2014 tools/setup-dev.js:13", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 tools/setup-dev.js:13"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-283490078df074df", "name": "Stray `console.log` in TS/JS \u2014 tools/scripts/format-checkly-report.js:63", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 tools/scripts/format-checkly-report.js:63"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ce3f3977d13866b2", "name": "Stray `console.log` in TS/JS \u2014 tools/scripts/install-bun.js:8", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 tools/scripts/install-bun.js:8"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c5f02b4debc2f991", "name": "Stray `console.log` in TS/JS \u2014 tools/scripts/check-migration-rollback.ts:65", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 tools/scripts/check-migration-rollback.ts:65"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8790da813c427c7c", "name": "Stray `console.log` in TS/JS \u2014 tools/scripts/migrate-custom-piece-to-turbo.ts:38", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 tools/scripts/migrate-custom-piece-to-turbo.ts:38"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-556ddd7b6fd7e643", "name": "Stray `console.log` in TS/JS \u2014 tools/scripts/check-manifest-migrations.ts:39", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 tools/scripts/check-manifest-migrations.ts:39"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-072bd67b799690d8", "name": "Stray `console.log` in TS/JS \u2014 tools/scripts/check-release-migrations.ts:29", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 tools/scripts/check-release-migrations.ts:29"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-83cf8faa5bdb4f75", "name": "Stray `console.log` in TS/JS \u2014 tools/scripts/pieces/update-pieces-metadata.ts:61", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 tools/scripts/pieces/update-pieces-metadata.ts:61"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-054c7f5dbf033aa2", "name": "Stray `console.log` in TS/JS \u2014 tools/scripts/pieces/bump-translated-pieces.ts:38", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 tools/scripts/pieces/bump-translated-pieces.ts:38"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-dd21f8ae612bcb8a", "name": "Stray `console.log` in TS/JS \u2014 tools/scripts/pieces/bump-all-pieces-patch-version.ts:37", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 tools/scripts/pieces/bump-all-pieces-patch-version.ts:37"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c5bf78cfd1ba8770", "name": "Stray `console.log` in TS/JS \u2014 tools/scripts/pieces/find-changed-pieces.ts:37", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 tools/scripts/pieces/find-changed-pieces.ts:37"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d7d261021fbdcf9c", "name": "use defused xml \u2014 .agents/skills/mcp-builder/scripts/evaluation.py:13", "shortDescription": {"text": "use defused xml \u2014 .agents/skills/mcp-builder/scripts/evaluation.py:13"}, "fullDescription": {"text": "The Python documentation recommends using `defusedxml` instead of `xml` because the native Python `xml` library is vulnerable to XML External Entity (XXE) attacks. These attacks can leak confidential data and \"XML bombs\" can cause denial of service.\n\nRule: python.lang.security.use-defused-xml.use-defused-xml\nSeverity: ERROR\nOWASP: A04:2017 - XML External Entities (XXE), A05:2021 - Security Misconfiguration, A02:2025 - Security Misconfiguration\nCWE: CWE-611: Improper Restriction of XML External Entity Reference\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-63e6f4ebe1e43390", "name": "var in href \u2014 packages/server/api/src/assets/emails/invitation-email.html:57", "shortDescription": {"text": "var in href \u2014 packages/server/api/src/assets/emails/invitation-email.html:57"}, "fullDescription": {"text": "Detected a template variable used in an anchor tag with the 'href' attribute. This allows a malicious actor to input the 'javascript:' URI and is subject to cross- site scripting (XSS) attacks. If using Flask, use 'url_for()' to safely generate a URL. If using Django, use the 'url' filter to safely generate a URL. If using Mustache, use a URL encoding library, or prepend a slash '/' to the variable for relative links (`href=\"/{{link}}\"`). You may also consider setting the Content Security Policy (CSP) header.\n\nRule: generic.html-templates.security.var-in-href.var-in-href\nSeverity: WARNING\nOWASP: A07:2017 - Cross-Site Scripting (XSS), A03:2021 - Injection, A05:2025 - Injection\nCWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-fbaf9a550eaad461", "name": "var in href \u2014 packages/server/api/src/assets/emails/invitation-email.html:69", "shortDescription": {"text": "var in href \u2014 packages/server/api/src/assets/emails/invitation-email.html:69"}, "fullDescription": {"text": "Detected a template variable used in an anchor tag with the 'href' attribute. This allows a malicious actor to input the 'javascript:' URI and is subject to cross- site scripting (XSS) attacks. If using Flask, use 'url_for()' to safely generate a URL. If using Django, use the 'url' filter to safely generate a URL. If using Mustache, use a URL encoding library, or prepend a slash '/' to the variable for relative links (`href=\"/{{link}}\"`). You may also consider setting the Content Security Policy (CSP) header.\n\nRule: generic.html-templates.security.var-in-href.var-in-href\nSeverity: WARNING\nOWASP: A07:2017 - Cross-Site Scripting (XSS), A03:2021 - Injection, A05:2025 - Injection\nCWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5c5dbf7d7a33fb6e", "name": "var in href \u2014 packages/server/api/src/assets/emails/issue-created.html:71", "shortDescription": {"text": "var in href \u2014 packages/server/api/src/assets/emails/issue-created.html:71"}, "fullDescription": {"text": "Detected a template variable used in an anchor tag with the 'href' attribute. This allows a malicious actor to input the 'javascript:' URI and is subject to cross- site scripting (XSS) attacks. If using Flask, use 'url_for()' to safely generate a URL. If using Django, use the 'url' filter to safely generate a URL. If using Mustache, use a URL encoding library, or prepend a slash '/' to the variable for relative links (`href=\"/{{link}}\"`). You may also consider setting the Content Security Policy (CSP) header.\n\nRule: generic.html-templates.security.var-in-href.var-in-href\nSeverity: WARNING\nOWASP: A07:2017 - Cross-Site Scripting (XSS), A03:2021 - Injection, A05:2025 - Injection\nCWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6743ca336b61e237", "name": "var in href \u2014 packages/server/api/src/assets/emails/issue-created.html:83", "shortDescription": {"text": "var in href \u2014 packages/server/api/src/assets/emails/issue-created.html:83"}, "fullDescription": {"text": "Detected a template variable used in an anchor tag with the 'href' attribute. This allows a malicious actor to input the 'javascript:' URI and is subject to cross- site scripting (XSS) attacks. If using Flask, use 'url_for()' to safely generate a URL. If using Django, use the 'url' filter to safely generate a URL. If using Mustache, use a URL encoding library, or prepend a slash '/' to the variable for relative links (`href=\"/{{link}}\"`). You may also consider setting the Content Security Policy (CSP) header.\n\nRule: generic.html-templates.security.var-in-href.var-in-href\nSeverity: WARNING\nOWASP: A07:2017 - Cross-Site Scripting (XSS), A03:2021 - Injection, A05:2025 - Injection\nCWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3a3c28d7f8e5a6d7", "name": "var in href \u2014 packages/server/api/src/assets/emails/project-member-added.html:51", "shortDescription": {"text": "var in href \u2014 packages/server/api/src/assets/emails/project-member-added.html:51"}, "fullDescription": {"text": "Detected a template variable used in an anchor tag with the 'href' attribute. This allows a malicious actor to input the 'javascript:' URI and is subject to cross- site scripting (XSS) attacks. If using Flask, use 'url_for()' to safely generate a URL. If using Django, use the 'url' filter to safely generate a URL. If using Mustache, use a URL encoding library, or prepend a slash '/' to the variable for relative links (`href=\"/{{link}}\"`). You may also consider setting the Content Security Policy (CSP) header.\n\nRule: generic.html-templates.security.var-in-href.var-in-href\nSeverity: WARNING\nOWASP: A07:2017 - Cross-Site Scripting (XSS), A03:2021 - Injection, A05:2025 - Injection\nCWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8f35bd6055679dc8", "name": "var in href \u2014 packages/server/api/src/assets/emails/project-member-added.html:63", "shortDescription": {"text": "var in href \u2014 packages/server/api/src/assets/emails/project-member-added.html:63"}, "fullDescription": {"text": "Detected a template variable used in an anchor tag with the 'href' attribute. This allows a malicious actor to input the 'javascript:' URI and is subject to cross- site scripting (XSS) attacks. If using Flask, use 'url_for()' to safely generate a URL. If using Django, use the 'url' filter to safely generate a URL. If using Mustache, use a URL encoding library, or prepend a slash '/' to the variable for relative links (`href=\"/{{link}}\"`). You may also consider setting the Content Security Policy (CSP) header.\n\nRule: generic.html-templates.security.var-in-href.var-in-href\nSeverity: WARNING\nOWASP: A07:2017 - Cross-Site Scripting (XSS), A03:2021 - Injection, A05:2025 - Injection\nCWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-53485ae9a15bdf54", "name": "var in href \u2014 packages/server/api/src/assets/emails/reset-password.html:63", "shortDescription": {"text": "var in href \u2014 packages/server/api/src/assets/emails/reset-password.html:63"}, "fullDescription": {"text": "Detected a template variable used in an anchor tag with the 'href' attribute. This allows a malicious actor to input the 'javascript:' URI and is subject to cross- site scripting (XSS) attacks. If using Flask, use 'url_for()' to safely generate a URL. If using Django, use the 'url' filter to safely generate a URL. If using Mustache, use a URL encoding library, or prepend a slash '/' to the variable for relative links (`href=\"/{{link}}\"`). You may also consider setting the Content Security Policy (CSP) header.\n\nRule: generic.html-templates.security.var-in-href.var-in-href\nSeverity: WARNING\nOWASP: A07:2017 - Cross-Site Scripting (XSS), A03:2021 - Injection, A05:2025 - Injection\nCWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8d714b99a02bc8d8", "name": "var in href \u2014 packages/server/api/src/assets/emails/reset-password.html:75", "shortDescription": {"text": "var in href \u2014 packages/server/api/src/assets/emails/reset-password.html:75"}, "fullDescription": {"text": "Detected a template variable used in an anchor tag with the 'href' attribute. This allows a malicious actor to input the 'javascript:' URI and is subject to cross- site scripting (XSS) attacks. If using Flask, use 'url_for()' to safely generate a URL. If using Django, use the 'url' filter to safely generate a URL. If using Mustache, use a URL encoding library, or prepend a slash '/' to the variable for relative links (`href=\"/{{link}}\"`). You may also consider setting the Content Security Policy (CSP) header.\n\nRule: generic.html-templates.security.var-in-href.var-in-href\nSeverity: WARNING\nOWASP: A07:2017 - Cross-Site Scripting (XSS), A03:2021 - Injection, A05:2025 - Injection\nCWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9caf4c4b945bc926", "name": "var in href \u2014 packages/server/api/src/assets/emails/scim-user-welcome.html:51", "shortDescription": {"text": "var in href \u2014 packages/server/api/src/assets/emails/scim-user-welcome.html:51"}, "fullDescription": {"text": "Detected a template variable used in an anchor tag with the 'href' attribute. This allows a malicious actor to input the 'javascript:' URI and is subject to cross- site scripting (XSS) attacks. If using Flask, use 'url_for()' to safely generate a URL. If using Django, use the 'url' filter to safely generate a URL. If using Mustache, use a URL encoding library, or prepend a slash '/' to the variable for relative links (`href=\"/{{link}}\"`). You may also consider setting the Content Security Policy (CSP) header.\n\nRule: generic.html-templates.security.var-in-href.var-in-href\nSeverity: WARNING\nOWASP: A07:2017 - Cross-Site Scripting (XSS), A03:2021 - Injection, A05:2025 - Injection\nCWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-af7fcb3249469f43", "name": "var in href \u2014 packages/server/api/src/assets/emails/scim-user-welcome.html:63", "shortDescription": {"text": "var in href \u2014 packages/server/api/src/assets/emails/scim-user-welcome.html:63"}, "fullDescription": {"text": "Detected a template variable used in an anchor tag with the 'href' attribute. This allows a malicious actor to input the 'javascript:' URI and is subject to cross- site scripting (XSS) attacks. If using Flask, use 'url_for()' to safely generate a URL. If using Django, use the 'url' filter to safely generate a URL. If using Mustache, use a URL encoding library, or prepend a slash '/' to the variable for relative links (`href=\"/{{link}}\"`). You may also consider setting the Content Security Policy (CSP) header.\n\nRule: generic.html-templates.security.var-in-href.var-in-href\nSeverity: WARNING\nOWASP: A07:2017 - Cross-Site Scripting (XSS), A03:2021 - Injection, A05:2025 - Injection\nCWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-02c40bf0e731a791", "name": "var in href \u2014 packages/server/api/src/assets/emails/verify-email.html:51", "shortDescription": {"text": "var in href \u2014 packages/server/api/src/assets/emails/verify-email.html:51"}, "fullDescription": {"text": "Detected a template variable used in an anchor tag with the 'href' attribute. This allows a malicious actor to input the 'javascript:' URI and is subject to cross- site scripting (XSS) attacks. If using Flask, use 'url_for()' to safely generate a URL. If using Django, use the 'url' filter to safely generate a URL. If using Mustache, use a URL encoding library, or prepend a slash '/' to the variable for relative links (`href=\"/{{link}}\"`). You may also consider setting the Content Security Policy (CSP) header.\n\nRule: generic.html-templates.security.var-in-href.var-in-href\nSeverity: WARNING\nOWASP: A07:2017 - Cross-Site Scripting (XSS), A03:2021 - Injection, A05:2025 - Injection\nCWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b6eb8f44e59a49a2", "name": "var in href \u2014 packages/server/api/src/assets/emails/verify-email.html:63", "shortDescription": {"text": "var in href \u2014 packages/server/api/src/assets/emails/verify-email.html:63"}, "fullDescription": {"text": "Detected a template variable used in an anchor tag with the 'href' attribute. This allows a malicious actor to input the 'javascript:' URI and is subject to cross- site scripting (XSS) attacks. If using Flask, use 'url_for()' to safely generate a URL. If using Django, use the 'url' filter to safely generate a URL. If using Mustache, use a URL encoding library, or prepend a slash '/' to the variable for relative links (`href=\"/{{link}}\"`). You may also consider setting the Content Security Policy (CSP) header.\n\nRule: generic.html-templates.security.var-in-href.var-in-href\nSeverity: WARNING\nOWASP: A07:2017 - Cross-Site Scripting (XSS), A03:2021 - Injection, A05:2025 - Injection\nCWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-23f0bc755bedc635", "name": "detect child process \u2014 tools/scripts/pieces/bump-translated-pieces.ts:60", "shortDescription": {"text": "detect child process \u2014 tools/scripts/pieces/bump-translated-pieces.ts:60"}, "fullDescription": {"text": "Detected calls to child_process from a function argument `piecePath`. This could lead to a command injection if the input is user controllable. Try to avoid calls to child_process, and if it is needed ensure user input is correctly sanitized or sandboxed.\n\nRule: javascript.lang.security.detect-child-process.detect-child-process\nSeverity: ERROR\nOWASP: A01:2017 - Injection, A03:2021 - Injection, A05:2025 - Injection\nCWE: CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-3c622f56268d17bb", "name": "detect child process \u2014 tools/scripts/pieces/bump-translated-pieces.ts:80", "shortDescription": {"text": "detect child process \u2014 tools/scripts/pieces/bump-translated-pieces.ts:80"}, "fullDescription": {"text": "Detected calls to child_process from a function argument `piecePath`. This could lead to a command injection if the input is user controllable. Try to avoid calls to child_process, and if it is needed ensure user input is correctly sanitized or sandboxed.\n\nRule: javascript.lang.security.detect-child-process.detect-child-process\nSeverity: ERROR\nOWASP: A01:2017 - Injection, A03:2021 - Injection, A05:2025 - Injection\nCWE: CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-4a9b26f2f9d70b46", "name": "detect child process \u2014 tools/scripts/pieces/bump-translated-pieces.ts:108", "shortDescription": {"text": "detect child process \u2014 tools/scripts/pieces/bump-translated-pieces.ts:108"}, "fullDescription": {"text": "Detected calls to child_process from a function argument `piecePath`. This could lead to a command injection if the input is user controllable. Try to avoid calls to child_process, and if it is needed ensure user input is correctly sanitized or sandboxed.\n\nRule: javascript.lang.security.detect-child-process.detect-child-process\nSeverity: ERROR\nOWASP: A01:2017 - Injection, A03:2021 - Injection, A05:2025 - Injection\nCWE: CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')\nCategory: security"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-6ebff1da01c256ff", "name": "CVE-2026-48068: @grpc/grpc-js 1.14.3 \u2014 bun.lock", "shortDescription": {"text": "CVE-2026-48068: @grpc/grpc-js 1.14.3 \u2014 bun.lock"}, "fullDescription": {"text": "@grpc/grpc-js: A malformed request can cause a server crash\n\n### Impact\nAn invalid incoming HTTP/2 stream initiation can cause a server process to crash. This affects all servers created using @grpc/grpc-js.\n\n### Patches\nThe following version have fixes for this vulnerability:\n\n - 1.9.16\n - 1.10.12\n - 1.11.4\n - 1.12.7\n - 1.13.5\n - 1.14.4\n\n### Workarounds\nThere is no workaround.\n\nPackage: @grpc/grpc-js\nInstalled: 1.14.3\nFixed in: 1.9.16, 1.10.12, 1.11.4, 1.12.7, 1.13.5, 1.14.4\nSeverity: HIGH\nFix: Upgrade @grpc/grpc-js to 1.9.16, 1.10.12, 1.11.4, 1.12.7, 1.13.5, 1.14.4"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-2ed36661da0f0b12", "name": "CVE-2026-48069: @grpc/grpc-js 1.14.3 \u2014 bun.lock", "shortDescription": {"text": "CVE-2026-48069: @grpc/grpc-js 1.14.3 \u2014 bun.lock"}, "fullDescription": {"text": "@grpc/grpc-js: An incoming malformed compressed message can cause a client or server crash\n\n### Impact\nAn invalid incoming compressed message can cause a client or server process to crash. This affects all clients and servers that use @grpc/grpc-js\n\n### Patches\nThe following version have fixes for this vulnerability:\n\n - 1.9.16\n - 1.10.12\n - 1.11.4\n - 1.12.7\n - 1.13.5\n - 1.14.4\n\n### Workarounds\nThere is no workaround.\n\nPackage: @grpc/grpc-js\nInstalled: 1.14.3\nFixed in: 1.9.16, 1.10.12, 1.11.4, 1.12.7, 1.13.5, 1.14.4\nSeverity: HIGH\nFix: Upgrade @grpc/grpc-js to 1.9.16, 1.10.12, 1.11.4, 1.12.7, 1.13.5, 1.14.4"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a29f5397d5caf88a", "name": "CVE-2026-22029: @remix-run/router 1.6.2 \u2014 bun.lock", "shortDescription": {"text": "CVE-2026-22029: @remix-run/router 1.6.2 \u2014 bun.lock"}, "fullDescription": {"text": "@remix-run/router: react-router: React Router vulnerable to XSS via Open Redirects\n\nReact Router is a router for React. In @remix-run/router version prior to 1.23.2 and react-router 7.0.0 through 7.11.0, React Router (and Remix v1/v2) SPA open navigation redirects originating from loaders or actions in Framework Mode, Data Mode, or the unstable RSC modes can result in unsafe URLs causing unintended javascript execution on the client. This is only an issue if you are creating redirect paths from untrusted content or via an open redirect. There is no impact if Declarative Mode (<\n\nPackage: @remix-run/router\nInstalled: 1.6.2\nFixed in: 1.23.2\nSeverity: HIGH\nFix: Upgrade @remix-run/router to 1.23.2"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-3bc3b31ebf2c195c", "name": "GHSA-x3ff-w252-2g7j: @stablelib/ed25519 1.0.3 \u2014 bun.lock", "shortDescription": {"text": "GHSA-x3ff-w252-2g7j: @stablelib/ed25519 1.0.3 \u2014 bun.lock"}, "fullDescription": {"text": "StableLib Ed25519 Signature Malleability via Missing S < L Check\n\n# Ed25519 Signature Malleability via Missing S < L Check -- Same Class as node-forge CVE-2026-33895 (CWE-347)\n\n## Target\n- Repository: StableLib/stablelib (package: @stablelib/ed25519)\n- Platform: GitHub PVR\n- Bounty: CVE credit\n- CWE: CWE-347 (Improper Verification of Cryptographic Signature)\n- Version: 2.0.2 (latest, 2026-03-28)\n\n## Root Cause\n\nThe `verify()` function in `@stablelib/ed25519` does not check that the `S` component of the signature is less than the group order `L`. Per CFRG recom\n\nPackage: @stablelib/ed25519\nInstalled: 1.0.3\nFixed in: \u2014\nSeverity: MEDIUM\nFix: No fix version published yet"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e20f01f59523d9a5", "name": "CVE-2025-48370: @supabase/auth-js 2.69.1 \u2014 bun.lock", "shortDescription": {"text": "CVE-2025-48370: @supabase/auth-js 2.69.1 \u2014 bun.lock"}, "fullDescription": {"text": "auth-js Vulnerable to Insecure Path Routing from Malformed User Input\n\nauth-js is an isomorphic Javascript library for Supabase Auth. Prior to version 2.70.0, the library functions getUserById, deleteUser, updateUserById, listFactors and deleteFactor did not require the user supplied values to be valid UUIDs. This could lead to a URL path traversal, resulting in the wrong API function being called. Implementations that follow security best practice and validate user controlled inputs, such as the userId are not affected by this. This issue has been patched in versi\n\nPackage: @supabase/auth-js\nInstalled: 2.69.1\nFixed in: 2.70.0\nSeverity: LOW\nFix: Upgrade @supabase/auth-js to 2.70.0"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2e361f2b92e11d97", "name": "CVE-2026-44486: axios 1.15.2 \u2014 bun.lock", "shortDescription": {"text": "CVE-2026-44486: axios 1.15.2 \u2014 bun.lock"}, "fullDescription": {"text": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects\n\nAxios is a promise based HTTP client for the browser and Node.js. Prior to 0.32.0 and 1.16.0, Axios\u2019 Node.js HTTP adapter can leak proxy credentials to a redirect target in affected versions. When a request is sent through an authenticated proxy, Axios may add a Proxy-Authorization header. If Axios then follows a redirect and the redirected request is no longer sent through that proxy, the stale Proxy-Authorization header can remain on the redirected request and be sent to the redirect target. T\n\nPackage: axios\nInstalled: 1.15.2\nFixed in: 1.16.0, 0.32.0\nSeverity: HIGH\nFix: Upgrade axios to 1.16.0, 0.32.0"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-e86c15113ce67540", "name": "CVE-2026-44487: axios 1.15.2 \u2014 bun.lock", "shortDescription": {"text": "CVE-2026-44487: axios 1.15.2 \u2014 bun.lock"}, "fullDescription": {"text": "axios: Axios: Information disclosure of proxy credentials via redirect flows\n\nAxios is a promise based HTTP client for the browser and Node.js. Prior to 0.32.0 and 1.16.0, Axios\u2019s Node.js HTTP adapter may forward a Proxy-Authorization header to a redirected origin during specific proxy-to-direct redirect flows. This affects Node.js usage, where an initial HTTP request is sent through an authenticated HTTP proxy, redirects are followed, and the redirected URL is no longer proxied. Under affected redirect shapes, the final origin can receive the proxy credential that was in\n\nPackage: axios\nInstalled: 1.15.2\nFixed in: 1.16.0, 0.32.0\nSeverity: HIGH\nFix: Upgrade axios to 1.16.0, 0.32.0"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b33ccb9eb0cae9f7", "name": "CVE-2026-44488: axios 1.15.2 \u2014 bun.lock", "shortDescription": {"text": "CVE-2026-44488: axios 1.15.2 \u2014 bun.lock"}, "fullDescription": {"text": "axios: Axios: Denial of Service due to unenforced request and response size limits\n\nAxios is a promise based HTTP client for the browser and Node.js. Axios versions 1.7.0 through 1.15.x did not enforce configured request and response size limits when requests were sent with the fetch adapter. Applications that selected adapter: 'fetch', or ran in environments where axios resolved to the fetch adapter, could receive or send bodies larger than maxContentLength or maxBodyLength despite those limits being explicitly configured. This can cause resource exhaustion in server-side usag\n\nPackage: axios\nInstalled: 1.15.2\nFixed in: 1.16.0\nSeverity: HIGH\nFix: Upgrade axios to 1.16.0"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-8cb9bc3bc0ab7a4b", "name": "CVE-2026-44492: axios 1.15.2 \u2014 bun.lock", "shortDescription": {"text": "CVE-2026-44492: axios 1.15.2 \u2014 bun.lock"}, "fullDescription": {"text": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization\n\nAxios is a promise based HTTP client for the browser and Node.js. Prior to 0.32.0 and 1.16.0, Axios does not normalise IPv4-mapped IPv6 addresses. When NO_PROXY lists an IPv4 address such as 127.0.0.1 or 169.254.169.254, a request URL using the IPv4-mapped IPv6 form (::ffff:7f00:1, ::ffff:a9fe:a9fe) still routes through the configured proxy. Node.js resolves these addresses to the underlying IPv4 host, so the request reaches the internal service via the proxy rather than being blocked. This vuln\n\nPackage: axios\nInstalled: 1.15.2\nFixed in: 1.16.0, 0.32.0\nSeverity: HIGH\nFix: Upgrade axios to 1.16.0, 0.32.0"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-2cda49af15e4b742", "name": "CVE-2026-44494: axios 1.15.2 \u2014 bun.lock", "shortDescription": {"text": "CVE-2026-44494: axios 1.15.2 \u2014 bun.lock"}, "fullDescription": {"text": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution\n\nAxios is a promise based HTTP client for the browser and Node.js. From 1.0.0 to before 1.16.0, the Axios library is vulnerable to a Prototype Pollution \"Gadget\" attack that allows any Object.prototype pollution in the application's dependency tree to be escalated into a full Man-in-the-Middle (MITM) attack \u2014 intercepting, reading, and modifying all HTTP traffic including authentication credentials. The HTTP adapter at lib/adapters/http.js:670 reads config.proxy via standard property access, whic\n\nPackage: axios\nInstalled: 1.15.2\nFixed in: 1.16.0\nSeverity: HIGH\nFix: Upgrade axios to 1.16.0"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-ab958d85d2d0b23c", "name": "CVE-2026-44496: axios 1.15.2 \u2014 bun.lock", "shortDescription": {"text": "CVE-2026-44496: axios 1.15.2 \u2014 bun.lock"}, "fullDescription": {"text": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name\n\nAxios is a promise based HTTP client for the browser and Node.js. Axios versions before 0.32.0 on the 0.x line and before 1.16.0 on the 1.x line build a regular expression from the configured XSRF cookie name without escaping regex metacharacters. In standard browser environments, an attacker who can influence the cookie name passed to axios can cause expensive regex backtracking while axios reads document.cookie. The practical impact is client-side availability degradation, such as freezing the\n\nPackage: axios\nInstalled: 1.15.2\nFixed in: 1.16.0, 0.32.0\nSeverity: HIGH\nFix: Upgrade axios to 1.16.0, 0.32.0"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-933193bd69eb00f5", "name": "CVE-2026-44490: axios 1.15.2 \u2014 bun.lock", "shortDescription": {"text": "CVE-2026-44490: axios 1.15.2 \u2014 bun.lock"}, "fullDescription": {"text": "axios: Axios: Information disclosure and denial of service due to prototype pollution\n\nAxios is a promise based HTTP client for the browser and Node.js. Prior to 0.32.0 and 1.16.0, axios exposes two read-side prototype-pollution gadgets. When Object.prototype is polluted by an upstream dependency in the same process (e.g. lodash _.merge / CVE-2018-16487), axios silently picks up the polluted values. (1) lib/utils.js line 406 builds merge()'s accumulator as result = {}, so result[targetKey] (line 414) walks Object.prototype and the polluted bucket's own keys are copied into the mer\n\nPackage: axios\nInstalled: 1.15.2\nFixed in: 1.16.0, 0.32.0\nSeverity: MEDIUM\nFix: Upgrade axios to 1.16.0, 0.32.0"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-624dd044dde56854", "name": "CVE-2026-44489: axios 1.15.2 \u2014 bun.lock", "shortDescription": {"text": "CVE-2026-44489: axios 1.15.2 \u2014 bun.lock"}, "fullDescription": {"text": "axios: Axios: Information disclosure via Prototype Pollution\n\nAxios is a promise based HTTP client for the browser and Node.js. From 1.15.2 to before 1.16.0, nested objects created by utils.merge() (e.g., config.proxy) are still constructed as plain {} with Object.prototype in their chain. The setProxy() function at lib/adapters/http.js:209-223 reads proxy.username, proxy.password, and proxy.auth without hasOwnProperty checks. When Object.prototype.username is polluted, setProxy() constructs a Proxy-Authorization header with attacker-controlled credentials\n\nPackage: axios\nInstalled: 1.15.2\nFixed in: 1.16.0\nSeverity: LOW\nFix: Upgrade axios to 1.16.0"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c962935d3ce8bdc1", "name": "GHSA-cmwh-pvxp-8882: dompurify 3.4.9 \u2014 bun.lock", "shortDescription": {"text": "GHSA-cmwh-pvxp-8882: dompurify 3.4.9 \u2014 bun.lock"}, "fullDescription": {"text": "DOMPurify: Permanent `ALLOWED_ATTR` pollution via `setConfig()` bypassing the hook clone-guard (incomplete fix of the 3.4.7 hook-pollution patch)\n\n## Summary\n\nDOMPurify 3.4.7 shipped a security fix (\"permanent hook pollution\") that makes a registered `uponSanitizeAttribute` hook's mutation of `data.allowedAttributes` **non-persistent** \u2014 so allowing an attribute for one element does not leak into later `sanitize()` calls. The fix clones `ALLOWED_ATTR` inside `_parseConfig`.\n\nThat guard is **silently bypassed whenever the application uses the persistent-config API `DOMPurify.setConfig()`.** `setConfig()` sets the module flag `SET_CONFIG = t\n\nPackage: dompurify\nInstalled: 3.4.9\nFixed in: 3.4.11\nSeverity: MEDIUM\nFix: Upgrade dompurify to 3.4.11"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3022738d32ff2d36", "name": "GHSA-vjh7-7g9h-fjfh: elliptic 6.5.4 \u2014 bun.lock", "shortDescription": {"text": "GHSA-vjh7-7g9h-fjfh: elliptic 6.5.4 \u2014 bun.lock"}, "fullDescription": {"text": "Elliptic's private key extraction in ECDSA upon signing a malformed input (e.g. a string)\n\n### Summary\n\nPrivate key can be extracted from ECDSA signature upon signing a malformed input (e.g. a string or a number), which could e.g. come from JSON network input\n\nNote that `elliptic` by design accepts hex strings as one of the possible input types\n\n### Details\n\nIn this code: https://github.com/indutny/elliptic/blob/3e46a48fdd2ef2f89593e5e058d85530578c9761/lib/elliptic/ec/index.js#L100-L107\n\n`msg` is a BN instance after conversion, but `nonce` is an array, and different BN instances could\n\nPackage: elliptic\nInstalled: 6.5.4\nFixed in: 6.6.1\nSeverity: CRITICAL\nFix: Upgrade elliptic to 6.6.1"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-d2aed882f8dab0c7", "name": "CVE-2024-42459: elliptic 6.5.4 \u2014 bun.lock", "shortDescription": {"text": "CVE-2024-42459: elliptic 6.5.4 \u2014 bun.lock"}, "fullDescription": {"text": "elliptic: nodejs/elliptic: EDDSA signature malleability due to missing signature length check\n\nIn the Elliptic package 6.5.6 for Node.js, EDDSA signature malleability occurs because there is a missing signature length check, and thus zero-valued bytes can be removed or appended.\n\nPackage: elliptic\nInstalled: 6.5.4\nFixed in: 6.5.7\nSeverity: LOW\nFix: Upgrade elliptic to 6.5.7"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1eab01d639b50e4e", "name": "CVE-2024-42460: elliptic 6.5.4 \u2014 bun.lock", "shortDescription": {"text": "CVE-2024-42460: elliptic 6.5.4 \u2014 bun.lock"}, "fullDescription": {"text": "elliptic: nodejs/elliptic: ECDSA signature malleability due to missing checks\n\nIn the Elliptic package 6.5.6 for Node.js, ECDSA signature malleability occurs because there is a missing check for whether the leading bit of r and s is zero.\n\nPackage: elliptic\nInstalled: 6.5.4\nFixed in: 6.5.7\nSeverity: LOW\nFix: Upgrade elliptic to 6.5.7"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-77bb9522fd4d1c7f", "name": "CVE-2024-42461: elliptic 6.5.4 \u2014 bun.lock", "shortDescription": {"text": "CVE-2024-42461: elliptic 6.5.4 \u2014 bun.lock"}, "fullDescription": {"text": "elliptic: nodejs/elliptic: ECDSA implementation malleability due to BER-enconded signatures being allowed\n\nIn the Elliptic package 6.5.6 for Node.js, ECDSA signature malleability occurs because BER-encoded signatures are allowed.\n\nPackage: elliptic\nInstalled: 6.5.4\nFixed in: 6.5.7\nSeverity: LOW\nFix: Upgrade elliptic to 6.5.7"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-517d11d2271cc6fc", "name": "CVE-2024-48948: elliptic 6.5.4 \u2014 bun.lock", "shortDescription": {"text": "CVE-2024-48948: elliptic 6.5.4 \u2014 bun.lock"}, "fullDescription": {"text": "elliptic: ECDSA signature verification error may reject legitimate transactions\n\nThe Elliptic package 6.5.7 for Node.js, in its for ECDSA implementation, does not correctly verify valid signatures if the hash contains at least four leading 0 bytes and when the order of the elliptic curve's base point is smaller than the hash, because of an _truncateToN anomaly. This leads to valid signatures being rejected. Legitimate transactions or communications may be incorrectly flagged as invalid.\n\nPackage: elliptic\nInstalled: 6.5.4\nFixed in: 6.6.0\nSeverity: LOW\nFix: Upgrade elliptic to 6.6.0"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3e1f77f7047b1d75", "name": "CVE-2024-48949: elliptic 6.5.4 \u2014 bun.lock", "shortDescription": {"text": "CVE-2024-48949: elliptic 6.5.4 \u2014 bun.lock"}, "fullDescription": {"text": "elliptic: Missing Validation in Elliptic's EDDSA Signature Verification\n\nThe verify function in lib/elliptic/eddsa/index.js in the Elliptic package before 6.5.6 for Node.js omits \"sig.S().gte(sig.eddsa.curve.n) || sig.S().isNeg()\" validation.\n\nPackage: elliptic\nInstalled: 6.5.4\nFixed in: 6.5.6\nSeverity: LOW\nFix: Upgrade elliptic to 6.5.6"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-36fc07d4b32cc7c5", "name": "CVE-2025-14505: elliptic 6.5.4 \u2014 bun.lock", "shortDescription": {"text": "CVE-2025-14505: elliptic 6.5.4 \u2014 bun.lock"}, "fullDescription": {"text": "elliptic: Key handling flaws in Elliptic\n\nThe ECDSA implementation of the Elliptic package generates incorrect signatures if an interim value of 'k' (as computed based on step 3.2 of  RFC 6979 https://datatracker.ietf.org/doc/html/rfc6979 ) has leading zeros and is susceptible to cryptanalysis, which can lead to secret key exposure. This happens, because the byte-length of 'k' is incorrectly computed, resulting in its getting truncated during the computation. Legitimate transactions or communications will be broken as a result.\u00a0Furtherm\n\nPackage: elliptic\nInstalled: 6.5.4\nFixed in: \u2014\nSeverity: LOW\nFix: No fix version published yet"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5c9febf7d789c16e", "name": "CVE-2026-8813: exifreader 4.20.0 \u2014 bun.lock", "shortDescription": {"text": "CVE-2026-8813: exifreader 4.20.0 \u2014 bun.lock"}, "fullDescription": {"text": "ExifReader is vulnerable to denial of service via crafted ICC `mluc` tag\n\nThis affects versions of the package exifreader before 4.39.0. A crafted image containing an ICC mluc tag can set an attacker-controlled record count together with a zero record size. During parsing, ExifReader repeatedly processes the same record and appends entries to an array without sufficient bounds validation, causing excessive memory growth. In applications that parse attacker-supplied images, this may lead to denial of service through memory exhaustion.\n\nPackage: exifreader\nInstalled: 4.20.0\nFixed in: 4.39.0\nSeverity: HIGH\nFix: Upgrade exifreader to 4.39.0"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-1e28cc9957df243c", "name": "CVE-2026-8814: exifreader 4.20.0 \u2014 bun.lock", "shortDescription": {"text": "CVE-2026-8814: exifreader 4.20.0 \u2014 bun.lock"}, "fullDescription": {"text": "ExifReader is vulnerable to denial of service via unbounded decompression of image metadata\n\nVersions of the package exifreader before 4.39.0 are vulnerable to Improper Handling of Highly Compressed Data (Data Amplification) due to decompressing PNG zTXt metadata without enforcing a built-in maximum decompressed output size. When asynchronous parsing is enabled, a crafted PNG file containing a highly compressed zTXt chunk can cause ExifReader to materialize a disproportionately large Comment value in memory.\n\nPackage: exifreader\nInstalled: 4.20.0\nFixed in: 4.39.0\nSeverity: MEDIUM\nFix: Upgrade exifreader to 4.39.0"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-476c82eaf168825f", "name": "CVE-2025-12735: expr-eval 2.0.2 \u2014 bun.lock", "shortDescription": {"text": "CVE-2025-12735: expr-eval 2.0.2 \u2014 bun.lock"}, "fullDescription": {"text": "expr-eval:\n\nThe expr-eval library is a JavaScript expression parser and evaluator designed to safely evaluate mathematical expressions with user-defined variables. However, due to insufficient input validation, an attacker can pass a crafted context object or use MEMBER of the context object into the evaluate() function and trigger arbitrary code execution.\n\nPackage: expr-eval\nInstalled: 2.0.2\nFixed in: \u2014\nSeverity: HIGH\nFix: No fix version published yet"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-20eeb5025192eef3", "name": "CVE-2025-13204: expr-eval 2.0.2 \u2014 bun.lock", "shortDescription": {"text": "CVE-2025-13204: expr-eval 2.0.2 \u2014 bun.lock"}, "fullDescription": {"text": "expr-eval: expr-eval: Prototype Pollution\n\nnpm package `expr-eval` is vulnerable to Prototype Pollution. An attacker with access to express eval interface can use JavaScript prototype-based inheritance model to achieve arbitrary code execution. The npm expr-eval-fork package resolves this issue.\n\nPackage: expr-eval\nInstalled: 2.0.2\nFixed in: \u2014\nSeverity: HIGH\nFix: No fix version published yet"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-4415f1d42172f183", "name": "CVE-2026-6321: fast-uri 3.1.0 \u2014 bun.lock", "shortDescription": {"text": "CVE-2026-6321: fast-uri 3.1.0 \u2014 bun.lock"}, "fullDescription": {"text": "fast-uri: fast-uri: Path traversal vulnerability allows bypass of security policies\n\nfast-uri decoded percent-encoded path separators and dot segments before applying dot-segment removal in its normalize() and equal() functions. Encoded path data was treated like real slashes and parent-directory references, so distinct URIs could collapse onto the same normalized path. Applications that normalize or compare attacker-controlled URLs to enforce path-based policy can be bypassed, with a path that appears confined under an allowed prefix normalizing to a different location. Version\n\nPackage: fast-uri\nInstalled: 3.1.0\nFixed in: 3.1.1\nSeverity: HIGH\nFix: Upgrade fast-uri to 3.1.1"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-d4ae4946325eb17c", "name": "CVE-2026-6322: fast-uri 3.1.0 \u2014 bun.lock", "shortDescription": {"text": "CVE-2026-6322: fast-uri 3.1.0 \u2014 bun.lock"}, "fullDescription": {"text": "fast-uri: fast-uri: URI authority bypass due to improper delimiter handling\n\nfast-uri normalize() decoded percent-encoded authority delimiters inside the host component and then re-emitted them as raw delimiters during serialization. A host that combined an allowed domain, an encoded at-sign, and a different domain was re-emitted with the at-sign as a raw userinfo separator, changing the URI's authority to the second domain. Applications that normalize untrusted URLs before host allowlist checks, redirect validation, or outbound request routing can be steered to a differ\n\nPackage: fast-uri\nInstalled: 3.1.0\nFixed in: 3.1.2\nSeverity: HIGH\nFix: Upgrade fast-uri to 3.1.2"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-9d3dcea08e4a7569", "name": "CVE-2026-44665: fast-xml-builder 1.1.5 \u2014 bun.lock", "shortDescription": {"text": "CVE-2026-44665: fast-xml-builder 1.1.5 \u2014 bun.lock"}, "fullDescription": {"text": "fast-xml-builder: fast-xml-builder: Attribute injection leading to information disclosure or content manipulation\n\nfast-xml-builder builds XML from JSON. Prior to 1.1.7, when an input data has quotes in attribute values but process entities is not enabled, it breaks the attribute value into multiple attributes. This gives the room for an attacker to insert unwanted attributes to the XML/HTML. This vulnerability is fixed in 1.1.7.\n\nPackage: fast-xml-builder\nInstalled: 1.1.5\nFixed in: 1.1.7\nSeverity: HIGH\nFix: Upgrade fast-xml-builder to 1.1.7"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-73c7302df57e4e67", "name": "CVE-2026-44664: fast-xml-builder 1.1.5 \u2014 bun.lock", "shortDescription": {"text": "CVE-2026-44664: fast-xml-builder 1.1.5 \u2014 bun.lock"}, "fullDescription": {"text": "fast-xml-builder: fast-xml-builder: Arbitrary XML/HTML injection via insufficient sanitization of XML comments\n\nfast-xml-builder builds XML from JSON. In 1.1.5, the fix for CVE-2026-41650 in fast-xml-parser sanitizes -- sequences in XML comment content using .replace(/--/g, '- -'). This skip the values containing three consecutive dashes (e.g., --->...), allowing an attacker to break out of an XML comment and inject arbitrary XML/HTML content. This vulnerability is fixed in 1.1.6.\n\nPackage: fast-xml-builder\nInstalled: 1.1.5\nFixed in: 1.1.6\nSeverity: MEDIUM\nFix: Upgrade fast-xml-builder to 1.1.6"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9a23206e5aa03758", "name": "CVE-2026-12143: form-data 4.0.4 \u2014 bun.lock", "shortDescription": {"text": "CVE-2026-12143: form-data 4.0.4 \u2014 bun.lock"}, "fullDescription": {"text": "form-data is a library for creating readable multipart/form-data strea ...\n\nform-data is a library for creating readable multipart/form-data streams. In versions through 4.0.5, the `field` argument to `FormData#append` and the `filename` option are concatenated verbatim into the `Content-Disposition` header without escaping carriage return (CR), line feed (LF), or double-quote (\") characters. An application that passes attacker-controlled data as a field name or filename (for example, an API gateway that turns JSON object keys into multipart field names) allows the atta\n\nPackage: form-data\nInstalled: 4.0.4\nFixed in: 2.5.6, 3.0.5, 4.0.6\nSeverity: HIGH\nFix: Upgrade form-data to 2.5.6, 3.0.5, 4.0.6"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-daba10389363d859", "name": "CVE-2026-54290: hono 4.12.16 \u2014 bun.lock", "shortDescription": {"text": "CVE-2026-54290: hono 4.12.16 \u2014 bun.lock"}, "fullDescription": {"text": "hono: CORS Middleware reflects any Origin with credentials when `origin` defaults to the wildcard\n\nHono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.25, with credentials: true and no explicit origin (the default wildcard), the CORS Middleware reflects the request's Origin and sends Access-Control-Allow-Credentials: true. Any site can then make credentialed cross-origin requests and read the responses, exposing cookie-authenticated endpoints to arbitrary origins. This vulnerability is fixed in 4.12.25.\n\nPackage: hono\nInstalled: 4.12.16\nFixed in: 4.12.25\nSeverity: HIGH\nFix: Upgrade hono to 4.12.25"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-53b12612a2616be0", "name": "CVE-2026-44457: hono 4.12.16 \u2014 bun.lock", "shortDescription": {"text": "CVE-2026-44457: hono 4.12.16 \u2014 bun.lock"}, "fullDescription": {"text": "Hono's Cache Middleware ignores Vary: Authorization / Vary: Cookie leading to cross-user cache leakage\n\nHono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.18, Cache Middleware does not skip caching for responses that declare per-user variance via Vary: Authorization or Vary: Cookie. As a result, a response cached for one authenticated user may be served to subsequent requests from different users. This vulnerability is fixed in 4.12.18.\n\nPackage: hono\nInstalled: 4.12.16\nFixed in: 4.12.18\nSeverity: MEDIUM\nFix: Upgrade hono to 4.12.18"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-499787e8e760ca76", "name": "CVE-2026-44458: hono 4.12.16 \u2014 bun.lock", "shortDescription": {"text": "CVE-2026-44458: hono 4.12.16 \u2014 bun.lock"}, "fullDescription": {"text": "Hono has CSS Declaration Injection via Style Object Values in JSX SSR\n\nHono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.18, the JSX renderer escapes style attribute object values for HTML but not for CSS. Untrusted input in a style object value or property name can therefore inject additional CSS declarations into the rendered style attribute. The impact is limited to CSS and does not allow JavaScript execution or HTML attribute breakout. This vulnerability is fixed in 4.12.18.\n\nPackage: hono\nInstalled: 4.12.16\nFixed in: 4.12.18\nSeverity: MEDIUM\nFix: Upgrade hono to 4.12.18"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f3ea00570b01929a", "name": "CVE-2026-47673: hono 4.12.16 \u2014 bun.lock", "shortDescription": {"text": "CVE-2026-47673: hono 4.12.16 \u2014 bun.lock"}, "fullDescription": {"text": "Hono: JWT middleware accepts any Authorization scheme, not only Bearer\n\nHono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.21, the jwt and jwk middlewares do not verify that the Authorization header value uses theBearer scheme. Any two-part header value \u2014 regardless of the scheme name in the first position \u2014 proceeds to JWT verification. A request presenting a valid JWT under a non-Bearer scheme identifier (such as Basic or Token) is authenticated identically to a correctly formed Bearer request. This vulnerability is\n\nPackage: hono\nInstalled: 4.12.16\nFixed in: 4.12.21\nSeverity: MEDIUM\nFix: Upgrade hono to 4.12.21"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f4a1596b9c9da86d", "name": "CVE-2026-47674: hono 4.12.16 \u2014 bun.lock", "shortDescription": {"text": "CVE-2026-47674: hono 4.12.16 \u2014 bun.lock"}, "fullDescription": {"text": "Hono: IP Restriction bypasses static deny rules for non-canonical IPv6 \n\nHono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.21, the ip-restriction middleware (hono/ip-restriction) compares incoming IP addresses against configured deny and allow rules using string equality after partial normalization. Non-canonical IPv6 representations of an address already listed in a static rule \u2014 such as compressed forms, explicit-zero forms, or hex-notation IPv4-mapped addresses \u2014 do not match the normalized rule entry, causing the \n\nPackage: hono\nInstalled: 4.12.16\nFixed in: 4.12.21\nSeverity: MEDIUM\nFix: Upgrade hono to 4.12.21"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-fa3f60aa662ea6f1", "name": "CVE-2026-47675: hono 4.12.16 \u2014 bun.lock", "shortDescription": {"text": "CVE-2026-47675: hono 4.12.16 \u2014 bun.lock"}, "fullDescription": {"text": "Hono: Cookie helper does not sanitize sameSite and priority, allowing Set-Cookie injection\n\nHono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.21, the serialize() function in hono/cookie validates domain and path options against characters that corrupt Set-Cookie header syntax (;, \\r, \\n), but does not apply the same validation to sameSite and priority. An application that passes user-controlled input into either option may produce a Set-Cookie response header containing attacker-chosen additional attributes. This vulnerability is fixed \n\nPackage: hono\nInstalled: 4.12.16\nFixed in: 4.12.21\nSeverity: MEDIUM\nFix: Upgrade hono to 4.12.21"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-fee0343be2629827", "name": "CVE-2026-47676: hono 4.12.16 \u2014 bun.lock", "shortDescription": {"text": "CVE-2026-47676: hono 4.12.16 \u2014 bun.lock"}, "fullDescription": {"text": "Hono: app.mount() strips mount prefix using undecoded path, causing incorrect routing for percent-encoded paths\n\nHono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.21, app.mount() strips the mount prefix from the incoming request path using the raw URL pathname, while route matching is performed against the percent-decoded path. This inconsistency causes the prefix to be stripped at the wrong position when the path contains percent-encoded multi-byte characters, resulting in the mounted sub-application receiving an incorrect path. This vulnerability is fixed\n\nPackage: hono\nInstalled: 4.12.16\nFixed in: 4.12.21\nSeverity: MEDIUM\nFix: Upgrade hono to 4.12.21"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-591a653f9cf722c4", "name": "CVE-2026-54286: hono 4.12.16 \u2014 bun.lock", "shortDescription": {"text": "CVE-2026-54286: hono 4.12.16 \u2014 bun.lock"}, "fullDescription": {"text": "hono: Path traversal in `serve-static` on Windows via encoded backslash (`%5C`)\n\nHono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.25, on Windows hosts, an encoded backslash (%5C) in the request path decodes to \\, which the Windows path resolver treats as a separator. serve-static then resolves a single URL segment such as admin\\secret.txt into a nested file under the root and serves it, letting an attacker read static files meant to be protected behind prefix-mounted middleware. This vulnerability is fixed in 4.12.25.\n\nPackage: hono\nInstalled: 4.12.16\nFixed in: 4.12.25\nSeverity: MEDIUM\nFix: Upgrade hono to 4.12.25"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2be74bce2882c894", "name": "CVE-2026-54287: hono 4.12.16 \u2014 bun.lock", "shortDescription": {"text": "CVE-2026-54287: hono 4.12.16 \u2014 bun.lock"}, "fullDescription": {"text": "hono: AWS Lambda adapter merges multiple `Set-Cookie` headers into one value, dropping cookies on ALB single-header and Lattice\n\nHono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.25, on AWS Lambda, the ALB single-header response and the VPC Lattice v2 response join multiple Set-Cookie headers into one comma-separated value. Because commas also appear inside cookie attributes (for example Expires dates), clients cannot split the value back into individual cookies and silently drop or misparse them. This vulnerability is fixed in 4.12.25.\n\nPackage: hono\nInstalled: 4.12.16\nFixed in: 4.12.25\nSeverity: MEDIUM\nFix: Upgrade hono to 4.12.25"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1fc6f654da3609b6", "name": "CVE-2026-54288: hono 4.12.16 \u2014 bun.lock", "shortDescription": {"text": "CVE-2026-54288: hono 4.12.16 \u2014 bun.lock"}, "fullDescription": {"text": "hono: Body Limit Middleware can be bypassed on AWS Lambda by understating `Content-Length`\n\nHono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.25, the Body Limit Middleware trusts the request's Content-Length header to decide whether a body is within the limit. On AWS Lambda (API Gateway v1/v2, ALB, VPC Lattice, and Lambda@Edge) the body is delivered fully buffered and the adapter builds the request with the client-declared Content-Length, which need not match the actual payload. A client can declare a tiny Content-Length while sending a\n\nPackage: hono\nInstalled: 4.12.16\nFixed in: 4.12.25\nSeverity: MEDIUM\nFix: Upgrade hono to 4.12.25"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f074abaa54386ff7", "name": "CVE-2026-54289: hono 4.12.16 \u2014 bun.lock", "shortDescription": {"text": "CVE-2026-54289: hono 4.12.16 \u2014 bun.lock"}, "fullDescription": {"text": "hono: Lambda@Edge adapter keeps only the last value of a repeated request header, dropping the rest\n\nHono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.25, on AWS Lambda@Edge, CloudFront delivers a request header that appears more than once as several separate entries. The adapter writes each value with Headers.set instead of Headers.append, so every value overwrites the previous one and only the last reaches the application. Repeated request headers such as X-Forwarded-For, Forwarded, and Via are silently truncated to a single value. Request mid\n\nPackage: hono\nInstalled: 4.12.16\nFixed in: 4.12.25\nSeverity: MEDIUM\nFix: Upgrade hono to 4.12.25"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-919e5a9abac29476", "name": "CVE-2026-44459: hono 4.12.16 \u2014 bun.lock", "shortDescription": {"text": "CVE-2026-44459: hono 4.12.16 \u2014 bun.lock"}, "fullDescription": {"text": "Hono has improper validation of NumericDate claims (exp, nbf, iat) in JWT verify()\n\nHono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.18, improper validation of the JWT NumericDate claims exp, nbf, and iat in hono/utils/jwt allows tokens with non-spec-compliant claim values to silently bypass time-based checks. This issue is not exploitable by an anonymous attacker; it only manifests when a malformed claim value reaches verify() \u2014 typically when the application itself issues such tokens, or when the signing key is otherwise unde\n\nPackage: hono\nInstalled: 4.12.16\nFixed in: 4.12.18\nSeverity: LOW\nFix: Upgrade hono to 4.12.18"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-078d7fe02ddcfd59", "name": "CVE-2026-42338: ip-address 10.1.0 \u2014 bun.lock", "shortDescription": {"text": "CVE-2026-42338: ip-address 10.1.0 \u2014 bun.lock"}, "fullDescription": {"text": "ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input\n\nip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.1.1, Address6.group() and Address6.link() do not HTML-escape attacker-controlled content before embedding it in the HTML strings they return, and AddressError.parseMessage (emitted by the Address6 constructor for invalid input) can contain unescaped attacker-controlled content in one branch. An application that (1) passes untrusted input to Address6 and (2) renders the output of these methods,\n\nPackage: ip-address\nInstalled: 10.1.0\nFixed in: 10.1.1\nSeverity: MEDIUM\nFix: Upgrade ip-address to 10.1.1"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3d073c6a0ffaffe8", "name": "CVE-2026-46625: js-cookie 2.2.1 \u2014 bun.lock", "shortDescription": {"text": "CVE-2026-46625: js-cookie 2.2.1 \u2014 bun.lock"}, "fullDescription": {"text": "JavaScript Cookie is a JavaScript API for handling cookies, client-sid ...\n\nJavaScript Cookie is a JavaScript API for handling cookies, client-side. Prior to version 3.0.7, js-cookie's internal assign() helper copies properties with for...in + plain assignment. When the source object is produced by JSON.parse, the JSON object's \"__proto__\" member is an own enumerable property, so the for\u2026in enumerates it and the target[key] = source[key] write triggers the Object.prototype.__proto__ setter on the fresh target ({}). The result is a per-instance prototype hijack: Object.p\n\nPackage: js-cookie\nInstalled: 2.2.1\nFixed in: 3.0.7\nSeverity: HIGH\nFix: Upgrade js-cookie to 3.0.7"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-826c36be5e0903cb", "name": "CVE-2026-53550: js-yaml 4.1.1 \u2014 bun.lock", "shortDescription": {"text": "CVE-2026-53550: js-yaml 4.1.1 \u2014 bun.lock"}, "fullDescription": {"text": "js-yaml is a JavaScript YAML parser and dumper. Prior to 4.2.0, a craf ...\n\njs-yaml is a JavaScript YAML parser and dumper. Prior to 4.2.0, a crafted YAML document can trigger algorithmic CPU exhaustion in js-yaml merge-key processing (<<) by repeating the same alias many times in a merge sequence. This causes quadratic parse-time behavior relative to input size and can block a Node.js worker/event loop for seconds with a relatively small payload (tens of KB), resulting in denial of service. The issue is in merge handling inside lib/loader.js. This vulnerability is fixe\n\nPackage: js-yaml\nInstalled: 4.1.1\nFixed in: 4.2.0\nSeverity: MEDIUM\nFix: Upgrade js-yaml to 4.2.0"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cf4ed4e06ae2af83", "name": "CVE-2024-28243: katex 0.12.0 \u2014 bun.lock", "shortDescription": {"text": "CVE-2024-28243: katex 0.12.0 \u2014 bun.lock"}, "fullDescription": {"text": "KaTeX is a JavaScript library for TeX math rendering on the web. KaTeX ...\n\nKaTeX is a JavaScript library for TeX math rendering on the web. KaTeX users who render untrusted mathematical expressions could encounter malicious input using `\\edef` that causes a near-infinite loop, despite setting `maxExpand` to avoid such loops. This can be used as an availability attack, where e.g. a client rendering another user's KaTeX input will be unable to use the site due to memory overflow, tying up the main thread, or stack overflow. Upgrade to KaTeX v0.16.10 to remove this vulner\n\nPackage: katex\nInstalled: 0.12.0\nFixed in: 0.16.10\nSeverity: MEDIUM\nFix: Upgrade katex to 0.16.10"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d61eec7a83fe0a31", "name": "CVE-2024-28245: katex 0.12.0 \u2014 bun.lock", "shortDescription": {"text": "CVE-2024-28245: katex 0.12.0 \u2014 bun.lock"}, "fullDescription": {"text": "KaTeX is a JavaScript library for TeX math rendering on the web. KaTeX ...\n\nKaTeX is a JavaScript library for TeX math rendering on the web. KaTeX users who render untrusted mathematical expressions could encounter malicious input using `\\includegraphics` that runs arbitrary JavaScript, or generate invalid HTML. Upgrade to KaTeX v0.16.10 to remove this vulnerability.\n\nPackage: katex\nInstalled: 0.12.0\nFixed in: 0.16.10\nSeverity: MEDIUM\nFix: Upgrade katex to 0.16.10"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-eaee14036641d37e", "name": "CVE-2024-28246: katex 0.12.0 \u2014 bun.lock", "shortDescription": {"text": "CVE-2024-28246: katex 0.12.0 \u2014 bun.lock"}, "fullDescription": {"text": "KaTeX is a JavaScript library for TeX math rendering on the web. Code  ...\n\nKaTeX is a JavaScript library for TeX math rendering on the web. Code that uses KaTeX's `trust` option, specifically that provides a function to blacklist certain URL protocols, can be fooled by URLs in malicious inputs that use uppercase characters in the protocol. In particular, this can allow for malicious input to generate `javascript:` links in the output, even if the `trust` function tries to forbid this protocol via `trust: (context) => context.protocol !== 'javascript'`. Upgrade to KaTeX\n\nPackage: katex\nInstalled: 0.12.0\nFixed in: 0.16.10\nSeverity: MEDIUM\nFix: Upgrade katex to 0.16.10"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-bef3c1b1d1be365f", "name": "CVE-2025-23207: katex 0.12.0 \u2014 bun.lock", "shortDescription": {"text": "CVE-2025-23207: katex 0.12.0 \u2014 bun.lock"}, "fullDescription": {"text": "katex: \\htmlData does not validate attribute names in KaTeX\n\nKaTeX is a fast, easy-to-use JavaScript library for TeX math rendering on the web. KaTeX users who render untrusted mathematical expressions with `renderToString` could encounter malicious input using `\\htmlData` that runs arbitrary JavaScript, or generate invalid HTML. Users are advised to upgrade to KaTeX v0.16.21 to remove this vulnerability. Users unable to upgrade should avoid use of or turn off the `trust` option, or set it to forbid `\\htmlData` commands, forbid inputs containing the subst\n\nPackage: katex\nInstalled: 0.12.0\nFixed in: 0.16.21\nSeverity: MEDIUM\nFix: Upgrade katex to 0.16.21"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d3a911853b68da03", "name": "CVE-2026-48988: markdown-it 14.1.1 \u2014 bun.lock", "shortDescription": {"text": "CVE-2026-48988: markdown-it 14.1.1 \u2014 bun.lock"}, "fullDescription": {"text": "markdown-it is a Markdown parser. Versions 14.1.1 and below contain a  ...\n\nmarkdown-it is a Markdown parser. Versions 14.1.1 and below contain a denial-of-service vulnerability when typographer: true is enabled, due to quadratic (O(n^2)) processing in the smartquotes rule. The issue stems from repeatedly modifying strings with replaceAt(), which performs O(n) slicing and concatenation per quote character. This can cause excessive CPU consumption when parsing quote-heavy, user-supplied markdown and may let attackers degrade or disrupt service availability. Although typo\n\nPackage: markdown-it\nInstalled: 14.1.1\nFixed in: 14.2.0\nSeverity: MEDIUM\nFix: Upgrade markdown-it to 14.2.0"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-44cf92e7ec2d6798", "name": "GHSA-p6gq-j5cr-w38f: nodemailer 8.0.5 \u2014 bun.lock", "shortDescription": {"text": "GHSA-p6gq-j5cr-w38f: nodemailer 8.0.5 \u2014 bun.lock"}, "fullDescription": {"text": "Nodemailer: Message-level raw option bypasses disableFileAccess/disableUrlAccess, enabling arbitrary file read and full-response SSRF in the delivered message\n\n# Message-level `raw` option bypasses `disableFileAccess` / `disableUrlAccess`, enabling arbitrary file read and full-response SSRF in the sent message\n\n- **Target:** nodemailer/nodemailer, npm `nodemailer` **v9.0.0** (HEAD `4e58450eb490e5097a74b2b2cce35a8d9e21856e`)\n- **Verdict:** CONFIRMED (local PoC, no network)\n\n## Summary\n\nNodemailer exposes `disableFileAccess` and `disableUrlAccess` so an application that passes\n**untrusted** message data to the library can forbid that data from reading lo\n\nPackage: nodemailer\nInstalled: 8.0.5\nFixed in: 9.0.1\nSeverity: HIGH\nFix: Upgrade nodemailer to 9.0.1"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-af964b6188d79373", "name": "GHSA-268h-hp4c-crq3: nodemailer 8.0.5 \u2014 bun.lock", "shortDescription": {"text": "GHSA-268h-hp4c-crq3: nodemailer 8.0.5 \u2014 bun.lock"}, "fullDescription": {"text": "Nodemailer: CRLF injection in Nodemailer List-* header comments allows arbitrary message header injection\n\n### Summary\n\nNodemailer constructs `List-*` headers from the caller-provided `list` message option using internally prepared header values. The `list.*.comment` field is inserted into those prepared values without removing CR (`\\r`) or LF (`\\n`) characters. Because prepared headers bypass the normal header-value sanitizer and are passed to `mimeFuncs.foldLines()`, a CRLF sequence in a list comment is emitted as an actual header boundary in the generated RFC822 message.\n\nAn application that lets \n\nPackage: nodemailer\nInstalled: 8.0.5\nFixed in: 8.0.9\nSeverity: MEDIUM\nFix: Upgrade nodemailer to 8.0.9"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-77938363674f4a18", "name": "GHSA-r7g4-qg5f-qqm2: nodemailer 8.0.5 \u2014 bun.lock", "shortDescription": {"text": "GHSA-r7g4-qg5f-qqm2: nodemailer 8.0.5 \u2014 bun.lock"}, "fullDescription": {"text": "Nodemailer: Improper TLS Certificate Validation in OAuth2 Token Fetch Enables Credential Interception\n\n### Summary\nNodemailer disables TLS certificate verification in its internal HTTPS fetch client through the use of rejectUnauthorized: false inside lib/fetch/index.js.\n\nAs a result, OAuth2 token requests trust invalid or self-signed HTTPS certificates and transmit sensitive OAuth credentials over connections that should fail TLS validation.\n\nAn attacker in a machine-in-the-middle position can intercept OAuth2 credential exchanges and capture:\n\n- OAuth client_secret\n- refresh_token\n- access token\n\nPackage: nodemailer\nInstalled: 8.0.5\nFixed in: 8.0.8\nSeverity: MEDIUM\nFix: Upgrade nodemailer to 8.0.8"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-93279c1b094f32cd", "name": "GHSA-wqvq-jvpq-h66f: nodemailer 8.0.5 \u2014 bun.lock", "shortDescription": {"text": "GHSA-wqvq-jvpq-h66f: nodemailer 8.0.5 \u2014 bun.lock"}, "fullDescription": {"text": "Nodemailer jsonTransport bypasses disableFileAccess and disableUrlAccess during message normalization\n\n### Summary\n\nNodemailer's `disableFileAccess` and `disableUrlAccess` options are intended to prevent message content and attachments from reading local files or fetching URLs. The normal MIME streaming path enforces those options in `MimeNode._getStream()`. However, `jsonTransport` serializes messages by calling `mail.normalize()`, which resolves `html`, `text`, alternatives, calendar events, and attachments through `shared.resolveContent()` before MIME generation. `shared.resolveContent()` read\n\nPackage: nodemailer\nInstalled: 8.0.5\nFixed in: 8.0.9\nSeverity: MEDIUM\nFix: Upgrade nodemailer to 8.0.9"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a3e2b604076894e9", "name": "CVE-2026-41242: protobufjs 6.11.5 \u2014 bun.lock", "shortDescription": {"text": "CVE-2026-41242: protobufjs 6.11.5 \u2014 bun.lock"}, "fullDescription": {"text": "protobufjs: protobufjs: Arbitrary code execution via injected protobuf definition type fields\n\nprotobufjs compiles protobuf definitions into JavaScript (JS) functions. In versions prior to 8.0.1 and 7.5.5, attackers can inject arbitrary code in the \"type\" fields of protobuf definitions, which will then execute during object decoding using that definition. Versions 8.0.1 and 7.5.5 patch the issue.\n\nPackage: protobufjs\nInstalled: 6.11.5\nFixed in: 8.0.1, 7.5.5\nSeverity: CRITICAL\nFix: Upgrade protobufjs to 8.0.1, 7.5.5"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-500c471ad893fde0", "name": "CVE-2026-44289: protobufjs 6.11.5 \u2014 bun.lock", "shortDescription": {"text": "CVE-2026-44289: protobufjs 6.11.5 \u2014 bun.lock"}, "fullDescription": {"text": "protobuf.js: Denial of service through unbounded protobuf recursion\n\nprotobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs could recurse without a depth limit while decoding nested protobuf data. This affected both skipping unknown group fields and generated decoding of nested message fields. A crafted protobuf binary payload could cause the JavaScript call stack to be exhausted during decoding. This vulnerability is fixed in 7.5.6 and 8.0.2.\n\nPackage: protobufjs\nInstalled: 6.11.5\nFixed in: 7.5.6, 8.0.2\nSeverity: HIGH\nFix: Upgrade protobufjs to 7.5.6, 8.0.2"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-31a7f9ccf2597375", "name": "CVE-2026-44290: protobufjs 6.11.5 \u2014 bun.lock", "shortDescription": {"text": "CVE-2026-44290: protobufjs 6.11.5 \u2014 bun.lock"}, "fullDescription": {"text": "protobuf.js: Process-wide denial of service through unsafe option paths\n\nprotobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs allowed certain schema option paths to traverse through inherited object properties while applying options. A crafted protobuf schema or JSON descriptor could cause option handling to write to properties on global JavaScript constructors, corrupting process-wide built-in functionality. This vulnerability is fixed in 7.5.6 and 8.0.2.\n\nPackage: protobufjs\nInstalled: 6.11.5\nFixed in: 7.5.6, 8.0.2\nSeverity: HIGH\nFix: Upgrade protobufjs to 7.5.6, 8.0.2"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-47d096feaa239741", "name": "CVE-2026-44291: protobufjs 6.11.5 \u2014 bun.lock", "shortDescription": {"text": "CVE-2026-44291: protobufjs 6.11.5 \u2014 bun.lock"}, "fullDescription": {"text": "protobuf.js: Code generation gadget after prototype pollution\n\nprotobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs used plain objects with inherited prototypes for internal type lookup tables used by generated encode and decode functions. If Object.prototype had already been polluted, those lookup tables could resolve attacker-controlled inherited properties as valid protobuf type information. This could cause attacker-controlled strings to be emitted into generated JavaScript code. This vulnerabilit\n\nPackage: protobufjs\nInstalled: 6.11.5\nFixed in: 7.5.6, 8.0.2\nSeverity: HIGH\nFix: Upgrade protobufjs to 7.5.6, 8.0.2"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-19e13d13db56fdd3", "name": "CVE-2026-44293: protobufjs 6.11.5 \u2014 bun.lock", "shortDescription": {"text": "CVE-2026-44293: protobufjs 6.11.5 \u2014 bun.lock"}, "fullDescription": {"text": "protobufjs: protobufjs: Arbitrary code execution due to unsafe expression generation from crafted protobuf descriptors\n\nprotobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs generated JavaScript for toObject conversion could include an unsafe expression derived from a schema-controlled bytes field default value. A crafted descriptor with a non-string default value for a bytes field could cause attacker-controlled code to be emitted into the generated conversion function. This vulnerability is fixed in 7.5.6 and 8.0.2.\n\nPackage: protobufjs\nInstalled: 6.11.5\nFixed in: 7.5.6, 8.0.2\nSeverity: HIGH\nFix: Upgrade protobufjs to 7.5.6, 8.0.2"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-43a99ec841da0e5d", "name": "CVE-2026-48712: protobufjs 6.11.5 \u2014 bun.lock", "shortDescription": {"text": "CVE-2026-48712: protobufjs 6.11.5 \u2014 bun.lock"}, "fullDescription": {"text": "protobufjs: Denial of service through unbounded Any expansion during JSON conversion\n\nprotobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.6.1 and 8.4.1, protobufjs could recurse without a depth limit while converting decoded messages to plain objects or JSON. This affected generated toObject() conversion and the custom google.protobuf.Any JSON conversion path. A crafted protobuf binary payload containing deeply nested Any values could cause the JavaScript call stack to be exhausted during conversion to JSON. This vulnerability is fixed in 7.6.1 and\n\nPackage: protobufjs\nInstalled: 6.11.5\nFixed in: 7.6.1, 8.4.1\nSeverity: HIGH\nFix: Upgrade protobufjs to 7.6.1, 8.4.1"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-ac0eac760d5d3ea5", "name": "CVE-2026-44288: protobufjs 6.11.5 \u2014 bun.lock", "shortDescription": {"text": "CVE-2026-44288: protobufjs 6.11.5 \u2014 bun.lock"}, "fullDescription": {"text": "protobufjs: protobufjs: Security control bypass due to improper handling of overlong UTF-8 sequences\n\nprotobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs includes a minimal UTF-8 decoder that accepted overlong UTF-8 byte sequences and decoded them to their canonical characters instead of replacing them. An attacker who can provide protobuf binary data decoded through the affected UTF-8 path may be able to bypass application-level checks that inspect raw bytes before protobuf string decoding. For example, bytes that do not contain certain \n\nPackage: protobufjs\nInstalled: 6.11.5\nFixed in: 7.5.6, 8.0.2\nSeverity: MEDIUM\nFix: Upgrade protobufjs to 7.5.6, 8.0.2"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-dd968e5649bbfccd", "name": "CVE-2026-44292: protobufjs 6.11.5 \u2014 bun.lock", "shortDescription": {"text": "CVE-2026-44292: protobufjs 6.11.5 \u2014 bun.lock"}, "fullDescription": {"text": "protobuf.js: Prototype injection in generated message constructors\n\nprotobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs generated message constructors copied enumerable properties from a provided properties object without filtering the __proto__ key. If an application constructed a message from an attacker-controlled plain object, an own enumerable __proto__ property could alter the prototype of that individual message instance. This vulnerability is fixed in 7.5.6 and 8.0.2.\n\nPackage: protobufjs\nInstalled: 6.11.5\nFixed in: 7.5.6, 8.0.2\nSeverity: MEDIUM\nFix: Upgrade protobufjs to 7.5.6, 8.0.2"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5b876e31945679ce", "name": "CVE-2026-44294: protobufjs 6.11.5 \u2014 bun.lock", "shortDescription": {"text": "CVE-2026-44294: protobufjs 6.11.5 \u2014 bun.lock"}, "fullDescription": {"text": "protobuf.js: Denial of service from crafted field names in generated code\n\nprotobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs generated JavaScript property accessors from schema-controlled field and oneof names. Certain control characters in field names were not escaped before being embedded into generated function bodies. A crafted schema or JSON descriptor could therefore cause generated encode, decode, verify, or conversion functions to fail during compilation. This vulnerability is fixed in 7.5.6 and 8.0.2.\n\nPackage: protobufjs\nInstalled: 6.11.5\nFixed in: 7.5.6, 8.0.2\nSeverity: MEDIUM\nFix: Upgrade protobufjs to 7.5.6, 8.0.2"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-80fa77e256b05ce6", "name": "CVE-2026-45740: protobufjs 6.11.5 \u2014 bun.lock", "shortDescription": {"text": "CVE-2026-45740: protobufjs 6.11.5 \u2014 bun.lock"}, "fullDescription": {"text": "protobufjs: Denial of Service via unbounded recursive JSON descriptor expansion\n\nprotobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.8 and 8.2.0, protobufjs could recurse without a depth limit while expanding nested JSON descriptors through Root.fromJSON() and Namespace.addJSON(). A crafted JSON descriptor with deeply nested namespace definitions could cause the JavaScript call stack to be exhausted during descriptor loading. This vulnerability is fixed in 7.5.8 and 8.2.0.\n\nPackage: protobufjs\nInstalled: 6.11.5\nFixed in: 7.5.8, 8.2.0\nSeverity: MEDIUM\nFix: Upgrade protobufjs to 7.5.8, 8.2.0"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b25bf1c80759b76a", "name": "CVE-2026-54269: protobufjs 6.11.5 \u2014 bun.lock", "shortDescription": {"text": "CVE-2026-54269: protobufjs 6.11.5 \u2014 bun.lock"}, "fullDescription": {"text": "protobufjs : Schema-derived names can shadow runtime-significant properties\n\nprotobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 8.6.0 and 7.6.3, protobufjs accepted certain schema-derived names that could collide with properties used by protobufjs runtime helpers. The known affected names are fields named hasOwnProperty, field or oneof names such as $type when loaded through protobufjs JSON/reflection descriptors, and service methods whose generated helper name is rpcCall. When affected message or service types were used, protobufjs could r\n\nPackage: protobufjs\nInstalled: 6.11.5\nFixed in: 7.6.3, 8.6.0\nSeverity: MEDIUM\nFix: Upgrade protobufjs to 7.6.3, 8.6.0"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e9b384028bf7b385", "name": "CVE-2026-8723: qs 6.14.2 \u2014 bun.lock", "shortDescription": {"text": "CVE-2026-8723: qs 6.14.2 \u2014 bun.lock"}, "fullDescription": {"text": "### Summary    `qs.stringify` throws `TypeError` when called with `arr ...\n\n### Summary\n\n\n\n`qs.stringify` throws `TypeError` when called with `arrayFormat: 'comma'` and `encodeValuesOnly: true` on an array containing `null` or `undefined`. The throw is synchronous and not handled by any of qs's null-related options (`skipNulls`, `strictNullHandling`).\n\n\n\n### Details\n\n\n\nIn the comma + `encodeValuesOnly` branch, `lib/stringify.js:145` mapped the array through the raw encoder before joining:\n\n\n\n```js\n\n\n\nobj = utils.maybeMap(obj, encoder);\n\n\n\n```\n\n\n\n`utils.encode` (`lib/uti\n\nPackage: qs\nInstalled: 6.14.2\nFixed in: 6.15.2\nSeverity: MEDIUM\nFix: Upgrade qs to 6.15.2"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7c71e617ca79ad21", "name": "CVE-2025-68470: react-router 6.11.2 \u2014 bun.lock", "shortDescription": {"text": "CVE-2025-68470: react-router 6.11.2 \u2014 bun.lock"}, "fullDescription": {"text": "react-router: React Router unexpected external redirect\n\nReact Router is a router for React. In versions 6.0.0 through 6.30.1 and 7.0.0 through 7.9.5, an attacker-supplied path can be crafted so that when a React Router application navigates to it via navigate(), <Link>, or redirect(), the app performs a navigation/redirect to an external URL. This is only an issue if you are passing untrusted content into navigation paths in your application code. This issue has been patched in versions 6.30.2 and 7.9.6.\n\nPackage: react-router\nInstalled: 6.11.2\nFixed in: 6.30.2, 7.9.6\nSeverity: MEDIUM\nFix: Upgrade react-router to 6.30.2, 7.9.6"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-fc0492477e403d51", "name": "CVE-2026-40181: react-router 6.11.2 \u2014 bun.lock", "shortDescription": {"text": "CVE-2026-40181: react-router 6.11.2 \u2014 bun.lock"}, "fullDescription": {"text": "react-router: React Router: Open redirect vulnerability via specially crafted URLs\n\nReact Router is a router for React. In versions 7.0.0 through 7.14.0 and 6.7.0 through 6.30.3, certain URLs passed to the redirect function can trigger an open redirect to an external domain due to path values starting with // being reinterpreted as protocol-relative URLs. The level of impact depends on the validation done by the application prior to returning the redirect. This does not impact applications using Declarative Mode (<BrowserRouter>). This is patched in versions 7.14.1 and 6.30.4.\n\nPackage: react-router\nInstalled: 6.11.2\nFixed in: 7.14.1, 6.30.4\nSeverity: MEDIUM\nFix: Upgrade react-router to 7.14.1, 6.30.4"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-735234803b71be2e", "name": "CVE-2026-46490: samlify 2.10.0 \u2014 bun.lock", "shortDescription": {"text": "CVE-2026-46490: samlify 2.10.0 \u2014 bun.lock"}, "fullDescription": {"text": "samlify: XML Injection in AttributeValue Allows Privilege Escalation in Signed SAML Assertions\n\nsamlify is a Node.js library for SAML single sign-on. Prior to version 2.13.0, samlify\u2019s template substitution only escapes attribute contexts. Values inserted into element text (e.g., <saml:AttributeValue>) are not escaped. A normal user can inject XML markup into an attribute value (e.g., email, name) and add new <saml:Attribute> elements inside the signed assertion. The IdP then signs the tampered assertion and the SP accepts the injected attributes as trusted. This allows privilege escalatio\n\nPackage: samlify\nInstalled: 2.10.0\nFixed in: 2.13.0\nSeverity: HIGH\nFix: Upgrade samlify to 2.13.0"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-13c5af6ba9d860c7", "name": "CVE-2024-1899: showdown 2.1.0 \u2014 bun.lock", "shortDescription": {"text": "CVE-2024-1899: showdown 2.1.0 \u2014 bun.lock"}, "fullDescription": {"text": "Showdown vulnerable to Regular Expression Denial of Service (ReDoS) in link/anchor parsing\n\nAn issue in the anchors subparser of Showdownjs versions <= 2.1.0 could allow a remote attacker to cause denial of service conditions.\n\nPackage: showdown\nInstalled: 2.1.0\nFixed in: \u2014\nSeverity: MEDIUM\nFix: No fix version published yet"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1027f9b81aca5b41", "name": "CVE-2026-53655: tar 7.5.13 \u2014 bun.lock", "shortDescription": {"text": "CVE-2026-53655: tar 7.5.13 \u2014 bun.lock"}, "fullDescription": {"text": "node-tar is a full-featured Tar for Node.js. Prior to 7.5.16, tar (nod ...\n\nnode-tar is a full-featured Tar for Node.js. Prior to 7.5.16, tar (node-tar) applies a PAX extended header's size= record (and other PAX overrides) to the next header entry of any type, including intermediary metadata headers such as a GNU long-name (L) or long-link (K) entry. Per POSIX pax, a PAX extended header (x) describes the next file entry, not the intermediary extension headers that may sit between the x header and the file it annotates. Because node-tar lets the PAX size override the by\n\nPackage: tar\nInstalled: 7.5.13\nFixed in: 7.5.16\nSeverity: MEDIUM\nFix: Upgrade tar to 7.5.16"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-52e19b7d09636026", "name": "CVE-2026-44705: tmp 0.2.5 \u2014 bun.lock", "shortDescription": {"text": "CVE-2026-44705: tmp 0.2.5 \u2014 bun.lock"}, "fullDescription": {"text": "tmp is a temporary file and directory creator for node.js. Prior to 0. ...\n\ntmp is a temporary file and directory creator for node.js. Prior to 0.2.6, the tmp npm package contains a path traversal vulnerability that allows escaping the intended temporary directory when untrusted data flows into the prefix, postfix, or dir options. By embedding traversal sequences (e.g., ../) or path separators in these parameters, attackers can cause files to be created outside the configured temporary base directory at attacker-controlled locations with the privileges of the running pr\n\nPackage: tmp\nInstalled: 0.2.5\nFixed in: 0.2.6\nSeverity: HIGH\nFix: Upgrade tmp to 0.2.6"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-938338aa349df094", "name": "GHSA-9ggv-8w38-r7pm: typeorm 0.3.28 \u2014 bun.lock", "shortDescription": {"text": "GHSA-9ggv-8w38-r7pm: typeorm 0.3.28 \u2014 bun.lock"}, "fullDescription": {"text": "TypeORM: SQL Injection in UpdateQueryBuilder/SoftDeleteQueryBuilder orderBy (MySQL/MariaDB)\n\n### Impact\n\nBlind SQL injection vulnerability in `UpdateQueryBuilder` and `SoftDeleteQueryBuilder` affecting MySQL and MariaDB users.\n\n`UpdateQueryBuilder` and `SoftDeleteQueryBuilder` (including their `addOrderBy` variants) do not validate the `order` parameter against an allowlist of permitted values (`ASC`/`DESC`). The caller-supplied value is stored verbatim and concatenated directly into the generated SQL string without quoting or parameterization. `SelectQueryBuilder.orderBy` performs this\n\nPackage: typeorm\nInstalled: 0.3.28\nFixed in: 0.3.29\nSeverity: MEDIUM\nFix: Upgrade typeorm to 0.3.29"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1c06133c25e33ccb", "name": "CVE-2026-48125: ua-parser-js 2.0.9 \u2014 bun.lock", "shortDescription": {"text": "CVE-2026-48125: ua-parser-js 2.0.9 \u2014 bun.lock"}, "fullDescription": {"text": "UAParser.js: Unbounded `Sec-CH-UA-Model` parsing can trigger ReDoS in `withClientHints()`\n\n### Summary\n\nA regular expression denial-of-service (ReDoS) vulnerability has been discovered in `ua-parser-js` when using the Client Hints API. By sending a crafted `Sec-CH-UA-Model` header to an application that calls `UAParser(headers).withClientHints()`, an attacker can cause the parser to spend excessive CPU time due to catastrophic backtracking in the device [regex](https://github.com/faisalman/ua-parser-js/blob/2.0.9/src/main/ua-parser.js#L615):\n\n```js\n/ ([\\w ]+) miui\\/v?\\d/i\n```\n\nUnlike \n\nPackage: ua-parser-js\nInstalled: 2.0.9\nFixed in: 2.0.10\nSeverity: MEDIUM\nFix: Upgrade ua-parser-js to 2.0.10"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d3acacc074a87b3c", "name": "CVE-2026-12151: undici 7.24.6 \u2014 bun.lock", "shortDescription": {"text": "CVE-2026-12151: undici 7.24.6 \u2014 bun.lock"}, "fullDescription": {"text": "undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames\n\nImpact:\nThe undici WebSocket client enforces maxPayloadSize on the cumulative byte count of fragments in a message but does not enforce a limit on the number of fragments. A malicious WebSocket server can stream many small or empty continuation frames that each pass per-frame and cumulative-size validation, collectively causing unbounded memory growth in the client process. The result is memory exhaustion and a denial of service.\n\nAffected applications are those using the undici WebSocket client\n\nPackage: undici\nInstalled: 7.24.6\nFixed in: 6.27.0, 7.28.0, 8.5.0\nSeverity: HIGH\nFix: Upgrade undici to 6.27.0, 7.28.0, 8.5.0"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-cb70dcabc3be201e", "name": "CVE-2026-6734: undici 7.24.6 \u2014 bun.lock", "shortDescription": {"text": "CVE-2026-6734: undici 7.24.6 \u2014 bun.lock"}, "fullDescription": {"text": "undici: undici: Information disclosure and data integrity issues due to incorrect Socks5ProxyAgent connection routing\n\nImpact:\nWhen using Socks5ProxyAgent, undici reuses a single connection pool across different origins without verifying that the pool's origin matches the requested origin. All requests are dispatched through the pool connected to the first origin, regardless of the intended destination.\n\nThis causes cross-origin request routing: credentials and request data intended for origin B are sent to origin A, responses from the wrong origin are trusted, and HTTPS requests may be silently downgraded to HT\n\nPackage: undici\nInstalled: 7.24.6\nFixed in: 7.28.0, 8.2.0\nSeverity: HIGH\nFix: Upgrade undici to 7.28.0, 8.2.0"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-86ef58f2463f3ad6", "name": "CVE-2026-9697: undici 7.24.6 \u2014 bun.lock", "shortDescription": {"text": "CVE-2026-9697: undici 7.24.6 \u2014 bun.lock"}, "fullDescription": {"text": "undici: undici: Man-in-the-Middle attack via ignored TLS options with SOCKS5 proxy\n\nImpact:\nundici's ProxyAgent silently drops the requestTls option when configured with a SOCKS5 proxy URI (socks5:// or socks://). The target HTTPS connection through the SOCKS5 tunnel falls back to Node's default trust store, ignoring user-configured ca, cert, key, rejectUnauthorized, and servername settings.\n\nApplications that pin to an internal or corporate CA via requestTls.ca will, when their proxy URI is SOCKS5, get the default Mozilla CA bundle as the trust anchor instead. Any cert signed \n\nPackage: undici\nInstalled: 7.24.6\nFixed in: 7.28.0, 8.5.0\nSeverity: HIGH\nFix: Upgrade undici to 7.28.0, 8.5.0"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-48f61a777dd5509e", "name": "CVE-2026-9678: undici 7.24.6 \u2014 bun.lock", "shortDescription": {"text": "CVE-2026-9678: undici 7.24.6 \u2014 bun.lock"}, "fullDescription": {"text": "undici: Undici: Information disclosure due to improper cache-control header parsing\n\nImpact:\nUndici's cache interceptor incorrectly classifies some responses as cacheable when the upstream Cache-Control header uses whitespace-padded qualified private or no-cache field names such as private=\" authorization\" or no-cache=\"\\tauthorization\". The parser preserves the surrounding whitespace, so later comparisons against the literal authorization field name fail and the response is stored.\n\nIn shared-cache mode, this allows a response containing one user's authenticated data to be serve\n\nPackage: undici\nInstalled: 7.24.6\nFixed in: 7.28.0, 8.5.0\nSeverity: MEDIUM\nFix: Upgrade undici to 7.28.0, 8.5.0"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4c22e3c436bc8533", "name": "CVE-2026-9679: undici 7.24.6 \u2014 bun.lock", "shortDescription": {"text": "CVE-2026-9679: undici 7.24.6 \u2014 bun.lock"}, "fullDescription": {"text": "undici: undici vulnerable to HTTP header injection via Set-Cookie percent-decoding\n\nImpact:\nundici's cookie parser in parseSetCookie percent-decodes cookie values via qsUnescape, turning encoded sequences like %0D%0A, %00, %3B, and %3D into their literal byte equivalents. RFC 6265 \u00a75.4 does not specify any decoding and browsers do not decode either.\n\nApplications that parse a Set-Cookie header and then forward the parsed value into a response header (proxies, middleware, SSR frameworks) become vulnerable to HTTP response header injection: an attacker-controlled upstream can inj\n\nPackage: undici\nInstalled: 7.24.6\nFixed in: 6.27.0, 7.28.0, 8.5.0\nSeverity: MEDIUM\nFix: Upgrade undici to 6.27.0, 7.28.0, 8.5.0"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d3df3b6f34a15b3a", "name": "CVE-2026-11525: undici 7.24.6 \u2014 bun.lock", "shortDescription": {"text": "CVE-2026-11525: undici 7.24.6 \u2014 bun.lock"}, "fullDescription": {"text": "undici: undici: Weakening of cookie SameSite policy due to incorrect parsing of Set-Cookie header\n\nImpact:\nWhen undici parses a Set-Cookie header, it accepts any SameSite attribute value that contains Strict, Lax, or None as a substring, rather than the case-insensitive exact match specified by RFC 6265. Non-spec values are silently mapped to one of the three standard tokens. For example, SameSite=NoneOfYourBusiness is parsed as None (the most permissive setting), and SameSite=StrictLax is parsed as Lax (a downgrade from Strict).\n\nAffected applications are those that consume Set-Cookie header\n\nPackage: undici\nInstalled: 7.24.6\nFixed in: 6.27.0, 7.28.0, 8.5.0\nSeverity: LOW\nFix: Upgrade undici to 6.27.0, 7.28.0, 8.5.0"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d54a21896954d294", "name": "CVE-2026-6733: undici 7.24.6 \u2014 bun.lock", "shortDescription": {"text": "CVE-2026-6733: undici 7.24.6 \u2014 bun.lock"}, "fullDescription": {"text": "undici: Undici: Response queue poisoning on reused keep-alive sockets can lead to incorrect response delivery.\n\nImpact:\nUndici's HTTP/1.1 client is vulnerable to response queue poisoning on reused keep-alive sockets. An attacker-controlled upstream server can inject an unsolicited HTTP/1.1 response onto an idle socket after a request completes. When the client dispatches the next request on that socket, it associates the injected response with the new request, causing responses to be delivered to the wrong requests.\n\nThis requires an attacker-controlled or compromised upstream HTTP/1.1 server and keep-ali\n\nPackage: undici\nInstalled: 7.24.6\nFixed in: 6.27.0, 7.28.0, 8.5.0\nSeverity: LOW\nFix: Upgrade undici to 6.27.0, 7.28.0, 8.5.0"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e9bf9fad11dc1193", "name": "CVE-2026-48779: ws 8.20.0 \u2014 bun.lock", "shortDescription": {"text": "CVE-2026-48779: ws 8.20.0 \u2014 bun.lock"}, "fullDescription": {"text": "ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments\n\nws is an open source WebSocket client and server for Node.js. All versions from 1.1.0 up to (but not including) 5.2.5, from 6.0.0 up to 6.2.4, from 7.0.0 up to 7.5.11, and from 8.0.0 up to 8.21.0 are affected by a memory exhaustion DoS vulnerability. A peer can send a high volume of exceptionally small fragments and data chunks, with modest network traffic, to force the remote peer into allocating and holding structural wrappers that consume far more memory than the default documented message-si\n\nPackage: ws\nInstalled: 8.20.0\nFixed in: 5.2.5, 6.2.4, 7.5.11, 8.21.0\nSeverity: HIGH\nFix: Upgrade ws to 5.2.5, 6.2.4, 7.5.11, 8.21.0"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-ce07af55656404a1", "name": "CVE-2026-45736: ws 8.20.0 \u2014 bun.lock", "shortDescription": {"text": "CVE-2026-45736: ws 8.20.0 \u2014 bun.lock"}, "fullDescription": {"text": "ws: ws: Uninitialized memory disclosure via `websocket.close()` with `TypedArray`\n\nws is an open source WebSocket client and server for Node.js. Prior to 8.20.1, the websocket.close() implementation is vulnerable to uninitialized memory disclosure when a TypedArray is passed as the reason argument. This vulnerability is fixed in 8.20.1.\n\nPackage: ws\nInstalled: 8.20.0\nFixed in: 8.20.1\nSeverity: MEDIUM\nFix: Upgrade ws to 8.20.1"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-307b3c8c773e5ac0", "name": "CVE-2023-30533: xlsx 0.18.5 \u2014 bun.lock", "shortDescription": {"text": "CVE-2023-30533: xlsx 0.18.5 \u2014 bun.lock"}, "fullDescription": {"text": "Prototype Pollution in sheetJS\n\nSheetJS Community Edition before 0.19.3 allows Prototype Pollution via a crafted file. In other words. 0.19.2 and earlier are affected, whereas 0.19.3 and later are unaffected.\n\nPackage: xlsx\nInstalled: 0.18.5\nFixed in: 0.19.3\nSeverity: HIGH\nFix: Upgrade xlsx to 0.19.3"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a12836d7453d9d41", "name": "CVE-2024-22363: xlsx 0.18.5 \u2014 bun.lock", "shortDescription": {"text": "CVE-2024-22363: xlsx 0.18.5 \u2014 bun.lock"}, "fullDescription": {"text": "SheetJS Regular Expression Denial of Service (ReDoS)\n\nSheetJS Community Edition before 0.20.2 is vulnerable.to Regular Expression Denial of Service (ReDoS).\n\nPackage: xlsx\nInstalled: 0.18.5\nFixed in: 0.20.2\nSeverity: HIGH\nFix: Upgrade xlsx to 0.20.2"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-e5247874fd75cba4", "name": "CVE-2026-25896: fast-xml-parser 5.3.4 \u2014 packages/pieces/community/amazon-bedrock/bun.lock", "shortDescription": {"text": "CVE-2026-25896: fast-xml-parser 5.3.4 \u2014 packages/pieces/community/amazon-bedrock/bun.lock"}, "fullDescription": {"text": "fast-xml-parser: fast-xml-parser: Cross-Site Scripting (XSS) due to improper DOCTYPE entity handling\n\nfast-xml-parser allows users to validate XML, parse XML to JS object, or build XML from JS object without C/C++ based libraries and no callback. From 4.1.3to before 5.3.5, a dot (.) in a DOCTYPE entity name is treated as a regex wildcard during entity replacement, allowing an attacker to shadow built-in XML entities (&lt;, &gt;, &amp;, &quot;, &apos;) with arbitrary values. This bypasses entity encoding and leads to XSS when parsed output is rendered. This vulnerability is fixed in 5.3.5.\n\nPackage: fast-xml-parser\nInstalled: 5.3.4\nFixed in: 5.3.5, 4.5.4\nSeverity: CRITICAL\nFix: Upgrade fast-xml-parser to 5.3.5, 4.5.4"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-c92d9b5ac064056c", "name": "CVE-2026-26278: fast-xml-parser 5.3.4 \u2014 packages/pieces/community/amazon-bedrock/bun.lock", "shortDescription": {"text": "CVE-2026-26278: fast-xml-parser 5.3.4 \u2014 packages/pieces/community/amazon-bedrock/bun.lock"}, "fullDescription": {"text": "fast-xml-parser: fast-xml-parser: Denial of Service via unlimited XML entity expansion\n\nfast-xml-parser allows users to validate XML, parse XML to JS object, or build XML from JS object without C/C++ based libraries and no callback. In versions 4.1.3 through 5.3.5, the XML parser can be forced to do an unlimited amount of entity expansion. With a very small XML input, it\u2019s possible to make the parser spend seconds or even minutes processing a single request, effectively freezing the application. Version 5.3.6 fixes the issue. As a workaround, avoid using DOCTYPE parsing by `process\n\nPackage: fast-xml-parser\nInstalled: 5.3.4\nFixed in: 4.5.4, 5.3.6\nSeverity: HIGH\nFix: Upgrade fast-xml-parser to 4.5.4, 5.3.6"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-053d6bd6e2c0e449", "name": "CVE-2026-33036: fast-xml-parser 5.3.4 \u2014 packages/pieces/community/amazon-bedrock/bun.lock", "shortDescription": {"text": "CVE-2026-33036: fast-xml-parser 5.3.4 \u2014 packages/pieces/community/amazon-bedrock/bun.lock"}, "fullDescription": {"text": "fast-xml-parser: fast-xml-parser: Denial of Service via XML entity expansion bypass\n\nfast-xml-parser allows users to process XML from JS object without C/C++ based libraries or callbacks. Versions 4.0.0-beta.3 through 5.5.5 contain a bypass vulnerability where numeric character references (&#NNN;, &#xHH;) and standard XML entities completely evade the entity expansion limits (e.g., maxTotalExpansions, maxExpandedLength) added to fix CVE-2026-26278, enabling XML entity expansion Denial of Service. The root cause is that replaceEntitiesValue() in OrderedObjParser.js only enforces \n\nPackage: fast-xml-parser\nInstalled: 5.3.4\nFixed in: 5.5.6, 4.5.5\nSeverity: HIGH\nFix: Upgrade fast-xml-parser to 5.5.6, 4.5.5"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-95d1961d3398dc25", "name": "CVE-2026-33349: fast-xml-parser 5.3.4 \u2014 packages/pieces/community/amazon-bedrock/bun.lock", "shortDescription": {"text": "CVE-2026-33349: fast-xml-parser 5.3.4 \u2014 packages/pieces/community/amazon-bedrock/bun.lock"}, "fullDescription": {"text": "fast-xml-parser: fast-xml-parser: Denial of Service via unbounded entity expansion due to incorrect configuration limit handling\n\nfast-xml-parser allows users to process XML from JS object without C/C++ based libraries or callbacks. From version 4.0.0-beta.3 to before version 5.5.7, the DocTypeReader in fast-xml-parser uses JavaScript truthy checks to evaluate maxEntityCount and maxEntitySize configuration limits. When a developer explicitly sets either limit to 0 \u2014 intending to disallow all entities or restrict entity size to zero bytes \u2014 the falsy nature of 0 in JavaScript causes the guard conditions to short-circuit, co\n\nPackage: fast-xml-parser\nInstalled: 5.3.4\nFixed in: 4.5.5, 5.5.7\nSeverity: MEDIUM\nFix: Upgrade fast-xml-parser to 4.5.5, 5.5.7"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7b54dc9b73ca5009", "name": "CVE-2026-41650: fast-xml-parser 5.3.4 \u2014 packages/pieces/community/amazon-bedrock/bun.lock", "shortDescription": {"text": "CVE-2026-41650: fast-xml-parser 5.3.4 \u2014 packages/pieces/community/amazon-bedrock/bun.lock"}, "fullDescription": {"text": "fast-xml-parser: fast-xml-parser: XML injection via improper escaping of comment and CDATA sequences\n\nfast-xml-parser allows users to process XML from JS object without C/C++ based libraries or callbacks. Prior to version 5.7.0, XMLBuilder does not escape the \"-->\" sequence in comment content or the \"]]>\" sequence in CDATA sections when building XML from JavaScript objects. This allows XML injection when user-controlled data flows into comments or CDATA elements, leading to XSS, SOAP injection, or data manipulation. This issue has been patched in version 5.7.0.\n\nPackage: fast-xml-parser\nInstalled: 5.3.4\nFixed in: 5.7.0\nSeverity: MEDIUM\nFix: Upgrade fast-xml-parser to 5.7.0"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ebceea0cdb7ffae5", "name": "CVE-2026-27942: fast-xml-parser 5.3.4 \u2014 packages/pieces/community/amazon-bedrock/bun.lock", "shortDescription": {"text": "CVE-2026-27942: fast-xml-parser 5.3.4 \u2014 packages/pieces/community/amazon-bedrock/bun.lock"}, "fullDescription": {"text": "fast-xml-parser: fast-xml-parser: Stack overflow leads to Denial of Service\n\nfast-xml-parser allows users to validate XML, parse XML to JS object, or build XML from JS object without C/C++ based libraries and no callback. Prior to version 5.3.8, the application crashes with stack overflow when user use XML builder with `preserveOrder:true`. Version 5.3.8 fixes the issue. As a workaround, use XML builder with `preserveOrder:false` or check the input data before passing to builder.\n\nPackage: fast-xml-parser\nInstalled: 5.3.4\nFixed in: 5.3.8, 4.5.4\nSeverity: LOW\nFix: Upgrade fast-xml-parser to 5.3.8, 4.5.4"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6b63e6cd85633e4c", "name": "CVE-2026-25639: axios 1.13.2 \u2014 packages/pieces/community/base44/bun.lock", "shortDescription": {"text": "CVE-2026-25639: axios 1.13.2 \u2014 packages/pieces/community/base44/bun.lock"}, "fullDescription": {"text": "axios: Axios affected by Denial of Service via __proto__ Key in mergeConfig\n\nAxios is a promise based HTTP client for the browser and Node.js. Prior to versions 0.30.3 and 1.13.5, the mergeConfig function in axios crashes with a TypeError when processing configuration objects containing __proto__ as an own property. An attacker can trigger this by providing a malicious configuration object created via JSON.parse(), causing complete denial of service. This vulnerability is fixed in versions 0.30.3 and 1.13.5.\n\nPackage: axios\nInstalled: 1.13.2\nFixed in: 1.13.5, 0.30.3\nSeverity: HIGH\nFix: Upgrade axios to 1.13.5, 0.30.3"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-f6dc9ceb3deeacf7", "name": "CVE-2026-42033: axios 1.13.2 \u2014 packages/pieces/community/base44/bun.lock", "shortDescription": {"text": "CVE-2026-42033: axios 1.13.2 \u2014 packages/pieces/community/base44/bun.lock"}, "fullDescription": {"text": "axios: Axios: HTTP Transport Hijacking via Prototype Pollution\n\nAxios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, when Object.prototype has been polluted by any co-dependency with keys that axios reads without a hasOwnProperty guard, an attacker can (a) silently intercept and modify every JSON response before the application sees it, or (b) fully hijack the underlying HTTP transport, gaining access to request credentials, headers, and body. The precondition is prototype pollution from a separate source in the same \n\nPackage: axios\nInstalled: 1.13.2\nFixed in: 1.15.1, 0.31.1\nSeverity: HIGH\nFix: Upgrade axios to 1.15.1, 0.31.1"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-5acabc5c57783006", "name": "CVE-2026-42035: axios 1.13.2 \u2014 packages/pieces/community/base44/bun.lock", "shortDescription": {"text": "CVE-2026-42035: axios 1.13.2 \u2014 packages/pieces/community/base44/bun.lock"}, "fullDescription": {"text": "axios: Axios: Arbitrary HTTP header injection via prototype pollution\n\nAxios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, a prototype pollution gadget exists in the Axios HTTP adapter (lib/adapters/http.js) that allows an attacker to inject arbitrary HTTP headers into outgoing requests. The vulnerability exploits duck-type checking of the data payload, where if Object.prototype is polluted with getHeaders, append, pipe, on, once, and Symbol.toStringTag, Axios misidentifies any plain object payload as a FormData instance an\n\nPackage: axios\nInstalled: 1.13.2\nFixed in: 1.15.1, 0.31.1\nSeverity: HIGH\nFix: Upgrade axios to 1.15.1, 0.31.1"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-5db6194dc30b9ec8", "name": "CVE-2026-42043: axios 1.13.2 \u2014 packages/pieces/community/base44/bun.lock", "shortDescription": {"text": "CVE-2026-42043: axios 1.13.2 \u2014 packages/pieces/community/base44/bun.lock"}, "fullDescription": {"text": "axios: Axios: NO_PROXY bypass via crafted URL\n\nAxios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, an attacker who can influence the target URL of an Axios request can use any address in the 127.0.0.0/8 range (other than 127.0.0.1) to completely bypass the NO_PROXY protection. This vulnerability is due to an incomplete for CVE-2025-62718, This vulnerability is fixed in 1.15.1 and 0.31.1.\n\nPackage: axios\nInstalled: 1.13.2\nFixed in: 1.15.1, 0.31.1\nSeverity: HIGH\nFix: Upgrade axios to 1.15.1, 0.31.1"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-564d372ac0b46b56", "name": "CVE-2026-42264: axios 1.13.2 \u2014 packages/pieces/community/base44/bun.lock", "shortDescription": {"text": "CVE-2026-42264: axios 1.13.2 \u2014 packages/pieces/community/base44/bun.lock"}, "fullDescription": {"text": "Axios is a promise based HTTP client for the browser and Node.js. From ...\n\nAxios is a promise based HTTP client for the browser and Node.js. From version 1.0.0 to before version 1.15.2, fFive config properties (auth, baseURL, socketPath, beforeRedirect, and insecureHTTPParser) in the HTTP adapter are read via direct property access without hasOwnProperty guards, making them exploitable as prototype pollution gadgets. When Object.prototype is polluted by another dependency in the same process, axios silently picks up these polluted values on every outbound HTTP request.\n\nPackage: axios\nInstalled: 1.13.2\nFixed in: 1.15.2\nSeverity: HIGH\nFix: Upgrade axios to 1.15.2"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-71fda0ade39887f4", "name": "CVE-2026-44486: axios 1.13.2 \u2014 packages/pieces/community/base44/bun.lock", "shortDescription": {"text": "CVE-2026-44486: axios 1.13.2 \u2014 packages/pieces/community/base44/bun.lock"}, "fullDescription": {"text": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects\n\nAxios is a promise based HTTP client for the browser and Node.js. Prior to 0.32.0 and 1.16.0, Axios\u2019 Node.js HTTP adapter can leak proxy credentials to a redirect target in affected versions. When a request is sent through an authenticated proxy, Axios may add a Proxy-Authorization header. If Axios then follows a redirect and the redirected request is no longer sent through that proxy, the stale Proxy-Authorization header can remain on the redirected request and be sent to the redirect target. T\n\nPackage: axios\nInstalled: 1.13.2\nFixed in: 1.16.0, 0.32.0\nSeverity: HIGH\nFix: Upgrade axios to 1.16.0, 0.32.0"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a08560712295df94", "name": "CVE-2026-44487: axios 1.13.2 \u2014 packages/pieces/community/base44/bun.lock", "shortDescription": {"text": "CVE-2026-44487: axios 1.13.2 \u2014 packages/pieces/community/base44/bun.lock"}, "fullDescription": {"text": "axios: Axios: Information disclosure of proxy credentials via redirect flows\n\nAxios is a promise based HTTP client for the browser and Node.js. Prior to 0.32.0 and 1.16.0, Axios\u2019s Node.js HTTP adapter may forward a Proxy-Authorization header to a redirected origin during specific proxy-to-direct redirect flows. This affects Node.js usage, where an initial HTTP request is sent through an authenticated HTTP proxy, redirects are followed, and the redirected URL is no longer proxied. Under affected redirect shapes, the final origin can receive the proxy credential that was in\n\nPackage: axios\nInstalled: 1.13.2\nFixed in: 1.16.0, 0.32.0\nSeverity: HIGH\nFix: Upgrade axios to 1.16.0, 0.32.0"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-4ab04df74e3b33da", "name": "CVE-2026-44488: axios 1.13.2 \u2014 packages/pieces/community/base44/bun.lock", "shortDescription": {"text": "CVE-2026-44488: axios 1.13.2 \u2014 packages/pieces/community/base44/bun.lock"}, "fullDescription": {"text": "axios: Axios: Denial of Service due to unenforced request and response size limits\n\nAxios is a promise based HTTP client for the browser and Node.js. Axios versions 1.7.0 through 1.15.x did not enforce configured request and response size limits when requests were sent with the fetch adapter. Applications that selected adapter: 'fetch', or ran in environments where axios resolved to the fetch adapter, could receive or send bodies larger than maxContentLength or maxBodyLength despite those limits being explicitly configured. This can cause resource exhaustion in server-side usag\n\nPackage: axios\nInstalled: 1.13.2\nFixed in: 1.16.0\nSeverity: HIGH\nFix: Upgrade axios to 1.16.0"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-14064c10ea0726e3", "name": "CVE-2026-44492: axios 1.13.2 \u2014 packages/pieces/community/base44/bun.lock", "shortDescription": {"text": "CVE-2026-44492: axios 1.13.2 \u2014 packages/pieces/community/base44/bun.lock"}, "fullDescription": {"text": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization\n\nAxios is a promise based HTTP client for the browser and Node.js. Prior to 0.32.0 and 1.16.0, Axios does not normalise IPv4-mapped IPv6 addresses. When NO_PROXY lists an IPv4 address such as 127.0.0.1 or 169.254.169.254, a request URL using the IPv4-mapped IPv6 form (::ffff:7f00:1, ::ffff:a9fe:a9fe) still routes through the configured proxy. Node.js resolves these addresses to the underlying IPv4 host, so the request reaches the internal service via the proxy rather than being blocked. This vuln\n\nPackage: axios\nInstalled: 1.13.2\nFixed in: 1.16.0, 0.32.0\nSeverity: HIGH\nFix: Upgrade axios to 1.16.0, 0.32.0"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-d9f96905ae419e81", "name": "CVE-2026-44494: axios 1.13.2 \u2014 packages/pieces/community/base44/bun.lock", "shortDescription": {"text": "CVE-2026-44494: axios 1.13.2 \u2014 packages/pieces/community/base44/bun.lock"}, "fullDescription": {"text": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution\n\nAxios is a promise based HTTP client for the browser and Node.js. From 1.0.0 to before 1.16.0, the Axios library is vulnerable to a Prototype Pollution \"Gadget\" attack that allows any Object.prototype pollution in the application's dependency tree to be escalated into a full Man-in-the-Middle (MITM) attack \u2014 intercepting, reading, and modifying all HTTP traffic including authentication credentials. The HTTP adapter at lib/adapters/http.js:670 reads config.proxy via standard property access, whic\n\nPackage: axios\nInstalled: 1.13.2\nFixed in: 1.16.0\nSeverity: HIGH\nFix: Upgrade axios to 1.16.0"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-80f8226d0c54f82c", "name": "CVE-2026-44495: axios 1.13.2 \u2014 packages/pieces/community/base44/bun.lock", "shortDescription": {"text": "CVE-2026-44495: axios 1.13.2 \u2014 packages/pieces/community/base44/bun.lock"}, "fullDescription": {"text": "axios: Axios: Information disclosure due to prototype pollution vulnerability\n\nAxios is a promise based HTTP client for the browser and Node.js. From 0.19.0 to before 0.31.1 and 1.15.2, Axios contains prototype-pollution gadgets in request config processing. If another vulnerability in the same JavaScript process has already polluted Object.prototype.transformResponse, affected Axios versions may treat that inherited value as request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-p\n\nPackage: axios\nInstalled: 1.13.2\nFixed in: 1.15.2, 0.31.1\nSeverity: HIGH\nFix: Upgrade axios to 1.15.2, 0.31.1"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-298fdacab61a56bf", "name": "CVE-2026-44496: axios 1.13.2 \u2014 packages/pieces/community/base44/bun.lock", "shortDescription": {"text": "CVE-2026-44496: axios 1.13.2 \u2014 packages/pieces/community/base44/bun.lock"}, "fullDescription": {"text": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name\n\nAxios is a promise based HTTP client for the browser and Node.js. Axios versions before 0.32.0 on the 0.x line and before 1.16.0 on the 1.x line build a regular expression from the configured XSRF cookie name without escaping regex metacharacters. In standard browser environments, an attacker who can influence the cookie name passed to axios can cause expensive regex backtracking while axios reads document.cookie. The practical impact is client-side availability degradation, such as freezing the\n\nPackage: axios\nInstalled: 1.13.2\nFixed in: 1.16.0, 0.32.0\nSeverity: HIGH\nFix: Upgrade axios to 1.16.0, 0.32.0"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-e3bc40e28f4776e8", "name": "CVE-2025-62718: axios 1.13.2 \u2014 packages/pieces/community/base44/bun.lock", "shortDescription": {"text": "CVE-2025-62718: axios 1.13.2 \u2014 packages/pieces/community/base44/bun.lock"}, "fullDescription": {"text": "axios: Axios: Server-Side Request Forgery and proxy bypass due to improper hostname normalization\n\nAxios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.0 and 0.31.0, Axios does not correctly handle hostname normalization when checking NO_PROXY rules. Requests to loopback addresses like localhost. (with a trailing dot) or [::1] (IPv6 literal) skip NO_PROXY matching and go through the configured proxy. This goes against what developers expect and lets attackers force requests through a proxy, even if NO_PROXY is set up to protect loopback or internal services. This is\n\nPackage: axios\nInstalled: 1.13.2\nFixed in: 1.15.0, 0.31.0\nSeverity: MEDIUM\nFix: Upgrade axios to 1.15.0, 0.31.0"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cddba18d7494ab31", "name": "CVE-2026-40175: axios 1.13.2 \u2014 packages/pieces/community/base44/bun.lock", "shortDescription": {"text": "CVE-2026-40175: axios 1.13.2 \u2014 packages/pieces/community/base44/bun.lock"}, "fullDescription": {"text": "axios: Axios: Remote Code Execution via Prototype Pollution escalation\n\nAxios is a promise based HTTP client for the browser and Node.js. Versions prior to 1.15.0 and 0.3.1 are vulnerable to a specific gadget-style attack chain in which prototype pollution in a third-party dependency may be leveraged to inject unsanitized header values into outbound requests. This vulnerability is fixed in 1.15.0 and 0.3.1.\n\nPackage: axios\nInstalled: 1.13.2\nFixed in: 1.15.0, 0.31.0\nSeverity: MEDIUM\nFix: Upgrade axios to 1.15.0, 0.31.0"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-12cf7da07df1275e", "name": "CVE-2026-42034: axios 1.13.2 \u2014 packages/pieces/community/base44/bun.lock", "shortDescription": {"text": "CVE-2026-42034: axios 1.13.2 \u2014 packages/pieces/community/base44/bun.lock"}, "fullDescription": {"text": "axios: Axios: Denial of Service via oversized streamed uploads bypassing body limits\n\nAxios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, for stream request bodies, maxBodyLength is bypassed when maxRedirects is set to 0 (native http/https transport path). Oversized streamed uploads are sent fully even when the caller sets strict body limits. This vulnerability is fixed in 1.15.1 and 0.31.1.\n\nPackage: axios\nInstalled: 1.13.2\nFixed in: 1.15.1, 0.31.1\nSeverity: MEDIUM\nFix: Upgrade axios to 1.15.1, 0.31.1"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f8c8ec093fd6fabe", "name": "CVE-2026-42036: axios 1.13.2 \u2014 packages/pieces/community/base44/bun.lock", "shortDescription": {"text": "CVE-2026-42036: axios 1.13.2 \u2014 packages/pieces/community/base44/bun.lock"}, "fullDescription": {"text": "axios: Axios: Denial of Service via unbounded stream consumption when 'responseType: 'stream'' is used\n\nAxios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, when responseType: 'stream' is used, Axios returns the response stream without enforcing maxContentLength. This bypasses configured response-size limits and allows unbounded downstream consumption. This vulnerability is fixed in 1.15.1 and 0.31.1.\n\nPackage: axios\nInstalled: 1.13.2\nFixed in: 1.15.1, 0.31.1\nSeverity: MEDIUM\nFix: Upgrade axios to 1.15.1, 0.31.1"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-bbe2d03fd1e9cec9", "name": "CVE-2026-42037: axios 1.13.2 \u2014 packages/pieces/community/base44/bun.lock", "shortDescription": {"text": "CVE-2026-42037: axios 1.13.2 \u2014 packages/pieces/community/base44/bun.lock"}, "fullDescription": {"text": "axios: Node.js: Axios: Information disclosure via CRLF injection in multipart Content-Type header\n\nAxios is a promise based HTTP client for the browser and Node.js. From 1.0.0 to before 1.15.1, the FormDataPart constructor in lib/helpers/formDataToStream.js interpolates value.type directly into the Content-Type header of each multipart part without sanitizing CRLF (\\r\\n) sequences. An attacker who controls the .type property of a Blob/File-like object (e.g., via a user-uploaded file in a Node.js proxy service) can inject arbitrary MIME part headers into the multipart form-data body. This bypa\n\nPackage: axios\nInstalled: 1.13.2\nFixed in: 1.15.1\nSeverity: MEDIUM\nFix: Upgrade axios to 1.15.1"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-bc96197e9495376b", "name": "CVE-2026-42038: axios 1.13.2 \u2014 packages/pieces/community/base44/bun.lock", "shortDescription": {"text": "CVE-2026-42038: axios 1.13.2 \u2014 packages/pieces/community/base44/bun.lock"}, "fullDescription": {"text": "axios: Axios: Information disclosure due to `no_proxy` bypass\n\nAxios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, he fix for no_proxy hostname normalization bypass is incomplete. When no_proxy=localhost is set, requests to 127.0.0.1 and [::1] still route through the proxy instead of bypassing it. The shouldBypassProxy() function does pure string matching \u2014 it does not resolve IP aliases or loopback equivalents. This vulnerability is fixed in 1.15.1 and 0.31.1.\n\nPackage: axios\nInstalled: 1.13.2\nFixed in: 1.15.1, 0.31.1\nSeverity: MEDIUM\nFix: Upgrade axios to 1.15.1, 0.31.1"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-52828a0c7f0a5e35", "name": "CVE-2026-42039: axios 1.13.2 \u2014 packages/pieces/community/base44/bun.lock", "shortDescription": {"text": "CVE-2026-42039: axios 1.13.2 \u2014 packages/pieces/community/base44/bun.lock"}, "fullDescription": {"text": "axios: Node.js: Axios: Denial of Service via unbounded recursion in toFormData with deeply nested request data\n\nAxios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, toFormData recursively walks nested objects with no depth limit, so a deeply nested value passed as request data crashes the Node.js process with a RangeError. This vulnerability is fixed in 1.15.1 and 0.31.1.\n\nPackage: axios\nInstalled: 1.13.2\nFixed in: 1.15.1, 0.31.1\nSeverity: MEDIUM\nFix: Upgrade axios to 1.15.1, 0.31.1"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4072344a4a8f00cc", "name": "CVE-2026-42041: axios 1.13.2 \u2014 packages/pieces/community/base44/bun.lock", "shortDescription": {"text": "CVE-2026-42041: axios 1.13.2 \u2014 packages/pieces/community/base44/bun.lock"}, "fullDescription": {"text": "axios: Axios: Authentication bypass due to prototype pollution of HTTP error handling\n\nAxios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, the Axios library is vulnerable to a Prototype Pollution \"Gadget\" attack that allows any Object.prototype pollution to silently suppress all HTTP error responses (401, 403, 500, etc.), causing them to be treated as successful responses. This completely bypasses application-level authentication and error handling. The root cause is that validateStatus is the only config property using the mergeDirectKeys\n\nPackage: axios\nInstalled: 1.13.2\nFixed in: 1.15.1, 0.31.1\nSeverity: MEDIUM\nFix: Upgrade axios to 1.15.1, 0.31.1"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6b95f8580ecc5351", "name": "CVE-2026-42042: axios 1.13.2 \u2014 packages/pieces/community/base44/bun.lock", "shortDescription": {"text": "CVE-2026-42042: axios 1.13.2 \u2014 packages/pieces/community/base44/bun.lock"}, "fullDescription": {"text": "axios: Axios: XSRF token bypass leading to information disclosure\n\nAxios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, the Axios library's XSRF token protection logic uses JavaScript truthy/falsy semantics instead of strict boolean comparison for the withXSRFToken config property. When this property is set to any truthy non-boolean value (via prototype pollution or misconfiguration), the same-origin check (isURLSameOrigin) is short-circuited, causing XSRF tokens to be sent to all request targets including cross-origin s\n\nPackage: axios\nInstalled: 1.13.2\nFixed in: 1.15.1, 0.31.1\nSeverity: MEDIUM\nFix: Upgrade axios to 1.15.1, 0.31.1"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-24136fa54249e615", "name": "CVE-2026-42044: axios 1.13.2 \u2014 packages/pieces/community/base44/bun.lock", "shortDescription": {"text": "CVE-2026-42044: axios 1.13.2 \u2014 packages/pieces/community/base44/bun.lock"}, "fullDescription": {"text": "axios: Axios: Invisible JSON Response Tampering via Prototype Pollution Gadget\n\nAxios is a promise based HTTP client for the browser and Node.js. From 1.0.0 to before 1.15.2, he Axios library is vulnerable to a Prototype Pollution \"Gadget\" attack that allows any Object.prototype pollution in the application's dependency tree to be escalated into surgical, invisible modification of all JSON API responses \u2014 including privilege escalation, balance manipulation, and authorization bypass. The default transformResponse function at lib/defaults/index.js:124 calls JSON.parse(data, \n\nPackage: axios\nInstalled: 1.13.2\nFixed in: 1.15.2\nSeverity: MEDIUM\nFix: Upgrade axios to 1.15.2"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ab3741e1cd4c00bc", "name": "CVE-2026-44490: axios 1.13.2 \u2014 packages/pieces/community/base44/bun.lock", "shortDescription": {"text": "CVE-2026-44490: axios 1.13.2 \u2014 packages/pieces/community/base44/bun.lock"}, "fullDescription": {"text": "axios: Axios: Information disclosure and denial of service due to prototype pollution\n\nAxios is a promise based HTTP client for the browser and Node.js. Prior to 0.32.0 and 1.16.0, axios exposes two read-side prototype-pollution gadgets. When Object.prototype is polluted by an upstream dependency in the same process (e.g. lodash _.merge / CVE-2018-16487), axios silently picks up the polluted values. (1) lib/utils.js line 406 builds merge()'s accumulator as result = {}, so result[targetKey] (line 414) walks Object.prototype and the polluted bucket's own keys are copied into the mer\n\nPackage: axios\nInstalled: 1.13.2\nFixed in: 1.16.0, 0.32.0\nSeverity: MEDIUM\nFix: Upgrade axios to 1.16.0, 0.32.0"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3fce4cd4d3f1baa6", "name": "CVE-2026-42040: axios 1.13.2 \u2014 packages/pieces/community/base44/bun.lock", "shortDescription": {"text": "CVE-2026-42040: axios 1.13.2 \u2014 packages/pieces/community/base44/bun.lock"}, "fullDescription": {"text": "axios: Axios: Incorrect null byte handling can lead to data integrity issues\n\nAxios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, the encode() function in lib/helpers/AxiosURLSearchParams.js contains a character mapping (charMap) at line 21 that reverses the safe percent-encoding of null bytes. After encodeURIComponent('\\x00') correctly produces the safe sequence %00, the charMap entry '%00': '\\x00' converts it back to a raw null byte. Primary impact is limited because the standard axios request flow is not affected. This vulnerab\n\nPackage: axios\nInstalled: 1.13.2\nFixed in: 1.15.1, 0.31.1\nSeverity: LOW\nFix: Upgrade axios to 1.15.1, 0.31.1"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-12618248ea8a33db", "name": "GHSA-r4q5-vmmm-2653: follow-redirects 1.15.11 \u2014 packages/pieces/community/base44/bun.lock", "shortDescription": {"text": "GHSA-r4q5-vmmm-2653: follow-redirects 1.15.11 \u2014 packages/pieces/community/base44/bun.lock"}, "fullDescription": {"text": "follow-redirects leaks Custom Authentication Headers to Cross-Domain Redirect Targets\n\n## Summary\n\nWhen an HTTP request follows a cross-domain redirect (301/302/307/308), `follow-redirects` only strips `authorization`, `proxy-authorization`, and `cookie` headers (matched by regex at index.js:469-476). Any custom authentication header (e.g., `X-API-Key`, `X-Auth-Token`, `Api-Key`, `Token`) is forwarded verbatim to the redirect target.\n\nSince `follow-redirects` is the redirect-handling dependency for **axios** (105K+ stars), this vulnerability affects the entire axios ecosystem.\n\n##\n\nPackage: follow-redirects\nInstalled: 1.15.11\nFixed in: 1.16.0\nSeverity: MEDIUM\nFix: Upgrade follow-redirects to 1.16.0"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-44b7203b42dd855c", "name": "CVE-2026-12143: form-data 4.0.5 \u2014 packages/pieces/community/base44/bun.lock", "shortDescription": {"text": "CVE-2026-12143: form-data 4.0.5 \u2014 packages/pieces/community/base44/bun.lock"}, "fullDescription": {"text": "form-data is a library for creating readable multipart/form-data strea ...\n\nform-data is a library for creating readable multipart/form-data streams. In versions through 4.0.5, the `field` argument to `FormData#append` and the `filename` option are concatenated verbatim into the `Content-Disposition` header without escaping carriage return (CR), line feed (LF), or double-quote (\") characters. An application that passes attacker-controlled data as a field name or filename (for example, an API gateway that turns JSON object keys into multipart field names) allows the atta\n\nPackage: form-data\nInstalled: 4.0.5\nFixed in: 2.5.6, 3.0.5, 4.0.6\nSeverity: HIGH\nFix: Upgrade form-data to 2.5.6, 3.0.5, 4.0.6"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-d4dff69f07316dba", "name": "CVE-2026-33151: socket.io-parser 4.2.4 \u2014 packages/pieces/community/base44/bun.lock", "shortDescription": {"text": "CVE-2026-33151: socket.io-parser 4.2.4 \u2014 packages/pieces/community/base44/bun.lock"}, "fullDescription": {"text": "socket.io: Socket.IO: Denial of Service due to excessive buffering of specially crafted packets\n\nSocket.IO is an open source, real-time, bidirectional, event-based, communication framework. Prior to versions 3.3.5, 3.4.4, and 4.2.6, a specially crafted Socket.IO packet can make the server wait for a large number of binary attachments and buffer them, which can be exploited to make the server run out of memory. This issue has been patched in versions 3.3.5, 3.4.4, and 4.2.6.\n\nPackage: socket.io-parser\nInstalled: 4.2.4\nFixed in: 3.3.5, 3.4.4, 4.2.6\nSeverity: HIGH\nFix: Upgrade socket.io-parser to 3.3.5, 3.4.4, 4.2.6"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-8851725b52e3670e", "name": "CVE-2026-41907: uuid 13.0.0 \u2014 packages/pieces/community/base44/bun.lock", "shortDescription": {"text": "CVE-2026-41907: uuid 13.0.0 \u2014 packages/pieces/community/base44/bun.lock"}, "fullDescription": {"text": "uuid: uuid: Out-of-bounds write vulnerability impacts data integrity and confidentiality\n\nuuid is for the creation of RFC9562 (formerly RFC4122) UUIDs. Prior to 14.0.0, v3, v5, and v6 accept external output buffers but do not reject out-of-range writes (small buf or large offset). This allows silent partial writes into caller-provided buffers. This vulnerability is fixed in 14.0.0.\n\nPackage: uuid\nInstalled: 13.0.0\nFixed in: 11.1.1, 12.0.1, 13.0.1\nSeverity: MEDIUM\nFix: Upgrade uuid to 11.1.1, 12.0.1, 13.0.1"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-47baa23ecae81c64", "name": "CVE-2026-48779: ws 8.17.1 \u2014 packages/pieces/community/base44/bun.lock", "shortDescription": {"text": "CVE-2026-48779: ws 8.17.1 \u2014 packages/pieces/community/base44/bun.lock"}, "fullDescription": {"text": "ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments\n\nws is an open source WebSocket client and server for Node.js. All versions from 1.1.0 up to (but not including) 5.2.5, from 6.0.0 up to 6.2.4, from 7.0.0 up to 7.5.11, and from 8.0.0 up to 8.21.0 are affected by a memory exhaustion DoS vulnerability. A peer can send a high volume of exceptionally small fragments and data chunks, with modest network traffic, to force the remote peer into allocating and holding structural wrappers that consume far more memory than the default documented message-si\n\nPackage: ws\nInstalled: 8.17.1\nFixed in: 5.2.5, 6.2.4, 7.5.11, 8.21.0\nSeverity: HIGH\nFix: Upgrade ws to 5.2.5, 6.2.4, 7.5.11, 8.21.0"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-5585c7471a9a6fe1", "name": "CVE-2026-45736: ws 8.17.1 \u2014 packages/pieces/community/base44/bun.lock", "shortDescription": {"text": "CVE-2026-45736: ws 8.17.1 \u2014 packages/pieces/community/base44/bun.lock"}, "fullDescription": {"text": "ws: ws: Uninitialized memory disclosure via `websocket.close()` with `TypedArray`\n\nws is an open source WebSocket client and server for Node.js. Prior to 8.20.1, the websocket.close() implementation is vulnerable to uninitialized memory disclosure when a TypedArray is passed as the reason argument. This vulnerability is fixed in 8.20.1.\n\nPackage: ws\nInstalled: 8.17.1\nFixed in: 8.20.1\nSeverity: MEDIUM\nFix: Upgrade ws to 8.20.1"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8c9f1a345b41b61e", "name": "CVE-2026-12143: form-data 4.0.5 \u2014 packages/pieces/community/contextual-ai/bun.lock", "shortDescription": {"text": "CVE-2026-12143: form-data 4.0.5 \u2014 packages/pieces/community/contextual-ai/bun.lock"}, "fullDescription": {"text": "form-data is a library for creating readable multipart/form-data strea ...\n\nform-data is a library for creating readable multipart/form-data streams. In versions through 4.0.5, the `field` argument to `FormData#append` and the `filename` option are concatenated verbatim into the `Content-Disposition` header without escaping carriage return (CR), line feed (LF), or double-quote (\") characters. An application that passes attacker-controlled data as a field name or filename (for example, an API gateway that turns JSON object keys into multipart field names) allows the atta\n\nPackage: form-data\nInstalled: 4.0.5\nFixed in: 2.5.6, 3.0.5, 4.0.6\nSeverity: HIGH\nFix: Upgrade form-data to 2.5.6, 3.0.5, 4.0.6"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b1f33e2f693d36d9", "name": "CVE-2026-25639: axios 1.13.2 \u2014 packages/pieces/community/couchbase/bun.lock", "shortDescription": {"text": "CVE-2026-25639: axios 1.13.2 \u2014 packages/pieces/community/couchbase/bun.lock"}, "fullDescription": {"text": "axios: Axios affected by Denial of Service via __proto__ Key in mergeConfig\n\nAxios is a promise based HTTP client for the browser and Node.js. Prior to versions 0.30.3 and 1.13.5, the mergeConfig function in axios crashes with a TypeError when processing configuration objects containing __proto__ as an own property. An attacker can trigger this by providing a malicious configuration object created via JSON.parse(), causing complete denial of service. This vulnerability is fixed in versions 0.30.3 and 1.13.5.\n\nPackage: axios\nInstalled: 1.13.2\nFixed in: 1.13.5, 0.30.3\nSeverity: HIGH\nFix: Upgrade axios to 1.13.5, 0.30.3"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-319eeacfda933ed0", "name": "CVE-2026-42033: axios 1.13.2 \u2014 packages/pieces/community/couchbase/bun.lock", "shortDescription": {"text": "CVE-2026-42033: axios 1.13.2 \u2014 packages/pieces/community/couchbase/bun.lock"}, "fullDescription": {"text": "axios: Axios: HTTP Transport Hijacking via Prototype Pollution\n\nAxios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, when Object.prototype has been polluted by any co-dependency with keys that axios reads without a hasOwnProperty guard, an attacker can (a) silently intercept and modify every JSON response before the application sees it, or (b) fully hijack the underlying HTTP transport, gaining access to request credentials, headers, and body. The precondition is prototype pollution from a separate source in the same \n\nPackage: axios\nInstalled: 1.13.2\nFixed in: 1.15.1, 0.31.1\nSeverity: HIGH\nFix: Upgrade axios to 1.15.1, 0.31.1"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-124e6a5f52047d1c", "name": "CVE-2026-42035: axios 1.13.2 \u2014 packages/pieces/community/couchbase/bun.lock", "shortDescription": {"text": "CVE-2026-42035: axios 1.13.2 \u2014 packages/pieces/community/couchbase/bun.lock"}, "fullDescription": {"text": "axios: Axios: Arbitrary HTTP header injection via prototype pollution\n\nAxios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, a prototype pollution gadget exists in the Axios HTTP adapter (lib/adapters/http.js) that allows an attacker to inject arbitrary HTTP headers into outgoing requests. The vulnerability exploits duck-type checking of the data payload, where if Object.prototype is polluted with getHeaders, append, pipe, on, once, and Symbol.toStringTag, Axios misidentifies any plain object payload as a FormData instance an\n\nPackage: axios\nInstalled: 1.13.2\nFixed in: 1.15.1, 0.31.1\nSeverity: HIGH\nFix: Upgrade axios to 1.15.1, 0.31.1"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-1516e5a9dd8726c9", "name": "CVE-2026-42043: axios 1.13.2 \u2014 packages/pieces/community/couchbase/bun.lock", "shortDescription": {"text": "CVE-2026-42043: axios 1.13.2 \u2014 packages/pieces/community/couchbase/bun.lock"}, "fullDescription": {"text": "axios: Axios: NO_PROXY bypass via crafted URL\n\nAxios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, an attacker who can influence the target URL of an Axios request can use any address in the 127.0.0.0/8 range (other than 127.0.0.1) to completely bypass the NO_PROXY protection. This vulnerability is due to an incomplete for CVE-2025-62718, This vulnerability is fixed in 1.15.1 and 0.31.1.\n\nPackage: axios\nInstalled: 1.13.2\nFixed in: 1.15.1, 0.31.1\nSeverity: HIGH\nFix: Upgrade axios to 1.15.1, 0.31.1"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-eed1819b22911f63", "name": "CVE-2026-42264: axios 1.13.2 \u2014 packages/pieces/community/couchbase/bun.lock", "shortDescription": {"text": "CVE-2026-42264: axios 1.13.2 \u2014 packages/pieces/community/couchbase/bun.lock"}, "fullDescription": {"text": "Axios is a promise based HTTP client for the browser and Node.js. From ...\n\nAxios is a promise based HTTP client for the browser and Node.js. From version 1.0.0 to before version 1.15.2, fFive config properties (auth, baseURL, socketPath, beforeRedirect, and insecureHTTPParser) in the HTTP adapter are read via direct property access without hasOwnProperty guards, making them exploitable as prototype pollution gadgets. When Object.prototype is polluted by another dependency in the same process, axios silently picks up these polluted values on every outbound HTTP request.\n\nPackage: axios\nInstalled: 1.13.2\nFixed in: 1.15.2\nSeverity: HIGH\nFix: Upgrade axios to 1.15.2"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-cd8d57b7331bee3c", "name": "CVE-2026-44486: axios 1.13.2 \u2014 packages/pieces/community/couchbase/bun.lock", "shortDescription": {"text": "CVE-2026-44486: axios 1.13.2 \u2014 packages/pieces/community/couchbase/bun.lock"}, "fullDescription": {"text": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects\n\nAxios is a promise based HTTP client for the browser and Node.js. Prior to 0.32.0 and 1.16.0, Axios\u2019 Node.js HTTP adapter can leak proxy credentials to a redirect target in affected versions. When a request is sent through an authenticated proxy, Axios may add a Proxy-Authorization header. If Axios then follows a redirect and the redirected request is no longer sent through that proxy, the stale Proxy-Authorization header can remain on the redirected request and be sent to the redirect target. T\n\nPackage: axios\nInstalled: 1.13.2\nFixed in: 1.16.0, 0.32.0\nSeverity: HIGH\nFix: Upgrade axios to 1.16.0, 0.32.0"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-6d0781ba02d67d91", "name": "CVE-2026-44487: axios 1.13.2 \u2014 packages/pieces/community/couchbase/bun.lock", "shortDescription": {"text": "CVE-2026-44487: axios 1.13.2 \u2014 packages/pieces/community/couchbase/bun.lock"}, "fullDescription": {"text": "axios: Axios: Information disclosure of proxy credentials via redirect flows\n\nAxios is a promise based HTTP client for the browser and Node.js. Prior to 0.32.0 and 1.16.0, Axios\u2019s Node.js HTTP adapter may forward a Proxy-Authorization header to a redirected origin during specific proxy-to-direct redirect flows. This affects Node.js usage, where an initial HTTP request is sent through an authenticated HTTP proxy, redirects are followed, and the redirected URL is no longer proxied. Under affected redirect shapes, the final origin can receive the proxy credential that was in\n\nPackage: axios\nInstalled: 1.13.2\nFixed in: 1.16.0, 0.32.0\nSeverity: HIGH\nFix: Upgrade axios to 1.16.0, 0.32.0"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-0e1697b5d2811172", "name": "CVE-2026-44488: axios 1.13.2 \u2014 packages/pieces/community/couchbase/bun.lock", "shortDescription": {"text": "CVE-2026-44488: axios 1.13.2 \u2014 packages/pieces/community/couchbase/bun.lock"}, "fullDescription": {"text": "axios: Axios: Denial of Service due to unenforced request and response size limits\n\nAxios is a promise based HTTP client for the browser and Node.js. Axios versions 1.7.0 through 1.15.x did not enforce configured request and response size limits when requests were sent with the fetch adapter. Applications that selected adapter: 'fetch', or ran in environments where axios resolved to the fetch adapter, could receive or send bodies larger than maxContentLength or maxBodyLength despite those limits being explicitly configured. This can cause resource exhaustion in server-side usag\n\nPackage: axios\nInstalled: 1.13.2\nFixed in: 1.16.0\nSeverity: HIGH\nFix: Upgrade axios to 1.16.0"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-11a7ad442a00a23a", "name": "CVE-2026-44492: axios 1.13.2 \u2014 packages/pieces/community/couchbase/bun.lock", "shortDescription": {"text": "CVE-2026-44492: axios 1.13.2 \u2014 packages/pieces/community/couchbase/bun.lock"}, "fullDescription": {"text": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization\n\nAxios is a promise based HTTP client for the browser and Node.js. Prior to 0.32.0 and 1.16.0, Axios does not normalise IPv4-mapped IPv6 addresses. When NO_PROXY lists an IPv4 address such as 127.0.0.1 or 169.254.169.254, a request URL using the IPv4-mapped IPv6 form (::ffff:7f00:1, ::ffff:a9fe:a9fe) still routes through the configured proxy. Node.js resolves these addresses to the underlying IPv4 host, so the request reaches the internal service via the proxy rather than being blocked. This vuln\n\nPackage: axios\nInstalled: 1.13.2\nFixed in: 1.16.0, 0.32.0\nSeverity: HIGH\nFix: Upgrade axios to 1.16.0, 0.32.0"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-7bf6d67fe2d36077", "name": "CVE-2026-44494: axios 1.13.2 \u2014 packages/pieces/community/couchbase/bun.lock", "shortDescription": {"text": "CVE-2026-44494: axios 1.13.2 \u2014 packages/pieces/community/couchbase/bun.lock"}, "fullDescription": {"text": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution\n\nAxios is a promise based HTTP client for the browser and Node.js. From 1.0.0 to before 1.16.0, the Axios library is vulnerable to a Prototype Pollution \"Gadget\" attack that allows any Object.prototype pollution in the application's dependency tree to be escalated into a full Man-in-the-Middle (MITM) attack \u2014 intercepting, reading, and modifying all HTTP traffic including authentication credentials. The HTTP adapter at lib/adapters/http.js:670 reads config.proxy via standard property access, whic\n\nPackage: axios\nInstalled: 1.13.2\nFixed in: 1.16.0\nSeverity: HIGH\nFix: Upgrade axios to 1.16.0"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-83be37ceb568e998", "name": "CVE-2026-44495: axios 1.13.2 \u2014 packages/pieces/community/couchbase/bun.lock", "shortDescription": {"text": "CVE-2026-44495: axios 1.13.2 \u2014 packages/pieces/community/couchbase/bun.lock"}, "fullDescription": {"text": "axios: Axios: Information disclosure due to prototype pollution vulnerability\n\nAxios is a promise based HTTP client for the browser and Node.js. From 0.19.0 to before 0.31.1 and 1.15.2, Axios contains prototype-pollution gadgets in request config processing. If another vulnerability in the same JavaScript process has already polluted Object.prototype.transformResponse, affected Axios versions may treat that inherited value as request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-p\n\nPackage: axios\nInstalled: 1.13.2\nFixed in: 1.15.2, 0.31.1\nSeverity: HIGH\nFix: Upgrade axios to 1.15.2, 0.31.1"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-7616580fb41bba25", "name": "CVE-2026-44496: axios 1.13.2 \u2014 packages/pieces/community/couchbase/bun.lock", "shortDescription": {"text": "CVE-2026-44496: axios 1.13.2 \u2014 packages/pieces/community/couchbase/bun.lock"}, "fullDescription": {"text": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name\n\nAxios is a promise based HTTP client for the browser and Node.js. Axios versions before 0.32.0 on the 0.x line and before 1.16.0 on the 1.x line build a regular expression from the configured XSRF cookie name without escaping regex metacharacters. In standard browser environments, an attacker who can influence the cookie name passed to axios can cause expensive regex backtracking while axios reads document.cookie. The practical impact is client-side availability degradation, such as freezing the\n\nPackage: axios\nInstalled: 1.13.2\nFixed in: 1.16.0, 0.32.0\nSeverity: HIGH\nFix: Upgrade axios to 1.16.0, 0.32.0"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-e8688dea41463d12", "name": "CVE-2025-62718: axios 1.13.2 \u2014 packages/pieces/community/couchbase/bun.lock", "shortDescription": {"text": "CVE-2025-62718: axios 1.13.2 \u2014 packages/pieces/community/couchbase/bun.lock"}, "fullDescription": {"text": "axios: Axios: Server-Side Request Forgery and proxy bypass due to improper hostname normalization\n\nAxios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.0 and 0.31.0, Axios does not correctly handle hostname normalization when checking NO_PROXY rules. Requests to loopback addresses like localhost. (with a trailing dot) or [::1] (IPv6 literal) skip NO_PROXY matching and go through the configured proxy. This goes against what developers expect and lets attackers force requests through a proxy, even if NO_PROXY is set up to protect loopback or internal services. This is\n\nPackage: axios\nInstalled: 1.13.2\nFixed in: 1.15.0, 0.31.0\nSeverity: MEDIUM\nFix: Upgrade axios to 1.15.0, 0.31.0"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-964ed83aea4baea5", "name": "CVE-2026-40175: axios 1.13.2 \u2014 packages/pieces/community/couchbase/bun.lock", "shortDescription": {"text": "CVE-2026-40175: axios 1.13.2 \u2014 packages/pieces/community/couchbase/bun.lock"}, "fullDescription": {"text": "axios: Axios: Remote Code Execution via Prototype Pollution escalation\n\nAxios is a promise based HTTP client for the browser and Node.js. Versions prior to 1.15.0 and 0.3.1 are vulnerable to a specific gadget-style attack chain in which prototype pollution in a third-party dependency may be leveraged to inject unsanitized header values into outbound requests. This vulnerability is fixed in 1.15.0 and 0.3.1.\n\nPackage: axios\nInstalled: 1.13.2\nFixed in: 1.15.0, 0.31.0\nSeverity: MEDIUM\nFix: Upgrade axios to 1.15.0, 0.31.0"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-73f3a851c725b31b", "name": "CVE-2026-42034: axios 1.13.2 \u2014 packages/pieces/community/couchbase/bun.lock", "shortDescription": {"text": "CVE-2026-42034: axios 1.13.2 \u2014 packages/pieces/community/couchbase/bun.lock"}, "fullDescription": {"text": "axios: Axios: Denial of Service via oversized streamed uploads bypassing body limits\n\nAxios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, for stream request bodies, maxBodyLength is bypassed when maxRedirects is set to 0 (native http/https transport path). Oversized streamed uploads are sent fully even when the caller sets strict body limits. This vulnerability is fixed in 1.15.1 and 0.31.1.\n\nPackage: axios\nInstalled: 1.13.2\nFixed in: 1.15.1, 0.31.1\nSeverity: MEDIUM\nFix: Upgrade axios to 1.15.1, 0.31.1"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-bf1082dadadcff7f", "name": "CVE-2026-42036: axios 1.13.2 \u2014 packages/pieces/community/couchbase/bun.lock", "shortDescription": {"text": "CVE-2026-42036: axios 1.13.2 \u2014 packages/pieces/community/couchbase/bun.lock"}, "fullDescription": {"text": "axios: Axios: Denial of Service via unbounded stream consumption when 'responseType: 'stream'' is used\n\nAxios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, when responseType: 'stream' is used, Axios returns the response stream without enforcing maxContentLength. This bypasses configured response-size limits and allows unbounded downstream consumption. This vulnerability is fixed in 1.15.1 and 0.31.1.\n\nPackage: axios\nInstalled: 1.13.2\nFixed in: 1.15.1, 0.31.1\nSeverity: MEDIUM\nFix: Upgrade axios to 1.15.1, 0.31.1"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0e201b450be3bb2c", "name": "CVE-2026-42037: axios 1.13.2 \u2014 packages/pieces/community/couchbase/bun.lock", "shortDescription": {"text": "CVE-2026-42037: axios 1.13.2 \u2014 packages/pieces/community/couchbase/bun.lock"}, "fullDescription": {"text": "axios: Node.js: Axios: Information disclosure via CRLF injection in multipart Content-Type header\n\nAxios is a promise based HTTP client for the browser and Node.js. From 1.0.0 to before 1.15.1, the FormDataPart constructor in lib/helpers/formDataToStream.js interpolates value.type directly into the Content-Type header of each multipart part without sanitizing CRLF (\\r\\n) sequences. An attacker who controls the .type property of a Blob/File-like object (e.g., via a user-uploaded file in a Node.js proxy service) can inject arbitrary MIME part headers into the multipart form-data body. This bypa\n\nPackage: axios\nInstalled: 1.13.2\nFixed in: 1.15.1\nSeverity: MEDIUM\nFix: Upgrade axios to 1.15.1"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0c11168c885ddb13", "name": "CVE-2026-42038: axios 1.13.2 \u2014 packages/pieces/community/couchbase/bun.lock", "shortDescription": {"text": "CVE-2026-42038: axios 1.13.2 \u2014 packages/pieces/community/couchbase/bun.lock"}, "fullDescription": {"text": "axios: Axios: Information disclosure due to `no_proxy` bypass\n\nAxios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, he fix for no_proxy hostname normalization bypass is incomplete. When no_proxy=localhost is set, requests to 127.0.0.1 and [::1] still route through the proxy instead of bypassing it. The shouldBypassProxy() function does pure string matching \u2014 it does not resolve IP aliases or loopback equivalents. This vulnerability is fixed in 1.15.1 and 0.31.1.\n\nPackage: axios\nInstalled: 1.13.2\nFixed in: 1.15.1, 0.31.1\nSeverity: MEDIUM\nFix: Upgrade axios to 1.15.1, 0.31.1"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b6ce202d3f2c7128", "name": "CVE-2026-42039: axios 1.13.2 \u2014 packages/pieces/community/couchbase/bun.lock", "shortDescription": {"text": "CVE-2026-42039: axios 1.13.2 \u2014 packages/pieces/community/couchbase/bun.lock"}, "fullDescription": {"text": "axios: Node.js: Axios: Denial of Service via unbounded recursion in toFormData with deeply nested request data\n\nAxios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, toFormData recursively walks nested objects with no depth limit, so a deeply nested value passed as request data crashes the Node.js process with a RangeError. This vulnerability is fixed in 1.15.1 and 0.31.1.\n\nPackage: axios\nInstalled: 1.13.2\nFixed in: 1.15.1, 0.31.1\nSeverity: MEDIUM\nFix: Upgrade axios to 1.15.1, 0.31.1"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d41c0ea8e2de8fdd", "name": "CVE-2026-42041: axios 1.13.2 \u2014 packages/pieces/community/couchbase/bun.lock", "shortDescription": {"text": "CVE-2026-42041: axios 1.13.2 \u2014 packages/pieces/community/couchbase/bun.lock"}, "fullDescription": {"text": "axios: Axios: Authentication bypass due to prototype pollution of HTTP error handling\n\nAxios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, the Axios library is vulnerable to a Prototype Pollution \"Gadget\" attack that allows any Object.prototype pollution to silently suppress all HTTP error responses (401, 403, 500, etc.), causing them to be treated as successful responses. This completely bypasses application-level authentication and error handling. The root cause is that validateStatus is the only config property using the mergeDirectKeys\n\nPackage: axios\nInstalled: 1.13.2\nFixed in: 1.15.1, 0.31.1\nSeverity: MEDIUM\nFix: Upgrade axios to 1.15.1, 0.31.1"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ce9df907d6cc8cc9", "name": "CVE-2026-42042: axios 1.13.2 \u2014 packages/pieces/community/couchbase/bun.lock", "shortDescription": {"text": "CVE-2026-42042: axios 1.13.2 \u2014 packages/pieces/community/couchbase/bun.lock"}, "fullDescription": {"text": "axios: Axios: XSRF token bypass leading to information disclosure\n\nAxios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, the Axios library's XSRF token protection logic uses JavaScript truthy/falsy semantics instead of strict boolean comparison for the withXSRFToken config property. When this property is set to any truthy non-boolean value (via prototype pollution or misconfiguration), the same-origin check (isURLSameOrigin) is short-circuited, causing XSRF tokens to be sent to all request targets including cross-origin s\n\nPackage: axios\nInstalled: 1.13.2\nFixed in: 1.15.1, 0.31.1\nSeverity: MEDIUM\nFix: Upgrade axios to 1.15.1, 0.31.1"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e6a9a7d5e293b85d", "name": "CVE-2026-42044: axios 1.13.2 \u2014 packages/pieces/community/couchbase/bun.lock", "shortDescription": {"text": "CVE-2026-42044: axios 1.13.2 \u2014 packages/pieces/community/couchbase/bun.lock"}, "fullDescription": {"text": "axios: Axios: Invisible JSON Response Tampering via Prototype Pollution Gadget\n\nAxios is a promise based HTTP client for the browser and Node.js. From 1.0.0 to before 1.15.2, he Axios library is vulnerable to a Prototype Pollution \"Gadget\" attack that allows any Object.prototype pollution in the application's dependency tree to be escalated into surgical, invisible modification of all JSON API responses \u2014 including privilege escalation, balance manipulation, and authorization bypass. The default transformResponse function at lib/defaults/index.js:124 calls JSON.parse(data, \n\nPackage: axios\nInstalled: 1.13.2\nFixed in: 1.15.2\nSeverity: MEDIUM\nFix: Upgrade axios to 1.15.2"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d2254aca0cbf380b", "name": "CVE-2026-44490: axios 1.13.2 \u2014 packages/pieces/community/couchbase/bun.lock", "shortDescription": {"text": "CVE-2026-44490: axios 1.13.2 \u2014 packages/pieces/community/couchbase/bun.lock"}, "fullDescription": {"text": "axios: Axios: Information disclosure and denial of service due to prototype pollution\n\nAxios is a promise based HTTP client for the browser and Node.js. Prior to 0.32.0 and 1.16.0, axios exposes two read-side prototype-pollution gadgets. When Object.prototype is polluted by an upstream dependency in the same process (e.g. lodash _.merge / CVE-2018-16487), axios silently picks up the polluted values. (1) lib/utils.js line 406 builds merge()'s accumulator as result = {}, so result[targetKey] (line 414) walks Object.prototype and the polluted bucket's own keys are copied into the mer\n\nPackage: axios\nInstalled: 1.13.2\nFixed in: 1.16.0, 0.32.0\nSeverity: MEDIUM\nFix: Upgrade axios to 1.16.0, 0.32.0"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7e859cd4c5e920a0", "name": "CVE-2026-42040: axios 1.13.2 \u2014 packages/pieces/community/couchbase/bun.lock", "shortDescription": {"text": "CVE-2026-42040: axios 1.13.2 \u2014 packages/pieces/community/couchbase/bun.lock"}, "fullDescription": {"text": "axios: Axios: Incorrect null byte handling can lead to data integrity issues\n\nAxios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, the encode() function in lib/helpers/AxiosURLSearchParams.js contains a character mapping (charMap) at line 21 that reverses the safe percent-encoding of null bytes. After encodeURIComponent('\\x00') correctly produces the safe sequence %00, the charMap entry '%00': '\\x00' converts it back to a raw null byte. Primary impact is limited because the standard axios request flow is not affected. This vulnerab\n\nPackage: axios\nInstalled: 1.13.2\nFixed in: 1.15.1, 0.31.1\nSeverity: LOW\nFix: Upgrade axios to 1.15.1, 0.31.1"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a2f0586bdf0dd331", "name": "GHSA-r4q5-vmmm-2653: follow-redirects 1.15.11 \u2014 packages/pieces/community/couchbase/bun.lock", "shortDescription": {"text": "GHSA-r4q5-vmmm-2653: follow-redirects 1.15.11 \u2014 packages/pieces/community/couchbase/bun.lock"}, "fullDescription": {"text": "follow-redirects leaks Custom Authentication Headers to Cross-Domain Redirect Targets\n\n## Summary\n\nWhen an HTTP request follows a cross-domain redirect (301/302/307/308), `follow-redirects` only strips `authorization`, `proxy-authorization`, and `cookie` headers (matched by regex at index.js:469-476). Any custom authentication header (e.g., `X-API-Key`, `X-Auth-Token`, `Api-Key`, `Token`) is forwarded verbatim to the redirect target.\n\nSince `follow-redirects` is the redirect-handling dependency for **axios** (105K+ stars), this vulnerability affects the entire axios ecosystem.\n\n##\n\nPackage: follow-redirects\nInstalled: 1.15.11\nFixed in: 1.16.0\nSeverity: MEDIUM\nFix: Upgrade follow-redirects to 1.16.0"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7df8ddeca2c40768", "name": "CVE-2026-12143: form-data 4.0.5 \u2014 packages/pieces/community/couchbase/bun.lock", "shortDescription": {"text": "CVE-2026-12143: form-data 4.0.5 \u2014 packages/pieces/community/couchbase/bun.lock"}, "fullDescription": {"text": "form-data is a library for creating readable multipart/form-data strea ...\n\nform-data is a library for creating readable multipart/form-data streams. In versions through 4.0.5, the `field` argument to `FormData#append` and the `filename` option are concatenated verbatim into the `Content-Disposition` header without escaping carriage return (CR), line feed (LF), or double-quote (\") characters. An application that passes attacker-controlled data as a field name or filename (for example, an API gateway that turns JSON object keys into multipart field names) allows the atta\n\nPackage: form-data\nInstalled: 4.0.5\nFixed in: 2.5.6, 3.0.5, 4.0.6\nSeverity: HIGH\nFix: Upgrade form-data to 2.5.6, 3.0.5, 4.0.6"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-fa3bed40c417bc36", "name": "CVE-2026-23745: tar 6.2.1 \u2014 packages/pieces/community/couchbase/bun.lock", "shortDescription": {"text": "CVE-2026-23745: tar 6.2.1 \u2014 packages/pieces/community/couchbase/bun.lock"}, "fullDescription": {"text": "node-tar: tar: node-tar: Arbitrary file overwrite and symlink poisoning via unsanitized linkpaths in archives\n\nnode-tar is a Tar for Node.js. The node-tar library (<= 7.5.2) fails to sanitize the linkpath of Link (hardlink) and SymbolicLink entries when preservePaths is false (the default secure behavior). This allows malicious archives to bypass the extraction root restriction, leading to Arbitrary File Overwrite via hardlinks and Symlink Poisoning via absolute symlink targets. This vulnerability is fixed in 7.5.3.\n\nPackage: tar\nInstalled: 6.2.1\nFixed in: 7.5.3\nSeverity: HIGH\nFix: Upgrade tar to 7.5.3"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-be0c2aec7b47a03e", "name": "CVE-2026-23950: tar 6.2.1 \u2014 packages/pieces/community/couchbase/bun.lock", "shortDescription": {"text": "CVE-2026-23950: tar 6.2.1 \u2014 packages/pieces/community/couchbase/bun.lock"}, "fullDescription": {"text": "node-tar: tar: node-tar: Arbitrary file overwrite via Unicode path collision race condition\n\nnode-tar,a Tar for Node.js, has a race condition vulnerability in versions up to and including 7.5.3. This is due to an incomplete handling of Unicode path collisions in the `path-reservations` system. On case-insensitive or normalization-insensitive filesystems (such as macOS APFS, In which it has been tested), the library fails to lock colliding paths (e.g., `\u00df` and `ss`), allowing them to be processed in parallel. This bypasses the library's internal concurrency safeguards and permits Symlink\n\nPackage: tar\nInstalled: 6.2.1\nFixed in: 7.5.4\nSeverity: HIGH\nFix: Upgrade tar to 7.5.4"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-95d7a39261c759c9", "name": "CVE-2026-24842: tar 6.2.1 \u2014 packages/pieces/community/couchbase/bun.lock", "shortDescription": {"text": "CVE-2026-24842: tar 6.2.1 \u2014 packages/pieces/community/couchbase/bun.lock"}, "fullDescription": {"text": "node-tar: tar: node-tar: Arbitrary file creation via path traversal bypass in hardlink security check\n\nnode-tar,a Tar for Node.js, contains a vulnerability in versions prior to 7.5.7 where the security check for hardlink entries uses different path resolution semantics than the actual hardlink creation logic. This mismatch allows an attacker to craft a malicious TAR archive that bypasses path traversal protections and creates hardlinks to arbitrary files outside the extraction directory. Version 7.5.7 contains a fix for the issue.\n\nPackage: tar\nInstalled: 6.2.1\nFixed in: 7.5.7\nSeverity: HIGH\nFix: Upgrade tar to 7.5.7"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-f90a200684343997", "name": "CVE-2026-26960: tar 6.2.1 \u2014 packages/pieces/community/couchbase/bun.lock", "shortDescription": {"text": "CVE-2026-26960: tar 6.2.1 \u2014 packages/pieces/community/couchbase/bun.lock"}, "fullDescription": {"text": "node-tar: node-tar: Arbitrary file read/write via malicious archive hardlink creation\n\nnode-tar is a full-featured Tar for Node.js. When using default options in versions 7.5.7 and below, an attacker-controlled archive can create a hardlink inside the extraction directory that points to a file outside the extraction root, enabling arbitrary file read and write as the extracting user. Severity is high because the primitive bypasses path protections and turns archive extraction into a direct filesystem access primitive. This issue has been fixed in version 7.5.8.\n\nPackage: tar\nInstalled: 6.2.1\nFixed in: 7.5.8\nSeverity: HIGH\nFix: Upgrade tar to 7.5.8"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-0ca6727ccae79d75", "name": "CVE-2026-29786: tar 6.2.1 \u2014 packages/pieces/community/couchbase/bun.lock", "shortDescription": {"text": "CVE-2026-29786: tar 6.2.1 \u2014 packages/pieces/community/couchbase/bun.lock"}, "fullDescription": {"text": "node-tar: hardlink path traversal via drive-relative linkpath\n\nnode-tar is a full-featured Tar for Node.js. Prior to version 7.5.10, tar can be tricked into creating a hardlink that points outside the extraction directory by using a drive-relative link target such as C:../target.txt, which enables file overwrite outside cwd during normal tar.x() extraction. This issue has been patched in version 7.5.10.\n\nPackage: tar\nInstalled: 6.2.1\nFixed in: 7.5.10\nSeverity: HIGH\nFix: Upgrade tar to 7.5.10"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-ffcf25f3aad096ed", "name": "CVE-2026-31802: tar 6.2.1 \u2014 packages/pieces/community/couchbase/bun.lock", "shortDescription": {"text": "CVE-2026-31802: tar 6.2.1 \u2014 packages/pieces/community/couchbase/bun.lock"}, "fullDescription": {"text": "tar: tar: File overwrite via drive-relative symlink traversal\n\nnode-tar is a full-featured Tar for Node.js. Prior to version 7.5.11, tar (npm) can be tricked into creating a symlink that points outside the extraction directory by using a drive-relative symlink target such as C:../../../target.txt, which enables file overwrite outside cwd during normal tar.x() extraction. This vulnerability is fixed in 7.5.11.\n\nPackage: tar\nInstalled: 6.2.1\nFixed in: 7.5.11\nSeverity: HIGH\nFix: Upgrade tar to 7.5.11"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-9936b716edb53dd9", "name": "CVE-2026-53655: tar 6.2.1 \u2014 packages/pieces/community/couchbase/bun.lock", "shortDescription": {"text": "CVE-2026-53655: tar 6.2.1 \u2014 packages/pieces/community/couchbase/bun.lock"}, "fullDescription": {"text": "node-tar is a full-featured Tar for Node.js. Prior to 7.5.16, tar (nod ...\n\nnode-tar is a full-featured Tar for Node.js. Prior to 7.5.16, tar (node-tar) applies a PAX extended header's size= record (and other PAX overrides) to the next header entry of any type, including intermediary metadata headers such as a GNU long-name (L) or long-link (K) entry. Per POSIX pax, a PAX extended header (x) describes the next file entry, not the intermediary extension headers that may sit between the x header and the file it annotates. Because node-tar lets the PAX size override the by\n\nPackage: tar\nInstalled: 6.2.1\nFixed in: 7.5.16\nSeverity: MEDIUM\nFix: Upgrade tar to 7.5.16"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d3e621bd841ad9e4", "name": "CVE-2026-41907: uuid 10.0.0 \u2014 packages/pieces/community/fathom/bun.lock", "shortDescription": {"text": "CVE-2026-41907: uuid 10.0.0 \u2014 packages/pieces/community/fathom/bun.lock"}, "fullDescription": {"text": "uuid: uuid: Out-of-bounds write vulnerability impacts data integrity and confidentiality\n\nuuid is for the creation of RFC9562 (formerly RFC4122) UUIDs. Prior to 14.0.0, v3, v5, and v6 accept external output buffers but do not reject out-of-range writes (small buf or large offset). This allows silent partial writes into caller-provided buffers. This vulnerability is fixed in 14.0.0.\n\nPackage: uuid\nInstalled: 10.0.0\nFixed in: 11.1.1, 12.0.1, 13.0.1\nSeverity: MEDIUM\nFix: Upgrade uuid to 11.1.1, 12.0.1, 13.0.1"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-46802adcad21d935", "name": "CVE-2026-41907: uuid 9.0.1 \u2014 packages/pieces/community/hume-ai/bun.lock", "shortDescription": {"text": "CVE-2026-41907: uuid 9.0.1 \u2014 packages/pieces/community/hume-ai/bun.lock"}, "fullDescription": {"text": "uuid: uuid: Out-of-bounds write vulnerability impacts data integrity and confidentiality\n\nuuid is for the creation of RFC9562 (formerly RFC4122) UUIDs. Prior to 14.0.0, v3, v5, and v6 accept external output buffers but do not reject out-of-range writes (small buf or large offset). This allows silent partial writes into caller-provided buffers. This vulnerability is fixed in 14.0.0.\n\nPackage: uuid\nInstalled: 9.0.1\nFixed in: 11.1.1, 12.0.1, 13.0.1\nSeverity: MEDIUM\nFix: Upgrade uuid to 11.1.1, 12.0.1, 13.0.1"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e855e87a8b232a05", "name": "CVE-2026-48779: ws 8.18.3 \u2014 packages/pieces/community/hume-ai/bun.lock", "shortDescription": {"text": "CVE-2026-48779: ws 8.18.3 \u2014 packages/pieces/community/hume-ai/bun.lock"}, "fullDescription": {"text": "ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments\n\nws is an open source WebSocket client and server for Node.js. All versions from 1.1.0 up to (but not including) 5.2.5, from 6.0.0 up to 6.2.4, from 7.0.0 up to 7.5.11, and from 8.0.0 up to 8.21.0 are affected by a memory exhaustion DoS vulnerability. A peer can send a high volume of exceptionally small fragments and data chunks, with modest network traffic, to force the remote peer into allocating and holding structural wrappers that consume far more memory than the default documented message-si\n\nPackage: ws\nInstalled: 8.18.3\nFixed in: 5.2.5, 6.2.4, 7.5.11, 8.21.0\nSeverity: HIGH\nFix: Upgrade ws to 5.2.5, 6.2.4, 7.5.11, 8.21.0"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a911150f0ee83a42", "name": "CVE-2026-45736: ws 8.18.3 \u2014 packages/pieces/community/hume-ai/bun.lock", "shortDescription": {"text": "CVE-2026-45736: ws 8.18.3 \u2014 packages/pieces/community/hume-ai/bun.lock"}, "fullDescription": {"text": "ws: ws: Uninitialized memory disclosure via `websocket.close()` with `TypedArray`\n\nws is an open source WebSocket client and server for Node.js. Prior to 8.20.1, the websocket.close() implementation is vulnerable to uninitialized memory disclosure when a TypedArray is passed as the reason argument. This vulnerability is fixed in 8.20.1.\n\nPackage: ws\nInstalled: 8.18.3\nFixed in: 8.20.1\nSeverity: MEDIUM\nFix: Upgrade ws to 8.20.1"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-17012128e5dd8d1f", "name": "DS-0002: Image user should not be 'root' \u2014 .devcontainer/Dockerfile", "shortDescription": {"text": "DS-0002: Image user should not be 'root' \u2014 .devcontainer/Dockerfile"}, "fullDescription": {"text": "Image user should not be 'root'\n\nSpecify at least 1 USER command in Dockerfile with non-root user as argument\n\nRule: DS-0002\nSeverity: HIGH\nTarget: .devcontainer/Dockerfile"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-e9e8a77380ac3bd7", "name": "DS-0013: 'RUN cd ...' to change directory \u2014 .devcontainer/Dockerfile", "shortDescription": {"text": "DS-0013: 'RUN cd ...' to change directory \u2014 .devcontainer/Dockerfile"}, "fullDescription": {"text": "'RUN cd ...' to change directory\n\nRUN should not be used to change directory: 'cd /usr/src && bun i isolated-vm@6.0.2'. Use 'WORKDIR' statement instead.\n\nRule: DS-0013\nSeverity: MEDIUM\nTarget: .devcontainer/Dockerfile"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c9c8522741c191fe", "name": "DS-0026: No HEALTHCHECK defined \u2014 .devcontainer/Dockerfile", "shortDescription": {"text": "DS-0026: No HEALTHCHECK defined \u2014 .devcontainer/Dockerfile"}, "fullDescription": {"text": "No HEALTHCHECK defined\n\nAdd HEALTHCHECK instruction in your Dockerfile\n\nRule: DS-0026\nSeverity: LOW\nTarget: .devcontainer/Dockerfile"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e2c81574da3989e2", "name": "DS-0029: 'apt-get' missing '--no-install-recommends' \u2014 .devcontainer/Dockerfile", "shortDescription": {"text": "DS-0029: 'apt-get' missing '--no-install-recommends' \u2014 .devcontainer/Dockerfile"}, "fullDescription": {"text": "'apt-get' missing '--no-install-recommends'\n\n'--no-install-recommends' flag is missed: 'apt-get update && apt-get install -y git'\n\nRule: DS-0029\nSeverity: HIGH\nTarget: .devcontainer/Dockerfile"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-3a3527e70129fb18", "name": "DS-0002: Image user should not be 'root' \u2014 Dockerfile", "shortDescription": {"text": "DS-0002: Image user should not be 'root' \u2014 Dockerfile"}, "fullDescription": {"text": "Image user should not be 'root'\n\nSpecify at least 1 USER command in Dockerfile with non-root user as argument\n\nRule: DS-0002\nSeverity: HIGH\nTarget: Dockerfile"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-72ff79e0f8219b60", "name": "DS-0013: 'RUN cd ...' to change directory \u2014 Dockerfile", "shortDescription": {"text": "DS-0013: 'RUN cd ...' to change directory \u2014 Dockerfile"}, "fullDescription": {"text": "'RUN cd ...' to change directory\n\nRUN should not be used to change directory: 'cd /usr/src && bun install isolated-vm@6.0.2'. Use 'WORKDIR' statement instead.\n\nRule: DS-0013\nSeverity: MEDIUM\nTarget: Dockerfile"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3c4041c454cda88e", "name": "DS-0026: No HEALTHCHECK defined \u2014 Dockerfile", "shortDescription": {"text": "DS-0026: No HEALTHCHECK defined \u2014 Dockerfile"}, "fullDescription": {"text": "No HEALTHCHECK defined\n\nAdd HEALTHCHECK instruction in your Dockerfile\n\nRule: DS-0026\nSeverity: LOW\nTarget: Dockerfile"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-be17f34a4f475534", "name": "DS-0002: Image user should not be 'root' \u2014 packages/server/worker/test/e2e/Dockerfile", "shortDescription": {"text": "DS-0002: Image user should not be 'root' \u2014 packages/server/worker/test/e2e/Dockerfile"}, "fullDescription": {"text": "Image user should not be 'root'\n\nSpecify at least 1 USER command in Dockerfile with non-root user as argument\n\nRule: DS-0002\nSeverity: HIGH\nTarget: packages/server/worker/test/e2e/Dockerfile"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-455844ea37bb1040", "name": "DS-0026: No HEALTHCHECK defined \u2014 packages/server/worker/test/e2e/Dockerfile", "shortDescription": {"text": "DS-0026: No HEALTHCHECK defined \u2014 packages/server/worker/test/e2e/Dockerfile"}, "fullDescription": {"text": "No HEALTHCHECK defined\n\nAdd HEALTHCHECK instruction in your Dockerfile\n\nRule: DS-0026\nSeverity: LOW\nTarget: packages/server/worker/test/e2e/Dockerfile"}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b0d3a69283559657", "name": "Secret leak: JWT token \u2014 .env.dev", "shortDescription": {"text": "Secret leak: JWT token \u2014 .env.dev"}, "fullDescription": {"text": "Trivy detected a possible secret in `.env.dev`.\n\nRule: jwt-token\nSeverity: MEDIUM\nMatch (redacted): AP_WORKER_TOKEN=****************************************************************\n\nAction: rotate the credential and remove it from the repo. Use a secrets manager or environment variables."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-dea754a143151235", "name": "Secret leak: JWT token \u2014 packages/pieces/community/cal-com/src/lib/triggers/index.ts", "shortDescription": {"text": "Secret leak: JWT token \u2014 packages/pieces/community/cal-com/src/lib/triggers/index.ts"}, "fullDescription": {"text": "Trivy detected a possible secret in `packages/pieces/community/cal-com/src/lib/triggers/index.ts`.\n\nRule: jwt-token\nSeverity: MEDIUM\nMatch (redacted):             '*******************************************************************\n\nAction: rotate the credential and remove it from the repo. Use a secrets manager or environment variables."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-afb2bdef9937d972", "name": "Secret leak: AWS Access Key ID \u2014 packages/pieces/community/shippo/src/lib/triggers/new-shipping-label.ts", "shortDescription": {"text": "Secret leak: AWS Access Key ID \u2014 packages/pieces/community/shippo/src/lib/triggers/new-shipping-label.ts"}, "fullDescription": {"text": "Trivy detected a possible secret in `packages/pieces/community/shippo/src/lib/triggers/new-shipping-label.ts`.\n\nRule: aws-access-key-id\nSeverity: CRITICAL\nMatch (redacted): res=1437093830&AWSAccessKeyId=********************',\n\nAction: rotate the credential and remove it from the repo. Use a secrets manager or environment variables."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-6d251fc0bb833d02", "name": "Secret leak: JWT token \u2014 packages/pieces/community/videoask/src/lib/triggers/form-contact-message.ts", "shortDescription": {"text": "Secret leak: JWT token \u2014 packages/pieces/community/videoask/src/lib/triggers/form-contact-message.ts"}, "fullDescription": {"text": "Trivy detected a possible secret in `packages/pieces/community/videoask/src/lib/triggers/form-contact-message.ts`.\n\nRule: jwt-token\nSeverity: MEDIUM\nMatch (redacted): /thumbnails/preview.gif?token=**************************************************\n\nAction: rotate the credential and remove it from the repo. Use a secrets manager or environment variables."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-179f06f695629aac", "name": "Secret leak: JWT token \u2014 packages/pieces/community/videoask/src/lib/triggers/new-form-author-response.ts", "shortDescription": {"text": "Secret leak: JWT token \u2014 packages/pieces/community/videoask/src/lib/triggers/new-form-author-response.ts"}, "fullDescription": {"text": "Trivy detected a possible secret in `packages/pieces/community/videoask/src/lib/triggers/new-form-author-response.ts`.\n\nRule: jwt-token\nSeverity: MEDIUM\nMatch (redacted): /thumbnails/preview.gif?token=**************************************************\n\nAction: rotate the credential and remove it from the repo. Use a secrets manager or environment variables."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-02a12af4c8ca6e67", "name": "Agent authority lacks a verifier contract: packages/pieces/CLAUDE.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: packages/pieces/CLAUDE.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a0c631d1482becb4", "name": "Agent authority lacks a verifier contract: packages/server/engine/CLAUDE.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: packages/server/engine/CLAUDE.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-122f91b7f2906dc4", "name": "Agent authority lacks a verifier contract: .claude/settings.json", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/settings.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-25856c3dfdad6fa7", "name": "Agent authority lacks a verifier contract: .claude/agents/changelog.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/agents/changelog.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cd3f90d39d7ee280", "name": "Agent authority lacks a verifier contract: .claude/agents/web.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/agents/web.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b7773224123da479", "name": "Agent authority lacks a verifier contract: .claude/agents/server.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/agents/server.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-49cf88554d4cd932", "name": "Privileged port 9 in use", "shortDescription": {"text": "Privileged port 9 in use"}, "fullDescription": {"text": "Port 9 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f8e91a9a075729ae", "name": "Privileged port 14 in use", "shortDescription": {"text": "Privileged port 14 in use"}, "fullDescription": {"text": "Port 14 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d63da3583b14afc0", "name": "Dockerfile runs as root: Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-33e0d7df56f6fa5b", "name": "Docker base image is tag-pinned but not digest-pinned: node:24.14.0-bullseye-slim", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: node:24.14.0-bullseye-slim"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-86677ba132f2d19e", "name": "Dockerfile runs as root: packages/server/worker/test/e2e/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: packages/server/worker/test/e2e/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-203ea90da160f990", "name": "Docker base image is tag-pinned but not digest-pinned: node:24.14.0-bullseye-slim", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: node:24.14.0-bullseye-slim"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4a210ac3b4b59ff4", "name": "Dockerfile runs as root: .devcontainer/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: .devcontainer/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7c1eb98f2cf22465", "name": "Docker base image is tag-pinned but not digest-pinned: mcr.microsoft.com/devcontainers/javascript-node:${VARIANT}", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: mcr.microsoft.com/devcontainers/javascript-node:${VARIANT}"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5b43d4a583792c5d", "name": "Runtime dotenv file present in repo: .env.dev", "shortDescription": {"text": "Runtime dotenv file present in repo: .env.dev"}, "fullDescription": {"text": "`.env.dev` looks like a runtime dotenv file. It contains secret-looking assignments for AP_JWT_SECRET, AP_WORKER_TOKEN. Move real values to a secret manager and keep only `.env.example` style templates in source control."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-32b6bab68c4fb207", "name": "Runtime dotenv file present in repo: packages/server/api/.env.tests", "shortDescription": {"text": "Runtime dotenv file present in repo: packages/server/api/.env.tests"}, "fullDescription": {"text": "`packages/server/api/.env.tests` looks like a runtime dotenv file. It contains secret-looking assignments for AP_ENCRYPTION_KEY, AP_STRIPE_SECRET_KEY, AP_APPSUMO_TOKEN, OPENAI_API_KEY, GOOGLE_GENERATIVE_AI_API_KEY. Move real values to a secret manager and keep only `.env.example` style templates in source control."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-3f7ba968bc4893d8", "name": "Runtime dotenv file present in repo: packages/tests-e2e/.env.e2e", "shortDescription": {"text": "Runtime dotenv file present in repo: packages/tests-e2e/.env.e2e"}, "fullDescription": {"text": "`packages/tests-e2e/.env.e2e` looks like a runtime dotenv file. It contains secret-looking assignments for AP_ENCRYPTION_KEY. Move real values to a secret manager and keep only `.env.example` style templates in source control."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-f551c5ecfe7811d9", "name": "Possible secret in packages/pieces/community/shippo/src/lib/triggers/new-shipping-label.ts", "shortDescription": {"text": "Possible secret in packages/pieces/community/shippo/src/lib/triggers/new-shipping-label.ts"}, "fullDescription": {"text": "Detected pattern matching aws_access_key. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-e1f72b92d5d58df1", "name": "Insecure pattern 'weak_hash' in packages/pieces/community/mailchimp/src/i18n/translation.json:136", "shortDescription": {"text": "Insecure pattern 'weak_hash' in packages/pieces/community/mailchimp/src/i18n/translation.json:136"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4b0a6c153917f90d", "name": "Insecure pattern 'weak_hash' in packages/pieces/community/mailchimp/src/i18n/fr.json:136", "shortDescription": {"text": "Insecure pattern 'weak_hash' in packages/pieces/community/mailchimp/src/i18n/fr.json:136"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-636744103171c467", "name": "Insecure pattern 'weak_hash' in packages/pieces/community/mailchimp/src/i18n/de.json:136", "shortDescription": {"text": "Insecure pattern 'weak_hash' in packages/pieces/community/mailchimp/src/i18n/de.json:136"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-48408385ee78de2b", "name": "Insecure pattern 'weak_hash' in packages/pieces/community/mailchimp/src/i18n/pt.json:136", "shortDescription": {"text": "Insecure pattern 'weak_hash' in packages/pieces/community/mailchimp/src/i18n/pt.json:136"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e832847d52bb3352", "name": "Insecure pattern 'weak_hash' in packages/pieces/community/mailchimp/src/i18n/nl.json:136", "shortDescription": {"text": "Insecure pattern 'weak_hash' in packages/pieces/community/mailchimp/src/i18n/nl.json:136"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-88ca3b0696a93156", "name": "Insecure pattern 'weak_hash' in packages/pieces/community/mailchimp/src/i18n/ja.json:136", "shortDescription": {"text": "Insecure pattern 'weak_hash' in packages/pieces/community/mailchimp/src/i18n/ja.json:136"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a4444a6ed89f251a", "name": "Insecure pattern 'weak_hash' in packages/pieces/community/mailchimp/src/i18n/zh.json:136", "shortDescription": {"text": "Insecure pattern 'weak_hash' in packages/pieces/community/mailchimp/src/i18n/zh.json:136"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-88ef42b395857ca4", "name": "Insecure pattern 'weak_hash' in packages/pieces/community/mailchimp/src/i18n/es.json:136", "shortDescription": {"text": "Insecure pattern 'weak_hash' in packages/pieces/community/mailchimp/src/i18n/es.json:136"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5d90baf909ae4779", "name": "Insecure pattern 'weak_hash' in packages/pieces/community/mailchimp/src/lib/actions/archive-subscriber.ts:15", "shortDescription": {"text": "Insecure pattern 'weak_hash' in packages/pieces/community/mailchimp/src/lib/actions/archive-subscriber.ts:15"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6406f8aa7bb97579", "name": "Possible secret in packages/pieces/community/cal-com/src/lib/triggers/index.ts", "shortDescription": {"text": "Possible secret in packages/pieces/community/cal-com/src/lib/triggers/index.ts"}, "fullDescription": {"text": "Detected pattern matching password_literal. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-af0bb05c7147ab15", "name": "Insecure pattern 'node_child_process' in packages/pieces/community/oracle-database/src/lib/common/runner-pool.ts:1", "shortDescription": {"text": "Insecure pattern 'node_child_process' in packages/pieces/community/oracle-database/src/lib/common/runner-pool.ts:1"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-303f4fbb2f0d7ac5", "name": "Insecure pattern 'node_child_process' in packages/pieces/community/oracle-database/src/lib/common/thick-mode.ts:6", "shortDescription": {"text": "Insecure pattern 'node_child_process' in packages/pieces/community/oracle-database/src/lib/common/thick-mode.ts:6"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1270695d292b8e06", "name": "Possible secret in packages/pieces/community/hashi-corp-vault/src/lib/actions/write-secret.ts", "shortDescription": {"text": "Possible secret in packages/pieces/community/hashi-corp-vault/src/lib/actions/write-secret.ts"}, "fullDescription": {"text": "Detected pattern matching password_literal. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-90a47e603ca4fb12", "name": "Insecure pattern 'private_key_in_repo' in packages/pieces/community/snowflake/src/lib/auth.ts:15", "shortDescription": {"text": "Insecure pattern 'private_key_in_repo' in packages/pieces/community/snowflake/src/lib/auth.ts:15"}, "fullDescription": {"text": "Found a known-risky pattern (private_key_in_repo). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-a311c67fe0a6e8ae", "name": "Insecure pattern 'private_key_in_repo' in packages/pieces/community/snowflake/src/lib/common/index.ts:40", "shortDescription": {"text": "Insecure pattern 'private_key_in_repo' in packages/pieces/community/snowflake/src/lib/common/index.ts:40"}, "fullDescription": {"text": "Found a known-risky pattern (private_key_in_repo). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-22956d6e9121c6a4", "name": "Insecure pattern 'weak_hash' in packages/pieces/community/vtiger/src/lib/common.ts:30", "shortDescription": {"text": "Insecure pattern 'weak_hash' in packages/pieces/community/vtiger/src/lib/common.ts:30"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-71481c30ed8236ba", "name": "Possible secret in packages/pieces/community/tableau/src/lib/common/index.ts", "shortDescription": {"text": "Possible secret in packages/pieces/community/tableau/src/lib/common/index.ts"}, "fullDescription": {"text": "Detected pattern matching password_literal. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-84ec1b26127f0cc4", "name": "Insecure pattern 'weak_hash' in packages/pieces/core/crypto/src/i18n/translation.json:34", "shortDescription": {"text": "Insecure pattern 'weak_hash' in packages/pieces/core/crypto/src/i18n/translation.json:34"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b1462de868fb6f3f", "name": "Insecure pattern 'weak_hash' in packages/pieces/core/crypto/src/i18n/id.json:29", "shortDescription": {"text": "Insecure pattern 'weak_hash' in packages/pieces/core/crypto/src/i18n/id.json:29"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f2fa709094e0d08e", "name": "Insecure pattern 'weak_hash' in packages/pieces/core/crypto/src/i18n/fr.json:34", "shortDescription": {"text": "Insecure pattern 'weak_hash' in packages/pieces/core/crypto/src/i18n/fr.json:34"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0b7ad8024e88b776", "name": "Insecure pattern 'weak_hash' in packages/pieces/core/crypto/src/i18n/ru.json:29", "shortDescription": {"text": "Insecure pattern 'weak_hash' in packages/pieces/core/crypto/src/i18n/ru.json:29"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4c4b48365cd2d664", "name": "Insecure pattern 'weak_hash' in packages/pieces/core/crypto/src/i18n/de.json:34", "shortDescription": {"text": "Insecure pattern 'weak_hash' in packages/pieces/core/crypto/src/i18n/de.json:34"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-46eb8930b761d43b", "name": "Insecure pattern 'weak_hash' in packages/pieces/core/crypto/src/i18n/hi.json:29", "shortDescription": {"text": "Insecure pattern 'weak_hash' in packages/pieces/core/crypto/src/i18n/hi.json:29"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-90c50b852056d80c", "name": "Insecure pattern 'weak_hash' in packages/pieces/core/crypto/src/i18n/ca.json:29", "shortDescription": {"text": "Insecure pattern 'weak_hash' in packages/pieces/core/crypto/src/i18n/ca.json:29"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4584d8e42bc0e7c7", "name": "Insecure pattern 'weak_hash' in packages/pieces/core/crypto/src/i18n/vi.json:29", "shortDescription": {"text": "Insecure pattern 'weak_hash' in packages/pieces/core/crypto/src/i18n/vi.json:29"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8c3e5d2168be6753", "name": "Insecure pattern 'weak_hash' in packages/pieces/core/crypto/src/i18n/pt.json:34", "shortDescription": {"text": "Insecure pattern 'weak_hash' in packages/pieces/core/crypto/src/i18n/pt.json:34"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-518287785fd0c6f1", "name": "Insecure pattern 'weak_hash' in packages/pieces/core/crypto/src/i18n/nl.json:34", "shortDescription": {"text": "Insecure pattern 'weak_hash' in packages/pieces/core/crypto/src/i18n/nl.json:34"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d33865f94b2a3283", "name": "Insecure pattern 'weak_hash' in packages/pieces/core/crypto/src/i18n/ja.json:34", "shortDescription": {"text": "Insecure pattern 'weak_hash' in packages/pieces/core/crypto/src/i18n/ja.json:34"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8b81ec2f098c1c5a", "name": "Insecure pattern 'weak_hash' in packages/pieces/core/crypto/src/i18n/zh.json:34", "shortDescription": {"text": "Insecure pattern 'weak_hash' in packages/pieces/core/crypto/src/i18n/zh.json:34"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d32a450898b491b4", "name": "Insecure pattern 'weak_hash' in packages/pieces/core/crypto/src/i18n/es.json:34", "shortDescription": {"text": "Insecure pattern 'weak_hash' in packages/pieces/core/crypto/src/i18n/es.json:34"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-54a9c46e7f051b06", "name": "Insecure pattern 'weak_hash' in packages/pieces/core/crypto/src/lib/actions/hash-text.ts:16", "shortDescription": {"text": "Insecure pattern 'weak_hash' in packages/pieces/core/crypto/src/lib/actions/hash-text.ts:16"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6476e85c38188f80", "name": "Insecure pattern 'weak_hash' in packages/pieces/core/crypto/src/lib/actions/hmac-signature.ts:35", "shortDescription": {"text": "Insecure pattern 'weak_hash' in packages/pieces/core/crypto/src/lib/actions/hmac-signature.ts:35"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f10cffb99f98adfb", "name": "Insecure pattern 'node_child_process' in packages/pieces/core/pdf/src/lib/actions/convert-to-image.ts:5", "shortDescription": {"text": "Insecure pattern 'node_child_process' in packages/pieces/core/pdf/src/lib/actions/convert-to-image.ts:5"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3772e1bb4fafb6cf", "name": "Insecure pattern 'node_child_process' in packages/server/worker/src/lib/sandbox/isolate.ts:1", "shortDescription": {"text": "Insecure pattern 'node_child_process' in packages/server/worker/src/lib/sandbox/isolate.ts:1"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-adc2c7070ff1dc09", "name": "Insecure pattern 'node_child_process' in packages/server/worker/src/lib/sandbox/fork.ts:1", "shortDescription": {"text": "Insecure pattern 'node_child_process' in packages/server/worker/src/lib/sandbox/fork.ts:1"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-de3b6b6491e456f2", "name": "Insecure pattern 'node_child_process' in packages/server/worker/src/lib/sandbox/sandbox.ts:1", "shortDescription": {"text": "Insecure pattern 'node_child_process' in packages/server/worker/src/lib/sandbox/sandbox.ts:1"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ef05f06dbdec5882", "name": "Insecure pattern 'cors_wildcard' in packages/server/worker/src/lib/sandbox/sandbox.ts:78", "shortDescription": {"text": "Insecure pattern 'cors_wildcard' in packages/server/worker/src/lib/sandbox/sandbox.ts:78"}, "fullDescription": {"text": "Found a known-risky pattern (cors_wildcard). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-155b2fdaaba47e9c", "name": "Insecure pattern 'node_child_process' in packages/server/worker/src/lib/sandbox/types.ts:1", "shortDescription": {"text": "Insecure pattern 'node_child_process' in packages/server/worker/src/lib/sandbox/types.ts:1"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2b37ceb7f435a691", "name": "Insecure pattern 'node_child_process' in packages/server/worker/src/lib/utils/exec.ts:1", "shortDescription": {"text": "Insecure pattern 'node_child_process' in packages/server/worker/src/lib/utils/exec.ts:1"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-393a0c8309cd9e36", "name": "Insecure pattern 'cors_wildcard' in packages/server/api/src/app/server.ts:51", "shortDescription": {"text": "Insecure pattern 'cors_wildcard' in packages/server/api/src/app/server.ts:51"}, "fullDescription": {"text": "Found a known-risky pattern (cors_wildcard). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a2f001f84a797924", "name": "Insecure pattern 'node_child_process' in packages/server/api/src/app/pieces/dev-piece-watcher.ts:1", "shortDescription": {"text": "Insecure pattern 'node_child_process' in packages/server/api/src/app/pieces/dev-piece-watcher.ts:1"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a938f63d729c0c8e", "name": "Insecure pattern 'cors_wildcard' in packages/server/api/src/app/mcp/oauth/metadata/mcp-oauth-metadata.controller.ts:9", "shortDescription": {"text": "Insecure pattern 'cors_wildcard' in packages/server/api/src/app/mcp/oauth/metadata/mcp-oauth-metadata.controller.ts:9"}, "fullDescription": {"text": "Found a known-risky pattern (cors_wildcard). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5534e02d8ad42e16", "name": "Insecure pattern 'node_child_process' in packages/server/engine/src/lib/core/code/no-op-code-sandbox.ts:1", "shortDescription": {"text": "Insecure pattern 'node_child_process' in packages/server/engine/src/lib/core/code/no-op-code-sandbox.ts:1"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-897d0a35d8aaa26b", "name": "Insecure pattern 'node_child_process' in packages/cli/src/lib/utils/exec.ts:1", "shortDescription": {"text": "Insecure pattern 'node_child_process' in packages/cli/src/lib/utils/exec.ts:1"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c51e7d224e4894c2", "name": "Insecure pattern 'exec_used' in packages/cli/src/lib/utils/piece-utils.ts:60", "shortDescription": {"text": "Insecure pattern 'exec_used' in packages/cli/src/lib/utils/piece-utils.ts:60"}, "fullDescription": {"text": "Found a known-risky pattern (exec_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-5f20f14d22202111", "name": "Insecure pattern 'exec_used' in packages/cli/src/lib/commands/generate-translation-file-for-piece.ts:25", "shortDescription": {"text": "Insecure pattern 'exec_used' in packages/cli/src/lib/commands/generate-translation-file-for-piece.ts:25"}, "fullDescription": {"text": "Found a known-risky pattern (exec_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-6f332e13e90e9c7b", "name": "Possible secret in packages/shared/src/lib/ee/secret-managers/dto.ts", "shortDescription": {"text": "Possible secret in packages/shared/src/lib/ee/secret-managers/dto.ts"}, "fullDescription": {"text": "Detected pattern matching password_literal. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-2a366a39c78037db", "name": "Insecure pattern 'new_function_used' in packages/web/src/app/builder/piece-properties/custom-property.tsx:17", "shortDescription": {"text": "Insecure pattern 'new_function_used' in packages/web/src/app/builder/piece-properties/custom-property.tsx:17"}, "fullDescription": {"text": "Found a known-risky pattern (new_function_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-ca117c953aa225ec", "name": "Insecure pattern 'direct_innerhtml_assignment' in packages/web/src/app/builder/piece-properties/text-input-with-mentions", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in packages/web/src/app/builder/piece-properties/text-input-with-mentions/text-input-utils.ts:423"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-51a93cdb4a3ab9e9", "name": "Insecure pattern 'dangerous_innerhtml' in packages/web/src/components/ui/chart.tsx:81", "shortDescription": {"text": "Insecure pattern 'dangerous_innerhtml' in packages/web/src/components/ui/chart.tsx:81"}, "fullDescription": {"text": "Found a known-risky pattern (dangerous_innerhtml). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b15dfa6afab58357", "name": "Possible secret in packages/tests-e2e/global-setup.ts", "shortDescription": {"text": "Possible secret in packages/tests-e2e/global-setup.ts"}, "fullDescription": {"text": "Detected pattern matching password_literal. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-efb0431684bb60ee", "name": "Insecure pattern 'node_child_process' in tools/setup-dev.js:3", "shortDescription": {"text": "Insecure pattern 'node_child_process' in tools/setup-dev.js:3"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5f72be005f05659b", "name": "Insecure pattern 'node_child_process' in tools/scripts/install-bun.js:3", "shortDescription": {"text": "Insecure pattern 'node_child_process' in tools/scripts/install-bun.js:3"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-59e4907e268b0327", "name": "Insecure pattern 'node_child_process' in tools/scripts/check-migration-rollback.ts:1", "shortDescription": {"text": "Insecure pattern 'node_child_process' in tools/scripts/check-migration-rollback.ts:1"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6b161dd0d8d5593b", "name": "Insecure pattern 'node_child_process' in tools/scripts/utils/publish-npm-package.ts:3", "shortDescription": {"text": "Insecure pattern 'node_child_process' in tools/scripts/utils/publish-npm-package.ts:3"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6059f255e8268d78", "name": "Insecure pattern 'node_child_process' in tools/scripts/utils/exec.ts:1", "shortDescription": {"text": "Insecure pattern 'node_child_process' in tools/scripts/utils/exec.ts:1"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0f1b782d1d9cc7b1", "name": "Insecure pattern 'node_child_process' in tools/scripts/utils/piece-script-utils.ts:2", "shortDescription": {"text": "Insecure pattern 'node_child_process' in tools/scripts/utils/piece-script-utils.ts:2"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b09a639500d075dd", "name": "Insecure pattern 'exec_used' in tools/scripts/utils/package-pre-publish-checks.ts:46", "shortDescription": {"text": "Insecure pattern 'exec_used' in tools/scripts/utils/package-pre-publish-checks.ts:46"}, "fullDescription": {"text": "Found a known-risky pattern (exec_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a758166b77bbcaa3", "name": "Insecure pattern 'node_child_process' in tools/scripts/utils/package-pre-publish-checks.ts:2", "shortDescription": {"text": "Insecure pattern 'node_child_process' in tools/scripts/utils/package-pre-publish-checks.ts:2"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4c9a0e2e3b25819c", "name": "Insecure pattern 'exec_used' in tools/scripts/pieces/publish-piece.ts:22", "shortDescription": {"text": "Insecure pattern 'exec_used' in tools/scripts/pieces/publish-piece.ts:22"}, "fullDescription": {"text": "Found a known-risky pattern (exec_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a31e2d8b1f9795e1", "name": "Insecure pattern 'node_child_process' in tools/scripts/pieces/bump-translated-pieces.ts:3", "shortDescription": {"text": "Insecure pattern 'node_child_process' in tools/scripts/pieces/bump-translated-pieces.ts:3"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2c58bb4fb8e61577", "name": "Insecure pattern 'node_child_process' in deploy/pulumi/index.ts:7", "shortDescription": {"text": "Insecure pattern 'node_child_process' in deploy/pulumi/index.ts:7"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d68699391e51e606", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v5 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-624e0cbf6cda36d2", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "docker/login-action@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f3cdc1518faaf4b6", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v5 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-65c9bd56493a81d3", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/github-script@v8 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f26e8370e5cd8a8b", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v5 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d8a624cee0741b71", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "docker/login-action@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-709025cc1d7ff991", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-85363e8bedfc8017", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v5 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e230b0c926ab2d0a", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "docker/login-action@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d8cd20785bb346b2", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3333307085dec04f", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e1c1e12f22833679", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8c2ecddb93695fe0", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v5 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-63d1b079b061865a", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "docker/login-action@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-81b9bc5865aba7e1", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v5 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-934dfa9df62402fd", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v5 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7d9a3a1cd87b64fa", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "docker/login-action@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d0abb4d5475521ab", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "docker/login-action@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-459c1a07465c319c", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v5 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-27924aa79fa4a517", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "rharkor/caching-for-turbo@v2.4.2 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7d2c2580c56ad065", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v5 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6e737343dd91046d", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v5 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fc180ed796895f59", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v5 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9a7a190bbd70d909", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v5 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-cb639d9a10a47b23", "name": "package.json defines install-time lifecycle scripts", "shortDescription": {"text": "package.json defines install-time lifecycle scripts"}, "fullDescription": {"text": "preinstall/install/postinstall/prepare scripts execute during dependency installation. Review them carefully for network calls, obfuscation, shell execution, or credential access."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-38903327eb433672", "name": "Very large file: packages/pieces/community/github/src/lib/trigger/index.ts (1480 lines)", "shortDescription": {"text": "Very large file: packages/pieces/community/github/src/lib/trigger/index.ts (1480 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7dc68ece56e9e5a5", "name": "Very large file: packages/pieces/community/pdfcrowd/src/lib/actions/url-to-pdf.ts (867 lines)", "shortDescription": {"text": "Very large file: packages/pieces/community/pdfcrowd/src/lib/actions/url-to-pdf.ts (867 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f65fca313f1afae7", "name": "Very large file: packages/pieces/community/pdfcrowd/src/lib/actions/html-to-pdf.ts (867 lines)", "shortDescription": {"text": "Very large file: packages/pieces/community/pdfcrowd/src/lib/actions/html-to-pdf.ts (867 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-58ba78a95a50c095", "name": "Very large file: packages/pieces/community/ampeco/src/index.ts (896 lines)", "shortDescription": {"text": "Very large file: packages/pieces/community/ampeco/src/index.ts (896 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4d60965043374aed", "name": "Very large file: packages/server/api/src/app/database/postgres-connection.ts (836 lines)", "shortDescription": {"text": "Very large file: packages/server/api/src/app/database/postgres-connection.ts (836 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6b715d0039d1161c", "name": "Very large file: packages/server/api/test/integration/ce/mcp/mcp-tools.test.ts (2565 lines)", "shortDescription": {"text": "Very large file: packages/server/api/test/integration/ce/mcp/mcp-tools.test.ts (2565 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-be6c05c33eaab4d2", "name": "Very large file: packages/server/api/test/integration/cloud/project/project.test.ts (1303 lines)", "shortDescription": {"text": "Very large file: packages/server/api/test/integration/cloud/project/project.test.ts (1303 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6893a6c8b0861585", "name": "Very low test-to-source ratio", "shortDescription": {"text": "Very low test-to-source ratio"}, "fullDescription": {"text": "408 test file(s) for 11144 source file(s) (ratio 0.04). Consider adding integration or unit tests for critical paths."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-88f301d8a90718ad", "name": "55 TODO/FIXME markers", "shortDescription": {"text": "55 TODO/FIXME markers"}, "fullDescription": {"text": "High count of TODO/FIXME/HACK markers \u2014 track them as issues so they're not forgotten."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-da65e6e3b0d80897", "name": "Node manifest has dependencies but no lockfile: packages/ee/embed-sdk/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/ee/embed-sdk/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-47093761247e3e2c", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/smartlead/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/smartlead/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3485d23d1944e53f", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/documentpro/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/documentpro/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1708f33c3feb527a", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/tenzo/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/tenzo/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0fc6a5352d06c978", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/xquik/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/xquik/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-55a5fcd3a6ed1fe1", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/workable/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/workable/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1de18226622c0280", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/salesloft/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/salesloft/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1dafd42b57f5656b", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/certopus/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/certopus/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ede241bea1452d69", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/instantly-ai/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/instantly-ai/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b5289e6a28751c23", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/scrapegrapghai/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/scrapegrapghai/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d6472e880d0cbb4c", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/ask-handle/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/ask-handle/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2f3aac4b8ac80d68", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/waitwhile/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/waitwhile/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-768204ef96bff9c8", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/alttextify/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/alttextify/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e6079a6d0547953a", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/omnihr/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/omnihr/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9af461edd3c29721", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/kissflow/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/kissflow/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9449b167ebffb1d3", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/baremetrics/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/baremetrics/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5728317dc53b25ca", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/instasent/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/instasent/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0781b7a61a89aa3a", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/systeme-io/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/systeme-io/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0dbe2a6d06f4327c", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/retune/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/retune/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6a5ee7c576b8d7e4", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/freshdesk/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/freshdesk/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-cd2a25d2745bd495", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/youtube/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/youtube/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3954ec16bbb1dee5", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/formitable/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/formitable/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b77bdcabb5347447", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/zoho-invoice/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/zoho-invoice/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-89f4b7570fa47b20", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/respond-io/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/respond-io/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2987b01016afe121", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/generatebanners/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/generatebanners/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7d2cdf058b683afe", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/enrichlayer/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/enrichlayer/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2f95835fd28a651e", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/productboard/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/productboard/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c4c56a9252970af4", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/livesession/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/livesession/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a72d7e57c30335cd", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/mem/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/mem/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-84b5120b32bb6834", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/respaid/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/respaid/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3f36804d448968a5", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/woodpecker/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/woodpecker/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c320a28edcd5cca5", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/talkable/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/talkable/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-98df0af9b5308795", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/llmrails/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/llmrails/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-69a3526c0d6cdefd", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/discourse/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/discourse/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a52040d80954754a", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/detecting-ai/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/detecting-ai/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-009278869b9098e7", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/feathery/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/feathery/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b6054ea9684b9aa5", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/exa/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/exa/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3c23cb6b9ff4cca4", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/personal-ai/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/personal-ai/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-514af3b102bf17a6", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/mailgun/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/mailgun/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c859b84ffc75f726", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/docusign/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/docusign/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-85ba11b7f87fca5b", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/raindrop/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/raindrop/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-cc87a1667b8ff5ef", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/chatsistant/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/chatsistant/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9dc9b07005410b33", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/iloveapi/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/iloveapi/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3e9a0add9461d63f", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/google-docs/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/google-docs/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-878f564adf83376d", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/google-cloud-storage/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/google-cloud-storage/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8785d8f55fe1e10d", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/shippo/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/shippo/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-92b23f73bd281efb", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/extracta-ai/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/extracta-ai/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1864d57d26e4e7fc", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/phone-validator/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/phone-validator/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-436464141179dbb5", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/stability-ai/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/stability-ai/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0437516eaf506928", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/onfleet/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/onfleet/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e531e53f416bf653", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/bookedin/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/bookedin/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f8c5f765aeb72b7a", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/fliqr-ai/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/fliqr-ai/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-26f58fef500033b4", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/taskade/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/taskade/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6a2039e8b98d9e37", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/lokalise/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/lokalise/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b15820008d6c3199", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/todoist/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/todoist/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b79782c6c7932686", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/freshservice/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/freshservice/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-bc64b73f36230e50", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/bursty-ai/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/bursty-ai/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ffacae4b0a59eb7a", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/outseta/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/outseta/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-caf4f106eece7085", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/vlm-run/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/vlm-run/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-acefd88f946970c2", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/ntfy/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/ntfy/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b710edd42e8cb75f", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/microsoft-sharepoint/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/microsoft-sharepoint/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fd7bc697c1fcd01f", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/webex/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/webex/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-30a122a3474b49cb", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/zagomail/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/zagomail/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6fde848ccc1b9015", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/fellow/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/fellow/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7a1361dcd710070b", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/wistia/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/wistia/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a9c09185423f5197", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/recurly/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/recurly/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0f010211d483a728", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/deepgram/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/deepgram/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-27d7f9e65a7107eb", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/dittofeed/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/dittofeed/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-98af620cbec7c2a2", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/pdfmonkey/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/pdfmonkey/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3783111283894216", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/cognito-forms/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/cognito-forms/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8198e052a7b0a203", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/azure-openai/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/azure-openai/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-73ea481e5d5ec7f1", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/roe-ai/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/roe-ai/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a79ce6c819c22c0c", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/fillout-forms/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/fillout-forms/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3bb1d25a06ddb10f", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/duckdb/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/duckdb/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-80a198acf0eb5090", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/canny/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/canny/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e09fd9d9dda5d3ba", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/giftbit/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/giftbit/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d23d652e886778f4", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/open-phone/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/open-phone/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7dfc496fafcbad6b", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/sendy/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/sendy/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1556e36c8f1ce64b", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/validatedmails/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/validatedmails/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a2bfc23308268e27", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/groq/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/groq/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-78de08dba1c10800", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/json/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/json/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-09e476587fe56b93", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/smsmode/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/smsmode/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-58a1946379df4113", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/magical-api/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/magical-api/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7df670b7573aa675", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/cloutly/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/cloutly/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-78016ac160f98478", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/postmark/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/postmark/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-becf73998a4b74a1", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/barcode-lookup/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/barcode-lookup/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ed9de211ff4d4561", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/woocommerce/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/woocommerce/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-309a1665c1283ab0", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/clickfunnels/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/clickfunnels/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-48e46e474bdae565", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/pinch-payments/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/pinch-payments/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f70400c79a833e62", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/vtex/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/vtex/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-68c9c10615558065", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/deftform/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/deftform/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0944a10caca7ed86", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/pagerduty/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/pagerduty/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-dfb553664c5d9eac", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/square/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/square/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d75eebc29a896b17", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/aiprise/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/aiprise/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-27cf4088b4fb32b6", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/microsoft-dynamics-365-business-central/packag", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/microsoft-dynamics-365-business-central/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0d3da199467ba157", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/pastebin/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/pastebin/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9ed9699e0059b424", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/customgpt/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/customgpt/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-07a5fc3a85e7d7a0", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/freshsales/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/freshsales/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0717df46ef2b6838", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/bexio/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/bexio/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-81b71903826dc2e1", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/formbricks/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/formbricks/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f1db852a42c30bce", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/google-drive/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/google-drive/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-71bf222d234ae0a3", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/eth-name-service/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/eth-name-service/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2d84a2e70a7e6ece", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/firecrawl/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/firecrawl/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-30ee81a8f2aa2c3b", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/comfyicu/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/comfyicu/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ed423a1e846a7006", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/mooninvoice/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/mooninvoice/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fb4aba61bee3e862", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/meetgeek-ai/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/meetgeek-ai/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a7d21a90b0496062", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/gistly/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/gistly/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-df0a5922751d4f7d", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/typefully/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/typefully/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b0ea0aeb8b2ab568", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/coda/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/coda/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b407803c4d695bf5", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/bumpups/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/bumpups/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8af19ca6930c4282", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/mempool-space/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/mempool-space/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7fff489e95f7688b", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/insighto-ai/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/insighto-ai/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1f55dc4b6279dd81", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/canva/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/canva/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-cc488055993bbb1e", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/tavily/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/tavily/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6ad74ab178dedeea", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/pdf4me/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/pdf4me/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-94f91fb261ca0b5d", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/checkout/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/checkout/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-eee2a5c32a88c58f", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/segment/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/segment/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ed284a7fa7e6ee47", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/gcloud-pubsub/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/gcloud-pubsub/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ff6c3023f0629f20", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/dropbox/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/dropbox/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-18b48bd41196dd42", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/amazon-sqs/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/amazon-sqs/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-49fa332e0cd91cfa", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/buffer/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/buffer/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-668f55c777cd2caa", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/serp-api/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/serp-api/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-20c3a41c0078fb69", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/matrix/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/matrix/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8d972b107f42dc0a", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/heartbeat/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/heartbeat/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-42f7cecb0dfb871f", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/pubrio/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/pubrio/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-91d7b65336a6c6ff", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/stripe/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/stripe/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4c0236b00dcf6399", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/dappier/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/dappier/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7fcb58445a6b363a", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/clickup/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/clickup/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f06cc1e7596bab03", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/wafeq/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/wafeq/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-72762dabf8cb374c", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/algolia/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/algolia/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b3ac6835cca3fb61", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/pinterest/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/pinterest/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e3d51d719486fe61", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/image-router/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/image-router/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e3c929f5e3a1a5be", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/foreplay-co/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/foreplay-co/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7b9341d111bc5726", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/surrealdb/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/surrealdb/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-19307a22c2d346f5", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/air-ops/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/air-ops/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b9ab3fbb86ad8179", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/sendpulse/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/sendpulse/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3fe1fbd36e4be93d", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/youform/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/youform/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4428e93003980d8b", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/figma/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/figma/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2d78823f854e7286", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/razorpay/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/razorpay/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-35a185d90da0872b", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/senja/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/senja/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6a5ee5a88aba8e03", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/chain-aware/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/chain-aware/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fbf8895805921c6a", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/voipstudio/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/voipstudio/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7a5014df8d57c553", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/timelines-ai/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/timelines-ai/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-589b16f03c9d0d0d", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/twitter/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/twitter/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8a6bda4799e87a4b", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/kizeo-forms/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/kizeo-forms/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e72a169ae9c4a1b6", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/telnyx/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/telnyx/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-066dc6cf70f1af9a", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/chat-data/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/chat-data/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-da6bad760a2f8fb5", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/leap-ai/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/leap-ai/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-00473a562e9666a3", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/readwise/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/readwise/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-edc2adc37bf951f1", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/bocha-search/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/bocha-search/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-80e8ea0370c2bd3a", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/chess-com/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/chess-com/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f916a00b7764ea51", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/cohere/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/cohere/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e030d949bb567393", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/quaderno/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/quaderno/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3d2dd804f985bbcc", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/emailit/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/emailit/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-680ec0c7966b32e8", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/umami/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/umami/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-262c3a1eb60b2757", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/azure-blob-storage/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/azure-blob-storage/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-23ff3b996faec483", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/opnform/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/opnform/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-171681e85e7a84de", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/mailchimp/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/mailchimp/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-759c000f0c28216c", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/devin/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/devin/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-36ce16e6cf8f9188", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/odoo/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/odoo/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1a2db53bc322adf7", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/poper/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/poper/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c3d3bf1e51e58df4", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/typeform/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/typeform/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a49e531d242f4cb9", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/digital-ocean/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/digital-ocean/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-56f5490aa5fbdb9a", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/swarmnode/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/swarmnode/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e656985c6f346bd5", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/manychat/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/manychat/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-deb558bb4109a97a", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/autocalls/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/autocalls/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8a283e3e0a05022e", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/microsoft-365-people/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/microsoft-365-people/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2b9322755166fafa", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/mailchain/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/mailchain/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-32b6cbc6cf41bdcc", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/cartloom/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/cartloom/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3b1a47a3da187867", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/whatsscale/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/whatsscale/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1297573da426c4c0", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/descript/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/descript/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c304c92164642d40", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/retable/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/retable/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-655647a981e4b513", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/mollie/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/mollie/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-05d864b9160c865d", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/katana/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/katana/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-06cf7395b349080d", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/pollybot-ai/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/pollybot-ai/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e4f4b7063c2b5f0b", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/azure-devops/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/azure-devops/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a0054794c1ef7ba5", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/just-invoice/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/just-invoice/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a58e259c2e75be9d", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/hastewire/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/hastewire/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-49c676f66544f048", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/wufoo/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/wufoo/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d497d0f16df64926", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/cursor/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/cursor/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-bf23f55ea0ca4302", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/line/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/line/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e0c4dcee91611b95", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/signrequest/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/signrequest/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-151f6a58d40a3ad7", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/gorgias/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/gorgias/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-48c89a7ad3aa7600", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/crisp/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/crisp/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-da1c432bb5e67488", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/google-search/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/google-search/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-cceb657b90f15502", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/luxury-presence/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/luxury-presence/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c077c8650785cdd6", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/hubspot/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/hubspot/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a6fb0ecff3fab285", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/instabase/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/instabase/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-81e39a1e8724aab6", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/provenexpert/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/provenexpert/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-bdf46fcbaa707ae6", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/microsoft-365-planner/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/microsoft-365-planner/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-bb489fd7fb9bb12c", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/jira-cloud/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/jira-cloud/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c1cc49522dfc24ef", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/documerge/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/documerge/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1c6ff94999ea3d7a", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/lofty/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/lofty/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7b9ea5986c63101a", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/azure-communication-services/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/azure-communication-services/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-beba83c570bab982", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/cryptolens/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/cryptolens/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4312d13dad3e366f", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/chatling/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/chatling/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-807bb32c68f10663", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/chargekeep/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/chargekeep/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0993a006d5719e7c", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/teamleader/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/teamleader/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-141d044dd223a557", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/kallabot-ai/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/kallabot-ai/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-37caba694fbe8d5c", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/google-bigquery/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/google-bigquery/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1f75c7c405f3e0bd", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/azure-ad/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/azure-ad/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-17f156dfd2231a4b", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/cal-com/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/cal-com/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b1f1e085fd3a118f", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/elevenlabs/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/elevenlabs/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ec6030169a715138", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/uxsniff/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/uxsniff/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-86887a04fd6e3a83", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/maileroo/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/maileroo/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e3505c1813724c32", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/free-agent/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/free-agent/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-942c4198b84d7476", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/videoask/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/videoask/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e64d18c1c51bd283", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/circle/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/circle/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-cb5165256248efd3", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/seven/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/seven/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1d81918b42b58b93", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/omnisend/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/omnisend/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-30d49fba0a001f53", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/housecall-pro/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/housecall-pro/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a3a8fa992b5c0cc9", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/imeetify/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/imeetify/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a2b0d14ce9ffd9bc", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/slite/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/slite/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-88d3edd63b80fbb6", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/scenario/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/scenario/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a0f062fd7b925313", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/ticktick/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/ticktick/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4349f5825a69d468", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/scrapeless/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/scrapeless/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-103edc80af14b8d6", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/fragment/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/fragment/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c29e7ba73f657978", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/peekshot/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/peekshot/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f5c5e6ef802e507b", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/coralogix/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/coralogix/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f0f7ebb89a048285", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/saleor/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/saleor/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2073a21f8ba96bb3", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/zoho-books/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/zoho-books/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-92a7e50faaa0d208", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/oracle-database/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/oracle-database/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a2152a99a70e5f7e", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/mysendingbox/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/mysendingbox/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e6f759c7b036a6c7", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/splitwise/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/splitwise/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-66730926a7f8e019", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/zoho-mail/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/zoho-mail/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-499702aba4a92f00", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/zoho-desk/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/zoho-desk/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-09d04f45e2e09b3a", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/whatsable/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/whatsable/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7aa9fee46fee4289", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/logsnag/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/logsnag/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6cb5533c3ce3e9c8", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/reachinbox/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/reachinbox/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-286d3ad9ddb01cab", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/coupa/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/coupa/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-815664e92ccb2fa1", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/pendo/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/pendo/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-24d782bcd2cbc1bc", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/fathom-analytics/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/fathom-analytics/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5f5b6693c09deea4", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/clicksend/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/clicksend/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-595aab35fcf1820f", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/vadoo-ai/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/vadoo-ai/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-bc8a8585a890cba5", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/slashed/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/slashed/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-07931ebfc419807e", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/time-ops/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/time-ops/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b22140d0ebad2410", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/twilio/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/twilio/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-26d8551eb94cdbf6", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/meistertask/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/meistertask/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-394beb2b9bbbc970", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/saastic/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/saastic/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-649b15e98744be07", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/google-my-business/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/google-my-business/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-17c8d8d1aec14050", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/filetopdf/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/filetopdf/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-89960c809ec83acb", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/tl-dv/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/tl-dv/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b113da3b3411f9b1", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/ghostcms/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/ghostcms/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b0814236b85837fd", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/feedhive/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/feedhive/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a98ddcd160f91d74", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/zoo/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/zoo/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-61fa3e894b9e3837", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/gender-api/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/gender-api/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d99fb324ce80349f", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/teamwork/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/teamwork/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3aad004d658fd329", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/esignatures/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/esignatures/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-12c964b2998356d9", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/assembled/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/assembled/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-73d1d95c1ff406bf", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/kustomer/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/kustomer/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4f178d36571ceedb", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/aminos/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/aminos/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a5011a383bfbfd63", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/whatsapp/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/whatsapp/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d76422e65fba212a", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/microsoft-outlook-calendar/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/microsoft-outlook-calendar/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-72975ab91d016452", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/sitespeakai/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/sitespeakai/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a667a6be3e590032", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/editionguard/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/editionguard/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8bdecfb9c97e8114", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/cometapi/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/cometapi/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c120f46a2c623f8f", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/smaily/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/smaily/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d0eb4e6a3f26187e", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/webling/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/webling/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5150f640196391ef", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/mailjet/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/mailjet/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6f7eb241ca44158a", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/socialkit/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/socialkit/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-14ceccb5f0613021", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/postiz/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/postiz/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2c18d3c37c86e1ea", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/muna-ai/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/muna-ai/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4b2951a597eb92b8", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/matomo/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/matomo/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-15056a5b546d76a6", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/telegram-bot/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/telegram-bot/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1b3b94fa07661385", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/beebole/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/beebole/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-05e82460838821ba", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/tidely/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/tidely/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a118dc8ff64577e4", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/browserless/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/browserless/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3d84c824a975fe4b", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/motion/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/motion/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1f55fb414b951104", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/qdrant/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/qdrant/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-cf3eb1631997357a", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/sender/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/sender/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-49eda176af6328ac", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/lightfunnels/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/lightfunnels/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-bcf01f58a08c98f6", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/imap/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/imap/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0a894d52b085559c", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/knock/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/knock/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-76483948e8f3a6c1", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/openmic-ai/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/openmic-ai/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8d73bd50cd4a6ea3", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/googlechat/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/googlechat/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0e46cecbb8e941e2", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/sap-ariba/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/sap-ariba/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9e4ac1f001cb8fb4", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/assemblyai/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/assemblyai/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e7e708a7068627ca", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/okta/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/okta/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a294eefed43b4b4c", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/browse-ai/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/browse-ai/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fc1fd073271a2a8f", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/attio/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/attio/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-25af826c8a384874", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/beehiiv/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/beehiiv/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-39255e63059200cc", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/gravityforms/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/gravityforms/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ffef969d276069a6", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/predis-ai/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/predis-ai/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-bdbce37552cd5873", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/hootsuite/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/hootsuite/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a973fddfc64e510f", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/plunk/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/plunk/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b3556602d6cb597d", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/billplz/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/billplz/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-58b2f40c43af9ae1", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/valyu/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/valyu/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9353d5dcbe56a74a", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/sessions-us/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/sessions-us/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b0f44ec24df7701c", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/bigin-by-zoho/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/bigin-by-zoho/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9b33018be4d91345", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/copy-ai/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/copy-ai/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5ecabd0f7c03c7dd", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/clicdata/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/clicdata/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fde2d9ec08bc0a16", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/motiontools/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/motiontools/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0dda381ff3978a95", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/fireflies-ai/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/fireflies-ai/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-60c4cded2b6744fa", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/datafuel/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/datafuel/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-85e41b818bba53bb", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/jotform/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/jotform/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6443b6fcc248fa9f", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/avoma/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/avoma/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-58ef82b2337a1602", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/knack/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/knack/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-aab1b4b53b2c9ac9", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/beamer/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/beamer/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4e23754903505032", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/what-converts/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/what-converts/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f8040f4ce36303e7", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/flowlu/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/flowlu/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-810bd7b12b570b1b", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/blockscout/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/blockscout/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3faf519d54377ac9", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/sendinblue/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/sendinblue/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-689df17f3030b648", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/vouchery-io/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/vouchery-io/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-407774eece9d6b84", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/textcortex-ai/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/textcortex-ai/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f504b9f0d693a06b", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/add-event/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/add-event/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7c6f7cfbe3113682", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/rendex/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/rendex/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-376ba8747fcc32e2", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/fountain/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/fountain/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7c3f4c9f802563a2", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/carbone/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/carbone/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ac9e307d9fc8ee18", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/eden-ai/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/eden-ai/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-148662aa2fc9b3f9", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/appfollow/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/appfollow/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4bfb3ac21587bd71", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/parser-expert/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/parser-expert/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f7c1e7160eb89244", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/sardis/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/sardis/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-96bb200790287c4c", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/messagebird/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/messagebird/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fea2200356eb8902", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/neverbounce/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/neverbounce/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-867e6ac907514b38", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/confluence/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/confluence/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-26a49a4c1d2549ca", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/postgres/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/postgres/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-91eb125b9d053d5b", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/photoroom/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/photoroom/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ae13a02c374ab907", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/loops/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/loops/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-01262cde22eb8cb9", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/anyhook-graphql/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/anyhook-graphql/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-969dbc39609a0b2e", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/google-sheets/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/google-sheets/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-66a0dd34b46e919d", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/quickzu/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/quickzu/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-edd72e703e3ba336", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/slidespeak/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/slidespeak/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-687eff75f039b00f", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/contentful/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/contentful/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3d6921bc38c280b8", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/metatext/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/metatext/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-75a6c0769d7023fd", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/capsule-crm/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/capsule-crm/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-18a5687bf136a482", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/retell-ai/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/retell-ai/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9066e3f1b0e59691", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/microsoft-copilot/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/microsoft-copilot/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c902c5431dd16d40", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/harvest/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/harvest/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f3bee0ef69988e7f", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/vero/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/vero/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-380bdcd109b73b32", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/presentation/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/presentation/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-86450acc5df1e532", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/brave-search/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/brave-search/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c07496a1ecd57330", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/granola/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/granola/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-34f5de64a9850391", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/bonjoro/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/bonjoro/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6acfb32f4bec4c5c", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/activecampaign/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/activecampaign/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5c653429ba864ae3", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/paddle/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/paddle/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6553a35c822e290c", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/deepl/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/deepl/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2a5384865c942388", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/skyprep/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/skyprep/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4d12cddd8d9ea4b0", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/klipy/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/klipy/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b864162f8e8a937c", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/twitch/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/twitch/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ec5f23646816df23", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/medullar/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/medullar/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-bec545e3e2a7a3c3", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/grok-xai/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/grok-xai/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-52cd194045d1f874", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/amazon-secrets-manager/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/amazon-secrets-manager/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-db329a9b8ec76df3", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/klenty/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/klenty/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3a8de29e0c14df03", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/apollo/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/apollo/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d97603a03df78e18", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/chatfly/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/chatfly/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-cb790ae1d6853aa8", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/zuora/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/zuora/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-88cf5371d1c799eb", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/google-forms/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/google-forms/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-09d7a8ef093c321e", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/zerobounce/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/zerobounce/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4e86ad9f561b10f6", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/smartsuite/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/smartsuite/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-096d31461eecf59c", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/vidnoz/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/vidnoz/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5c71fcf63fb9cd5a", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/kimai/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/kimai/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-523bbf9b0ff313c7", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/greenpt/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/greenpt/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5c1cae565175c639", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/rabbitmq/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/rabbitmq/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fcb1aca3da4f8a52", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/queue/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/queue/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5254a30c261f9897", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/formsite/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/formsite/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-bbacdab880a59876", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/promptmate/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/promptmate/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9e41ec84cabde4ea", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/pdf-co/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/pdf-co/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a757bef32e3b857b", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/village/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/village/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b6d8f88b8d8b0219", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/rss/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/rss/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6f89f2c332b273f6", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/chat-aid/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/chat-aid/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8ffa12257f9f1e69", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/hedy/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/hedy/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-18989dbede88cb2f", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/quickbase/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/quickbase/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5b1c36ef84723e6a", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/alai/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/alai/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f8cdc5d63ba93eb0", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/everhour/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/everhour/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-95882bdba55cbc45", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/pylon/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/pylon/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e8e615a211626612", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/mindee/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/mindee/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fbabf52d3393e6fb", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/alt-text-ai/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/alt-text-ai/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e1bda135543b59e9", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/hashi-corp-vault/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/hashi-corp-vault/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5539ea522fd33ffc", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/wonderchat/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/wonderchat/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a267220b8c704ee6", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/oneclickimpact/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/oneclickimpact/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6a09498e36cd4376", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/kudosity/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/kudosity/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d9acb5afd84b37cc", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/nuelink/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/nuelink/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ab504264953f896a", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/smartsheet/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/smartsheet/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3bf5a019edc92433", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/asknews/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/asknews/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8ee506035b37fe06", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/orimon/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/orimon/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-879ad0f15fcbb88f", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/dust/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/dust/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-92141023190918d3", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/parallel/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/parallel/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-73ab71b5000c779c", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/klaviyo/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/klaviyo/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7fbae0ab7b02ec84", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/magicslides/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/magicslides/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-37fb5d47a793f815", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/invoiceninja/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/invoiceninja/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-aadfb98abf85b330", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/savvycal/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/savvycal/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c670be9addd3ca92", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/acuity-scheduling/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/acuity-scheduling/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-37b7ef934a2e0457", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/camb-ai/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/camb-ai/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b34fc46e37d3dc5a", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/modelslab/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/modelslab/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e6cc7d0e2ecaed55", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/simpliroute/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/simpliroute/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1088e592ce13fcbb", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/parseur/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/parseur/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a09a11777f173160", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/salesforce/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/salesforce/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6b9c9d04b99c7d26", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/cloudconvert/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/cloudconvert/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-341ff37efee97b0f", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/constant-contact/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/constant-contact/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2064e563022e39c5", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/aircall/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/aircall/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d750dbec8ee42926", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/captain-data/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/captain-data/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-935114564fae9d7c", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/supabase/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/supabase/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-875b08323dfb7d4f", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/getresponse/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/getresponse/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b33ed5b6fa246116", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/datocms/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/datocms/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6bd25e79549a08eb", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/reddit/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/reddit/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-45bf8d14374b0299", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/vapi/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/vapi/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e6b3779fc798a859", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/google-search-console/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/google-search-console/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3253bfcd13bde9b8", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/elastic-email/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/elastic-email/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3673112b310aae4d", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/opportify/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/opportify/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b0a06290d4c330ba", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/missive/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/missive/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-43fea8266718614e", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/wootric/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/wootric/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-caee7d13b2880c8c", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/krisp-call/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/krisp-call/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0b488f6f72584f76", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/soap/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/soap/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8975b9ba754faeb3", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/wrike/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/wrike/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-49837e879f2be36c", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/mysql/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/mysql/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-790f9d55b1d2a47e", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/backblaze/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/backblaze/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5ea18af9aa21cabf", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/airtop/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/airtop/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e085cfab308057fc", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/formstack/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/formstack/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0a6557c7006ca2a7", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/zendesk/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/zendesk/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-41a2fa4405ce2e84", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/hugging-face/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/hugging-face/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e3225fa93af64d0a", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/webscraping-ai/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/webscraping-ai/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-43ca29d8776d2b74", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/zoho-campaigns/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/zoho-campaigns/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9268a2f2493eb86e", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/surveymonkey/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/surveymonkey/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4046cb17ec504b79", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/convertkit/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/convertkit/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2254ed7142c6f0ce", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/clockify/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/clockify/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0f118d741669a723", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/youcanbookme/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/youcanbookme/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3561c96abfb68658", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/upgradechat/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/upgradechat/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3adee213b50c8616", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/dimo/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/dimo/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-bb365ec976530b30", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/gameball/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/gameball/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ed42294bcbc15b8a", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/mind-studio/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/mind-studio/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-17dd0c0cac7b6b56", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/microsoft-outlook/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/microsoft-outlook/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-67bf9eeb2b9b7f5a", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/mastodon/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/mastodon/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7e0bfb7a630b5e01", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/chaindesk/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/chaindesk/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c94a6c0e6f8d60c4", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/kommo/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/kommo/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b60a118fc4d6cf40", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/wordpress/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/wordpress/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fdea3ac64702f9bd", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/flow-helper/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/flow-helper/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-30237355fb11b6fc", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/predict-leads/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/predict-leads/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-dcfafb19f8a621ba", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/phantombuster/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/phantombuster/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-37318c0a02add021", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/plausible/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/plausible/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-731940c58a42bb7c", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/open-router/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/open-router/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-56a87fba2b75f1ac", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/millionverifier/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/millionverifier/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e15402d1bb96af9c", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/placid/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/placid/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8e56a3bab900f17e", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/wedof/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/wedof/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-aefd6d62032bb391", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/digital-pilot/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/digital-pilot/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-21ea0afef41e3908", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/griptape/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/griptape/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-71e0bde8d71dfe39", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/ninox/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/ninox/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-53422ce5ec434903", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/simplyprint/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/simplyprint/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b9d4124dfcac5702", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/help-scout/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/help-scout/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-52f93b8d20516400", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/afforai/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/afforai/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1c857083a5e77dbf", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/brilliant-directories/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/brilliant-directories/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e7abf11b44e4fe64", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/quickbooks/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/quickbooks/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7e6281e87a38bcb5", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/bluesky/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/bluesky/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-39b0bff33b201563", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/heymarket-sms/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/heymarket-sms/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1ea56b28db6e204e", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/stable-diffusion-webui/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/stable-diffusion-webui/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6f310a5df832b195", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/denser-ai/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/denser-ai/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-dfcc1682618934f9", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/google-slides/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/google-slides/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-73821407bcc15448", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/softr/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/softr/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-74ce2547f907c191", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/wayfront/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/wayfront/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-06546964891546e0", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/jogg-ai/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/jogg-ai/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a6fbafedbbd36fa3", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/campaign-monitor/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/campaign-monitor/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d324c38f348e9462", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/bolna/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/bolna/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e9c69d5f4befd22c", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/podio/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/podio/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8066c35717c2a155", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/raia-ai/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/raia-ai/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3d94c344a59d9d38", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/pinecone/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/pinecone/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d4a3707471dbfefc", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/cody/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/cody/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-39bb91d9c1445cd6", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/microsoft-dynamics-crm/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/microsoft-dynamics-crm/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3decf976e980aba4", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/box/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/box/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f06bcbda9787494c", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/vercel/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/vercel/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-78d276c20af1aef3", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/snowflake/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/snowflake/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e63933a8cd4c91b3", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/chatbase/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/chatbase/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d7aabce93e4600ea", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/ibm-cognose/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/ibm-cognose/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-08fd5e8b76037e4d", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/openai/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/openai/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-43394763334540c2", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/leexi/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/leexi/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-14529f62c1b33b3e", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/discord/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/discord/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0e911f1b9b620603", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/insightly/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/insightly/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-12ac1cc6cdd5e763", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/famulor/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/famulor/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-17dd1dbab40f54e1", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/chartly/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/chartly/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c9ddba512ba80971", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/mixpanel/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/mixpanel/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f0307dbdcf8fa702", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/ninjapipe/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/ninjapipe/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2d2aa79d5cfa10ce", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/moonclerk/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/moonclerk/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b1a1214160bafaa4", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/intruder/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/intruder/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-22cb1290d8e8a2a8", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/lobstermail/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/lobstermail/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a307df5d570de683", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/sign-now/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/sign-now/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2289e21def6589fc", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/dumpling-ai/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/dumpling-ai/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-24eb1255cc6b96c7", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/mautic/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/mautic/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-00dd1645561c9013", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/vtiger/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/vtiger/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-85d23bb417a40292", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/folk/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/folk/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-05a4287ef6e33266", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/bubble/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/bubble/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-aec76c98f353de5f", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/github/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/github/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2b9c235342a00e3d", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/goodmem/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/goodmem/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-43a76b69eb48f262", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/microsoft-power-bi/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/microsoft-power-bi/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a3491d85350fcf59", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/logrocket/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/logrocket/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fa14ed0722bc4565", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/promotekit/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/promotekit/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ec03f80348cffa2c", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/streak/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/streak/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-dad3cca5d826d36d", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/airparser/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/airparser/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-bd5e97a93f2d5554", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/mistral-ai/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/mistral-ai/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2be10da2b867cc3c", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/prompthub/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/prompthub/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-736f0b9de9019e09", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/metabase/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/metabase/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8783aac332fea765", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/serpstat/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/serpstat/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a0fa6fe1e872368b", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/send-it/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/send-it/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-25bf508fcb315a48", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/qwilr/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/qwilr/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1b5e756128d7fa5f", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/mixmax/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/mixmax/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ac52bafcdb108f5c", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/front/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/front/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-feced5d23273b77d", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/toggl-track/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/toggl-track/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ab1b29a2d54b67d2", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/zendesk-sell/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/zendesk-sell/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f3045bb34b370298", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/chatnode/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/chatnode/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0a0dac66ce17a181", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/jina-ai/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/jina-ai/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-84713c5f818a3a88", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/instagram-business/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/instagram-business/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8e162db563b33133", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/mongodb/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/mongodb/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-743b89f7309c4a0e", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/airtable/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/airtable/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-883141f67581dece", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/gitea/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/gitea/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5c7f8b43291501a9", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/facebook-leads/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/facebook-leads/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-554299cda852aebf", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/robolly/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/robolly/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-569260131bef732c", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/short-io/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/short-io/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f1b224cfd8f7bd23", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/linkup/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/linkup/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-15d3dddddef6f6c4", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/mcp/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/mcp/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-007cd9c71b23c52d", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/datadog/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/datadog/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b5cdd1ae6be056e7", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/fireberry/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/fireberry/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a2c6d0db9c5c9be8", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/insta-charts/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/insta-charts/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-223558705d8e3ea6", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/posthog/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/posthog/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-daa27a09a7d40c79", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/google-tasks/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/google-tasks/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-145f8b99c96ce452", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/microsoft-todo/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/microsoft-todo/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1216fb7cbe379efe", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/teamhood/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/teamhood/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-40b6acb6261f83d2", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/runware/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/runware/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0b465db73f7ab77f", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/flowise/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/flowise/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-482729c90dec8c1d", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/cashfree-payments/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/cashfree-payments/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-07b5e0c8e9ccd0d7", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/lemlist/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/lemlist/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7a50bc38c8accb82", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/gamma/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/gamma/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-293734102dc5e5be", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/http-oauth2/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/http-oauth2/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-28cd0eec09c605c8", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/trello/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/trello/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-34fc0150a0bf79b1", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/bika/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/bika/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3a0512adb90c9201", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/omni-co/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/omni-co/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-dee366f4e8ec434e", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/moxie-crm/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/moxie-crm/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-af1a4d34b7eccf49", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/workday/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/workday/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-69579104bc977884", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/bannerbear/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/bannerbear/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-485da92a719fdc6f", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/ko-fi/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/ko-fi/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-447c67f6d1f615f2", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/amazon-textract/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/amazon-textract/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4c45b9f17d400207", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/buttondown/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/buttondown/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-acb313f3c4bcc3e7", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/amazon-ses/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/amazon-ses/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2dce1791671ff3d2", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/sendr/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/sendr/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2aff792f15d41a57", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/formspark/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/formspark/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-bea992e45279ed40", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/xero/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/xero/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-94b204aa0ef381ab", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/aianswer/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/aianswer/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-85d21164a92a422d", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/drupal/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/drupal/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5acb2f429f90096c", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/nifty/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/nifty/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9daf8674cb7c44f5", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/bokio/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/bokio/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-229e6bbac00c3092", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/amazon-sns/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/amazon-sns/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b87d59c6bb2ee146", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/uscreen/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/uscreen/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-56d965b08140c92a", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/tally/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/tally/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7c45c123e29a2212", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/gmail/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/gmail/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-24db2bfd290a046a", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/hackernews/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/hackernews/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-27093551e87504e0", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/call-rounded/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/call-rounded/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-94b1e7d023668199", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/paperform/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/paperform/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7deb19d3bd8c04f7", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/bamboohr/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/bamboohr/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ab39b9d54684c415", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/echowin/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/echowin/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4bb36ddc1a3f3eb4", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/chainalysis-api/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/chainalysis-api/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-44eef3eb35934552", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/sendfox/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/sendfox/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6dd696a1656d4aac", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/zeplin/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/zeplin/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-429711ab6dad71ab", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/pastefy/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/pastefy/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1772eb21a834eab4", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/easy-peasy-ai/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/easy-peasy-ai/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-02ed68dca829f190", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/apitemplate-io/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/apitemplate-io/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2e55631a377bb537", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/netsuite/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/netsuite/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f7f1f96bb0d0e7c3", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/heygen/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/heygen/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5853ee6481d2a0f7", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/frame/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/frame/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-38eff7d988f77571", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/reoon-verifier/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/reoon-verifier/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1d6257fe1ad46fea", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/mailer-lite/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/mailer-lite/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b36164f7d6c374c3", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/totalcms/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/totalcms/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f0f43680190167f1", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/intercom/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/intercom/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-feff34ea3461a2b0", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/writesonic-bulk/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/writesonic-bulk/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-19d0aac4c5bd1517", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/activepieces/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/activepieces/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b4fa7afc2c0d70c7", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/docsbot/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/docsbot/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6c4d9f1cc90aaaad", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/spotify/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/spotify/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-bb97149f63860ebb", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/baserow/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/baserow/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d2e9e0b28ae5d3ec", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/pushover/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/pushover/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-57227e4805569e6a", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/bitly/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/bitly/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-cdb8266ee0ec5ae6", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/frill/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/frill/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5d64f07125604efc", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/perplexity-ai/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/perplexity-ai/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-304c9142c426fb23", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/service-now/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/service-now/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5533244f4463e590", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/sperse/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/sperse/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-498586fdc3d3ae82", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/avian/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/avian/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d3cb0d9bbcb2ce7f", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/quizell/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/quizell/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-350bc30ec66fe8be", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/zoom/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/zoom/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7e673b7f2f1228f2", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/clarifai/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/clarifai/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-214fd6d92e21ac7b", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/localai/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/localai/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2d873791dea7acec", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/dub/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/dub/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4c5abf2a92a15d02", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/trust/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/trust/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0bba18f5626f35ba", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/tarvent/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/tarvent/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1625c23d0c3c6a05", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/youtrack/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/youtrack/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8a80731714dc7765", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/oracle-fusion-cloud-erp/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/oracle-fusion-cloud-erp/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fcf383c92291af30", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/sendgrid/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/sendgrid/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2f83f14f9462fdce", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/greip/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/greip/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1545e38daf24bdc3", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/seek-table/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/seek-table/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2b72e4f752c70238", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/murf-api/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/murf-api/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-46dac2adde377f4d", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/week-done/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/week-done/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a49a825574c1d853", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/lever/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/lever/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3d59c8b857a2464b", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/lusha/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/lusha/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-53b9d56b73a3e978", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/flow-parser/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/flow-parser/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-bd04fdfa1b51611b", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/bigcommerce/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/bigcommerce/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-264a1c63eff91081", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/manus/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/manus/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e764b5aff01b29e2", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/netlify/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/netlify/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5eea5df5555c7fdf", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/moveo-ai/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/moveo-ai/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3fcd7ce80354e09a", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/pipedrive/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/pipedrive/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-08d79a25a40e4645", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/chatwoot/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/chatwoot/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-80c233a560d583fa", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/vbout/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/vbout/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-194b7bc35d832faf", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/nocodb/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/nocodb/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3cbef2673db0cf82", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/lead-connector/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/lead-connector/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-409dfa40e60089b2", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/mailercheck/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/mailercheck/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f72dfd30b8694ceb", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/calendly/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/calendly/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5a178d55e8cdf07b", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/smoove/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/smoove/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-43dd850c6da4fedb", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/lucidya/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/lucidya/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-78316218ce911d11", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/vimeo/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/vimeo/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e6dd83063e0362e0", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/deepseek/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/deepseek/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2258b192676de42a", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/doctly/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/doctly/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-02c39fb1687ae3ba", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/connectuc/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/connectuc/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d2dc0bb93e85b339", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/grist/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/grist/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-064f43b38fbd5cc3", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/tidycal/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/tidycal/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-532dff188779f4ec", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/chargebee/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/chargebee/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e962f8f32ab1dcde", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/lets-calendar/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/lets-calendar/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d41061c2590aa341", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/apify/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/apify/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a46dc59eae3e2b46", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/acumbamail/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/acumbamail/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b0796ad5e5dfc1a5", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/slack/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/slack/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-585603ca768ea16a", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/skyvern/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/skyvern/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6cf8ee3d48df3f2e", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/zoho-bookings/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/zoho-bookings/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3d6a61dafb2692ef", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/resend/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/resend/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-76daf18c62879ed1", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/jira-data-center/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/jira-data-center/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fb963efc8f3f7660", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/wealthbox/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/wealthbox/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8f91400a31cca493", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/reply-io/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/reply-io/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7f84d833d511b978", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/vidlab7/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/vidlab7/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4781b9c3a545656d", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/runway/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/runway/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1e56ab1b36ea2b73", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/binance/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/binance/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-bd9ad1a63325d4c2", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/greenhouse/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/greenhouse/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f00ee623c0f63f73", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/monday/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/monday/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-652060a43f2f234b", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/rapidtext-ai/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/rapidtext-ai/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b516f20897fab563", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/pandadoc/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/pandadoc/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a8eedecdbcb244f2", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/cyberark/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/cyberark/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-93c60dac9b1dca43", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/customer-io/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/customer-io/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0a7d28c82a8153f8", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/gptzero-detect-ai/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/gptzero-detect-ai/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4e03e47ce5c095ca", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/google-gemini/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/google-gemini/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7d799d68d67a9c70", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/ai/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/ai/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e16dea26319eeb22", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/zoho-crm/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/zoho-crm/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8f6764db77766b9d", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/microsoft-excel-365/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/microsoft-excel-365/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-90d1b771e5a5cf0a", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/clearoutphone/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/clearoutphone/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fc595093dd8a3960", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/weekdone/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/weekdone/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e148d2f2123fc225", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/supadata/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/supadata/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-90679b16c6bce810", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/hunter/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/hunter/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-cd5405e8e3201ce6", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/gotify/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/gotify/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7e058fc91c867485", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/linka/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/linka/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-05e938d173239e3b", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/drip/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/drip/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-05abf93f49c26496", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/truelayer/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/truelayer/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6a9c1310a05f98be", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/paywhirl/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/paywhirl/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9423453d5f5fa084", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/pocketbase/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/pocketbase/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-73e9404c3a768785", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/twenty/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/twenty/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c37ec1b88245e75f", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/flipando/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/flipando/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-611b6d6d510bb67b", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/qawafel/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/qawafel/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6d0c188a6955885b", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/amazon-s3/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/amazon-s3/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-796612eb11a32889", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/facebook-pages/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/facebook-pages/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-881d032d1f59bf65", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/twin-labs/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/twin-labs/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b896fcccc0189c15", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/notion/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/notion/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8ce207529add7181", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/asana/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/asana/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0b3b3672ad64244c", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/synthesia/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/synthesia/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f91562772b60c453", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/aidbase/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/aidbase/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-73334de2784d7d1b", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/copper/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/copper/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-bcb0eed0549a47ea", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/google-contacts/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/google-contacts/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-376d9b5a12aabbd7", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/bland-ai/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/bland-ai/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a6fd1c8c8494a863", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/tapfiliate/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/tapfiliate/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-33fe5234fd3add81", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/cloudinary/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/cloudinary/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-22e23f694cd027be", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/thankster/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/thankster/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-85ba7d73b0018d1f", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/gladia/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/gladia/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-289959644d03017e", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/straico/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/straico/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1a2e9e733316d774", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/octopush-sms/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/octopush-sms/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c6bccb909158cf45", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/lemon-squeezy/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/lemon-squeezy/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a7c19e7e259d51ab", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/strale/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/strale/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-761c63b03b398746", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/claude/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/claude/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3a84078c2da4a736", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/clockodo/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/clockodo/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8db4e3a823fd5613", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/emailoctopus/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/emailoctopus/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f83b0c7b5e93545d", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/jungle-grid/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/jungle-grid/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-aff6a910f7dc97df", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/agentx/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/agentx/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0f94cacead51c6c7", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/gitlab/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/gitlab/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d2b271c0b0debafc", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/webflow/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/webflow/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a0c61b02db228de3", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/influencers-club/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/influencers-club/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-56995ad90ff5decc", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/tiny-talk-ai/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/tiny-talk-ai/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e356ca19901ed7f0", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/mattermost/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/mattermost/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5768c0f919610c4c", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/dashworks/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/dashworks/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-91321ac859c200ad", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/microsoft-onedrive/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/microsoft-onedrive/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4023b4ab1cc957c7", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/glide/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/glide/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3b772cf38bdd5017", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/visible/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/visible/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8b40bbd69009f369", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/pdfcrowd/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/pdfcrowd/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c9f47fc8588dca8e", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/ampeco/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/ampeco/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-35a743c9f7838b54", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/useinbox/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/useinbox/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2335124cba5ac7cd", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/uptimerobot/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/uptimerobot/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-24df02d4d96d2c3a", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/simplepdf/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/simplepdf/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-114ed9d1e8709662", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/microsoft-onenote/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/microsoft-onenote/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ad843f948a995130", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/guidelite/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/guidelite/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-43fb5c48572fa9ce", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/linkedin/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/linkedin/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e6475a4931ea2c7b", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/linear/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/linear/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-87ee3b35085950d5", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/microsoft-teams/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/microsoft-teams/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0928f4b0326a69a1", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/contiguity/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/contiguity/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ddbd40655c49b5fd", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/shopify/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/shopify/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8de7013a954dcf57", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/apitable/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/apitable/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-611efca200d2defb", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/oncehub/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/oncehub/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-554afe97841f622a", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/recall-ai/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/recall-ai/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3f4f668f7016ea09", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/google-calendar/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/google-calendar/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-375896cd0b412652", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/bettermode/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/bettermode/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5dfda908e2e880d2", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/google-vertexai/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/google-vertexai/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-61530316f4493766", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/actualbudget/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/actualbudget/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1b62cf848490212f", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/ashby/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/ashby/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f7a6ad07504067ea", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/clearout/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/clearout/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e8147f9a6f64420d", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/teable/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/teable/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-10afa39189f40326", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/mycase-piece/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/mycase-piece/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0cbf68d0193a46b2", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/anyhook-websocket/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/anyhook-websocket/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a2d4fd6d673cf383", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/pushbullet/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/pushbullet/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4808971de622c008", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/tableau/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/tableau/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2a12b1c417e40320", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/close/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/close/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6c93e36f0b314e07", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/hystruct/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/hystruct/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-31be745d659e96aa", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/proxycurl/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/proxycurl/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e7e276eb245fb7d1", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/returning-ai/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/returning-ai/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8c2715085c03db4d", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/simplybookme/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/simplybookme/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-618b7e01b2c94255", "name": "Node manifest has dependencies but no lockfile: packages/pieces/community/surveytale/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/surveytale/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-241249330a9f01f1", "name": "Node manifest has dependencies but no lockfile: packages/pieces/core/crypto/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/core/crypto/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9feef3e141f46a94", "name": "Node manifest has dependencies but no lockfile: packages/pieces/core/sftp/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/core/sftp/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7f3b85a92098b2e0", "name": "Node manifest has dependencies but no lockfile: packages/pieces/core/text-helper/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/core/text-helper/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8c625f882db2429a", "name": "Node manifest has dependencies but no lockfile: packages/pieces/core/delay/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/core/delay/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b684dad3c3107feb", "name": "Node manifest has dependencies but no lockfile: packages/pieces/core/pdf/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/core/pdf/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d3606cb3113d25be", "name": "Node manifest has dependencies but no lockfile: packages/pieces/core/manual-trigger/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/core/manual-trigger/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7e237ca68dcb7ab3", "name": "Node manifest has dependencies but no lockfile: packages/pieces/core/csv/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/core/csv/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6256bd69e0e4f3f4", "name": "Node manifest has dependencies but no lockfile: packages/pieces/core/forms/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/core/forms/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2e9589d317243860", "name": "Node manifest has dependencies but no lockfile: packages/pieces/core/qrcode/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/core/qrcode/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fd71a625f7bf7a58", "name": "Node manifest has dependencies but no lockfile: packages/pieces/core/approval/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/core/approval/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-83a5b05a1778d7e7", "name": "Node manifest has dependencies but no lockfile: packages/pieces/core/data-mapper/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/core/data-mapper/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-73ffd9ba487481c1", "name": "Node manifest has dependencies but no lockfile: packages/pieces/core/smtp/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/core/smtp/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-90f11e84f65e45fe", "name": "Node manifest has dependencies but no lockfile: packages/pieces/core/date-helper/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/core/date-helper/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f774ec509aee4756", "name": "Node manifest has dependencies but no lockfile: packages/pieces/core/subflows/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/core/subflows/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e5416587dd35c42b", "name": "Node manifest has dependencies but no lockfile: packages/pieces/core/connections/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/core/connections/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e6c84952d461d936", "name": "Node manifest has dependencies but no lockfile: packages/pieces/core/math-helper/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/core/math-helper/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-12f3790160a01279", "name": "Node manifest has dependencies but no lockfile: packages/pieces/core/tags/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/core/tags/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b90c719d45522aca", "name": "Node manifest has dependencies but no lockfile: packages/pieces/core/xml/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/core/xml/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8cf19c9d6e9fd007", "name": "Node manifest has dependencies but no lockfile: packages/pieces/core/store/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/core/store/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4a7c273dbf4161dc", "name": "Node manifest has dependencies but no lockfile: packages/pieces/core/schedule/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/core/schedule/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-100a216894d1107a", "name": "Node manifest has dependencies but no lockfile: packages/pieces/core/tables/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/core/tables/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4c0ce65341b42638", "name": "Node manifest has dependencies but no lockfile: packages/pieces/core/file-helper/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/core/file-helper/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-47ec1e7d0abb1baf", "name": "Node manifest has dependencies but no lockfile: packages/pieces/core/graphql/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/core/graphql/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9c2e84e928a2d461", "name": "Node manifest has dependencies but no lockfile: packages/pieces/core/data-summarizer/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/core/data-summarizer/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ecd73145f5ba2e61", "name": "Node manifest has dependencies but no lockfile: packages/pieces/core/webhook/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/core/webhook/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e4187f9d95597a53", "name": "Node manifest has dependencies but no lockfile: packages/pieces/core/image-helper/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/core/image-helper/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-dfecfb3416fddc68", "name": "Node manifest has dependencies but no lockfile: packages/pieces/core/http/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/core/http/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-03c82a10e3c11be7", "name": "Node manifest has dependencies but no lockfile: packages/pieces/common/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/common/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3b4666b850492620", "name": "Node manifest has dependencies but no lockfile: packages/pieces/framework/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/framework/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-cdfcd3b64a3d186a", "name": "Node manifest has dependencies but no lockfile: packages/server/worker/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/server/worker/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fd074175edb33bb4", "name": "Node manifest has dependencies but no lockfile: packages/server/api/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/server/api/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d9eed5bdc011fb80", "name": "Node manifest has dependencies but no lockfile: packages/server/utils/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/server/utils/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0636a4349c508cd7", "name": "Node manifest has dependencies but no lockfile: packages/server/engine/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/server/engine/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8c2e3196a4ef0cdd", "name": "Node manifest has dependencies but no lockfile: packages/cli/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/cli/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2699d5f16ae11282", "name": "Node manifest has dependencies but no lockfile: packages/shared/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/shared/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a28850983a0b02d5", "name": "Node manifest has dependencies but no lockfile: packages/web/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/web/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b1797387beff57ea", "name": "Node manifest has dependencies but no lockfile: packages/tests-e2e/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/tests-e2e/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-59269b813570052a", "name": "Node manifest has dependencies but no lockfile: deploy/pulumi/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: deploy/pulumi/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3ab5d313dda8e5f9", "name": "Debug logging residue appears in source files", "shortDescription": {"text": "Debug logging residue appears in source files"}, "fullDescription": {"text": "Found 347 console/debugger/print-style debug statements in non-test source. This is a common fast-generation residue before production cleanup."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-72b2a6250083a784", "name": "Placeholder or mock-heavy implementation detected", "shortDescription": {"text": "Placeholder or mock-heavy implementation detected"}, "fullDescription": {"text": "Found 3632 placeholder/mock markers across 949 source files. This often means the repo looks complete while core flows still use generated scaffolding or fake data."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2d0c7b7ab8f8aacf", "name": "Critical user flow still appears backed by mock or placeholder data", "shortDescription": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "fullDescription": {"text": "A payment/auth/admin/order/billing-style flow contains mock, fake, TODO, dummy, or placeholder markers in runtime source. In the Fable corpus this is a high-leverage completeness smell: the app can look finished while the money, identity, or tenant flow is still scaffolded."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-749d4bc1bd66df5f", "name": "Agent instructions exist but release-hardening basics are missing", "shortDescription": {"text": "Agent instructions exist but release-hardening basics are missing"}, "fullDescription": {"text": "AI-coder instruction files were found, but the repo is missing lockfile. Treat this as a contract gap: the agent is guided, but the generated output is not yet guarded by the controls that make it repeatable."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f369621a49264642", "name": "`fetch()` without try/.catch or AbortSignal \u2014 packages/ee/embed-sdk/src/index.ts:612", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/ee/embed-sdk/src/index.ts:612"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f0522bed0137287a", "name": "Commented-code block (5 lines) in packages/pieces/community/youtube/src/lib/triggers/new-video.trigger.ts:266", "shortDescription": {"text": "Commented-code block (5 lines) in packages/pieces/community/youtube/src/lib/triggers/new-video.trigger.ts:266"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-35592686dc167921", "name": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/enrichlayer/src/lib/actions/get-person-profile.t", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/enrichlayer/src/lib/actions/get-person-profile.ts:150"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-804c823f8162de9f", "name": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/enrichlayer/src/lib/actions/get-school-profile.t", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/enrichlayer/src/lib/actions/get-school-profile.ts:38"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3857daea048f0a1e", "name": "Commented-code block (7 lines) in packages/pieces/community/canny/src/index.ts:30", "shortDescription": {"text": "Commented-code block (7 lines) in packages/pieces/community/canny/src/index.ts:30"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-c6d0582f87001bed", "name": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/canny/src/lib/actions/list-posts.ts:76", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/canny/src/lib/actions/list-posts.ts:76"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ac3bba2d33a70487", "name": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/google-drive/src/lib/common/get-file-content.ts:", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/google-drive/src/lib/common/get-file-content.ts:13"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2ee94e5aa7c29023", "name": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/eth-name-service/src/lib/common/common.ts:25", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/eth-name-service/src/lib/common/common.ts:25"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-61664c348f6824bc", "name": "Commented-code block (5 lines) in packages/pieces/community/coda/src/lib/common/types.ts:46", "shortDescription": {"text": "Commented-code block (5 lines) in packages/pieces/community/coda/src/lib/common/types.ts:46"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-c84358c20d9b7678", "name": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/canva/src/lib/common/index.ts:302", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/canva/src/lib/common/index.ts:302"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ff637c68b650f63c", "name": "Legacy-named symbol `copy_v2` in packages/pieces/community/dropbox/src/lib/actions/copy-folder.ts:53", "shortDescription": {"text": "Legacy-named symbol `copy_v2` in packages/pieces/community/dropbox/src/lib/actions/copy-folder.ts:53"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6c3271a45feb2df9", "name": "Legacy-named symbol `search_v2` in packages/pieces/community/dropbox/src/lib/actions/search.ts:104", "shortDescription": {"text": "Legacy-named symbol `search_v2` in packages/pieces/community/dropbox/src/lib/actions/search.ts:104"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-22c38fc64d632ff0", "name": "Legacy-named symbol `create_folder_v2` in packages/pieces/community/dropbox/src/lib/actions/create-new-folder.ts:38", "shortDescription": {"text": "Legacy-named symbol `create_folder_v2` in packages/pieces/community/dropbox/src/lib/actions/create-new-folder.ts:38"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7eed61f3be0c9f11", "name": "Legacy-named symbol `move_v2` in packages/pieces/community/dropbox/src/lib/actions/move-folder.ts:54", "shortDescription": {"text": "Legacy-named symbol `move_v2` in packages/pieces/community/dropbox/src/lib/actions/move-folder.ts:54"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-58542582205816fd", "name": "Legacy-named symbol `move_v2` in packages/pieces/community/dropbox/src/lib/actions/move-file.ts:52", "shortDescription": {"text": "Legacy-named symbol `move_v2` in packages/pieces/community/dropbox/src/lib/actions/move-file.ts:52"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-38ead0385b9e8fea", "name": "Legacy-named symbol `copy_v2` in packages/pieces/community/dropbox/src/lib/actions/copy-file.ts:53", "shortDescription": {"text": "Legacy-named symbol `copy_v2` in packages/pieces/community/dropbox/src/lib/actions/copy-file.ts:53"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7418b2a7b049f975", "name": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/clickup/src/lib/actions/tasks/filter-workspace-t", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/clickup/src/lib/actions/tasks/filter-workspace-tasks.ts:62"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-86a9163608b0bedb", "name": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/mailchimp/src/lib/actions/remove-subscriber-from", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/mailchimp/src/lib/actions/remove-subscriber-from-tag.ts:36"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-42d97633510032f8", "name": "Commented-code block (22 lines) in packages/pieces/community/pollybot-ai/src/lib/common/common.ts:34", "shortDescription": {"text": "Commented-code block (22 lines) in packages/pieces/community/pollybot-ai/src/lib/common/common.ts:34"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-3ea57cbb39a7c667", "name": "Commented-code block (7 lines) in packages/pieces/community/hubspot/src/lib/common/props.ts:141", "shortDescription": {"text": "Commented-code block (7 lines) in packages/pieces/community/hubspot/src/lib/common/props.ts:141"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-93813a302f98074c", "name": "Legacy-named symbol `locationDeprecated` in packages/pieces/community/lofty/src/lib/actions/update-lead.ts:102", "shortDescription": {"text": "Legacy-named symbol `locationDeprecated` in packages/pieces/community/lofty/src/lib/actions/update-lead.ts:102"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-26d494630c50f9db", "name": "Legacy-named symbol `locationDeprecated` in packages/pieces/community/lofty/src/lib/actions/create-lead.ts:100", "shortDescription": {"text": "Legacy-named symbol `locationDeprecated` in packages/pieces/community/lofty/src/lib/actions/create-lead.ts:100"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7fad0fd715e3012f", "name": "Commented-code block (7 lines) in packages/pieces/community/azure-ad/src/lib/auth.ts:4", "shortDescription": {"text": "Commented-code block (7 lines) in packages/pieces/community/azure-ad/src/lib/auth.ts:4"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-bfdf89f2925e4879", "name": "Commented-code block (5 lines) in packages/pieces/community/slite/src/lib/common/client.ts:78", "shortDescription": {"text": "Commented-code block (5 lines) in packages/pieces/community/slite/src/lib/common/client.ts:78"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-1af6ab98e0be58a7", "name": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/splitwise/src/lib/common/api.ts:3", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/splitwise/src/lib/common/api.ts:3"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7206b547154cc5f7", "name": "Commented-code block (6 lines) in packages/pieces/community/coupa/src/lib/triggers/new-or-updated-object.ts:54", "shortDescription": {"text": "Commented-code block (6 lines) in packages/pieces/community/coupa/src/lib/triggers/new-or-updated-object.ts:54"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-8f8217436916bca3", "name": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/kustomer/src/lib/actions/get-custom-objects.ts:2", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/kustomer/src/lib/actions/get-custom-objects.ts:23"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3b312d8870654471", "name": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/aminos/src/lib/actions/createUser.ts:44", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/aminos/src/lib/actions/createUser.ts:44"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-aad91cfee5fd7db3", "name": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/imap/src/lib/common/imap.ts:134", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/imap/src/lib/common/imap.ts:134"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ff9ef5fd2b6edbe5", "name": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/sap-ariba/src/lib/actions/get-contract-workspace", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/sap-ariba/src/lib/actions/get-contract-workspace.ts:36"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-25aa7b9300897374", "name": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/sap-ariba/src/lib/actions/search-contract-worksp", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/sap-ariba/src/lib/actions/search-contract-workspaces.ts:59"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-12dae5c809d5a81c", "name": "Commented-code block (5 lines) in packages/pieces/community/add-event/src/lib/common/client.ts:80", "shortDescription": {"text": "Commented-code block (5 lines) in packages/pieces/community/add-event/src/lib/common/client.ts:80"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-fd882ec18f8a7ebc", "name": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/confluence/src/lib/actions/list-comments.ts:64", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/confluence/src/lib/actions/list-comments.ts:64"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e54411490b27214c", "name": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/anyhook-graphql/src/lib/common/common.ts:21", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/anyhook-graphql/src/lib/common/common.ts:21"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ce7fd7dafb7d95ca", "name": "Commented-code block (12 lines) in packages/pieces/community/microsoft-copilot/src/lib/actions/chat-with-copilot.ts:31", "shortDescription": {"text": "Commented-code block (12 lines) in packages/pieces/community/microsoft-copilot/src/lib/actions/chat-with-copilot.ts:31"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-4b71c86e7841ab71", "name": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/mindee/src/lib/actions/predict-document.ts:82", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/mindee/src/lib/actions/predict-document.ts:82"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d6da72d1f461e8f0", "name": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/invoiceninja/src/lib/actions/create-invoice.ts:1", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/invoiceninja/src/lib/actions/create-invoice.ts:193"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c96a8a764c23746c", "name": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/invoiceninja/src/lib/actions/action-recurring.ts", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/invoiceninja/src/lib/actions/action-recurring.ts:72"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ccb0913aceda1126", "name": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/invoiceninja/src/lib/actions/create-recurring.ts", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/invoiceninja/src/lib/actions/create-recurring.ts:264"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-24cb4975e98ab6b5", "name": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/supabase/src/lib/common/props.ts:25", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/supabase/src/lib/common/props.ts:25"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b24aaa8f58dae86e", "name": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/supabase/src/lib/actions/update-row.ts:65", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/supabase/src/lib/actions/update-row.ts:65"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a6c5478bac66a010", "name": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/supabase/src/lib/actions/get-table-schema.ts:39", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/supabase/src/lib/actions/get-table-schema.ts:39"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7ab437f51e362cba", "name": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/supabase/src/lib/actions/list-tables.ts:28", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/supabase/src/lib/actions/list-tables.ts:28"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-18fc54dcdf7e8d9b", "name": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/supabase/src/lib/actions/delete-rows.ts:73", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/supabase/src/lib/actions/delete-rows.ts:73"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-bd248afe59a9696a", "name": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/supabase/src/lib/actions/upsert-row.ts:64", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/supabase/src/lib/actions/upsert-row.ts:64"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0098a39592c37fa9", "name": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/reddit/src/lib/actions/retrieve-reddit-post.ts:3", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/reddit/src/lib/actions/retrieve-reddit-post.ts:39"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-829f8ce11f2709f1", "name": "Commented-code block (14 lines) in packages/pieces/community/convertkit/src/lib/common/tags/index.ts:226", "shortDescription": {"text": "Commented-code block (14 lines) in packages/pieces/community/convertkit/src/lib/common/tags/index.ts:226"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-a0c5ff0ec173522a", "name": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/convertkit/src/lib/actions/purchases.ts:320", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/convertkit/src/lib/actions/purchases.ts:320"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4898b5c4a7864df6", "name": "Commented-code block (5 lines) in packages/pieces/community/simplyprint/src/lib/trigger/samples.ts:1", "shortDescription": {"text": "Commented-code block (5 lines) in packages/pieces/community/simplyprint/src/lib/trigger/samples.ts:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-e06010661bb26170", "name": "Commented-code block (5 lines) in packages/pieces/community/simplyprint/src/lib/trigger/factory.ts:25", "shortDescription": {"text": "Commented-code block (5 lines) in packages/pieces/community/simplyprint/src/lib/trigger/factory.ts:25"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-7716bf1f5cb5ebbb", "name": "Commented-code block (6 lines) in packages/pieces/community/simplyprint/src/lib/common/chunked-upload.ts:5", "shortDescription": {"text": "Commented-code block (6 lines) in packages/pieces/community/simplyprint/src/lib/common/chunked-upload.ts:5"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-319f4303e9cf71b8", "name": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/simplyprint/src/lib/common/chunked-upload.ts:117", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/simplyprint/src/lib/common/chunked-upload.ts:117"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f61c36727abd7cbb", "name": "Commented-code block (6 lines) in packages/pieces/community/simplyprint/src/lib/common/files.ts:12", "shortDescription": {"text": "Commented-code block (6 lines) in packages/pieces/community/simplyprint/src/lib/common/files.ts:12"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-ff64fc05b0508d7c", "name": "Commented-code block (5 lines) in packages/pieces/community/simplyprint/src/lib/common/props.ts:21", "shortDescription": {"text": "Commented-code block (5 lines) in packages/pieces/community/simplyprint/src/lib/common/props.ts:21"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-9e51637f1c68945d", "name": "Commented-code block (8 lines) in packages/pieces/community/simplyprint/src/lib/actions/assign-tag.ts:71", "shortDescription": {"text": "Commented-code block (8 lines) in packages/pieces/community/simplyprint/src/lib/actions/assign-tag.ts:71"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-70d1c5de56ba8f66", "name": "Commented-code block (5 lines) in packages/pieces/community/simplyprint/src/lib/actions/deny-queue-item.ts:36", "shortDescription": {"text": "Commented-code block (5 lines) in packages/pieces/community/simplyprint/src/lib/actions/deny-queue-item.ts:36"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-794ed0b32246bdfb", "name": "Commented-code block (5 lines) in packages/pieces/community/simplyprint/src/lib/actions/assign-filament.ts:56", "shortDescription": {"text": "Commented-code block (5 lines) in packages/pieces/community/simplyprint/src/lib/actions/assign-filament.ts:56"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-ae93fcc354ea1911", "name": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/simplyprint/src/lib/actions/download-file.ts:11", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/simplyprint/src/lib/actions/download-file.ts:11"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-02e485a96255edf6", "name": "Commented-code block (5 lines) in packages/pieces/community/simplyprint/src/lib/actions/list-printers.ts:33", "shortDescription": {"text": "Commented-code block (5 lines) in packages/pieces/community/simplyprint/src/lib/actions/list-printers.ts:33"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2433b76ef8262486", "name": "Commented-code block (5 lines) in packages/pieces/community/simplyprint/src/lib/actions/get-statistics.ts:20", "shortDescription": {"text": "Commented-code block (5 lines) in packages/pieces/community/simplyprint/src/lib/actions/get-statistics.ts:20"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-7decec18014cc2f2", "name": "Commented-code block (5 lines) in packages/pieces/community/simplyprint/src/lib/actions/get-filament.ts:28", "shortDescription": {"text": "Commented-code block (5 lines) in packages/pieces/community/simplyprint/src/lib/actions/get-filament.ts:28"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-8a566b0658e89f15", "name": "Commented-code block (5 lines) in packages/pieces/community/simplyprint/src/lib/actions/list-queue.ts:42", "shortDescription": {"text": "Commented-code block (5 lines) in packages/pieces/community/simplyprint/src/lib/actions/list-queue.ts:42"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-9431a517b9115b5b", "name": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/bluesky/src/lib/actions/create-post.ts:125", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/bluesky/src/lib/actions/create-post.ts:125"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b7021d9deceb1e18", "name": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/pinecone/src/lib/actions/get-vector.ts:30", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/pinecone/src/lib/actions/get-vector.ts:30"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7918a747c6539e4e", "name": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/discord/src/lib/triggers/new-member.ts:65", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/discord/src/lib/triggers/new-member.ts:65"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ece0e005b8043da3", "name": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/chartly/src/lib/actions/get-chart.ts:38", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/chartly/src/lib/actions/get-chart.ts:38"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-de022b51ad848082", "name": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/chartly/src/lib/actions/create-chart.ts:153", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/chartly/src/lib/actions/create-chart.ts:153"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2da4de7ee5ef4f6e", "name": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/goodmem/src/lib/actions/get-memory.ts:16", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/goodmem/src/lib/actions/get-memory.ts:16"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9ad9a76df8429c9a", "name": "Commented-code block (5 lines) in packages/pieces/community/front/src/lib/actions/find-account.ts:63", "shortDescription": {"text": "Commented-code block (5 lines) in packages/pieces/community/front/src/lib/actions/find-account.ts:63"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-d7011fa04c3413b8", "name": "Legacy-named symbol `dealEntersStage_previous_stages_v2` in packages/pieces/community/zendesk-sell/src/lib/triggers/deal", "shortDescription": {"text": "Legacy-named symbol `dealEntersStage_previous_stages_v2` in packages/pieces/community/zendesk-sell/src/lib/triggers/deal_enters_stage.ts:12"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1be7c710ca687220", "name": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/flowise/src/index.ts:71", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/flowise/src/index.ts:71"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c71e1e0cbcf0115a", "name": "Legacy-named symbol `send_copy` in packages/pieces/community/xero/src/lib/actions/create-repeating-sales-invoice.ts:99", "shortDescription": {"text": "Legacy-named symbol `send_copy` in packages/pieces/community/xero/src/lib/actions/create-repeating-sales-invoice.ts:99"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e4898d41d2e412bc", "name": "Commented-code block (5 lines) in packages/pieces/community/apitemplate-io/src/lib/common/client.ts:86", "shortDescription": {"text": "Commented-code block (5 lines) in packages/pieces/community/apitemplate-io/src/lib/common/client.ts:86"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-34e1c072d0715b93", "name": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/youtrack/src/lib/actions/download-attachment.ts:", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/youtrack/src/lib/actions/download-attachment.ts:34"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2177d715e032bbfb", "name": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/lusha/src/lib/actions/companies/enrich.ts:32", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/lusha/src/lib/actions/companies/enrich.ts:32"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-07b7021526a80125", "name": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/lusha/src/lib/actions/companies/search.ts:69", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/lusha/src/lib/actions/companies/search.ts:69"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a5fadd0036dd8b47", "name": "Legacy-named symbol `is_deprecated` in packages/pieces/community/vimeo/src/lib/triggers/new-video-by-search.ts:161", "shortDescription": {"text": "Legacy-named symbol `is_deprecated` in packages/pieces/community/vimeo/src/lib/triggers/new-video-by-search.ts:161"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f91c98f8c7d4d929", "name": "Legacy-named symbol `amount_unused` in packages/pieces/community/chargebee/src/lib/triggers/payment-succeeded.ts:35", "shortDescription": {"text": "Legacy-named symbol `amount_unused` in packages/pieces/community/chargebee/src/lib/triggers/payment-succeeded.ts:35"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2f0b214cb9672f79", "name": "Legacy-named symbol `amount_unused` in packages/pieces/community/chargebee/src/lib/triggers/payment-failed.ts:36", "shortDescription": {"text": "Legacy-named symbol `amount_unused` in packages/pieces/community/chargebee/src/lib/triggers/payment-failed.ts:36"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fb6b6b9e2a292392", "name": "Commented-code block (6 lines) in packages/pieces/community/zoho-bookings/src/lib/common/index.ts:148", "shortDescription": {"text": "Commented-code block (6 lines) in packages/pieces/community/zoho-bookings/src/lib/common/index.ts:148"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-84d694ef2d8a73f0", "name": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/ai/src/lib/common/ai-sdk.ts:138", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/ai/src/lib/common/ai-sdk.ts:138"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9a34db646578fbb2", "name": "Commented-code block (12 lines) in packages/pieces/community/microsoft-excel-365/src/lib/actions/append-multiple-rows.ts", "shortDescription": {"text": "Commented-code block (12 lines) in packages/pieces/community/microsoft-excel-365/src/lib/actions/append-multiple-rows.ts:54"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-92399e034abd72f8", "name": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/facebook-pages/src/lib/actions/create-video-post", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/facebook-pages/src/lib/actions/create-video-post.ts:11"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e6749c9fa50903f2", "name": "Commented-code block (7 lines) in packages/pieces/community/webflow/src/lib/actions/refund-order.ts:17", "shortDescription": {"text": "Commented-code block (7 lines) in packages/pieces/community/webflow/src/lib/actions/refund-order.ts:17"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-25e0adb060bfc21a", "name": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/tiny-talk-ai/src/lib/actions/ask-bot.ts:25", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/tiny-talk-ai/src/lib/actions/ask-bot.ts:25"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-23c5507a45dd42fb", "name": "Legacy-named symbol `no_copy` in packages/pieces/community/pdfcrowd/src/lib/actions/url-to-pdf.ts:460", "shortDescription": {"text": "Legacy-named symbol `no_copy` in packages/pieces/community/pdfcrowd/src/lib/actions/url-to-pdf.ts:460"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9e36c365d7a2ff49", "name": "Legacy-named symbol `no_copy` in packages/pieces/community/pdfcrowd/src/lib/actions/html-to-pdf.ts:460", "shortDescription": {"text": "Legacy-named symbol `no_copy` in packages/pieces/community/pdfcrowd/src/lib/actions/html-to-pdf.ts:460"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e08c41deb5130352", "name": "Legacy-named symbol `nDeprecated` in packages/pieces/community/ampeco/src/lib/actions/resources/charge-points/charge-poi", "shortDescription": {"text": "Legacy-named symbol `nDeprecated` in packages/pieces/community/ampeco/src/lib/actions/resources/charge-points/charge-point-create.ts:119"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-68d050db702fc8da", "name": "Legacy-named symbol `nDeprecated` in packages/pieces/community/ampeco/src/lib/actions/resources/charge-points/charge-poi", "shortDescription": {"text": "Legacy-named symbol `nDeprecated` in packages/pieces/community/ampeco/src/lib/actions/resources/charge-points/charge-point-update.ts:130"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-838852fc26c2608d", "name": "Commented-code block (34 lines) in packages/pieces/community/useinbox/src/lib/common/props.ts:364", "shortDescription": {"text": "Commented-code block (34 lines) in packages/pieces/community/useinbox/src/lib/common/props.ts:364"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-07217c2aebafd8e6", "name": "Commented-code block (6 lines) in packages/pieces/community/useinbox/src/lib/actions/update-contact.ts:56", "shortDescription": {"text": "Commented-code block (6 lines) in packages/pieces/community/useinbox/src/lib/actions/update-contact.ts:56"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-145eb6f83555e1c9", "name": "Commented-code block (8 lines) in packages/pieces/community/useinbox/src/lib/actions/add-contact-to-list.ts:50", "shortDescription": {"text": "Commented-code block (8 lines) in packages/pieces/community/useinbox/src/lib/actions/add-contact-to-list.ts:50"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2126ebc81be16fcc", "name": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/linkedin/src/lib/common/index.ts:121", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/linkedin/src/lib/common/index.ts:121"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d8d6c4aa9b8193f7", "name": "Commented-code block (6 lines) in packages/pieces/community/linear/src/lib/common/props.ts:444", "shortDescription": {"text": "Commented-code block (6 lines) in packages/pieces/community/linear/src/lib/common/props.ts:444"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-03660cb339fd3dde", "name": "Commented-code block (41 lines) in packages/pieces/community/recall-ai/src/lib/actions/create-bot.ts:26", "shortDescription": {"text": "Commented-code block (41 lines) in packages/pieces/community/recall-ai/src/lib/actions/create-bot.ts:26"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-ad161db1ab594e61", "name": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/anyhook-websocket/src/lib/common/common.ts:21", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/anyhook-websocket/src/lib/common/common.ts:21"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d676b7a44e3b7006", "name": "Commented-code block (8 lines) in packages/pieces/framework/src/lib/context/versioning.ts:9", "shortDescription": {"text": "Commented-code block (8 lines) in packages/pieces/framework/src/lib/context/versioning.ts:9"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-9aa1c4706a71ee58", "name": "`fetch()` without try/.catch or AbortSignal \u2014 packages/server/worker/test/lib/worker.test.ts:507", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/server/worker/test/lib/worker.test.ts:507"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-99b34953bc3958d6", "name": "Commented-code block (5 lines) in packages/server/worker/test/lib/execute/create-sandbox-for-job.test.ts:233", "shortDescription": {"text": "Commented-code block (5 lines) in packages/server/worker/test/lib/execute/create-sandbox-for-job.test.ts:233"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-f9ecb6aae7dbada2", "name": "Commented-code block (7 lines) in packages/server/worker/test/e2e/sandbox-real-third-party.e2e.test.ts:129", "shortDescription": {"text": "Commented-code block (7 lines) in packages/server/worker/test/e2e/sandbox-real-third-party.e2e.test.ts:129"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-d791b7f549823d44", "name": "Commented-code block (6 lines) in packages/server/worker/test/e2e/fixtures/egress-probe.js:2", "shortDescription": {"text": "Commented-code block (6 lines) in packages/server/worker/test/e2e/fixtures/egress-probe.js:2"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-8bfcaf16d67a8dbe", "name": "`fetch()` without try/.catch or AbortSignal \u2014 packages/server/api/src/app/ee/license-keys/license-keys-service.ts:21", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/server/api/src/app/ee/license-keys/license-keys-service.ts:21"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c384d1ccef09fa70", "name": "`fetch()` without try/.catch or AbortSignal \u2014 packages/server/api/src/app/ee/authentication/federated-authn/google-authn", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/server/api/src/app/ee/authentication/federated-authn/google-authn-provider.ts:57"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8c2619594a306c30", "name": "`fetch()` without try/.catch or AbortSignal \u2014 packages/server/api/src/app/ee/platform/platform-plan/openrouter/openroute", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/server/api/src/app/ee/platform/platform-plan/openrouter/openrouter-api.ts:10"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-621447c307b56a12", "name": "Commented-code block (5 lines) in packages/server/api/src/app/flows/flow-version/migrations/expression-rewriter.ts:33", "shortDescription": {"text": "Commented-code block (5 lines) in packages/server/api/src/app/flows/flow-version/migrations/expression-rewriter.ts:33"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b2042395257d852d", "name": "`fetch()` without try/.catch or AbortSignal \u2014 packages/server/api/src/app/pieces/piece-sync-service.ts:82", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/server/api/src/app/pieces/piece-sync-service.ts:82"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-82fb1134a07d26df", "name": "Legacy-named symbol `ai_provider_backup` in packages/server/api/src/app/database/migration/sqlite/1748824241409-AIProvid", "shortDescription": {"text": "Legacy-named symbol `ai_provider_backup` in packages/server/api/src/app/database/migration/sqlite/1748824241409-AIProviderRefactorSqlite.ts:24"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4790fb5d9f0b6d79", "name": "`fetch()` without try/.catch or AbortSignal \u2014 packages/server/api/src/app/template/community-templates.service.ts:15", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/server/api/src/app/template/community-templates.service.ts:15"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ebe34bff2c8eb526", "name": "`fetch()` without try/.catch or AbortSignal \u2014 packages/server/api/src/app/template/template-telemetry/template-telemetry", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/server/api/src/app/template/template-telemetry/template-telemetry.service.ts:32"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-fda7c649b432e8ee", "name": "Commented-code block (7 lines) in packages/server/api/test/unit/app/flows/migrations/expression-rewriter.test.ts:322", "shortDescription": {"text": "Commented-code block (7 lines) in packages/server/api/test/unit/app/flows/migrations/expression-rewriter.test.ts:322"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-6710f02a648551bc", "name": "Commented-code block (5 lines) in packages/server/api/test/integration/ce/flows/flow/error-handler.test.ts:19", "shortDescription": {"text": "Commented-code block (5 lines) in packages/server/api/test/integration/ce/flows/flow/error-handler.test.ts:19"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-e6b25400d6befcdc", "name": "Commented-code block (7 lines) in packages/server/engine/src/lib/engine-file-api.ts:87", "shortDescription": {"text": "Commented-code block (7 lines) in packages/server/engine/src/lib/engine-file-api.ts:87"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-a297030e404b020a", "name": "Commented-code block (5 lines) in packages/server/engine/src/lib/worker-socket.ts:55", "shortDescription": {"text": "Commented-code block (5 lines) in packages/server/engine/src/lib/worker-socket.ts:55"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-d13203c2ca76a733", "name": "`fetch()` without try/.catch or AbortSignal \u2014 packages/server/engine/src/lib/handler/context/engine-constants.ts:230", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/server/engine/src/lib/handler/context/engine-constants.ts:230"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-603cdcfc3863d8dc", "name": "Commented-code block (6 lines) in packages/server/engine/src/lib/network/ssrf-guard.ts:20", "shortDescription": {"text": "Commented-code block (6 lines) in packages/server/engine/src/lib/network/ssrf-guard.ts:20"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-3f164222936593c0", "name": "`fetch()` without try/.catch or AbortSignal \u2014 packages/server/engine/src/lib/piece-context/store.ts:42", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/server/engine/src/lib/piece-context/store.ts:42"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-bbd9929431944a70", "name": "`fetch()` without try/.catch or AbortSignal \u2014 packages/server/engine/src/lib/piece-context/flows.ts:12", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/server/engine/src/lib/piece-context/flows.ts:12"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-330b14f915c5205a", "name": "`fetch()` without try/.catch or AbortSignal \u2014 packages/server/engine/src/lib/piece-context/variable-resolver.ts:10", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/server/engine/src/lib/piece-context/variable-resolver.ts:10"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b2d2f9dd084047c8", "name": "`fetch()` without try/.catch or AbortSignal \u2014 packages/server/engine/src/lib/piece-context/waitpoint-client.ts:5", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/server/engine/src/lib/piece-context/waitpoint-client.ts:5"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5b90c3f771a19c6a", "name": "`fetch()` without try/.catch or AbortSignal \u2014 packages/server/engine/src/lib/piece-context/connection-resolver.ts:11", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/server/engine/src/lib/piece-context/connection-resolver.ts:11"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5e8e71ccb67b7803", "name": "`fetch()` without try/.catch or AbortSignal \u2014 packages/server/engine/src/lib/variables/processors/file.ts:40", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/server/engine/src/lib/variables/processors/file.ts:40"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7b3da2def94b0790", "name": "Commented-code block (5 lines) in packages/server/engine/src/lib/tools/index.ts:410", "shortDescription": {"text": "Commented-code block (5 lines) in packages/server/engine/src/lib/tools/index.ts:410"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-185f2d623c50cd0d", "name": "Commented-code block (5 lines) in packages/server/engine/src/lib/operations/flow.operation.ts:223", "shortDescription": {"text": "Commented-code block (5 lines) in packages/server/engine/src/lib/operations/flow.operation.ts:223"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-79e560ae760df829", "name": "Commented-code block (6 lines) in packages/server/engine/test/network/worker-socket.test.ts:40", "shortDescription": {"text": "Commented-code block (6 lines) in packages/server/engine/test/network/worker-socket.test.ts:40"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-38aabfdfca9cb164", "name": "Commented-code block (5 lines) in packages/server/engine/test/operations/flow-operation-invariants.test.ts:244", "shortDescription": {"text": "Commented-code block (5 lines) in packages/server/engine/test/operations/flow-operation-invariants.test.ts:244"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-a19b341c07d2903b", "name": "Legacy-named symbol `ap_sep_v1` in packages/shared/src/lib/ee/secret-managers/index.ts:237", "shortDescription": {"text": "Legacy-named symbol `ap_sep_v1` in packages/shared/src/lib/ee/secret-managers/index.ts:237"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b16eaa1a5fe7ad41", "name": "Commented-code block (5 lines) in packages/shared/src/lib/automation/flows/operations/add-action-util.ts:32", "shortDescription": {"text": "Commented-code block (5 lines) in packages/shared/src/lib/automation/flows/operations/add-action-util.ts:32"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-effeb51f497799ff", "name": "Commented-code block (6 lines) in packages/shared/src/lib/formula/formula-evaluator.ts:7", "shortDescription": {"text": "Commented-code block (6 lines) in packages/shared/src/lib/formula/formula-evaluator.ts:7"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2c593cb756c3b729", "name": "Commented-code block (5 lines) in packages/shared/src/lib/formula/function-implementations.ts:12", "shortDescription": {"text": "Commented-code block (5 lines) in packages/shared/src/lib/formula/function-implementations.ts:12"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-f8d40e97de4fa0df", "name": "Commented-code block (6 lines) in packages/shared/src/lib/core/common/utils/mustache-utils.ts:1", "shortDescription": {"text": "Commented-code block (6 lines) in packages/shared/src/lib/core/common/utils/mustache-utils.ts:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-bd4cdbdade747597", "name": "Commented-code block (5 lines) in packages/web/src/app/builder/data-selector/utils-schema.ts:58", "shortDescription": {"text": "Commented-code block (5 lines) in packages/web/src/app/builder/data-selector/utils-schema.ts:58"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-c3316ee93b87679b", "name": "Commented-code block (5 lines) in packages/web/src/app/builder/data-selector/utils.ts:257", "shortDescription": {"text": "Commented-code block (5 lines) in packages/web/src/app/builder/data-selector/utils.ts:257"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-174fd2c1c4740bfe", "name": "Commented-code block (6 lines) in packages/web/src/app/builder/piece-properties/text-input-with-mentions/text-input-util", "shortDescription": {"text": "Commented-code block (6 lines) in packages/web/src/app/builder/piece-properties/text-input-with-mentions/text-input-utils.ts:167"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-bdc33847440c2641", "name": "`fetch()` without try/.catch or AbortSignal \u2014 packages/web/src/app/builder/flow-canvas/utils/flow-screenshot-utils.ts:27", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/web/src/app/builder/flow-canvas/utils/flow-screenshot-utils.ts:275"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a00af740a16776fd", "name": "Commented-code block (6 lines) in packages/web/src/components/custom/smart-output-viewer/output-field-row.tsx:214", "shortDescription": {"text": "Commented-code block (6 lines) in packages/web/src/components/custom/smart-output-viewer/output-field-row.tsx:214"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-7ca72b6c322b2ec6", "name": "Commented-code block (5 lines) in packages/web/src/components/custom/smart-output-viewer/output-table-view.tsx:160", "shortDescription": {"text": "Commented-code block (5 lines) in packages/web/src/components/custom/smart-output-viewer/output-table-view.tsx:160"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-e114162c1c8c0a58", "name": "Legacy-named symbol `projOld` in packages/web/src/features/projects/stores/projects-collection.test.ts:393", "shortDescription": {"text": "Legacy-named symbol `projOld` in packages/web/src/features/projects/stores/projects-collection.test.ts:393"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c7113f7887e15795", "name": "`fetch()` without try/.catch or AbortSignal \u2014 tools/scripts/utils/piece-script-utils.ts:75", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 tools/scripts/utils/piece-script-utils.ts:75"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f9e08b985a7f720a", "name": "`fetch()` without try/.catch or AbortSignal \u2014 tools/scripts/pieces/update-pieces-metadata.ts:21", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 tools/scripts/pieces/update-pieces-metadata.ts:21"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-98cfc3fff68ee3c1", "name": "`fetch()` without try/.catch or AbortSignal \u2014 tools/scripts/pieces/find-changed-pieces.ts:48", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 tools/scripts/pieces/find-changed-pieces.ts:48"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4d223bfdf539b12d", "name": "42 env vars used in code but missing from .env.example", "shortDescription": {"text": "42 env vars used in code but missing from .env.example"}, "fullDescription": {"text": "Drift between code and config docs. The first few: `AP_API_URL`, `AP_BASE_CODE_DIRECTORY`, `AP_CODE_SANDBOX_TYPE`, `AP_CONTAINER_TYPE`, `AP_CUSTOM_PIECES_PATHS`, `AP_DEV_PIECES`, `AP_EDITION`, `AP_FILE_STORAGE_LOCATION` + 34 more. Add them (with a placeholder/comment) to .env.example so onboarding doesn't break."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b8e8ed17581976d8", "name": "Dangling fetch: POST https://pastebin.com/api/ (packages/pieces/community/pastebin/src/lib/common/client.ts:54)", "shortDescription": {"text": "Dangling fetch: POST https://pastebin.com/api/ (packages/pieces/community/pastebin/src/lib/common/client.ts:54)"}, "fullDescription": {"text": "`packages/pieces/community/pastebin/src/lib/common/client.ts:54` calls `POST https://pastebin.com/api/` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: axios\nNormalized path used for matching: `/https:/pastebin.com/api`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-39a33761c8928ebb", "name": "Dangling fetch: GET https://pastebin.com/raw/ (packages/pieces/community/pastebin/src/lib/common/client.ts:80)", "shortDescription": {"text": "Dangling fetch: GET https://pastebin.com/raw/ (packages/pieces/community/pastebin/src/lib/common/client.ts:80)"}, "fullDescription": {"text": "`packages/pieces/community/pastebin/src/lib/common/client.ts:80` calls `GET https://pastebin.com/raw/` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: axios\nNormalized path used for matching: `/https:/pastebin.com/raw`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-8272682284ce427a", "name": "Dangling fetch: GET https://www.googleapis.com/drive/v3/files/${fileId}?fields=mimeType&supportsAllDrives=true (packages", "shortDescription": {"text": "Dangling fetch: GET https://www.googleapis.com/drive/v3/files/${fileId}?fields=mimeType&supportsAllDrives=true (packages/pieces/community/google-drive/src/lib/common/get-file-content.ts:13)"}, "fullDescription": {"text": "`packages/pieces/community/google-drive/src/lib/common/get-file-content.ts:13` calls `GET https://www.googleapis.com/drive/v3/files/${fileId}?fields=mimeType&supportsAllDrives=true` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/https:/www.googleapis.com/drive/v3/files/<p>`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-8864d154b8b98dd6", "name": "Dangling fetch: GET https://secure.splitwise.com/api/v3.0/get_current_user (packages/pieces/community/splitwise/src/lib/", "shortDescription": {"text": "Dangling fetch: GET https://secure.splitwise.com/api/v3.0/get_current_user (packages/pieces/community/splitwise/src/lib/auth.ts:14)"}, "fullDescription": {"text": "`packages/pieces/community/splitwise/src/lib/auth.ts:14` calls `GET https://secure.splitwise.com/api/v3.0/get_current_user` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/https:/secure.splitwise.com/api/v3.0/get_current_user`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-ca98109c6985d590", "name": "Dangling fetch: GET https://secure.splitwise.com/api/v3.0/get_categories (packages/pieces/community/splitwise/src/lib/co", "shortDescription": {"text": "Dangling fetch: GET https://secure.splitwise.com/api/v3.0/get_categories (packages/pieces/community/splitwise/src/lib/common/api.ts:3)"}, "fullDescription": {"text": "`packages/pieces/community/splitwise/src/lib/common/api.ts:3` calls `GET https://secure.splitwise.com/api/v3.0/get_categories` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/https:/secure.splitwise.com/api/v3.0/get_categories`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-597b91e45dbdc806", "name": "Dangling fetch: GET https://secure.splitwise.com/api/v3.0/get_groups (packages/pieces/community/splitwise/src/lib/common", "shortDescription": {"text": "Dangling fetch: GET https://secure.splitwise.com/api/v3.0/get_groups (packages/pieces/community/splitwise/src/lib/common/api.ts:20)"}, "fullDescription": {"text": "`packages/pieces/community/splitwise/src/lib/common/api.ts:20` calls `GET https://secure.splitwise.com/api/v3.0/get_groups` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/https:/secure.splitwise.com/api/v3.0/get_groups`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-f16125783b660875", "name": "Dangling fetch: GET https://secure.splitwise.com/api/v3.0/get_expenses?${params} (packages/pieces/community/splitwise/sr", "shortDescription": {"text": "Dangling fetch: GET https://secure.splitwise.com/api/v3.0/get_expenses?${params} (packages/pieces/community/splitwise/src/lib/common/api.ts:42)"}, "fullDescription": {"text": "`packages/pieces/community/splitwise/src/lib/common/api.ts:42` calls `GET https://secure.splitwise.com/api/v3.0/get_expenses?${params}` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/https:/secure.splitwise.com/api/v3.0/get_expenses`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-396de02db07c4ee6", "name": "Dangling fetch: POST https://secure.splitwise.com/api/v3.0/create_expense (packages/pieces/community/splitwise/src/lib/c", "shortDescription": {"text": "Dangling fetch: POST https://secure.splitwise.com/api/v3.0/create_expense (packages/pieces/community/splitwise/src/lib/common/api.ts:59)"}, "fullDescription": {"text": "`packages/pieces/community/splitwise/src/lib/common/api.ts:59` calls `POST https://secure.splitwise.com/api/v3.0/create_expense` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/https:/secure.splitwise.com/api/v3.0/create_expense`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-23ec4ed9588b98cf", "name": "Dangling fetch: GET https://api.chartly.dev/v1/status (packages/pieces/community/chartly/src/lib/common/auth.ts:13)", "shortDescription": {"text": "Dangling fetch: GET https://api.chartly.dev/v1/status (packages/pieces/community/chartly/src/lib/common/auth.ts:13)"}, "fullDescription": {"text": "`packages/pieces/community/chartly/src/lib/common/auth.ts:13` calls `GET https://api.chartly.dev/v1/status` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/https:/api.chartly.dev/v1/status`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-48377a4ecc1fd29e", "name": "Dangling fetch: GET https://api.chartly.dev/v1/chart/${chart_id.trim()} (packages/pieces/community/chartly/src/lib/actio", "shortDescription": {"text": "Dangling fetch: GET https://api.chartly.dev/v1/chart/${chart_id.trim()} (packages/pieces/community/chartly/src/lib/actions/get-chart.ts:38)"}, "fullDescription": {"text": "`packages/pieces/community/chartly/src/lib/actions/get-chart.ts:38` calls `GET https://api.chartly.dev/v1/chart/${chart_id.trim()}` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/https:/api.chartly.dev/v1/chart/<p>`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-291a474e8f6d894d", "name": "Dangling fetch: POST https://api.chartly.dev/v1/chart (packages/pieces/community/chartly/src/lib/actions/create-chart.ts", "shortDescription": {"text": "Dangling fetch: POST https://api.chartly.dev/v1/chart (packages/pieces/community/chartly/src/lib/actions/create-chart.ts:153)"}, "fullDescription": {"text": "`packages/pieces/community/chartly/src/lib/actions/create-chart.ts:153` calls `POST https://api.chartly.dev/v1/chart` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/https:/api.chartly.dev/v1/chart`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-be91fa44773dbcff", "name": "Dangling fetch: GET https://api.instacharts.io/v1/templates (packages/pieces/community/insta-charts/src/lib/actions/gene", "shortDescription": {"text": "Dangling fetch: GET https://api.instacharts.io/v1/templates (packages/pieces/community/insta-charts/src/lib/actions/generate-chart-image.ts:32)"}, "fullDescription": {"text": "`packages/pieces/community/insta-charts/src/lib/actions/generate-chart-image.ts:32` calls `GET https://api.instacharts.io/v1/templates` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/https:/api.instacharts.io/v1/templates`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-f060be082da00bba", "name": "Dangling fetch: POST https://api.instacharts.io/v1/generate/image (packages/pieces/community/insta-charts/src/lib/action", "shortDescription": {"text": "Dangling fetch: POST https://api.instacharts.io/v1/generate/image (packages/pieces/community/insta-charts/src/lib/actions/generate-chart-image.ts:159)"}, "fullDescription": {"text": "`packages/pieces/community/insta-charts/src/lib/actions/generate-chart-image.ts:159` calls `POST https://api.instacharts.io/v1/generate/image` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/https:/api.instacharts.io/v1/generate/image`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-c2891a847719f7d1", "name": "Dangling fetch: GET https://public.chainalysis.com/api/v1/address/${address} (packages/pieces/community/chainalysis-api/", "shortDescription": {"text": "Dangling fetch: GET https://public.chainalysis.com/api/v1/address/${address} (packages/pieces/community/chainalysis-api/src/lib/actions/check-address-sanction.ts:24)"}, "fullDescription": {"text": "`packages/pieces/community/chainalysis-api/src/lib/actions/check-address-sanction.ts:24` calls `GET https://public.chainalysis.com/api/v1/address/${address}` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/https:/public.chainalysis.com/api/v1/address/<p>`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-675207f44b17104b", "name": "Dangling fetch: POST https://api.lusha.com/prospecting/company/enrich (packages/pieces/community/lusha/src/lib/actions/c", "shortDescription": {"text": "Dangling fetch: POST https://api.lusha.com/prospecting/company/enrich (packages/pieces/community/lusha/src/lib/actions/companies/enrich.ts:32)"}, "fullDescription": {"text": "`packages/pieces/community/lusha/src/lib/actions/companies/enrich.ts:32` calls `POST https://api.lusha.com/prospecting/company/enrich` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/https:/api.lusha.com/prospecting/company/enrich`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-520f8c8d86ada738", "name": "Dangling fetch: POST https://api.lusha.com/prospecting/company/search (packages/pieces/community/lusha/src/lib/actions/c", "shortDescription": {"text": "Dangling fetch: POST https://api.lusha.com/prospecting/company/search (packages/pieces/community/lusha/src/lib/actions/companies/search.ts:69)"}, "fullDescription": {"text": "`packages/pieces/community/lusha/src/lib/actions/companies/search.ts:69` calls `POST https://api.lusha.com/prospecting/company/search` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/https:/api.lusha.com/prospecting/company/search`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-fa68488b3df7d18a", "name": "Dangling fetch: POST https://api.tinytalk.ai/v1/chat/completions (packages/pieces/community/tiny-talk-ai/src/lib/actions", "shortDescription": {"text": "Dangling fetch: POST https://api.tinytalk.ai/v1/chat/completions (packages/pieces/community/tiny-talk-ai/src/lib/actions/ask-bot.ts:25)"}, "fullDescription": {"text": "`packages/pieces/community/tiny-talk-ai/src/lib/actions/ask-bot.ts:25` calls `POST https://api.tinytalk.ai/v1/chat/completions` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/https:/api.tinytalk.ai/v1/chat/completions`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-eb73368d5cd18aad", "name": "Dangling fetch: GET http://127.0.0.1:${healthPort}/v1/health (packages/server/worker/test/lib/worker.test.ts:494)", "shortDescription": {"text": "Dangling fetch: GET http://127.0.0.1:${healthPort}/v1/health (packages/server/worker/test/lib/worker.test.ts:494)"}, "fullDescription": {"text": "`packages/server/worker/test/lib/worker.test.ts:494` calls `GET http://127.0.0.1:${healthPort}/v1/health` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/http:/127.0.0.1:/<p>/v1/health`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-d7b2eb8a7ca07079", "name": "Dangling fetch: GET http://127.0.0.1:${healthPort}/v1/health (packages/server/worker/test/lib/worker.test.ts:507)", "shortDescription": {"text": "Dangling fetch: GET http://127.0.0.1:${healthPort}/v1/health (packages/server/worker/test/lib/worker.test.ts:507)"}, "fullDescription": {"text": "`packages/server/worker/test/lib/worker.test.ts:507` calls `GET http://127.0.0.1:${healthPort}/v1/health` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/http:/127.0.0.1:/<p>/v1/health`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-09db99a70f88824c", "name": "Dangling fetch: GET http://127.0.0.1:${healthPort}/worker/health (packages/server/worker/test/lib/worker.test.ts:514)", "shortDescription": {"text": "Dangling fetch: GET http://127.0.0.1:${healthPort}/worker/health (packages/server/worker/test/lib/worker.test.ts:514)"}, "fullDescription": {"text": "`packages/server/worker/test/lib/worker.test.ts:514` calls `GET http://127.0.0.1:${healthPort}/worker/health` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/http:/127.0.0.1:/<p>/worker/health`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-42e0f91bf183ca77", "name": "Dangling fetch: GET http://127.0.0.1:${healthPort}/api/v1/health (packages/server/worker/test/lib/worker.test.ts:521)", "shortDescription": {"text": "Dangling fetch: GET http://127.0.0.1:${healthPort}/api/v1/health (packages/server/worker/test/lib/worker.test.ts:521)"}, "fullDescription": {"text": "`packages/server/worker/test/lib/worker.test.ts:521` calls `GET http://127.0.0.1:${healthPort}/api/v1/health` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/http:/127.0.0.1:/<p>/api/v1/health`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-71ab81e23a3dca7f", "name": "Dangling fetch: GET http://127.0.0.1:${healthPort}/unknown (packages/server/worker/test/lib/worker.test.ts:528)", "shortDescription": {"text": "Dangling fetch: GET http://127.0.0.1:${healthPort}/unknown (packages/server/worker/test/lib/worker.test.ts:528)"}, "fullDescription": {"text": "`packages/server/worker/test/lib/worker.test.ts:528` calls `GET http://127.0.0.1:${healthPort}/unknown` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/http:/127.0.0.1:/<p>/unknown`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-63a191a19cdba82c", "name": "Dangling fetch: POST https://oauth2.googleapis.com/token (packages/server/api/src/app/ee/authentication/federated-authn/", "shortDescription": {"text": "Dangling fetch: POST https://oauth2.googleapis.com/token (packages/server/api/src/app/ee/authentication/federated-authn/google-authn-provider.ts:57)"}, "fullDescription": {"text": "`packages/server/api/src/app/ee/authentication/federated-authn/google-authn-provider.ts:57` calls `POST https://oauth2.googleapis.com/token` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/https:/oauth2.googleapis.com/token`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-487a0dfcccf46fb9", "name": "Dangling fetch: POST https://us-central1-activepieces-b3803.cloudfunctions.net/addContact (packages/server/api/src/app/a", "shortDescription": {"text": "Dangling fetch: POST https://us-central1-activepieces-b3803.cloudfunctions.net/addContact (packages/server/api/src/app/authentication/authentication-utils.ts:222)"}, "fullDescription": {"text": "`packages/server/api/src/app/authentication/authentication-utils.ts:222` calls `POST https://us-central1-activepieces-b3803.cloudfunctions.net/addContact` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/https:/us-central1-activepieces-b3803.cloudfunctions.net/addcontact`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-fd1dc91abf32142d", "name": "Unused endpoint: GET /me", "shortDescription": {"text": "Unused endpoint: GET /me"}, "fullDescription": {"text": "`packages/pieces/community/prompthub/src/lib/common/client.ts` declares `GET /me` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-675937fc8a335036", "name": "Unused endpoint: POST /webhooks/subscriptions", "shortDescription": {"text": "Unused endpoint: POST /webhooks/subscriptions"}, "fullDescription": {"text": "`packages/pieces/community/mycase-piece/src/lib/triggers/event-added-or-updated.ts` declares `POST /webhooks/subscriptions` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ad7fb3966d0e94b6", "name": "Unused endpoint: GET /cases", "shortDescription": {"text": "Unused endpoint: GET /cases"}, "fullDescription": {"text": "`packages/pieces/community/mycase-piece/src/lib/actions/create-time-entry.ts` declares `GET /cases` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8dc3604aad441973", "name": "Unused endpoint: GET /staff", "shortDescription": {"text": "Unused endpoint: GET /staff"}, "fullDescription": {"text": "`packages/pieces/community/mycase-piece/src/lib/actions/create-time-entry.ts` declares `GET /staff` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-de0ae69a00ed42d9", "name": "Unused endpoint: POST /time_entries", "shortDescription": {"text": "Unused endpoint: POST /time_entries"}, "fullDescription": {"text": "`packages/pieces/community/mycase-piece/src/lib/actions/create-time-entry.ts` declares `POST /time_entries` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0fb42b2ffd281301", "name": "Unused endpoint: GET /case_stages", "shortDescription": {"text": "Unused endpoint: GET /case_stages"}, "fullDescription": {"text": "`packages/pieces/community/mycase-piece/src/lib/actions/update-case.ts` declares `GET /case_stages` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-cc32cbe8c445ae1a", "name": "Unused endpoint: GET /practice_areas", "shortDescription": {"text": "Unused endpoint: GET /practice_areas"}, "fullDescription": {"text": "`packages/pieces/community/mycase-piece/src/lib/actions/update-case.ts` declares `GET /practice_areas` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0729b84d4e27d0b9", "name": "Unused endpoint: GET /clients", "shortDescription": {"text": "Unused endpoint: GET /clients"}, "fullDescription": {"text": "`packages/pieces/community/mycase-piece/src/lib/actions/update-case.ts` declares `GET /clients` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a35ce3e9c9f59e0a", "name": "Unused endpoint: GET /companies", "shortDescription": {"text": "Unused endpoint: GET /companies"}, "fullDescription": {"text": "`packages/pieces/community/mycase-piece/src/lib/actions/update-case.ts` declares `GET /companies` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0a59a9b06457ac4f", "name": "Unused endpoint: POST /locations", "shortDescription": {"text": "Unused endpoint: POST /locations"}, "fullDescription": {"text": "`packages/pieces/community/mycase-piece/src/lib/actions/create-location.ts` declares `POST /locations` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-18ac64d26f2a044d", "name": "Unused endpoint: POST /case_stages", "shortDescription": {"text": "Unused endpoint: POST /case_stages"}, "fullDescription": {"text": "`packages/pieces/community/mycase-piece/src/lib/actions/create-case-stage.ts` declares `POST /case_stages` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0ef086013a9b36ca", "name": "Unused endpoint: GET /people_groups", "shortDescription": {"text": "Unused endpoint: GET /people_groups"}, "fullDescription": {"text": "`packages/pieces/community/mycase-piece/src/lib/actions/find-people-group.ts` declares `GET /people_groups` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ae6a9aa131d04375", "name": "Unused endpoint: POST /expenses", "shortDescription": {"text": "Unused endpoint: POST /expenses"}, "fullDescription": {"text": "`packages/pieces/community/mycase-piece/src/lib/actions/create-expense.ts` declares `POST /expenses` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0f6d42e08e3e9ef7", "name": "Unused endpoint: POST /practice_areas", "shortDescription": {"text": "Unused endpoint: POST /practice_areas"}, "fullDescription": {"text": "`packages/pieces/community/mycase-piece/src/lib/actions/find-or-create-practice-area.ts` declares `POST /practice_areas` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a22e4396af9d5790", "name": "Unused endpoint: POST /clients", "shortDescription": {"text": "Unused endpoint: POST /clients"}, "fullDescription": {"text": "`packages/pieces/community/mycase-piece/src/lib/actions/create-person.ts` declares `POST /clients` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3023d2ed2b6e911c", "name": "Unused endpoint: GET /locations", "shortDescription": {"text": "Unused endpoint: GET /locations"}, "fullDescription": {"text": "`packages/pieces/community/mycase-piece/src/lib/actions/find-location.ts` declares `GET /locations` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ea58cdec24ed9293", "name": "Unused endpoint: GET /referral_sources", "shortDescription": {"text": "Unused endpoint: GET /referral_sources"}, "fullDescription": {"text": "`packages/pieces/community/mycase-piece/src/lib/actions/create-lead.ts` declares `GET /referral_sources` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-52c40df350200e83", "name": "Unused endpoint: POST /leads", "shortDescription": {"text": "Unused endpoint: POST /leads"}, "fullDescription": {"text": "`packages/pieces/community/mycase-piece/src/lib/actions/create-lead.ts` declares `POST /leads` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b1985d10564cd776", "name": "Unused endpoint: POST /cases", "shortDescription": {"text": "Unused endpoint: POST /cases"}, "fullDescription": {"text": "`packages/pieces/community/mycase-piece/src/lib/actions/find-or-create-case.ts` declares `POST /cases` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ec39abb0b24cc5b2", "name": "Unused endpoint: POST /companies", "shortDescription": {"text": "Unused endpoint: POST /companies"}, "fullDescription": {"text": "`packages/pieces/community/mycase-piece/src/lib/actions/create-company.ts` declares `POST /companies` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b9112ba133290f7a", "name": "Unused endpoint: POST /custom_fields", "shortDescription": {"text": "Unused endpoint: POST /custom_fields"}, "fullDescription": {"text": "`packages/pieces/community/mycase-piece/src/lib/actions/create-custom-field.ts` declares `POST /custom_fields` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d479e8384824bea0", "name": "Unused endpoint: POST /referral_sources", "shortDescription": {"text": "Unused endpoint: POST /referral_sources"}, "fullDescription": {"text": "`packages/pieces/community/mycase-piece/src/lib/actions/create-referral-source.ts` declares `POST /referral_sources` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8b3eb3012ac06c04", "name": "Unused endpoint: POST /tasks", "shortDescription": {"text": "Unused endpoint: POST /tasks"}, "fullDescription": {"text": "`packages/pieces/community/mycase-piece/src/lib/actions/create-task.ts` declares `POST /tasks` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9e0b360c59d868e1", "name": "Unused endpoint: GET /calls", "shortDescription": {"text": "Unused endpoint: GET /calls"}, "fullDescription": {"text": "`packages/pieces/community/mycase-piece/src/lib/actions/find-call.ts` declares `GET /calls` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6eb19a2be7a6629c", "name": "Unused endpoint: GET /leads", "shortDescription": {"text": "Unused endpoint: GET /leads"}, "fullDescription": {"text": "`packages/pieces/community/mycase-piece/src/lib/actions/create-call.ts` declares `GET /leads` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b253facae3c4682f", "name": "Unused endpoint: POST /calls", "shortDescription": {"text": "Unused endpoint: POST /calls"}, "fullDescription": {"text": "`packages/pieces/community/mycase-piece/src/lib/actions/create-call.ts` declares `POST /calls` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-150a51bfa1c53963", "name": "Unused endpoint: POST /events", "shortDescription": {"text": "Unused endpoint: POST /events"}, "fullDescription": {"text": "`packages/pieces/community/mycase-piece/src/lib/actions/create-event.ts` declares `POST /events` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7b6916fca2a210e7", "name": "Unused endpoint: GET /redirect", "shortDescription": {"text": "Unused endpoint: GET /redirect"}, "fullDescription": {"text": "`packages/server/api/src/app/app.ts` declares `GET /redirect` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-db219c7555b0e77a", "name": "Unused endpoint: POST /mcp/validate", "shortDescription": {"text": "Unused endpoint: POST /mcp/validate"}, "fullDescription": {"text": "`packages/server/api/src/app/agents/agent-tools-controller.ts` declares `POST /mcp/validate` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-267cc5bf71026878", "name": "Unused endpoint: GET /populated-flows", "shortDescription": {"text": "Unused endpoint: GET /populated-flows"}, "fullDescription": {"text": "`packages/server/api/src/app/workers/engine-controller.ts` declares `GET /populated-flows` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8dfdaa61a04e0f15", "name": "Unused endpoint: GET /flows", "shortDescription": {"text": "Unused endpoint: GET /flows"}, "fullDescription": {"text": "`packages/server/api/src/app/workers/engine-controller.ts` declares `GET /flows` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5baa8971ebe192a1", "name": "Unused endpoint: GET /", "shortDescription": {"text": "Unused endpoint: GET /"}, "fullDescription": {"text": "`packages/server/api/src/app/workers/machine/machine-controller.ts` declares `GET /` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c7b84f6c03c5597e", "name": "Unused endpoint: GET /queue-metrics", "shortDescription": {"text": "Unused endpoint: GET /queue-metrics"}, "fullDescription": {"text": "`packages/server/api/src/app/workers/machine/machine-controller.ts` declares `GET /queue-metrics` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f25c5f53e9b75e9b", "name": "Unused endpoint: DELETE /app-connections", "shortDescription": {"text": "Unused endpoint: DELETE /app-connections"}, "fullDescription": {"text": "`packages/server/api/src/app/ee/connection-keys/connection-key.module.ts` declares `DELETE /app-connections` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2a12fe1d6a7a3e9b", "name": "Unused endpoint: GET /app-connections", "shortDescription": {"text": "Unused endpoint: GET /app-connections"}, "fullDescription": {"text": "`packages/server/api/src/app/ee/connection-keys/connection-key.module.ts` declares `GET /app-connections` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-849ab0622aaf73b7", "name": "Unused endpoint: POST /app-connections", "shortDescription": {"text": "Unused endpoint: POST /app-connections"}, "fullDescription": {"text": "`packages/server/api/src/app/ee/connection-keys/connection-key.module.ts` declares `POST /app-connections` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7a009b1a56794f45", "name": "Unused endpoint: POST /", "shortDescription": {"text": "Unused endpoint: POST /"}, "fullDescription": {"text": "`packages/server/api/src/app/ee/connection-keys/connection-key.module.ts` declares `POST /` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-cca2ff1c40a333cd", "name": "Unused endpoint: DELETE /:connectionkeyId", "shortDescription": {"text": "Unused endpoint: DELETE /:connectionkeyId"}, "fullDescription": {"text": "`packages/server/api/src/app/ee/connection-keys/connection-key.module.ts` declares `DELETE /:connectionkeyId` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e53dac75d7d9c626", "name": "Unused endpoint: POST /:id", "shortDescription": {"text": "Unused endpoint: POST /:id"}, "fullDescription": {"text": "`packages/server/api/src/app/ee/secret-managers/secret-managers.controller.ts` declares `POST /:id` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7a61c112b611f4bb", "name": "Unused endpoint: DELETE /:id", "shortDescription": {"text": "Unused endpoint: DELETE /:id"}, "fullDescription": {"text": "`packages/server/api/src/app/ee/secret-managers/secret-managers.controller.ts` declares `DELETE /:id` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1461946ab835599d", "name": "Unused endpoint: DELETE /cache", "shortDescription": {"text": "Unused endpoint: DELETE /cache"}, "fullDescription": {"text": "`packages/server/api/src/app/ee/secret-managers/secret-managers.controller.ts` declares `DELETE /cache` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ca5756175765b49d", "name": "Unused endpoint: GET /:id", "shortDescription": {"text": "Unused endpoint: GET /:id"}, "fullDescription": {"text": "`packages/server/api/src/app/ee/scim/scim-group-controller.ts` declares `GET /:id` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8d5b2b188d08ca82", "name": "Unused endpoint: PUT /:id", "shortDescription": {"text": "Unused endpoint: PUT /:id"}, "fullDescription": {"text": "`packages/server/api/src/app/ee/scim/scim-group-controller.ts` declares `PUT /:id` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5fbc954f63526821", "name": "Unused endpoint: PATCH /:id", "shortDescription": {"text": "Unused endpoint: PATCH /:id"}, "fullDescription": {"text": "`packages/server/api/src/app/ee/scim/scim-group-controller.ts` declares `PATCH /:id` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-85bad0707ff041d0", "name": "Unused endpoint: GET /ServiceProviderConfig", "shortDescription": {"text": "Unused endpoint: GET /ServiceProviderConfig"}, "fullDescription": {"text": "`packages/server/api/src/app/ee/scim/scim-discovery-controller.ts` declares `GET /ServiceProviderConfig` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-442a9280d228fefd", "name": "Unused endpoint: GET /ResourceTypes", "shortDescription": {"text": "Unused endpoint: GET /ResourceTypes"}, "fullDescription": {"text": "`packages/server/api/src/app/ee/scim/scim-discovery-controller.ts` declares `GET /ResourceTypes` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fd94c3f014c6e392", "name": "Unused endpoint: GET /Schemas", "shortDescription": {"text": "Unused endpoint: GET /Schemas"}, "fullDescription": {"text": "`packages/server/api/src/app/ee/scim/scim-discovery-controller.ts` declares `GET /Schemas` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a963c0ff10acb754", "name": "Unused endpoint: POST /external-token", "shortDescription": {"text": "Unused endpoint: POST /external-token"}, "fullDescription": {"text": "`packages/server/api/src/app/ee/managed-authn/managed-authn-controller.ts` declares `POST /external-token` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8ee7ac4b5c5364e8", "name": "Unused endpoint: POST /conversations", "shortDescription": {"text": "Unused endpoint: POST /conversations"}, "fullDescription": {"text": "`packages/server/api/src/app/ee/chat/chat-controller.ts` declares `POST /conversations` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6f0fc82742855439", "name": "Unused endpoint: GET /conversations", "shortDescription": {"text": "Unused endpoint: GET /conversations"}, "fullDescription": {"text": "`packages/server/api/src/app/ee/chat/chat-controller.ts` declares `GET /conversations` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/23885"}, "properties": {"repository": "activepieces/activepieces", "repoUrl": "https://github.com/activepieces/activepieces", "branch": "main"}, "results": [{"ruleId": "scanner-cb396ceb6d0e15bd", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/ee/embed-sdk/src/index.ts:569"}, "properties": {"repobilityId": "dc3c13b9855cc1b4", "scanner": "scanner-primary", "fingerprint": "cb396ceb6d0e15bd", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-dc27dd44a76a5e03", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/workable/src/lib/common/get-subdomain.ts:12"}, "properties": {"repobilityId": "2e994c328750b9ec", "scanner": "scanner-primary", "fingerprint": "dc27dd44a76a5e03", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-40bc32260909cebf", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/certopus/src/lib/actions/create-credential.ts:77"}, "properties": {"repobilityId": "fb665a719bf56985", "scanner": "scanner-primary", "fingerprint": "40bc32260909cebf", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-42df0594a5b55ea7", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/respaid/src/lib/common/index.ts:42"}, "properties": {"repobilityId": "d0a4f897acf77acd", "scanner": "scanner-primary", "fingerprint": "42df0594a5b55ea7", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-0c9dfe066e054d27", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/discourse/src/lib/actions/create-topic.action.ts:65"}, "properties": {"repobilityId": "fc83ee957d1ffab5", "scanner": "scanner-primary", "fingerprint": "0c9dfe066e054d27", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-28aa0f2fb4ec9c47", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/shippo/src/lib/triggers/new-order.ts:28"}, "properties": {"repobilityId": "81362e3005846982", "scanner": "scanner-primary", "fingerprint": "28aa0f2fb4ec9c47", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-0a90e6d462cca8de", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/lokalise/src/lib/triggers/key-added.ts:27"}, "properties": {"repobilityId": "29dab0ff6290ab25", "scanner": "scanner-primary", "fingerprint": "0a90e6d462cca8de", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-bd756d4aaa841dcb", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/outseta/src/action/update-account.ts:85"}, "properties": {"repobilityId": "16ca1c7296c3ece3", "scanner": "scanner-primary", "fingerprint": "bd756d4aaa841dcb", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-2c205b1f578767ae", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/outseta/src/action/update-person.ts:81"}, "properties": {"repobilityId": "a27465cc91a9024b", "scanner": "scanner-primary", "fingerprint": "2c205b1f578767ae", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-7c4f1e21294e5d08", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/vlm-run/src/lib/common/index.ts:52"}, "properties": {"repobilityId": "78f5ec91c183c871", "scanner": "scanner-primary", "fingerprint": "7c4f1e21294e5d08", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-4825bbc906244eed", "level": "none", "message": {"text": "TODO/FIXME marker in shipping code \u2014 packages/pieces/community/azure-openai/src/lib/common/index.ts:38"}, "properties": {"repobilityId": "28a7fd0d5e74193b", "scanner": "scanner-primary", "fingerprint": "4825bbc906244eed", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.todo-marker"]}}, {"ruleId": "scanner-d2debefc8c75f243", "level": "none", "message": {"text": "TODO/FIXME marker in shipping code \u2014 packages/pieces/community/bexio/src/lib/actions/create-time-tracking.ts:75"}, "properties": {"repobilityId": "cfd0e29bf684ea06", "scanner": "scanner-primary", "fingerprint": "d2debefc8c75f243", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.todo-marker"]}}, {"ruleId": "scanner-6783975d7bec0246", "level": "none", "message": {"text": "TODO/FIXME marker in shipping code \u2014 packages/pieces/community/bexio/src/lib/actions/create-product.ts:317"}, "properties": {"repobilityId": "5c0feaf37e4ab2f8", "scanner": "scanner-primary", "fingerprint": "6783975d7bec0246", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.todo-marker"]}}, {"ruleId": "scanner-a034644c781791b8", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/google-drive/src/lib/action/search-folder-or-file.action.ts:107"}, "properties": {"repobilityId": "881ac77dd4f1c3a5", "scanner": "scanner-primary", "fingerprint": "a034644c781791b8", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-4ff5c5de2c0edc7d", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/google-drive/src/lib/action/get-file-by-id.ts:32"}, "properties": {"repobilityId": "28c8efef0abe05a9", "scanner": "scanner-primary", "fingerprint": "4ff5c5de2c0edc7d", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-4c4ce6b1f985c8d8", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/serp-api/src/lib/services/serp-api-client.ts:146"}, "properties": {"repobilityId": "dbbc91cf1a4fd95d", "scanner": "scanner-primary", "fingerprint": "4c4ce6b1f985c8d8", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-d50ff36fcdad03d4", "level": "none", "message": {"text": "TODO/FIXME marker in shipping code \u2014 packages/pieces/community/clickup/src/lib/actions/chat/create-channel-in-space-folder-list.ts:47"}, "properties": {"repobilityId": "f665540a344d2d1d", "scanner": "scanner-primary", "fingerprint": "d50ff36fcdad03d4", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.todo-marker"]}}, {"ruleId": "scanner-ad3357245040975b", "level": "none", "message": {"text": "TODO/FIXME marker in shipping code \u2014 packages/pieces/community/clickup/src/lib/actions/chat/create-channel.ts:34"}, "properties": {"repobilityId": "26bcf5d3963acb51", "scanner": "scanner-primary", "fingerprint": "ad3357245040975b", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.todo-marker"]}}, {"ruleId": "scanner-b5e99be8592c5a6a", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/foreplay-co/src/lib/triggers/new-ad-in-board.ts:39"}, "properties": {"repobilityId": "5486014562590999", "scanner": "scanner-primary", "fingerprint": "b5e99be8592c5a6a", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-d9455ee49bf2ed4c", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/foreplay-co/src/lib/triggers/new-swipefile-ad.ts:11"}, "properties": {"repobilityId": "f72a12f3a994573d", "scanner": "scanner-primary", "fingerprint": "d9455ee49bf2ed4c", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-510886f953291e46", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/timelines-ai/src/lib/actions/find-chat.ts:77"}, "properties": {"repobilityId": "ba659c68a86d54d9", "scanner": "scanner-primary", "fingerprint": "510886f953291e46", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-0958e663adfb878e", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/quaderno/src/lib/common/client.ts:17"}, "properties": {"repobilityId": "2202621dc8d2996f", "scanner": "scanner-primary", "fingerprint": "0958e663adfb878e", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-a009a46dd220513a", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/odoo/src/commom/index.ts:61"}, "properties": {"repobilityId": "95cabf4d7c42115d", "scanner": "scanner-primary", "fingerprint": "a009a46dd220513a", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-228a6d2d50cfb399", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/odoo/src/lib/actions/create-company.ts:41"}, "properties": {"repobilityId": "9ebb4c8bf6eace25", "scanner": "scanner-primary", "fingerprint": "228a6d2d50cfb399", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-34c9965140df225b", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/mailchain/src/lib/actions/send-email.ts:27"}, "properties": {"repobilityId": "73b72cd4cbc5ed90", "scanner": "scanner-primary", "fingerprint": "34c9965140df225b", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-57e351f636402008", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/wufoo/src/lib/triggers/new-form-entry.ts:80"}, "properties": {"repobilityId": "605f5cfe895f2fd9", "scanner": "scanner-primary", "fingerprint": "57e351f636402008", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-ffd81093f35cff5b", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/wufoo/src/lib/triggers/new-form.ts:76"}, "properties": {"repobilityId": "605a695817b3a78e", "scanner": "scanner-primary", "fingerprint": "ffd81093f35cff5b", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-068a415726cd9042", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/microsoft-365-planner/src/lib/common/properties.ts:90"}, "properties": {"repobilityId": "5ddc9af19f0ee1e4", "scanner": "scanner-primary", "fingerprint": "068a415726cd9042", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-6265b72992a9ba55", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/oracle-database/src/lib/common/auth.ts:118"}, "properties": {"repobilityId": "f6ddc2fa5e8cca3d", "scanner": "scanner-primary", "fingerprint": "6265b72992a9ba55", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-bf72ad6660b6356b", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/oracle-database/src/lib/common/thick-mode.ts:74"}, "properties": {"repobilityId": "173386934d48d285", "scanner": "scanner-primary", "fingerprint": "bf72ad6660b6356b", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-46ff79d171cb205a", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/assembled/src/lib/actions/update-OOO.ts:59"}, "properties": {"repobilityId": "ad2483989d1b147c", "scanner": "scanner-primary", "fingerprint": "46ff79d171cb205a", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-28623dfa2a96791d", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/aminos/src/lib/actions/createUser.ts:43"}, "properties": {"repobilityId": "acf2e0601974a1fd", "scanner": "scanner-primary", "fingerprint": "28623dfa2a96791d", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-f419cbcef9a9f17e", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/sitespeakai/src/lib/triggers/new-lead.ts:25"}, "properties": {"repobilityId": "d944e9213f38a5b1", "scanner": "scanner-primary", "fingerprint": "f419cbcef9a9f17e", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-1831d176a701611f", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/qdrant/src/lib/actions/delete-points.ts:37"}, "properties": {"repobilityId": "42d72c52a71c495f", "scanner": "scanner-primary", "fingerprint": "1831d176a701611f", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-019e7b905610f70f", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/googlechat/src/lib/triggers/new-mention.ts:38"}, "properties": {"repobilityId": "2b6381c6ca830399", "scanner": "scanner-primary", "fingerprint": "019e7b905610f70f", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-914685abdaac439b", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/googlechat/src/lib/triggers/new-message.ts:37"}, "properties": {"repobilityId": "2fa38fb5f6e3c986", "scanner": "scanner-primary", "fingerprint": "914685abdaac439b", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-86b906cd7677b7eb", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/googlechat/src/lib/common/requests.ts:472"}, "properties": {"repobilityId": "8ea24c6dc2a8c76b", "scanner": "scanner-primary", "fingerprint": "86b906cd7677b7eb", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-0ca387c2d70a8e54", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/okta/src/lib/triggers/new-event.ts:60"}, "properties": {"repobilityId": "15b9b5be5ecf256a", "scanner": "scanner-primary", "fingerprint": "0ca387c2d70a8e54", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-ae934812d83fc3b3", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/okta/src/lib/common/common.ts:86"}, "properties": {"repobilityId": "b3a6ed942ba212f6", "scanner": "scanner-primary", "fingerprint": "ae934812d83fc3b3", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-658693e922b07a65", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/beehiiv/src/lib/actions/update-subscription.action.ts:74"}, "properties": {"repobilityId": "bdf414022d8c5449", "scanner": "scanner-primary", "fingerprint": "658693e922b07a65", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-8e2319e7248975ce", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/fireflies-ai/src/lib/actions/find-recent-meeting.ts:47"}, "properties": {"repobilityId": "b84c49cf887a0223", "scanner": "scanner-primary", "fingerprint": "8e2319e7248975ce", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-be53dd4960634516", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/sendinblue/src/lib/actions/create-or-update-contact.ts:93"}, "properties": {"repobilityId": "76d0981e3159827f", "scanner": "scanner-primary", "fingerprint": "be53dd4960634516", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-500d33a5eadc3bd8", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/capsule-crm/src/lib/common/client.ts:172"}, "properties": {"repobilityId": "cd3875e7d6a01126", "scanner": "scanner-primary", "fingerprint": "500d33a5eadc3bd8", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-0325e4efb277618f", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/pdf-co/src/lib/actions/add-image-to-pdf.ts:112"}, "properties": {"repobilityId": "20130aa00155d54c", "scanner": "scanner-primary", "fingerprint": "0325e4efb277618f", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-b6b7cb7bd34caf89", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/quickbase/src/lib/common/props.ts:35"}, "properties": {"repobilityId": "d34f0b8526d0aab9", "scanner": "scanner-primary", "fingerprint": "b6b7cb7bd34caf89", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-a382c111622dfab8", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/quickbase/src/lib/actions/find-or-create-record.ts:78"}, "properties": {"repobilityId": "fa3dc2ba52e69f94", "scanner": "scanner-primary", "fingerprint": "a382c111622dfab8", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-2f55b35899194710", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/smartsheet/src/lib/common/index.ts:804"}, "properties": {"repobilityId": "351a3211c2c5d2ff", "scanner": "scanner-primary", "fingerprint": "2f55b35899194710", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-1bf27172d7e0db07", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/invoiceninja/src/lib/actions/get-invoices.ts:79"}, "properties": {"repobilityId": "59948244f2cc7186", "scanner": "scanner-primary", "fingerprint": "1bf27172d7e0db07", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-a2b4667883455630", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/invoiceninja/src/lib/actions/get-report.ts:63"}, "properties": {"repobilityId": "879a815e2c28b171", "scanner": "scanner-primary", "fingerprint": "a2b4667883455630", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-7f0d792b4a52a705", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/acuity-scheduling/src/lib/triggers/appointment-canceled.ts:117"}, "properties": {"repobilityId": "f067a7b1017e9765", "scanner": "scanner-primary", "fingerprint": "7f0d792b4a52a705", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-fbde209f2e4e1110", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/acuity-scheduling/src/lib/triggers/appointment-scheduled.ts:114"}, "properties": {"repobilityId": "3ba9a677d20a31c6", "scanner": "scanner-primary", "fingerprint": "fbde209f2e4e1110", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-8dc0ac0720fc4a62", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/simpliroute/src/lib/auth.ts:10"}, "properties": {"repobilityId": "2301974b51728884", "scanner": "scanner-primary", "fingerprint": "8dc0ac0720fc4a62", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-98d87ca89e9eb5a5", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/simpliroute/src/lib/actions/clients/get-clients.ts:26"}, "properties": {"repobilityId": "0a937b9eca469c92", "scanner": "scanner-primary", "fingerprint": "98d87ca89e9eb5a5", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-28bc802ec81fdf37", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/supabase/src/lib/triggers/new-row.ts:80"}, "properties": {"repobilityId": "84f3d6ec0a8850ce", "scanner": "scanner-primary", "fingerprint": "28bc802ec81fdf37", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-da34db8c84ca5549", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/supabase/src/lib/common/props.ts:89"}, "properties": {"repobilityId": "d38a3ee2f2c1044a", "scanner": "scanner-primary", "fingerprint": "da34db8c84ca5549", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-ed71cb3ef68c66b1", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/formstack/src/lib/triggers/new-form.ts:33"}, "properties": {"repobilityId": "d4111a994c3cba36", "scanner": "scanner-primary", "fingerprint": "ed71cb3ef68c66b1", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-a85628512e643f72", "level": "none", "message": {"text": "TODO/FIXME marker in shipping code \u2014 packages/pieces/community/convertkit/src/lib/triggers/index.ts:263"}, "properties": {"repobilityId": "9aab1efd5205a24d", "scanner": "scanner-primary", "fingerprint": "a85628512e643f72", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.todo-marker"]}}, {"ruleId": "scanner-d2d0d3e24b8675b6", "level": "none", "message": {"text": "TODO/FIXME marker in shipping code \u2014 packages/pieces/community/convertkit/src/lib/actions/tags.ts:83"}, "properties": {"repobilityId": "e968fd2a4ce8a152", "scanner": "scanner-primary", "fingerprint": "d2d0d3e24b8675b6", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.todo-marker"]}}, {"ruleId": "scanner-2ff6bb0eb0e9a2d3", "level": "none", "message": {"text": "TODO/FIXME marker in shipping code \u2014 packages/pieces/community/convertkit/src/lib/actions/purchases.ts:93"}, "properties": {"repobilityId": "0222d7d1661c1eb9", "scanner": "scanner-primary", "fingerprint": "2ff6bb0eb0e9a2d3", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.todo-marker"]}}, {"ruleId": "scanner-7db84eeb5e703f9b", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/phantombuster/src/lib/triggers/new-output.ts:76"}, "properties": {"repobilityId": "ea31df56e06b4271", "scanner": "scanner-primary", "fingerprint": "7db84eeb5e703f9b", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-a5be2a78dedeaf30", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/phantombuster/src/lib/common/client.ts:14"}, "properties": {"repobilityId": "014d187082bf72b9", "scanner": "scanner-primary", "fingerprint": "a5be2a78dedeaf30", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-9d1c16356281f342", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/phantombuster/src/lib/actions/launch-phantom.ts:73"}, "properties": {"repobilityId": "6531cd87ef4e0c92", "scanner": "scanner-primary", "fingerprint": "9d1c16356281f342", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-5f3aaa2f4b300504", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/wedof/src/lib/common/wedof.ts:76"}, "properties": {"repobilityId": "dacc1c430413b3c4", "scanner": "scanner-primary", "fingerprint": "5f3aaa2f4b300504", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-ab2aa344a1a61d67", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/softr/src/lib/triggers/new-database-record.ts:47"}, "properties": {"repobilityId": "8689d4eb10390666", "scanner": "scanner-primary", "fingerprint": "ab2aa344a1a61d67", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-e3fcf471359e1ce5", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/podio/src/lib/actions/create-task.ts:97"}, "properties": {"repobilityId": "adc2f79500a5da19", "scanner": "scanner-primary", "fingerprint": "e3fcf471359e1ce5", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-5a787379b5c02aca", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/pinecone/src/lib/actions/create-index.ts:297"}, "properties": {"repobilityId": "151910fc4da2b28e", "scanner": "scanner-primary", "fingerprint": "5a787379b5c02aca", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-3dc4ce9d77e0a6a4", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/pinecone/src/lib/actions/search-index.ts:87"}, "properties": {"repobilityId": "9600e58547f33498", "scanner": "scanner-primary", "fingerprint": "3dc4ce9d77e0a6a4", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-9d793856e847c9ec", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/pinecone/src/lib/actions/upsert-vector.ts:243"}, "properties": {"repobilityId": "2379cfaf7f7a429a", "scanner": "scanner-primary", "fingerprint": "9d793856e847c9ec", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-1ef6c324b8f2f8de", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/pinecone/src/lib/actions/get-vector.ts:88"}, "properties": {"repobilityId": "18d2bfc620548e65", "scanner": "scanner-primary", "fingerprint": "1ef6c324b8f2f8de", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-677910810ab6484f", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/pinecone/src/lib/actions/search-vector.ts:202"}, "properties": {"repobilityId": "bae0844e6d331e82", "scanner": "scanner-primary", "fingerprint": "677910810ab6484f", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-511b8a3639a87363", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/pinecone/src/lib/actions/delete-vector.ts:158"}, "properties": {"repobilityId": "084b670c74e8d83c", "scanner": "scanner-primary", "fingerprint": "511b8a3639a87363", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-36677024f0d637bd", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/pinecone/src/lib/actions/update-vector.ts:161"}, "properties": {"repobilityId": "253303dbf8d268f3", "scanner": "scanner-primary", "fingerprint": "36677024f0d637bd", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-45267ea0cba8c637", "level": "none", "message": {"text": "TODO/FIXME marker in shipping code \u2014 packages/pieces/community/openai/src/lib/common/common.ts:122"}, "properties": {"repobilityId": "7877e5337a6dd354", "scanner": "scanner-primary", "fingerprint": "45267ea0cba8c637", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.todo-marker"]}}, {"ruleId": "scanner-03ff2f31f5391200", "level": "none", "message": {"text": "TODO/FIXME marker in shipping code \u2014 packages/pieces/community/insightly/src/lib/common/props.ts:206"}, "properties": {"repobilityId": "0e24196a322f504e", "scanner": "scanner-primary", "fingerprint": "03ff2f31f5391200", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.todo-marker"]}}, {"ruleId": "scanner-2ff58460be2bf13e", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/moonclerk/src/lib/common/auth.ts:11"}, "properties": {"repobilityId": "4eebf184241051bf", "scanner": "scanner-primary", "fingerprint": "2ff58460be2bf13e", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-e4b482ad4a95e167", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/front/src/lib/common/dropdown.ts:28"}, "properties": {"repobilityId": "e11574140b418325", "scanner": "scanner-primary", "fingerprint": "e4b482ad4a95e167", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-b7feaa85c871c3e9", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/front/src/lib/actions/find-contact.ts:52"}, "properties": {"repobilityId": "88e94dfa75e1deb4", "scanner": "scanner-primary", "fingerprint": "b7feaa85c871c3e9", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-a893d82a27b41cfe", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/zendesk-sell/src/lib/triggers/deal_enters_stage.ts:94"}, "properties": {"repobilityId": "3f2164267978871d", "scanner": "scanner-primary", "fingerprint": "a893d82a27b41cfe", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-7bd4e7852c6056f0", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/mongodb/src/index.ts:87"}, "properties": {"repobilityId": "a828521dc39f4549", "scanner": "scanner-primary", "fingerprint": "7bd4e7852c6056f0", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-c44f7642b2bb7e65", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/mongodb/src/lib/common/index.ts:48"}, "properties": {"repobilityId": "5f759d46c4c4ce9b", "scanner": "scanner-primary", "fingerprint": "c44f7642b2bb7e65", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-5dd69a6ae4052798", "level": "none", "message": {"text": "TODO/FIXME marker in shipping code \u2014 packages/pieces/community/drupal/src/lib/common/jsonapi.ts:79"}, "properties": {"repobilityId": "a7d4745e0d01352c", "scanner": "scanner-primary", "fingerprint": "5dd69a6ae4052798", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.todo-marker"]}}, {"ruleId": "scanner-6c13e16111ed7274", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/gmail/src/lib/common/props.ts:143"}, "properties": {"repobilityId": "e7d222456a03a2f3", "scanner": "scanner-primary", "fingerprint": "6c13e16111ed7274", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-668b3f5151552ea1", "level": "warning", "message": {"text": "Custom React Flow node registered without explicit width/height \u2014 packages/pieces/community/zeplin/src/lib/triggers/new-screen.ts:17"}, "properties": {"repobilityId": "59802df32735febb", "scanner": "scanner-primary", "fingerprint": "668b3f5151552ea1", "layer": "frontend", "severity": "medium", "confidence": 1.0, "tags": ["frontend-quality", "fq.rfnode.no-dims"]}}, {"ruleId": "scanner-7046034722a4a53d", "level": "warning", "message": {"text": "Custom React Flow node registered without explicit width/height \u2014 packages/pieces/community/zeplin/src/lib/triggers/new-note.ts:22"}, "properties": {"repobilityId": "21e46b6a8bb69032", "scanner": "scanner-primary", "fingerprint": "7046034722a4a53d", "layer": "frontend", "severity": "medium", "confidence": 1.0, "tags": ["frontend-quality", "fq.rfnode.no-dims"]}}, {"ruleId": "scanner-34deb90c0c340dd9", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/mailer-lite/src/triggers/triggers.ts:140"}, "properties": {"repobilityId": "624c0b438e10f557", "scanner": "scanner-primary", "fingerprint": "34deb90c0c340dd9", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-be7f3654890e0c69", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/docsbot/src/lib/actions/upload-source-file.ts:14"}, "properties": {"repobilityId": "6733936870d0e268", "scanner": "scanner-primary", "fingerprint": "be7f3654890e0c69", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-088855d71825d464", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/baserow/src/lib/common/index.ts:336"}, "properties": {"repobilityId": "fba70d589b24d04a", "scanner": "scanner-primary", "fingerprint": "088855d71825d464", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-89bc81a1bae11149", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/bitly/src/lib/triggers/new-bitlink-created.ts:76"}, "properties": {"repobilityId": "8a9d3d9fc9510d92", "scanner": "scanner-primary", "fingerprint": "89bc81a1bae11149", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-96aa45b331a166f1", "level": "none", "message": {"text": "TODO/FIXME marker in shipping code \u2014 packages/pieces/community/clarifai/src/lib/common/index.ts:65"}, "properties": {"repobilityId": "9bc2bc548ec634b1", "scanner": "scanner-primary", "fingerprint": "96aa45b331a166f1", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.todo-marker"]}}, {"ruleId": "scanner-0ae2c220fb2858e9", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/localai/src/lib/actions/send-prompt.ts:204"}, "properties": {"repobilityId": "dc8a782411759157", "scanner": "scanner-primary", "fingerprint": "0ae2c220fb2858e9", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-af342a7d1a75e74e", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/tarvent/src/lib/common/index.ts:59"}, "properties": {"repobilityId": "456c36b14c9bf682", "scanner": "scanner-primary", "fingerprint": "af342a7d1a75e74e", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-fd424c906249665c", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/tarvent/src/lib/common/client.ts:383"}, "properties": {"repobilityId": "2ceddd6e95988311", "scanner": "scanner-primary", "fingerprint": "fd424c906249665c", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-17134954527fb8a2", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/calendly/src/lib/trigger/invitee-created.trigger.ts:82"}, "properties": {"repobilityId": "4ddf2b38f3085c9c", "scanner": "scanner-primary", "fingerprint": "17134954527fb8a2", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-3f4492862216b87d", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/zoho-bookings/src/lib/common/index.ts:170"}, "properties": {"repobilityId": "2281a8d66600a7d5", "scanner": "scanner-primary", "fingerprint": "3f4492862216b87d", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-78f0341f8a550952", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/zoho-bookings/src/lib/actions/reschedule-appointment.ts:172"}, "properties": {"repobilityId": "3da5806d2df92267", "scanner": "scanner-primary", "fingerprint": "78f0341f8a550952", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-d7de75f9ee4134b4", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/pandadoc/src/lib/triggers/document-state-changed.ts:90"}, "properties": {"repobilityId": "dd6251122f4827e2", "scanner": "scanner-primary", "fingerprint": "d7de75f9ee4134b4", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-8dcdd90d7646078f", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/pandadoc/src/lib/triggers/document-updated.ts:172"}, "properties": {"repobilityId": "cf0ad816bf151c72", "scanner": "scanner-primary", "fingerprint": "8dcdd90d7646078f", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-b8f11531f750efdf", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/pandadoc/src/lib/triggers/document-completed.ts:161"}, "properties": {"repobilityId": "101828c511ce988c", "scanner": "scanner-primary", "fingerprint": "b8f11531f750efdf", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-30e1bee4034fb7ce", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/aidbase/src/lib/triggers/ticket-status-changed.ts:74"}, "properties": {"repobilityId": "a621ecca50943bcd", "scanner": "scanner-primary", "fingerprint": "30e1bee4034fb7ce", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-e08c1bf9240e229b", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/claude/src/lib/actions/send-prompt.ts:200"}, "properties": {"repobilityId": "59df1973ac05bb29", "scanner": "scanner-primary", "fingerprint": "e08c1bf9240e229b", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-a70343678c1715f7", "level": "none", "message": {"text": "TODO/FIXME marker in shipping code \u2014 packages/pieces/community/webflow/src/lib/triggers/new-form-submitted.ts:27"}, "properties": {"repobilityId": "90bfb7cd4d20ffe1", "scanner": "scanner-primary", "fingerprint": "a70343678c1715f7", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.todo-marker"]}}, {"ruleId": "scanner-395836a2b3f4c641", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/mattermost/src/lib/actions/send-message.ts:49"}, "properties": {"repobilityId": "e54903ce0f1b2c87", "scanner": "scanner-primary", "fingerprint": "395836a2b3f4c641", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-3ff9ab9682e48651", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/shopify/src/lib/common/register-webhook.ts:54"}, "properties": {"repobilityId": "7ea1d7bb1502db3c", "scanner": "scanner-primary", "fingerprint": "3ff9ab9682e48651", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-409174dca40bec9c", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/community/oncehub/src/lib/common/auth.ts:11"}, "properties": {"repobilityId": "1834ae8e673eb09e", "scanner": "scanner-primary", "fingerprint": "409174dca40bec9c", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-721d4e6723e714d0", "level": "none", "message": {"text": "TODO/FIXME marker in shipping code \u2014 packages/pieces/community/google-calendar/src/index.ts:56"}, "properties": {"repobilityId": "80e955b262be512e", "scanner": "scanner-primary", "fingerprint": "721d4e6723e714d0", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.todo-marker"]}}, {"ruleId": "scanner-c2160ecfd22a4994", "level": "none", "message": {"text": "TODO/FIXME marker in shipping code \u2014 packages/pieces/community/google-calendar/src/lib/auth.ts:9"}, "properties": {"repobilityId": "574ac839fd00d13f", "scanner": "scanner-primary", "fingerprint": "c2160ecfd22a4994", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.todo-marker"]}}, {"ruleId": "scanner-c826ac6606aaa7f8", "level": "none", "message": {"text": "TODO/FIXME marker in shipping code \u2014 packages/pieces/community/bettermode/src/lib/api.ts:292"}, "properties": {"repobilityId": "04c81c856857cec5", "scanner": "scanner-primary", "fingerprint": "c826ac6606aaa7f8", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.todo-marker"]}}, {"ruleId": "scanner-ace7c6d31be70de0", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/core/schedule/src/lib/triggers/cron-expression.trigger.ts:37"}, "properties": {"repobilityId": "11e794f749ae5d7e", "scanner": "scanner-primary", "fingerprint": "ace7c6d31be70de0", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-764f5364ad85dfa6", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/core/schedule/src/lib/triggers/every-week.trigger.ts:74"}, "properties": {"repobilityId": "75f9cf72593e6692", "scanner": "scanner-primary", "fingerprint": "764f5364ad85dfa6", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-e7d5a9e0b79ece4a", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/core/schedule/src/lib/triggers/every-day.trigger.ts:62"}, "properties": {"repobilityId": "91f5d0e8a90399cb", "scanner": "scanner-primary", "fingerprint": "e7d5a9e0b79ece4a", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-ea9b792f28b7b4f7", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/core/schedule/src/lib/triggers/every-x-minutes.trigger.ts:45"}, "properties": {"repobilityId": "a58fc4621432704a", "scanner": "scanner-primary", "fingerprint": "ea9b792f28b7b4f7", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-c1c8b48378b599e4", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/core/schedule/src/lib/triggers/every-hour.trigger.ts:38"}, "properties": {"repobilityId": "70da820b08568f0f", "scanner": "scanner-primary", "fingerprint": "c1c8b48378b599e4", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-c959c0f8189c6fa8", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/core/schedule/src/lib/triggers/every-month.trigger.ts:74"}, "properties": {"repobilityId": "4a39a34732e5884f", "scanner": "scanner-primary", "fingerprint": "c959c0f8189c6fa8", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-ac3ec7530dfae9f3", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/pieces/framework/src/lib/i18n.ts:45"}, "properties": {"repobilityId": "fe559345770e1f44", "scanner": "scanner-primary", "fingerprint": "ac3ec7530dfae9f3", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-c4ab62e1e6dcf0d5", "level": "none", "message": {"text": "TODO/FIXME marker in shipping code \u2014 packages/pieces/framework/src/lib/trigger/trigger.ts:116"}, "properties": {"repobilityId": "1f6ee1ac2f86332b", "scanner": "scanner-primary", "fingerprint": "c4ab62e1e6dcf0d5", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.todo-marker"]}}, {"ruleId": "scanner-d6fe90afceb23233", "level": "none", "message": {"text": "TODO/FIXME marker in shipping code \u2014 packages/pieces/framework/src/lib/property/input/common.ts:32"}, "properties": {"repobilityId": "960212529a135f77", "scanner": "scanner-primary", "fingerprint": "d6fe90afceb23233", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.todo-marker"]}}, {"ruleId": "scanner-304d40904e3010f9", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/server/api/vitest.setup.ts:9"}, "properties": {"repobilityId": "92ce8053f8e846d2", "scanner": "scanner-primary", "fingerprint": "304d40904e3010f9", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-ac05ef5c506c3f20", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/server/api/src/rollback.ts:62"}, "properties": {"repobilityId": "04cecec2a20b7e60", "scanner": "scanner-primary", "fingerprint": "ac05ef5c506c3f20", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-229ab2cc683a6363", "level": "none", "message": {"text": "TODO/FIXME marker in shipping code \u2014 packages/server/api/src/app/workers/job/index.ts:22"}, "properties": {"repobilityId": "aefc1d0e68cbc4f7", "scanner": "scanner-primary", "fingerprint": "229ab2cc683a6363", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.todo-marker"]}}, {"ruleId": "scanner-8517a6e4e5f95492", "level": "none", "message": {"text": "TODO/FIXME marker in shipping code \u2014 packages/server/api/src/app/flags/flag.service.ts:77"}, "properties": {"repobilityId": "d7631a63f7e6b7de", "scanner": "scanner-primary", "fingerprint": "8517a6e4e5f95492", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.todo-marker"]}}, {"ruleId": "scanner-3882165473cfed59", "level": "none", "message": {"text": "TODO/FIXME marker in shipping code \u2014 packages/server/api/src/app/ee/connection-keys/connection-key.service.ts:42"}, "properties": {"repobilityId": "3392313fe4ab8e76", "scanner": "scanner-primary", "fingerprint": "3882165473cfed59", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.todo-marker"]}}, {"ruleId": "scanner-9522a2103d1bb843", "level": "none", "message": {"text": "TODO/FIXME marker in shipping code \u2014 packages/server/api/src/app/authentication/authentication-utils.ts:242"}, "properties": {"repobilityId": "010b22605f52595b", "scanner": "scanner-primary", "fingerprint": "9522a2103d1bb843", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.todo-marker"]}}, {"ruleId": "scanner-8b46df83a543b581", "level": "none", "message": {"text": "TODO/FIXME marker in shipping code \u2014 packages/server/api/src/app/core/security/v2/authn/authentication-middleware.ts:8"}, "properties": {"repobilityId": "62d5cfbf2f578a3e", "scanner": "scanner-primary", "fingerprint": "8b46df83a543b581", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.todo-marker"]}}, {"ruleId": "scanner-0a8fd8b81614689c", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/server/api/src/app/database/rollback-migrations.ts:21"}, "properties": {"repobilityId": "0371e928902a16fd", "scanner": "scanner-primary", "fingerprint": "0a8fd8b81614689c", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-4cd9af135919ab6b", "level": "none", "message": {"text": "TODO/FIXME marker in shipping code \u2014 packages/server/api/src/app/tables/table/table.service.ts:224"}, "properties": {"repobilityId": "dd0fd530f4681b60", "scanner": "scanner-primary", "fingerprint": "4cd9af135919ab6b", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.todo-marker"]}}, {"ruleId": "scanner-bec251c363d9e9eb", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/server/api/test/integration/ce/flows/flow-run/execute-flow-e2e.test.ts:542"}, "properties": {"repobilityId": "51d69dca896f1118", "scanner": "scanner-primary", "fingerprint": "bec251c363d9e9eb", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-00d2c484d4856c7c", "level": "none", "message": {"text": "TODO/FIXME marker in shipping code \u2014 packages/server/api/test/integration/cloud/event-destinations/event-destination.test.ts:109"}, "properties": {"repobilityId": "659f1258a7b482a1", "scanner": "scanner-primary", "fingerprint": "00d2c484d4856c7c", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.todo-marker"]}}, {"ruleId": "scanner-a445c75c068a630a", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/server/engine/src/lib/core/code/no-op-code-sandbox.ts:52"}, "properties": {"repobilityId": "72044290559074d7", "scanner": "scanner-primary", "fingerprint": "a445c75c068a630a", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-27e35174ab0e1248", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/server/engine/test/resources/codes/flowVersionId/stdout_on_failure/index.js:3"}, "properties": {"repobilityId": "fab52785ee1b0bce", "scanner": "scanner-primary", "fingerprint": "27e35174ab0e1248", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-a06005a891e0c956", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/cli/src/lib/utils/piece-utils.ts:89"}, "properties": {"repobilityId": "ddbaf4e185d2d135", "scanner": "scanner-primary", "fingerprint": "a06005a891e0c956", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-90ca8096965119b3", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/cli/src/lib/commands/create-piece.ts:8"}, "properties": {"repobilityId": "128d97fba5c835de", "scanner": "scanner-primary", "fingerprint": "90ca8096965119b3", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-92c8f045966286f5", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/cli/src/lib/commands/generate-translation-file-for-piece.ts:24"}, "properties": {"repobilityId": "8f6ec20645c9dc87", "scanner": "scanner-primary", "fingerprint": "92c8f045966286f5", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-0569a2c42a5baabf", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/cli/src/lib/commands/create-trigger.ts:89"}, "properties": {"repobilityId": "a5c26cb02b1e20d9", "scanner": "scanner-primary", "fingerprint": "0569a2c42a5baabf", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-0aed5399d42b15cd", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/cli/src/lib/commands/create-action.ts:30"}, "properties": {"repobilityId": "0f9effd1d4f6ebf5", "scanner": "scanner-primary", "fingerprint": "0aed5399d42b15cd", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-6029a52861312193", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/cli/src/lib/commands/generate-worker-token.ts:43"}, "properties": {"repobilityId": "2e83c064379bca37", "scanner": "scanner-primary", "fingerprint": "6029a52861312193", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-87c7e52488b3b737", "level": "none", "message": {"text": "TODO/FIXME marker in shipping code \u2014 packages/shared/src/lib/automation/flows/operations/add-action-util.ts:32"}, "properties": {"repobilityId": "15fb56119a480491", "scanner": "scanner-primary", "fingerprint": "87c7e52488b3b737", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.todo-marker"]}}, {"ruleId": "scanner-d0d06c61674fb8ed", "level": "none", "message": {"text": "TODO/FIXME marker in shipping code \u2014 packages/shared/src/lib/automation/flows/actions/action.ts:238"}, "properties": {"repobilityId": "642ffc17016438b7", "scanner": "scanner-primary", "fingerprint": "d0d06c61674fb8ed", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.todo-marker"]}}, {"ruleId": "scanner-da3a499ed9d6b1e0", "level": "none", "message": {"text": "TODO/FIXME marker in shipping code \u2014 packages/shared/src/lib/automation/app-connection/oauth2-authorization-method.ts:1"}, "properties": {"repobilityId": "e4f09ef3071ba99c", "scanner": "scanner-primary", "fingerprint": "da3a499ed9d6b1e0", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.todo-marker"]}}, {"ruleId": "scanner-83b26532f84d2e83", "level": "none", "message": {"text": "TODO/FIXME marker in shipping code \u2014 packages/shared/src/lib/management/platform/platform.model.ts:53"}, "properties": {"repobilityId": "0cb8f9f77e946648", "scanner": "scanner-primary", "fingerprint": "83b26532f84d2e83", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.todo-marker"]}}, {"ruleId": "scanner-afb38d5105b83c7c", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/app/builder/data-selector/data-selector-node-content.tsx:155"}, "properties": {"repobilityId": "e45a390e39a14fae", "scanner": "scanner-primary", "fingerprint": "afb38d5105b83c7c", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-d6560e93dbfda921", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/app/builder/data-selector/variables-tab.tsx:139"}, "properties": {"repobilityId": "d4edda0bc5cbc407", "scanner": "scanner-primary", "fingerprint": "d6560e93dbfda921", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-2a3e1fb4f8524416", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/app/builder/piece-properties/text-input-with-mentions/components/function-search-popover.tsx:211"}, "properties": {"repobilityId": "07f4f85e733dce49", "scanner": "scanner-primary", "fingerprint": "2a3e1fb4f8524416", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-e9b24d80c5cd5461", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/app/builder/step-settings/editable-step-name.tsx:63"}, "properties": {"repobilityId": "302302379c782318", "scanner": "scanner-primary", "fingerprint": "e9b24d80c5cd5461", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-90ebebf65774ac1d", "level": "none", "message": {"text": "TODO/FIXME marker in shipping code \u2014 packages/web/src/app/builder/step-settings/branch-settings/branch-single-condition.tsx:142"}, "properties": {"repobilityId": "f9d672dc929a7466", "scanner": "scanner-primary", "fingerprint": "90ebebf65774ac1d", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.todo-marker"]}}, {"ruleId": "scanner-4a3a59d6d81c106b", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/app/builder/step-settings/piece-settings/connection-select.tsx:212"}, "properties": {"repobilityId": "9a0a20a794ca6122", "scanner": "scanner-primary", "fingerprint": "4a3a59d6d81c106b", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-2756c14e381d262a", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/web/src/app/builder/flow-canvas/nodes/note-node/note-tools.tsx:142"}, "properties": {"repobilityId": "58fd0905d51d9f91", "scanner": "scanner-primary", "fingerprint": "2756c14e381d262a", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-8a2436f48c6c0365", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/app/builder/flow-canvas/edges/branch-label.tsx:146"}, "properties": {"repobilityId": "9b659b45ea82efd6", "scanner": "scanner-primary", "fingerprint": "8a2436f48c6c0365", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-c800a326934e9eea", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/app/components/sidebar/sidebar-header.tsx:57"}, "properties": {"repobilityId": "fb1325bcd4e16474", "scanner": "scanner-primary", "fingerprint": "c800a326934e9eea", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-e8c7581eb22b8d4d", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/app/components/sidebar/sidebar-usage-limits.tsx:102"}, "properties": {"repobilityId": "9894288b3a7cca3a", "scanner": "scanner-primary", "fingerprint": "e8c7581eb22b8d4d", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-42caf3fd4328f8f9", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/app/components/sidebar/sidebar-user.tsx:71"}, "properties": {"repobilityId": "2fdb6813e2bca04f", "scanner": "scanner-primary", "fingerprint": "42caf3fd4328f8f9", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-100d4ef1f464b1ac", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/app/components/sidebar/platform/index.tsx:220"}, "properties": {"repobilityId": "b39510dfe6536c5a", "scanner": "scanner-primary", "fingerprint": "100d4ef1f464b1ac", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-c08d1a9c9beebf79", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/app/components/global-search/search-result-item.tsx:171"}, "properties": {"repobilityId": "addee1d914f1209a", "scanner": "scanner-primary", "fingerprint": "c08d1a9c9beebf79", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-c961d7209b8f0397", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/app/connections/replace-connections-dialog.tsx:455"}, "properties": {"repobilityId": "603aeb419256ce3f", "scanner": "scanner-primary", "fingerprint": "c961d7209b8f0397", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-a8b2ea6bc91a249e", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/app/connections/secret-input.tsx:184"}, "properties": {"repobilityId": "d00c959769bcb564", "scanner": "scanner-primary", "fingerprint": "a8b2ea6bc91a249e", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-ad1be6e6ff9a03c1", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/app/connections/oauth2-connection-settings.tsx:217"}, "properties": {"repobilityId": "4a246e754e1c8600", "scanner": "scanner-primary", "fingerprint": "ad1be6e6ff9a03c1", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-08bb26f07e3a3916", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/web/src/app/routes/redirect.tsx:27"}, "properties": {"repobilityId": "8ef1ed8379dac032", "scanner": "scanner-primary", "fingerprint": "08bb26f07e3a3916", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-f74e6e2d926d126e", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/app/routes/variables/index.tsx:144"}, "properties": {"repobilityId": "406e44adfc54fe45", "scanner": "scanner-primary", "fingerprint": "f74e6e2d926d126e", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-6eb017ffb637c136", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/app/routes/impact/components/project-select.tsx:81"}, "properties": {"repobilityId": "13afa67059d6ff8a", "scanner": "scanner-primary", "fingerprint": "6eb017ffb637c136", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-c9ad2de5bcd1477e", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/app/routes/impact/details/index.tsx:90"}, "properties": {"repobilityId": "6bb5e1885a7e66f5", "scanner": "scanner-primary", "fingerprint": "c9ad2de5bcd1477e", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-03cefbfb222db4bf", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/app/routes/templates/id/flow-card.tsx:30"}, "properties": {"repobilityId": "3ee95f3cfefc2993", "scanner": "scanner-primary", "fingerprint": "03cefbfb222db4bf", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-4df44767ad9c144d", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/app/routes/mcp-authorize/index.tsx:177"}, "properties": {"repobilityId": "05ba5b84184a93bd", "scanner": "scanner-primary", "fingerprint": "4df44767ad9c144d", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-d6d608305596914c", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/app/routes/chat-with-ai/index.tsx:217"}, "properties": {"repobilityId": "a6fb0d90412a29e4", "scanner": "scanner-primary", "fingerprint": "d6d608305596914c", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-87834af4ed6211c1", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/app/routes/chat-with-ai/components/chat-input.tsx:142"}, "properties": {"repobilityId": "74d0c6b7a1157d44", "scanner": "scanner-primary", "fingerprint": "87834af4ed6211c1", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-07f73163d2e73597", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/app/routes/chat-with-ai/components/action-receipt-card.tsx:43"}, "properties": {"repobilityId": "17daf7682fdc4c90", "scanner": "scanner-primary", "fingerprint": "07f73163d2e73597", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-c400f61bbc0df8cd", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/app/routes/chat-with-ai/components/chat-empty-state.tsx:226"}, "properties": {"repobilityId": "a056d4ccda38e891", "scanner": "scanner-primary", "fingerprint": "c400f61bbc0df8cd", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-cd17e1445eb14d40", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/app/routes/chat-with-ai/components/user-message.tsx:61"}, "properties": {"repobilityId": "ae04d88d4c5e34e2", "scanner": "scanner-primary", "fingerprint": "cd17e1445eb14d40", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-7edaa5f7c9c16fff", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/app/routes/chat-with-ai/components/connection-picker-card.tsx:283"}, "properties": {"repobilityId": "84581fb549536cee", "scanner": "scanner-primary", "fingerprint": "7edaa5f7c9c16fff", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-7bf69f6a0f32cac9", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/app/routes/connections/index.tsx:191"}, "properties": {"repobilityId": "485d8701c8947f4a", "scanner": "scanner-primary", "fingerprint": "7bf69f6a0f32cac9", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-500279444e83dec8", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/app/routes/platform/connections/index.tsx:128"}, "properties": {"repobilityId": "9997ca64ffe6d3c6", "scanner": "scanner-primary", "fingerprint": "500279444e83dec8", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-61b9f51441f04d4e", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/app/routes/platform/infra/workers/index.tsx:199"}, "properties": {"repobilityId": "fcb22e7e548af59e", "scanner": "scanner-primary", "fingerprint": "61b9f51441f04d4e", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-92fb60b75a3e2669", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/app/routes/platform/projects/columns.tsx:126"}, "properties": {"repobilityId": "bf8ead8939a78ce9", "scanner": "scanner-primary", "fingerprint": "92fb60b75a3e2669", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-b60cc497a4155d76", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/components/custom/searchable-select.tsx:170"}, "properties": {"repobilityId": "a5a839105a061b2b", "scanner": "scanner-primary", "fingerprint": "b60cc497a4155d76", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-d324805b2a587758", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/components/custom/multi-select.tsx:533"}, "properties": {"repobilityId": "523942c0621ea040", "scanner": "scanner-primary", "fingerprint": "d324805b2a587758", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-888cdf327fb2877a", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/components/custom/delete-dialog.tsx:84"}, "properties": {"repobilityId": "3b807489d0a4ff1d", "scanner": "scanner-primary", "fingerprint": "888cdf327fb2877a", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-81f8de3d6537e15a", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/components/custom/ap-avatar.tsx:85"}, "properties": {"repobilityId": "c9d3b3c2407a342a", "scanner": "scanner-primary", "fingerprint": "81f8de3d6537e15a", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-98eb6a567f2a2f55", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/components/custom/multi-select-piece-property.tsx:150"}, "properties": {"repobilityId": "b0acdc5d115e2801", "scanner": "scanner-primary", "fingerprint": "98eb6a567f2a2f55", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-3af50f45ea044146", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/components/custom/data-table/data-table-input-popover.tsx:40"}, "properties": {"repobilityId": "6b266e23070205d2", "scanner": "scanner-primary", "fingerprint": "3af50f45ea044146", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-7fb5f85c61819a67", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/components/custom/smart-output-viewer/output-field-row.tsx:93"}, "properties": {"repobilityId": "017d6d8d237fbd31", "scanner": "scanner-primary", "fingerprint": "7fb5f85c61819a67", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-ea251127f27a33e5", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/components/custom/smart-output-viewer/output-array-list.tsx:17"}, "properties": {"repobilityId": "67f64b144c9ebebb", "scanner": "scanner-primary", "fingerprint": "ea251127f27a33e5", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-88f116c8f9bbf333", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/components/custom/smart-output-viewer/shared-value-rendering.tsx:68"}, "properties": {"repobilityId": "81037ba48e644399", "scanner": "scanner-primary", "fingerprint": "88f116c8f9bbf333", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-d9f4677c118915ba", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/components/custom/smart-output-viewer/output-schema-array-list.tsx:40"}, "properties": {"repobilityId": "9682a2c7e1774378", "scanner": "scanner-primary", "fingerprint": "d9f4677c118915ba", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-1b87ff10698f63e1", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/web/src/components/providers/socket-provider.tsx:33"}, "properties": {"repobilityId": "83338aabb97f0bbc", "scanner": "scanner-primary", "fingerprint": "1b87ff10698f63e1", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-877060275ca7f7f8", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/components/prompt-kit/source.tsx:67"}, "properties": {"repobilityId": "f2b0ee74fa4358f3", "scanner": "scanner-primary", "fingerprint": "877060275ca7f7f8", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-0c9cfce5d6e208ae", "level": "warning", "message": {"text": "`dangerouslySetInnerHTML` used in a React component \u2014 packages/web/src/components/ui/chart.tsx:81"}, "properties": {"repobilityId": "109996bf7ebc955c", "scanner": "scanner-primary", "fingerprint": "0c9cfce5d6e208ae", "layer": "frontend", "severity": "medium", "confidence": 1.0, "tags": ["frontend-quality", "fq.dangerous-html"]}}, {"ruleId": "scanner-6d2a76e908baeea2", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/web/src/components/ui/sortable.tsx:72"}, "properties": {"repobilityId": "151a4d4bf24a0680", "scanner": "scanner-primary", "fingerprint": "6d2a76e908baeea2", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-fec614e360d21a3d", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/features/agents/agent-tools/components/knowledge-base-tool.tsx:53"}, "properties": {"repobilityId": "ec4d1328c19cbc91", "scanner": "scanner-primary", "fingerprint": "fec614e360d21a3d", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-531346719f3825f3", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/features/agents/agent-tools/components/mcp-tool.tsx:56"}, "properties": {"repobilityId": "a7623c135de3302c", "scanner": "scanner-primary", "fingerprint": "531346719f3825f3", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-c29e48536aa182a2", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/features/agents/agent-tools/components/flow-tool.tsx:54"}, "properties": {"repobilityId": "e316fb8217c030e9", "scanner": "scanner-primary", "fingerprint": "c29e48536aa182a2", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-568747230553cff3", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/features/agents/agent-tools/flow-tool-dialog/flow-dialog-content.tsx:98"}, "properties": {"repobilityId": "397c2edb1f7e3905", "scanner": "scanner-primary", "fingerprint": "568747230553cff3", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-b0201331fabf70e0", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/features/agents/ai-model/index.tsx:172"}, "properties": {"repobilityId": "796259629622e97c", "scanner": "scanner-primary", "fingerprint": "b0201331fabf70e0", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-e648fa6907bb4698", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/features/chat/chat-input/file-input-preview.tsx:51"}, "properties": {"repobilityId": "0bcd734dc84fd853", "scanner": "scanner-primary", "fingerprint": "e648fa6907bb4698", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-e01992a8df8a37b4", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/features/chat/chat-message/file-message.tsx:35"}, "properties": {"repobilityId": "d4f4ef26e8d7da0b", "scanner": "scanner-primary", "fingerprint": "e01992a8df8a37b4", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-bcb06d0054204e93", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/web/src/features/flows/components/import-flow-dialog.tsx:160"}, "properties": {"repobilityId": "d468797e4e30f4f8", "scanner": "scanner-primary", "fingerprint": "bcb06d0054204e93", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-93e8828583c23ec4", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/features/authentication/components/auth-animation.tsx:242"}, "properties": {"repobilityId": "d1336f4cfbc21459", "scanner": "scanner-primary", "fingerprint": "93e8828583c23ec4", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-8e905333a0110241", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/features/automations/components/multi-select-filter.tsx:81"}, "properties": {"repobilityId": "e29e977d5b9902dd", "scanner": "scanner-primary", "fingerprint": "8e905333a0110241", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-11b1cd8c95f15c51", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/features/flow-runs/components/runs-table/failed-retry-runs-dialog.tsx:63"}, "properties": {"repobilityId": "f2850a60fa77de54", "scanner": "scanner-primary", "fingerprint": "11b1cd8c95f15c51", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-a9d9c6805f874ab2", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/features/flow-runs/components/runs-table/failed-step-dialog.tsx:83"}, "properties": {"repobilityId": "80ea9fd99cd777ba", "scanner": "scanner-primary", "fingerprint": "a9d9c6805f874ab2", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-28a6069e219fc612", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/web/src/features/tables/components/dropdown-editor.tsx:25"}, "properties": {"repobilityId": "89d737bf4010c5f6", "scanner": "scanner-primary", "fingerprint": "28a6069e219fc612", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-81955ad34beb4e84", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/web/src/features/members/components/accept-invitation.tsx:33"}, "properties": {"repobilityId": "cb27a351b2fdc6cd", "scanner": "scanner-primary", "fingerprint": "81955ad34beb4e84", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-0bfc93aefc9d4972", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 packages/web/src/features/members/components/invite-user/suggested-user-item.tsx:63"}, "properties": {"repobilityId": "70fe4a9482aebce3", "scanner": "scanner-primary", "fingerprint": "0bfc93aefc9d4972", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-f4216a9bc09568ba", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/web/src/lib/api.ts:48"}, "properties": {"repobilityId": "6016719024919bad", "scanner": "scanner-primary", "fingerprint": "f4216a9bc09568ba", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-828bddcabce77171", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/tests-e2e/global-setup.ts:8"}, "properties": {"repobilityId": "52b8d0f1bd7d5bde", "scanner": "scanner-primary", "fingerprint": "828bddcabce77171", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-fa5427d1083d101c", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 tools/setup-dev.js:13"}, "properties": {"repobilityId": "af825538dde5ab1f", "scanner": "scanner-primary", "fingerprint": "fa5427d1083d101c", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-283490078df074df", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 tools/scripts/format-checkly-report.js:63"}, "properties": {"repobilityId": "f5ee00331b35a021", "scanner": "scanner-primary", "fingerprint": "283490078df074df", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-ce3f3977d13866b2", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 tools/scripts/install-bun.js:8"}, "properties": {"repobilityId": "c29f5ec782565bb6", "scanner": "scanner-primary", "fingerprint": "ce3f3977d13866b2", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-c5f02b4debc2f991", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 tools/scripts/check-migration-rollback.ts:65"}, "properties": {"repobilityId": "40ca259abc2f7a5d", "scanner": "scanner-primary", "fingerprint": "c5f02b4debc2f991", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-8790da813c427c7c", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 tools/scripts/migrate-custom-piece-to-turbo.ts:38"}, "properties": {"repobilityId": "55faa137b444278c", "scanner": "scanner-primary", "fingerprint": "8790da813c427c7c", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-556ddd7b6fd7e643", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 tools/scripts/check-manifest-migrations.ts:39"}, "properties": {"repobilityId": "cd1772c80cfc1fd4", "scanner": "scanner-primary", "fingerprint": "556ddd7b6fd7e643", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-072bd67b799690d8", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 tools/scripts/check-release-migrations.ts:29"}, "properties": {"repobilityId": "8dd1492bb50178ca", "scanner": "scanner-primary", "fingerprint": "072bd67b799690d8", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-83cf8faa5bdb4f75", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 tools/scripts/pieces/update-pieces-metadata.ts:61"}, "properties": {"repobilityId": "d9891b3c0d7ada83", "scanner": "scanner-primary", "fingerprint": "83cf8faa5bdb4f75", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-054c7f5dbf033aa2", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 tools/scripts/pieces/bump-translated-pieces.ts:38"}, "properties": {"repobilityId": "114f4d60f77a7526", "scanner": "scanner-primary", "fingerprint": "054c7f5dbf033aa2", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-dd21f8ae612bcb8a", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 tools/scripts/pieces/bump-all-pieces-patch-version.ts:37"}, "properties": {"repobilityId": "d7775b27902084fa", "scanner": "scanner-primary", "fingerprint": "dd21f8ae612bcb8a", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-c5bf78cfd1ba8770", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 tools/scripts/pieces/find-changed-pieces.ts:37"}, "properties": {"repobilityId": "ce8ca0131b255328", "scanner": "scanner-primary", "fingerprint": "c5bf78cfd1ba8770", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-d7d261021fbdcf9c", "level": "error", "message": {"text": "use defused xml \u2014 .agents/skills/mcp-builder/scripts/evaluation.py:13"}, "properties": {"repobilityId": "d59a1436d24d3789", "scanner": "scanner-primary", "fingerprint": "d7d261021fbdcf9c", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["semgrep", "security", "python"]}}, {"ruleId": "scanner-63e6f4ebe1e43390", "level": "warning", "message": {"text": "var in href \u2014 packages/server/api/src/assets/emails/invitation-email.html:57"}, "properties": {"repobilityId": "22095b6ea00060e2", "scanner": "scanner-primary", "fingerprint": "63e6f4ebe1e43390", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["semgrep", "security", "html-templates"]}}, {"ruleId": "scanner-fbaf9a550eaad461", "level": "warning", "message": {"text": "var in href \u2014 packages/server/api/src/assets/emails/invitation-email.html:69"}, "properties": {"repobilityId": "0e6d5e1e363b2bf7", "scanner": "scanner-primary", "fingerprint": "fbaf9a550eaad461", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["semgrep", "security", "html-templates"]}}, {"ruleId": "scanner-5c5dbf7d7a33fb6e", "level": "warning", "message": {"text": "var in href \u2014 packages/server/api/src/assets/emails/issue-created.html:71"}, "properties": {"repobilityId": "34b15fee7ecc7806", "scanner": "scanner-primary", "fingerprint": "5c5dbf7d7a33fb6e", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["semgrep", "security", "html-templates"]}}, {"ruleId": "scanner-6743ca336b61e237", "level": "warning", "message": {"text": "var in href \u2014 packages/server/api/src/assets/emails/issue-created.html:83"}, "properties": {"repobilityId": "c1d3ce0a0dc9ea0e", "scanner": "scanner-primary", "fingerprint": "6743ca336b61e237", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["semgrep", "security", "html-templates"]}}, {"ruleId": "scanner-3a3c28d7f8e5a6d7", "level": "warning", "message": {"text": "var in href \u2014 packages/server/api/src/assets/emails/project-member-added.html:51"}, "properties": {"repobilityId": "26ced9a5a15f836d", "scanner": "scanner-primary", "fingerprint": "3a3c28d7f8e5a6d7", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["semgrep", "security", "html-templates"]}}, {"ruleId": "scanner-8f35bd6055679dc8", "level": "warning", "message": {"text": "var in href \u2014 packages/server/api/src/assets/emails/project-member-added.html:63"}, "properties": {"repobilityId": "6b8a395f4a8495df", "scanner": "scanner-primary", "fingerprint": "8f35bd6055679dc8", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["semgrep", "security", "html-templates"]}}, {"ruleId": "scanner-53485ae9a15bdf54", "level": "warning", "message": {"text": "var in href \u2014 packages/server/api/src/assets/emails/reset-password.html:63"}, "properties": {"repobilityId": "8c808b2be6beb451", "scanner": "scanner-primary", "fingerprint": "53485ae9a15bdf54", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["semgrep", "security", "html-templates"]}}, {"ruleId": "scanner-8d714b99a02bc8d8", "level": "warning", "message": {"text": "var in href \u2014 packages/server/api/src/assets/emails/reset-password.html:75"}, "properties": {"repobilityId": "be052b28ac2b95ec", "scanner": "scanner-primary", "fingerprint": "8d714b99a02bc8d8", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["semgrep", "security", "html-templates"]}}, {"ruleId": "scanner-9caf4c4b945bc926", "level": "warning", "message": {"text": "var in href \u2014 packages/server/api/src/assets/emails/scim-user-welcome.html:51"}, "properties": {"repobilityId": "cfda81e7aa43ac19", "scanner": "scanner-primary", "fingerprint": "9caf4c4b945bc926", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["semgrep", "security", "html-templates"]}}, {"ruleId": "scanner-af7fcb3249469f43", "level": "warning", "message": {"text": "var in href \u2014 packages/server/api/src/assets/emails/scim-user-welcome.html:63"}, "properties": {"repobilityId": "c98bffecd33debc6", "scanner": "scanner-primary", "fingerprint": "af7fcb3249469f43", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["semgrep", "security", "html-templates"]}}, {"ruleId": "scanner-02c40bf0e731a791", "level": "warning", "message": {"text": "var in href \u2014 packages/server/api/src/assets/emails/verify-email.html:51"}, "properties": {"repobilityId": "0e66810b101e230d", "scanner": "scanner-primary", "fingerprint": "02c40bf0e731a791", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["semgrep", "security", "html-templates"]}}, {"ruleId": "scanner-b6eb8f44e59a49a2", "level": "warning", "message": {"text": "var in href \u2014 packages/server/api/src/assets/emails/verify-email.html:63"}, "properties": {"repobilityId": "75ecab975675aae4", "scanner": "scanner-primary", "fingerprint": "b6eb8f44e59a49a2", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["semgrep", "security", "html-templates"]}}, {"ruleId": "scanner-23f0bc755bedc635", "level": "error", "message": {"text": "detect child process \u2014 tools/scripts/pieces/bump-translated-pieces.ts:60"}, "properties": {"repobilityId": "a15f432f885a6d2e", "scanner": "scanner-primary", "fingerprint": "23f0bc755bedc635", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["semgrep", "security", "javascript"]}}, {"ruleId": "scanner-3c622f56268d17bb", "level": "error", "message": {"text": "detect child process \u2014 tools/scripts/pieces/bump-translated-pieces.ts:80"}, "properties": {"repobilityId": "e19c46188b5a9aad", "scanner": "scanner-primary", "fingerprint": "3c622f56268d17bb", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["semgrep", "security", "javascript"]}}, {"ruleId": "scanner-4a9b26f2f9d70b46", "level": "error", "message": {"text": "detect child process \u2014 tools/scripts/pieces/bump-translated-pieces.ts:108"}, "properties": {"repobilityId": "0826bdb345233cbf", "scanner": "scanner-primary", "fingerprint": "4a9b26f2f9d70b46", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["semgrep", "security", "javascript"]}}, {"ruleId": "scanner-6ebff1da01c256ff", "level": "error", "message": {"text": "CVE-2026-48068: @grpc/grpc-js 1.14.3 \u2014 bun.lock"}, "properties": {"repobilityId": "1c64d71a9447ad97", "scanner": "scanner-primary", "fingerprint": "6ebff1da01c256ff", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-48068"]}}, {"ruleId": "scanner-2ed36661da0f0b12", "level": "error", "message": {"text": "CVE-2026-48069: @grpc/grpc-js 1.14.3 \u2014 bun.lock"}, "properties": {"repobilityId": "8a41372b4ecbbb07", "scanner": "scanner-primary", "fingerprint": "2ed36661da0f0b12", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-48069"]}}, {"ruleId": "scanner-a29f5397d5caf88a", "level": "error", "message": {"text": "CVE-2026-22029: @remix-run/router 1.6.2 \u2014 bun.lock"}, "properties": {"repobilityId": "625a25f7a1994ca5", "scanner": "scanner-primary", "fingerprint": "a29f5397d5caf88a", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-22029"]}}, {"ruleId": "scanner-3bc3b31ebf2c195c", "level": "warning", "message": {"text": "GHSA-x3ff-w252-2g7j: @stablelib/ed25519 1.0.3 \u2014 bun.lock"}, "properties": {"repobilityId": "266b3ed8f3c79224", "scanner": "scanner-primary", "fingerprint": "3bc3b31ebf2c195c", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["trivy", "vuln", "GHSA-x3ff-w252-2g7j"]}}, {"ruleId": "scanner-e20f01f59523d9a5", "level": "note", "message": {"text": "CVE-2025-48370: @supabase/auth-js 2.69.1 \u2014 bun.lock"}, "properties": {"repobilityId": "e86cbfef0266cbbe", "scanner": "scanner-primary", "fingerprint": "e20f01f59523d9a5", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2025-48370"]}}, {"ruleId": "scanner-2e361f2b92e11d97", "level": "error", "message": {"text": "CVE-2026-44486: axios 1.15.2 \u2014 bun.lock"}, "properties": {"repobilityId": "140b733c238edd6e", "scanner": "scanner-primary", "fingerprint": "2e361f2b92e11d97", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-44486"]}}, {"ruleId": "scanner-e86c15113ce67540", "level": "error", "message": {"text": "CVE-2026-44487: axios 1.15.2 \u2014 bun.lock"}, "properties": {"repobilityId": "f4175884ee8d0ad6", "scanner": "scanner-primary", "fingerprint": "e86c15113ce67540", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-44487"]}}, {"ruleId": "scanner-b33ccb9eb0cae9f7", "level": "error", "message": {"text": "CVE-2026-44488: axios 1.15.2 \u2014 bun.lock"}, "properties": {"repobilityId": "ac1acec6a1193f72", "scanner": "scanner-primary", "fingerprint": "b33ccb9eb0cae9f7", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-44488"]}}, {"ruleId": "scanner-8cb9bc3bc0ab7a4b", "level": "error", "message": {"text": "CVE-2026-44492: axios 1.15.2 \u2014 bun.lock"}, "properties": {"repobilityId": "99eecf0db6970e34", "scanner": "scanner-primary", "fingerprint": "8cb9bc3bc0ab7a4b", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-44492"]}}, {"ruleId": "scanner-2cda49af15e4b742", "level": "error", "message": {"text": "CVE-2026-44494: axios 1.15.2 \u2014 bun.lock"}, "properties": {"repobilityId": "2bce5dc738913cdb", "scanner": "scanner-primary", "fingerprint": "2cda49af15e4b742", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-44494"]}}, {"ruleId": "scanner-ab958d85d2d0b23c", "level": "error", "message": {"text": "CVE-2026-44496: axios 1.15.2 \u2014 bun.lock"}, "properties": {"repobilityId": "14a50ca1515ac4d1", "scanner": "scanner-primary", "fingerprint": "ab958d85d2d0b23c", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-44496"]}}, {"ruleId": "scanner-933193bd69eb00f5", "level": "warning", "message": {"text": "CVE-2026-44490: axios 1.15.2 \u2014 bun.lock"}, "properties": {"repobilityId": "f674abcd6e39c94c", "scanner": "scanner-primary", "fingerprint": "933193bd69eb00f5", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-44490"]}}, {"ruleId": "scanner-624dd044dde56854", "level": "note", "message": {"text": "CVE-2026-44489: axios 1.15.2 \u2014 bun.lock"}, "properties": {"repobilityId": "db166c28c634cf2d", "scanner": "scanner-primary", "fingerprint": "624dd044dde56854", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-44489"]}}, {"ruleId": "scanner-c962935d3ce8bdc1", "level": "warning", "message": {"text": "GHSA-cmwh-pvxp-8882: dompurify 3.4.9 \u2014 bun.lock"}, "properties": {"repobilityId": "8d4ee6094e5a1df1", "scanner": "scanner-primary", "fingerprint": "c962935d3ce8bdc1", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["trivy", "vuln", "GHSA-cmwh-pvxp-8882"]}}, {"ruleId": "scanner-3022738d32ff2d36", "level": "error", "message": {"text": "GHSA-vjh7-7g9h-fjfh: elliptic 6.5.4 \u2014 bun.lock"}, "properties": {"repobilityId": "7bb66b1828c6adcb", "scanner": "scanner-primary", "fingerprint": "3022738d32ff2d36", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["trivy", "vuln", "GHSA-vjh7-7g9h-fjfh"]}}, {"ruleId": "scanner-d2aed882f8dab0c7", "level": "note", "message": {"text": "CVE-2024-42459: elliptic 6.5.4 \u2014 bun.lock"}, "properties": {"repobilityId": "83d41f0f67906b2e", "scanner": "scanner-primary", "fingerprint": "d2aed882f8dab0c7", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2024-42459"]}}, {"ruleId": "scanner-1eab01d639b50e4e", "level": "note", "message": {"text": "CVE-2024-42460: elliptic 6.5.4 \u2014 bun.lock"}, "properties": {"repobilityId": "7e95cd0b2872723d", "scanner": "scanner-primary", "fingerprint": "1eab01d639b50e4e", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2024-42460"]}}, {"ruleId": "scanner-77bb9522fd4d1c7f", "level": "note", "message": {"text": "CVE-2024-42461: elliptic 6.5.4 \u2014 bun.lock"}, "properties": {"repobilityId": "3839f95667ba3575", "scanner": "scanner-primary", "fingerprint": "77bb9522fd4d1c7f", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2024-42461"]}}, {"ruleId": "scanner-517d11d2271cc6fc", "level": "note", "message": {"text": "CVE-2024-48948: elliptic 6.5.4 \u2014 bun.lock"}, "properties": {"repobilityId": "5f7527a941936a1b", "scanner": "scanner-primary", "fingerprint": "517d11d2271cc6fc", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2024-48948"]}}, {"ruleId": "scanner-3e1f77f7047b1d75", "level": "note", "message": {"text": "CVE-2024-48949: elliptic 6.5.4 \u2014 bun.lock"}, "properties": {"repobilityId": "54eb19aa84d69d7b", "scanner": "scanner-primary", "fingerprint": "3e1f77f7047b1d75", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2024-48949"]}}, {"ruleId": "scanner-36fc07d4b32cc7c5", "level": "note", "message": {"text": "CVE-2025-14505: elliptic 6.5.4 \u2014 bun.lock"}, "properties": {"repobilityId": "af7c6b4fb02ded4b", "scanner": "scanner-primary", "fingerprint": "36fc07d4b32cc7c5", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2025-14505"]}}, {"ruleId": "scanner-5c9febf7d789c16e", "level": "error", "message": {"text": "CVE-2026-8813: exifreader 4.20.0 \u2014 bun.lock"}, "properties": {"repobilityId": "4a392677d39f18f5", "scanner": "scanner-primary", "fingerprint": "5c9febf7d789c16e", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-8813"]}}, {"ruleId": "scanner-1e28cc9957df243c", "level": "warning", "message": {"text": "CVE-2026-8814: exifreader 4.20.0 \u2014 bun.lock"}, "properties": {"repobilityId": "caca0a250dcae979", "scanner": "scanner-primary", "fingerprint": "1e28cc9957df243c", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-8814"]}}, {"ruleId": "scanner-476c82eaf168825f", "level": "error", "message": {"text": "CVE-2025-12735: expr-eval 2.0.2 \u2014 bun.lock"}, "properties": {"repobilityId": "aca99d24edf69239", "scanner": "scanner-primary", "fingerprint": "476c82eaf168825f", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2025-12735"]}}, {"ruleId": "scanner-20eeb5025192eef3", "level": "error", "message": {"text": "CVE-2025-13204: expr-eval 2.0.2 \u2014 bun.lock"}, "properties": {"repobilityId": "4eba9005ebfdbe71", "scanner": "scanner-primary", "fingerprint": "20eeb5025192eef3", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2025-13204"]}}, {"ruleId": "scanner-4415f1d42172f183", "level": "error", "message": {"text": "CVE-2026-6321: fast-uri 3.1.0 \u2014 bun.lock"}, "properties": {"repobilityId": "fd46116855e3fdaa", "scanner": "scanner-primary", "fingerprint": "4415f1d42172f183", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-6321"]}}, {"ruleId": "scanner-d4ae4946325eb17c", "level": "error", "message": {"text": "CVE-2026-6322: fast-uri 3.1.0 \u2014 bun.lock"}, "properties": {"repobilityId": "02b1fa4aa9b43124", "scanner": "scanner-primary", "fingerprint": "d4ae4946325eb17c", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-6322"]}}, {"ruleId": "scanner-9d3dcea08e4a7569", "level": "error", "message": {"text": "CVE-2026-44665: fast-xml-builder 1.1.5 \u2014 bun.lock"}, "properties": {"repobilityId": "9c1723665e96fe67", "scanner": "scanner-primary", "fingerprint": "9d3dcea08e4a7569", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-44665"]}}, {"ruleId": "scanner-73c7302df57e4e67", "level": "warning", "message": {"text": "CVE-2026-44664: fast-xml-builder 1.1.5 \u2014 bun.lock"}, "properties": {"repobilityId": "0136775e8d75a2ec", "scanner": "scanner-primary", "fingerprint": "73c7302df57e4e67", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-44664"]}}, {"ruleId": "scanner-9a23206e5aa03758", "level": "error", "message": {"text": "CVE-2026-12143: form-data 4.0.4 \u2014 bun.lock"}, "properties": {"repobilityId": "8c2e5e384759a0ad", "scanner": "scanner-primary", "fingerprint": "9a23206e5aa03758", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-12143"]}}, {"ruleId": "scanner-daba10389363d859", "level": "error", "message": {"text": "CVE-2026-54290: hono 4.12.16 \u2014 bun.lock"}, "properties": {"repobilityId": "be44ad064fb6bc18", "scanner": "scanner-primary", "fingerprint": "daba10389363d859", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-54290"]}}, {"ruleId": "scanner-53b12612a2616be0", "level": "warning", "message": {"text": "CVE-2026-44457: hono 4.12.16 \u2014 bun.lock"}, "properties": {"repobilityId": "453f3a6c4c16e63d", "scanner": "scanner-primary", "fingerprint": "53b12612a2616be0", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-44457"]}}, {"ruleId": "scanner-499787e8e760ca76", "level": "warning", "message": {"text": "CVE-2026-44458: hono 4.12.16 \u2014 bun.lock"}, "properties": {"repobilityId": "06ae4ebeff8a6d1d", "scanner": "scanner-primary", "fingerprint": "499787e8e760ca76", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-44458"]}}, {"ruleId": "scanner-f3ea00570b01929a", "level": "warning", "message": {"text": "CVE-2026-47673: hono 4.12.16 \u2014 bun.lock"}, "properties": {"repobilityId": "1543e68efc73f6c4", "scanner": "scanner-primary", "fingerprint": "f3ea00570b01929a", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-47673"]}}, {"ruleId": "scanner-f4a1596b9c9da86d", "level": "warning", "message": {"text": "CVE-2026-47674: hono 4.12.16 \u2014 bun.lock"}, "properties": {"repobilityId": "f3c7b256ba0a18ff", "scanner": "scanner-primary", "fingerprint": "f4a1596b9c9da86d", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-47674"]}}, {"ruleId": "scanner-fa3f60aa662ea6f1", "level": "warning", "message": {"text": "CVE-2026-47675: hono 4.12.16 \u2014 bun.lock"}, "properties": {"repobilityId": "3f33445a9977efd2", "scanner": "scanner-primary", "fingerprint": "fa3f60aa662ea6f1", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-47675"]}}, {"ruleId": "scanner-fee0343be2629827", "level": "warning", "message": {"text": "CVE-2026-47676: hono 4.12.16 \u2014 bun.lock"}, "properties": {"repobilityId": "782734d0f4e62d0f", "scanner": "scanner-primary", "fingerprint": "fee0343be2629827", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-47676"]}}, {"ruleId": "scanner-591a653f9cf722c4", "level": "warning", "message": {"text": "CVE-2026-54286: hono 4.12.16 \u2014 bun.lock"}, "properties": {"repobilityId": "d38be31135f6ba2f", "scanner": "scanner-primary", "fingerprint": "591a653f9cf722c4", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-54286"]}}, {"ruleId": "scanner-2be74bce2882c894", "level": "warning", "message": {"text": "CVE-2026-54287: hono 4.12.16 \u2014 bun.lock"}, "properties": {"repobilityId": "04a99108ab06b317", "scanner": "scanner-primary", "fingerprint": "2be74bce2882c894", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-54287"]}}, {"ruleId": "scanner-1fc6f654da3609b6", "level": "warning", "message": {"text": "CVE-2026-54288: hono 4.12.16 \u2014 bun.lock"}, "properties": {"repobilityId": "466fbe7619ba31cd", "scanner": "scanner-primary", "fingerprint": "1fc6f654da3609b6", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-54288"]}}, {"ruleId": "scanner-f074abaa54386ff7", "level": "warning", "message": {"text": "CVE-2026-54289: hono 4.12.16 \u2014 bun.lock"}, "properties": {"repobilityId": "b579beaa205e6b1a", "scanner": "scanner-primary", "fingerprint": "f074abaa54386ff7", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-54289"]}}, {"ruleId": "scanner-919e5a9abac29476", "level": "note", "message": {"text": "CVE-2026-44459: hono 4.12.16 \u2014 bun.lock"}, "properties": {"repobilityId": "b4b6902c0ce4e0f3", "scanner": "scanner-primary", "fingerprint": "919e5a9abac29476", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-44459"]}}, {"ruleId": "scanner-078d7fe02ddcfd59", "level": "warning", "message": {"text": "CVE-2026-42338: ip-address 10.1.0 \u2014 bun.lock"}, "properties": {"repobilityId": "f5e7d9ad4f63ef1e", "scanner": "scanner-primary", "fingerprint": "078d7fe02ddcfd59", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-42338"]}}, {"ruleId": "scanner-3d073c6a0ffaffe8", "level": "error", "message": {"text": "CVE-2026-46625: js-cookie 2.2.1 \u2014 bun.lock"}, "properties": {"repobilityId": "d9ba385c081a0471", "scanner": "scanner-primary", "fingerprint": "3d073c6a0ffaffe8", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-46625"]}}, {"ruleId": "scanner-826c36be5e0903cb", "level": "warning", "message": {"text": "CVE-2026-53550: js-yaml 4.1.1 \u2014 bun.lock"}, "properties": {"repobilityId": "86a2776e53b52976", "scanner": "scanner-primary", "fingerprint": "826c36be5e0903cb", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-53550"]}}, {"ruleId": "scanner-cf4ed4e06ae2af83", "level": "warning", "message": {"text": "CVE-2024-28243: katex 0.12.0 \u2014 bun.lock"}, "properties": {"repobilityId": "f667bddca0308286", "scanner": "scanner-primary", "fingerprint": "cf4ed4e06ae2af83", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2024-28243"]}}, {"ruleId": "scanner-d61eec7a83fe0a31", "level": "warning", "message": {"text": "CVE-2024-28245: katex 0.12.0 \u2014 bun.lock"}, "properties": {"repobilityId": "b049deac8ad820b0", "scanner": "scanner-primary", "fingerprint": "d61eec7a83fe0a31", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2024-28245"]}}, {"ruleId": "scanner-eaee14036641d37e", "level": "warning", "message": {"text": "CVE-2024-28246: katex 0.12.0 \u2014 bun.lock"}, "properties": {"repobilityId": "1a985809335137a4", "scanner": "scanner-primary", "fingerprint": "eaee14036641d37e", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2024-28246"]}}, {"ruleId": "scanner-bef3c1b1d1be365f", "level": "warning", "message": {"text": "CVE-2025-23207: katex 0.12.0 \u2014 bun.lock"}, "properties": {"repobilityId": "db2e8f94f757662c", "scanner": "scanner-primary", "fingerprint": "bef3c1b1d1be365f", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2025-23207"]}}, {"ruleId": "scanner-d3a911853b68da03", "level": "warning", "message": {"text": "CVE-2026-48988: markdown-it 14.1.1 \u2014 bun.lock"}, "properties": {"repobilityId": "3ec54a869b73c82c", "scanner": "scanner-primary", "fingerprint": "d3a911853b68da03", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-48988"]}}, {"ruleId": "scanner-44cf92e7ec2d6798", "level": "error", "message": {"text": "GHSA-p6gq-j5cr-w38f: nodemailer 8.0.5 \u2014 bun.lock"}, "properties": {"repobilityId": "4d87f15ce5a4e051", "scanner": "scanner-primary", "fingerprint": "44cf92e7ec2d6798", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["trivy", "vuln", "GHSA-p6gq-j5cr-w38f"]}}, {"ruleId": "scanner-af964b6188d79373", "level": "warning", "message": {"text": "GHSA-268h-hp4c-crq3: nodemailer 8.0.5 \u2014 bun.lock"}, "properties": {"repobilityId": "459b4036ea601463", "scanner": "scanner-primary", "fingerprint": "af964b6188d79373", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["trivy", "vuln", "GHSA-268h-hp4c-crq3"]}}, {"ruleId": "scanner-77938363674f4a18", "level": "warning", "message": {"text": "GHSA-r7g4-qg5f-qqm2: nodemailer 8.0.5 \u2014 bun.lock"}, "properties": {"repobilityId": "2f0f3c2a21ebae34", "scanner": "scanner-primary", "fingerprint": "77938363674f4a18", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["trivy", "vuln", "GHSA-r7g4-qg5f-qqm2"]}}, {"ruleId": "scanner-93279c1b094f32cd", "level": "warning", "message": {"text": "GHSA-wqvq-jvpq-h66f: nodemailer 8.0.5 \u2014 bun.lock"}, "properties": {"repobilityId": "b8e1b0697f9eae33", "scanner": "scanner-primary", "fingerprint": "93279c1b094f32cd", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["trivy", "vuln", "GHSA-wqvq-jvpq-h66f"]}}, {"ruleId": "scanner-a3e2b604076894e9", "level": "error", "message": {"text": "CVE-2026-41242: protobufjs 6.11.5 \u2014 bun.lock"}, "properties": {"repobilityId": "ab0aea43bb0cbb23", "scanner": "scanner-primary", "fingerprint": "a3e2b604076894e9", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-41242"]}}, {"ruleId": "scanner-500c471ad893fde0", "level": "error", "message": {"text": "CVE-2026-44289: protobufjs 6.11.5 \u2014 bun.lock"}, "properties": {"repobilityId": "b9f0a385b5c418e6", "scanner": "scanner-primary", "fingerprint": "500c471ad893fde0", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-44289"]}}, {"ruleId": "scanner-31a7f9ccf2597375", "level": "error", "message": {"text": "CVE-2026-44290: protobufjs 6.11.5 \u2014 bun.lock"}, "properties": {"repobilityId": "4cf00acd5d418eb7", "scanner": "scanner-primary", "fingerprint": "31a7f9ccf2597375", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-44290"]}}, {"ruleId": "scanner-47d096feaa239741", "level": "error", "message": {"text": "CVE-2026-44291: protobufjs 6.11.5 \u2014 bun.lock"}, "properties": {"repobilityId": "40b28dd1f07251c8", "scanner": "scanner-primary", "fingerprint": "47d096feaa239741", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-44291"]}}, {"ruleId": "scanner-19e13d13db56fdd3", "level": "error", "message": {"text": "CVE-2026-44293: protobufjs 6.11.5 \u2014 bun.lock"}, "properties": {"repobilityId": "9f01a14bae92b98f", "scanner": "scanner-primary", "fingerprint": "19e13d13db56fdd3", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-44293"]}}, {"ruleId": "scanner-43a99ec841da0e5d", "level": "error", "message": {"text": "CVE-2026-48712: protobufjs 6.11.5 \u2014 bun.lock"}, "properties": {"repobilityId": "be60186f9c85135f", "scanner": "scanner-primary", "fingerprint": "43a99ec841da0e5d", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-48712"]}}, {"ruleId": "scanner-ac0eac760d5d3ea5", "level": "warning", "message": {"text": "CVE-2026-44288: protobufjs 6.11.5 \u2014 bun.lock"}, "properties": {"repobilityId": "a9d85a11bffcfe25", "scanner": "scanner-primary", "fingerprint": "ac0eac760d5d3ea5", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-44288"]}}, {"ruleId": "scanner-dd968e5649bbfccd", "level": "warning", "message": {"text": "CVE-2026-44292: protobufjs 6.11.5 \u2014 bun.lock"}, "properties": {"repobilityId": "511b38448f6e8f26", "scanner": "scanner-primary", "fingerprint": "dd968e5649bbfccd", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-44292"]}}, {"ruleId": "scanner-5b876e31945679ce", "level": "warning", "message": {"text": "CVE-2026-44294: protobufjs 6.11.5 \u2014 bun.lock"}, "properties": {"repobilityId": "f0daa32316cfd2bd", "scanner": "scanner-primary", "fingerprint": "5b876e31945679ce", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-44294"]}}, {"ruleId": "scanner-80fa77e256b05ce6", "level": "warning", "message": {"text": "CVE-2026-45740: protobufjs 6.11.5 \u2014 bun.lock"}, "properties": {"repobilityId": "574ae43bd6062310", "scanner": "scanner-primary", "fingerprint": "80fa77e256b05ce6", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-45740"]}}, {"ruleId": "scanner-b25bf1c80759b76a", "level": "warning", "message": {"text": "CVE-2026-54269: protobufjs 6.11.5 \u2014 bun.lock"}, "properties": {"repobilityId": "52127ef0df1cbf87", "scanner": "scanner-primary", "fingerprint": "b25bf1c80759b76a", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-54269"]}}, {"ruleId": "scanner-e9b384028bf7b385", "level": "warning", "message": {"text": "CVE-2026-8723: qs 6.14.2 \u2014 bun.lock"}, "properties": {"repobilityId": "9d06910cd6d66a95", "scanner": "scanner-primary", "fingerprint": "e9b384028bf7b385", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-8723"]}}, {"ruleId": "scanner-7c71e617ca79ad21", "level": "warning", "message": {"text": "CVE-2025-68470: react-router 6.11.2 \u2014 bun.lock"}, "properties": {"repobilityId": "ad74934a4c873c81", "scanner": "scanner-primary", "fingerprint": "7c71e617ca79ad21", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2025-68470"]}}, {"ruleId": "scanner-fc0492477e403d51", "level": "warning", "message": {"text": "CVE-2026-40181: react-router 6.11.2 \u2014 bun.lock"}, "properties": {"repobilityId": "4e12209eee7279dc", "scanner": "scanner-primary", "fingerprint": "fc0492477e403d51", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-40181"]}}, {"ruleId": "scanner-735234803b71be2e", "level": "error", "message": {"text": "CVE-2026-46490: samlify 2.10.0 \u2014 bun.lock"}, "properties": {"repobilityId": "26ffc07bd7e0e83f", "scanner": "scanner-primary", "fingerprint": "735234803b71be2e", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-46490"]}}, {"ruleId": "scanner-13c5af6ba9d860c7", "level": "warning", "message": {"text": "CVE-2024-1899: showdown 2.1.0 \u2014 bun.lock"}, "properties": {"repobilityId": "ab1e43fe02fadaa3", "scanner": "scanner-primary", "fingerprint": "13c5af6ba9d860c7", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2024-1899"]}}, {"ruleId": "scanner-1027f9b81aca5b41", "level": "warning", "message": {"text": "CVE-2026-53655: tar 7.5.13 \u2014 bun.lock"}, "properties": {"repobilityId": "6f9103b7bd3beae4", "scanner": "scanner-primary", "fingerprint": "1027f9b81aca5b41", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-53655"]}}, {"ruleId": "scanner-52e19b7d09636026", "level": "error", "message": {"text": "CVE-2026-44705: tmp 0.2.5 \u2014 bun.lock"}, "properties": {"repobilityId": "d90c14549a0cc326", "scanner": "scanner-primary", "fingerprint": "52e19b7d09636026", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-44705"]}}, {"ruleId": "scanner-938338aa349df094", "level": "warning", "message": {"text": "GHSA-9ggv-8w38-r7pm: typeorm 0.3.28 \u2014 bun.lock"}, "properties": {"repobilityId": "985c5bbe80c96822", "scanner": "scanner-primary", "fingerprint": "938338aa349df094", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["trivy", "vuln", "GHSA-9ggv-8w38-r7pm"]}}, {"ruleId": "scanner-1c06133c25e33ccb", "level": "warning", "message": {"text": "CVE-2026-48125: ua-parser-js 2.0.9 \u2014 bun.lock"}, "properties": {"repobilityId": "dd177be122145047", "scanner": "scanner-primary", "fingerprint": "1c06133c25e33ccb", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-48125"]}}, {"ruleId": "scanner-d3acacc074a87b3c", "level": "error", "message": {"text": "CVE-2026-12151: undici 7.24.6 \u2014 bun.lock"}, "properties": {"repobilityId": "50b23b70681c1805", "scanner": "scanner-primary", "fingerprint": "d3acacc074a87b3c", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-12151"]}}, {"ruleId": "scanner-cb70dcabc3be201e", "level": "error", "message": {"text": "CVE-2026-6734: undici 7.24.6 \u2014 bun.lock"}, "properties": {"repobilityId": "2d7c388dd09da1ec", "scanner": "scanner-primary", "fingerprint": "cb70dcabc3be201e", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-6734"]}}, {"ruleId": "scanner-86ef58f2463f3ad6", "level": "error", "message": {"text": "CVE-2026-9697: undici 7.24.6 \u2014 bun.lock"}, "properties": {"repobilityId": "126c190e28c8fb8d", "scanner": "scanner-primary", "fingerprint": "86ef58f2463f3ad6", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-9697"]}}, {"ruleId": "scanner-48f61a777dd5509e", "level": "warning", "message": {"text": "CVE-2026-9678: undici 7.24.6 \u2014 bun.lock"}, "properties": {"repobilityId": "58d5b9a66bda8803", "scanner": "scanner-primary", "fingerprint": "48f61a777dd5509e", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-9678"]}}, {"ruleId": "scanner-4c22e3c436bc8533", "level": "warning", "message": {"text": "CVE-2026-9679: undici 7.24.6 \u2014 bun.lock"}, "properties": {"repobilityId": "9b66c8a2ac495405", "scanner": "scanner-primary", "fingerprint": "4c22e3c436bc8533", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-9679"]}}, {"ruleId": "scanner-d3df3b6f34a15b3a", "level": "note", "message": {"text": "CVE-2026-11525: undici 7.24.6 \u2014 bun.lock"}, "properties": {"repobilityId": "87d800cd3babeb8e", "scanner": "scanner-primary", "fingerprint": "d3df3b6f34a15b3a", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-11525"]}}, {"ruleId": "scanner-d54a21896954d294", "level": "note", "message": {"text": "CVE-2026-6733: undici 7.24.6 \u2014 bun.lock"}, "properties": {"repobilityId": "b3464a2e7f2fad7e", "scanner": "scanner-primary", "fingerprint": "d54a21896954d294", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-6733"]}}, {"ruleId": "scanner-e9bf9fad11dc1193", "level": "error", "message": {"text": "CVE-2026-48779: ws 8.20.0 \u2014 bun.lock"}, "properties": {"repobilityId": "9a75ec762b2a9ab4", "scanner": "scanner-primary", "fingerprint": "e9bf9fad11dc1193", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-48779"]}}, {"ruleId": "scanner-ce07af55656404a1", "level": "warning", "message": {"text": "CVE-2026-45736: ws 8.20.0 \u2014 bun.lock"}, "properties": {"repobilityId": "1b799f9b4071cbe2", "scanner": "scanner-primary", "fingerprint": "ce07af55656404a1", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-45736"]}}, {"ruleId": "scanner-307b3c8c773e5ac0", "level": "error", "message": {"text": "CVE-2023-30533: xlsx 0.18.5 \u2014 bun.lock"}, "properties": {"repobilityId": "a01e065980563dda", "scanner": "scanner-primary", "fingerprint": "307b3c8c773e5ac0", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2023-30533"]}}, {"ruleId": "scanner-a12836d7453d9d41", "level": "error", "message": {"text": "CVE-2024-22363: xlsx 0.18.5 \u2014 bun.lock"}, "properties": {"repobilityId": "a470496ad999644a", "scanner": "scanner-primary", "fingerprint": "a12836d7453d9d41", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2024-22363"]}}, {"ruleId": "scanner-e5247874fd75cba4", "level": "error", "message": {"text": "CVE-2026-25896: fast-xml-parser 5.3.4 \u2014 packages/pieces/community/amazon-bedrock/bun.lock"}, "properties": {"repobilityId": "a8d6f07b10493701", "scanner": "scanner-primary", "fingerprint": "e5247874fd75cba4", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-25896"]}}, {"ruleId": "scanner-c92d9b5ac064056c", "level": "error", "message": {"text": "CVE-2026-26278: fast-xml-parser 5.3.4 \u2014 packages/pieces/community/amazon-bedrock/bun.lock"}, "properties": {"repobilityId": "11649254f4ec59a6", "scanner": "scanner-primary", "fingerprint": "c92d9b5ac064056c", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-26278"]}}, {"ruleId": "scanner-053d6bd6e2c0e449", "level": "error", "message": {"text": "CVE-2026-33036: fast-xml-parser 5.3.4 \u2014 packages/pieces/community/amazon-bedrock/bun.lock"}, "properties": {"repobilityId": "00b1b43979b272dc", "scanner": "scanner-primary", "fingerprint": "053d6bd6e2c0e449", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-33036"]}}, {"ruleId": "scanner-95d1961d3398dc25", "level": "warning", "message": {"text": "CVE-2026-33349: fast-xml-parser 5.3.4 \u2014 packages/pieces/community/amazon-bedrock/bun.lock"}, "properties": {"repobilityId": "baca32e2af9531f5", "scanner": "scanner-primary", "fingerprint": "95d1961d3398dc25", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-33349"]}}, {"ruleId": "scanner-7b54dc9b73ca5009", "level": "warning", "message": {"text": "CVE-2026-41650: fast-xml-parser 5.3.4 \u2014 packages/pieces/community/amazon-bedrock/bun.lock"}, "properties": {"repobilityId": "140a9092454ddd46", "scanner": "scanner-primary", "fingerprint": "7b54dc9b73ca5009", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-41650"]}}, {"ruleId": "scanner-ebceea0cdb7ffae5", "level": "note", "message": {"text": "CVE-2026-27942: fast-xml-parser 5.3.4 \u2014 packages/pieces/community/amazon-bedrock/bun.lock"}, "properties": {"repobilityId": "8c93977076c0e81d", "scanner": "scanner-primary", "fingerprint": "ebceea0cdb7ffae5", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-27942"]}}, {"ruleId": "scanner-6b63e6cd85633e4c", "level": "error", "message": {"text": "CVE-2026-25639: axios 1.13.2 \u2014 packages/pieces/community/base44/bun.lock"}, "properties": {"repobilityId": "b4639f7e507d76e7", "scanner": "scanner-primary", "fingerprint": "6b63e6cd85633e4c", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-25639"]}}, {"ruleId": "scanner-f6dc9ceb3deeacf7", "level": "error", "message": {"text": "CVE-2026-42033: axios 1.13.2 \u2014 packages/pieces/community/base44/bun.lock"}, "properties": {"repobilityId": "05a2c93c6a1832aa", "scanner": "scanner-primary", "fingerprint": "f6dc9ceb3deeacf7", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-42033"]}}, {"ruleId": "scanner-5acabc5c57783006", "level": "error", "message": {"text": "CVE-2026-42035: axios 1.13.2 \u2014 packages/pieces/community/base44/bun.lock"}, "properties": {"repobilityId": "3380d5d50f4b7291", "scanner": "scanner-primary", "fingerprint": "5acabc5c57783006", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-42035"]}}, {"ruleId": "scanner-5db6194dc30b9ec8", "level": "error", "message": {"text": "CVE-2026-42043: axios 1.13.2 \u2014 packages/pieces/community/base44/bun.lock"}, "properties": {"repobilityId": "0ffb6593d1e6cdcd", "scanner": "scanner-primary", "fingerprint": "5db6194dc30b9ec8", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-42043"]}}, {"ruleId": "scanner-564d372ac0b46b56", "level": "error", "message": {"text": "CVE-2026-42264: axios 1.13.2 \u2014 packages/pieces/community/base44/bun.lock"}, "properties": {"repobilityId": "9477f80b0610d1ad", "scanner": "scanner-primary", "fingerprint": "564d372ac0b46b56", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-42264"]}}, {"ruleId": "scanner-71fda0ade39887f4", "level": "error", "message": {"text": "CVE-2026-44486: axios 1.13.2 \u2014 packages/pieces/community/base44/bun.lock"}, "properties": {"repobilityId": "7d4fa0537744f53f", "scanner": "scanner-primary", "fingerprint": "71fda0ade39887f4", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-44486"]}}, {"ruleId": "scanner-a08560712295df94", "level": "error", "message": {"text": "CVE-2026-44487: axios 1.13.2 \u2014 packages/pieces/community/base44/bun.lock"}, "properties": {"repobilityId": "0964382f238d2e23", "scanner": "scanner-primary", "fingerprint": "a08560712295df94", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-44487"]}}, {"ruleId": "scanner-4ab04df74e3b33da", "level": "error", "message": {"text": "CVE-2026-44488: axios 1.13.2 \u2014 packages/pieces/community/base44/bun.lock"}, "properties": {"repobilityId": "a9a2b93e52236448", "scanner": "scanner-primary", "fingerprint": "4ab04df74e3b33da", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-44488"]}}, {"ruleId": "scanner-14064c10ea0726e3", "level": "error", "message": {"text": "CVE-2026-44492: axios 1.13.2 \u2014 packages/pieces/community/base44/bun.lock"}, "properties": {"repobilityId": "b35620713c08a403", "scanner": "scanner-primary", "fingerprint": "14064c10ea0726e3", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-44492"]}}, {"ruleId": "scanner-d9f96905ae419e81", "level": "error", "message": {"text": "CVE-2026-44494: axios 1.13.2 \u2014 packages/pieces/community/base44/bun.lock"}, "properties": {"repobilityId": "48cd1697e67fbf85", "scanner": "scanner-primary", "fingerprint": "d9f96905ae419e81", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-44494"]}}, {"ruleId": "scanner-80f8226d0c54f82c", "level": "error", "message": {"text": "CVE-2026-44495: axios 1.13.2 \u2014 packages/pieces/community/base44/bun.lock"}, "properties": {"repobilityId": "429d51c22b925a06", "scanner": "scanner-primary", "fingerprint": "80f8226d0c54f82c", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-44495"]}}, {"ruleId": "scanner-298fdacab61a56bf", "level": "error", "message": {"text": "CVE-2026-44496: axios 1.13.2 \u2014 packages/pieces/community/base44/bun.lock"}, "properties": {"repobilityId": "c3c7ca8c9e6b5f61", "scanner": "scanner-primary", "fingerprint": "298fdacab61a56bf", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-44496"]}}, {"ruleId": "scanner-e3bc40e28f4776e8", "level": "warning", "message": {"text": "CVE-2025-62718: axios 1.13.2 \u2014 packages/pieces/community/base44/bun.lock"}, "properties": {"repobilityId": "0f6152c57fa96805", "scanner": "scanner-primary", "fingerprint": "e3bc40e28f4776e8", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2025-62718"]}}, {"ruleId": "scanner-cddba18d7494ab31", "level": "warning", "message": {"text": "CVE-2026-40175: axios 1.13.2 \u2014 packages/pieces/community/base44/bun.lock"}, "properties": {"repobilityId": "3438a29c04d50cdd", "scanner": "scanner-primary", "fingerprint": "cddba18d7494ab31", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-40175"]}}, {"ruleId": "scanner-12cf7da07df1275e", "level": "warning", "message": {"text": "CVE-2026-42034: axios 1.13.2 \u2014 packages/pieces/community/base44/bun.lock"}, "properties": {"repobilityId": "c9b15492a17b127b", "scanner": "scanner-primary", "fingerprint": "12cf7da07df1275e", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-42034"]}}, {"ruleId": "scanner-f8c8ec093fd6fabe", "level": "warning", "message": {"text": "CVE-2026-42036: axios 1.13.2 \u2014 packages/pieces/community/base44/bun.lock"}, "properties": {"repobilityId": "b99abe6c32cc6ddd", "scanner": "scanner-primary", "fingerprint": "f8c8ec093fd6fabe", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-42036"]}}, {"ruleId": "scanner-bbe2d03fd1e9cec9", "level": "warning", "message": {"text": "CVE-2026-42037: axios 1.13.2 \u2014 packages/pieces/community/base44/bun.lock"}, "properties": {"repobilityId": "36b5c1aea7ed95c2", "scanner": "scanner-primary", "fingerprint": "bbe2d03fd1e9cec9", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-42037"]}}, {"ruleId": "scanner-bc96197e9495376b", "level": "warning", "message": {"text": "CVE-2026-42038: axios 1.13.2 \u2014 packages/pieces/community/base44/bun.lock"}, "properties": {"repobilityId": "e44b89e6adbbce10", "scanner": "scanner-primary", "fingerprint": "bc96197e9495376b", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-42038"]}}, {"ruleId": "scanner-52828a0c7f0a5e35", "level": "warning", "message": {"text": "CVE-2026-42039: axios 1.13.2 \u2014 packages/pieces/community/base44/bun.lock"}, "properties": {"repobilityId": "253c66dc0313745b", "scanner": "scanner-primary", "fingerprint": "52828a0c7f0a5e35", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-42039"]}}, {"ruleId": "scanner-4072344a4a8f00cc", "level": "warning", "message": {"text": "CVE-2026-42041: axios 1.13.2 \u2014 packages/pieces/community/base44/bun.lock"}, "properties": {"repobilityId": "21a1fef90f321c61", "scanner": "scanner-primary", "fingerprint": "4072344a4a8f00cc", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-42041"]}}, {"ruleId": "scanner-6b95f8580ecc5351", "level": "warning", "message": {"text": "CVE-2026-42042: axios 1.13.2 \u2014 packages/pieces/community/base44/bun.lock"}, "properties": {"repobilityId": "00cc1a95c0a4be11", "scanner": "scanner-primary", "fingerprint": "6b95f8580ecc5351", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-42042"]}}, {"ruleId": "scanner-24136fa54249e615", "level": "warning", "message": {"text": "CVE-2026-42044: axios 1.13.2 \u2014 packages/pieces/community/base44/bun.lock"}, "properties": {"repobilityId": "90b1b08616d3b597", "scanner": "scanner-primary", "fingerprint": "24136fa54249e615", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-42044"]}}, {"ruleId": "scanner-ab3741e1cd4c00bc", "level": "warning", "message": {"text": "CVE-2026-44490: axios 1.13.2 \u2014 packages/pieces/community/base44/bun.lock"}, "properties": {"repobilityId": "c47ae96cedb77f6a", "scanner": "scanner-primary", "fingerprint": "ab3741e1cd4c00bc", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-44490"]}}, {"ruleId": "scanner-3fce4cd4d3f1baa6", "level": "note", "message": {"text": "CVE-2026-42040: axios 1.13.2 \u2014 packages/pieces/community/base44/bun.lock"}, "properties": {"repobilityId": "5fe5ea6467b41627", "scanner": "scanner-primary", "fingerprint": "3fce4cd4d3f1baa6", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-42040"]}}, {"ruleId": "scanner-12618248ea8a33db", "level": "warning", "message": {"text": "GHSA-r4q5-vmmm-2653: follow-redirects 1.15.11 \u2014 packages/pieces/community/base44/bun.lock"}, "properties": {"repobilityId": "0128cbab9780b0ad", "scanner": "scanner-primary", "fingerprint": "12618248ea8a33db", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["trivy", "vuln", "GHSA-r4q5-vmmm-2653"]}}, {"ruleId": "scanner-44b7203b42dd855c", "level": "error", "message": {"text": "CVE-2026-12143: form-data 4.0.5 \u2014 packages/pieces/community/base44/bun.lock"}, "properties": {"repobilityId": "b32ceb7810962eb2", "scanner": "scanner-primary", "fingerprint": "44b7203b42dd855c", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-12143"]}}, {"ruleId": "scanner-d4dff69f07316dba", "level": "error", "message": {"text": "CVE-2026-33151: socket.io-parser 4.2.4 \u2014 packages/pieces/community/base44/bun.lock"}, "properties": {"repobilityId": "d9df2668aa487e51", "scanner": "scanner-primary", "fingerprint": "d4dff69f07316dba", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-33151"]}}, {"ruleId": "scanner-8851725b52e3670e", "level": "warning", "message": {"text": "CVE-2026-41907: uuid 13.0.0 \u2014 packages/pieces/community/base44/bun.lock"}, "properties": {"repobilityId": "3eec77b96d92b1ea", "scanner": "scanner-primary", "fingerprint": "8851725b52e3670e", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-41907"]}}, {"ruleId": "scanner-47baa23ecae81c64", "level": "error", "message": {"text": "CVE-2026-48779: ws 8.17.1 \u2014 packages/pieces/community/base44/bun.lock"}, "properties": {"repobilityId": "703eaea3cabc6dda", "scanner": "scanner-primary", "fingerprint": "47baa23ecae81c64", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-48779"]}}, {"ruleId": "scanner-5585c7471a9a6fe1", "level": "warning", "message": {"text": "CVE-2026-45736: ws 8.17.1 \u2014 packages/pieces/community/base44/bun.lock"}, "properties": {"repobilityId": "bea1b6f6c264ac11", "scanner": "scanner-primary", "fingerprint": "5585c7471a9a6fe1", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-45736"]}}, {"ruleId": "scanner-8c9f1a345b41b61e", "level": "error", "message": {"text": "CVE-2026-12143: form-data 4.0.5 \u2014 packages/pieces/community/contextual-ai/bun.lock"}, "properties": {"repobilityId": "c30188a246a3530a", "scanner": "scanner-primary", "fingerprint": "8c9f1a345b41b61e", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-12143"]}}, {"ruleId": "scanner-b1f33e2f693d36d9", "level": "error", "message": {"text": "CVE-2026-25639: axios 1.13.2 \u2014 packages/pieces/community/couchbase/bun.lock"}, "properties": {"repobilityId": "9524dd6466b54277", "scanner": "scanner-primary", "fingerprint": "b1f33e2f693d36d9", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-25639"]}}, {"ruleId": "scanner-319eeacfda933ed0", "level": "error", "message": {"text": "CVE-2026-42033: axios 1.13.2 \u2014 packages/pieces/community/couchbase/bun.lock"}, "properties": {"repobilityId": "5f0f1ea93f02a3d5", "scanner": "scanner-primary", "fingerprint": "319eeacfda933ed0", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-42033"]}}, {"ruleId": "scanner-124e6a5f52047d1c", "level": "error", "message": {"text": "CVE-2026-42035: axios 1.13.2 \u2014 packages/pieces/community/couchbase/bun.lock"}, "properties": {"repobilityId": "35e5f20cb4bef42f", "scanner": "scanner-primary", "fingerprint": "124e6a5f52047d1c", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-42035"]}}, {"ruleId": "scanner-1516e5a9dd8726c9", "level": "error", "message": {"text": "CVE-2026-42043: axios 1.13.2 \u2014 packages/pieces/community/couchbase/bun.lock"}, "properties": {"repobilityId": "f690eeefca2a4ff9", "scanner": "scanner-primary", "fingerprint": "1516e5a9dd8726c9", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-42043"]}}, {"ruleId": "scanner-eed1819b22911f63", "level": "error", "message": {"text": "CVE-2026-42264: axios 1.13.2 \u2014 packages/pieces/community/couchbase/bun.lock"}, "properties": {"repobilityId": "d848d5345747ac24", "scanner": "scanner-primary", "fingerprint": "eed1819b22911f63", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-42264"]}}, {"ruleId": "scanner-cd8d57b7331bee3c", "level": "error", "message": {"text": "CVE-2026-44486: axios 1.13.2 \u2014 packages/pieces/community/couchbase/bun.lock"}, "properties": {"repobilityId": "b9e147e6d34a3a3d", "scanner": "scanner-primary", "fingerprint": "cd8d57b7331bee3c", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-44486"]}}, {"ruleId": "scanner-6d0781ba02d67d91", "level": "error", "message": {"text": "CVE-2026-44487: axios 1.13.2 \u2014 packages/pieces/community/couchbase/bun.lock"}, "properties": {"repobilityId": "e1e2e3f300992ae4", "scanner": "scanner-primary", "fingerprint": "6d0781ba02d67d91", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-44487"]}}, {"ruleId": "scanner-0e1697b5d2811172", "level": "error", "message": {"text": "CVE-2026-44488: axios 1.13.2 \u2014 packages/pieces/community/couchbase/bun.lock"}, "properties": {"repobilityId": "99a26c91a4d3e713", "scanner": "scanner-primary", "fingerprint": "0e1697b5d2811172", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-44488"]}}, {"ruleId": "scanner-11a7ad442a00a23a", "level": "error", "message": {"text": "CVE-2026-44492: axios 1.13.2 \u2014 packages/pieces/community/couchbase/bun.lock"}, "properties": {"repobilityId": "5dfd715106a6fd30", "scanner": "scanner-primary", "fingerprint": "11a7ad442a00a23a", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-44492"]}}, {"ruleId": "scanner-7bf6d67fe2d36077", "level": "error", "message": {"text": "CVE-2026-44494: axios 1.13.2 \u2014 packages/pieces/community/couchbase/bun.lock"}, "properties": {"repobilityId": "95240a8d453eb252", "scanner": "scanner-primary", "fingerprint": "7bf6d67fe2d36077", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-44494"]}}, {"ruleId": "scanner-83be37ceb568e998", "level": "error", "message": {"text": "CVE-2026-44495: axios 1.13.2 \u2014 packages/pieces/community/couchbase/bun.lock"}, "properties": {"repobilityId": "42ae3663a89a0f3d", "scanner": "scanner-primary", "fingerprint": "83be37ceb568e998", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-44495"]}}, {"ruleId": "scanner-7616580fb41bba25", "level": "error", "message": {"text": "CVE-2026-44496: axios 1.13.2 \u2014 packages/pieces/community/couchbase/bun.lock"}, "properties": {"repobilityId": "b24856ca074ae95d", "scanner": "scanner-primary", "fingerprint": "7616580fb41bba25", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-44496"]}}, {"ruleId": "scanner-e8688dea41463d12", "level": "warning", "message": {"text": "CVE-2025-62718: axios 1.13.2 \u2014 packages/pieces/community/couchbase/bun.lock"}, "properties": {"repobilityId": "dbcf84b14f162ac9", "scanner": "scanner-primary", "fingerprint": "e8688dea41463d12", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2025-62718"]}}, {"ruleId": "scanner-964ed83aea4baea5", "level": "warning", "message": {"text": "CVE-2026-40175: axios 1.13.2 \u2014 packages/pieces/community/couchbase/bun.lock"}, "properties": {"repobilityId": "70d2793b614bdf3d", "scanner": "scanner-primary", "fingerprint": "964ed83aea4baea5", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-40175"]}}, {"ruleId": "scanner-73f3a851c725b31b", "level": "warning", "message": {"text": "CVE-2026-42034: axios 1.13.2 \u2014 packages/pieces/community/couchbase/bun.lock"}, "properties": {"repobilityId": "f16bc2d03a9afdac", "scanner": "scanner-primary", "fingerprint": "73f3a851c725b31b", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-42034"]}}, {"ruleId": "scanner-bf1082dadadcff7f", "level": "warning", "message": {"text": "CVE-2026-42036: axios 1.13.2 \u2014 packages/pieces/community/couchbase/bun.lock"}, "properties": {"repobilityId": "622c0649735092a3", "scanner": "scanner-primary", "fingerprint": "bf1082dadadcff7f", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-42036"]}}, {"ruleId": "scanner-0e201b450be3bb2c", "level": "warning", "message": {"text": "CVE-2026-42037: axios 1.13.2 \u2014 packages/pieces/community/couchbase/bun.lock"}, "properties": {"repobilityId": "7f7ff34ff85c27f6", "scanner": "scanner-primary", "fingerprint": "0e201b450be3bb2c", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-42037"]}}, {"ruleId": "scanner-0c11168c885ddb13", "level": "warning", "message": {"text": "CVE-2026-42038: axios 1.13.2 \u2014 packages/pieces/community/couchbase/bun.lock"}, "properties": {"repobilityId": "b32106d9cb640a32", "scanner": "scanner-primary", "fingerprint": "0c11168c885ddb13", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-42038"]}}, {"ruleId": "scanner-b6ce202d3f2c7128", "level": "warning", "message": {"text": "CVE-2026-42039: axios 1.13.2 \u2014 packages/pieces/community/couchbase/bun.lock"}, "properties": {"repobilityId": "8f1fc5ebef4b26df", "scanner": "scanner-primary", "fingerprint": "b6ce202d3f2c7128", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-42039"]}}, {"ruleId": "scanner-d41c0ea8e2de8fdd", "level": "warning", "message": {"text": "CVE-2026-42041: axios 1.13.2 \u2014 packages/pieces/community/couchbase/bun.lock"}, "properties": {"repobilityId": "63f6198f3248f6ec", "scanner": "scanner-primary", "fingerprint": "d41c0ea8e2de8fdd", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-42041"]}}, {"ruleId": "scanner-ce9df907d6cc8cc9", "level": "warning", "message": {"text": "CVE-2026-42042: axios 1.13.2 \u2014 packages/pieces/community/couchbase/bun.lock"}, "properties": {"repobilityId": "ffc979ddd7df7e8f", "scanner": "scanner-primary", "fingerprint": "ce9df907d6cc8cc9", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-42042"]}}, {"ruleId": "scanner-e6a9a7d5e293b85d", "level": "warning", "message": {"text": "CVE-2026-42044: axios 1.13.2 \u2014 packages/pieces/community/couchbase/bun.lock"}, "properties": {"repobilityId": "12cbe8a997be49f3", "scanner": "scanner-primary", "fingerprint": "e6a9a7d5e293b85d", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-42044"]}}, {"ruleId": "scanner-d2254aca0cbf380b", "level": "warning", "message": {"text": "CVE-2026-44490: axios 1.13.2 \u2014 packages/pieces/community/couchbase/bun.lock"}, "properties": {"repobilityId": "8efb7f5d43d5eb08", "scanner": "scanner-primary", "fingerprint": "d2254aca0cbf380b", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-44490"]}}, {"ruleId": "scanner-7e859cd4c5e920a0", "level": "note", "message": {"text": "CVE-2026-42040: axios 1.13.2 \u2014 packages/pieces/community/couchbase/bun.lock"}, "properties": {"repobilityId": "c1a4995dfb20b9b5", "scanner": "scanner-primary", "fingerprint": "7e859cd4c5e920a0", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-42040"]}}, {"ruleId": "scanner-a2f0586bdf0dd331", "level": "warning", "message": {"text": "GHSA-r4q5-vmmm-2653: follow-redirects 1.15.11 \u2014 packages/pieces/community/couchbase/bun.lock"}, "properties": {"repobilityId": "b8cd2dc6ce22880a", "scanner": "scanner-primary", "fingerprint": "a2f0586bdf0dd331", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["trivy", "vuln", "GHSA-r4q5-vmmm-2653"]}}, {"ruleId": "scanner-7df8ddeca2c40768", "level": "error", "message": {"text": "CVE-2026-12143: form-data 4.0.5 \u2014 packages/pieces/community/couchbase/bun.lock"}, "properties": {"repobilityId": "abe6798f42c9712f", "scanner": "scanner-primary", "fingerprint": "7df8ddeca2c40768", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-12143"]}}, {"ruleId": "scanner-fa3bed40c417bc36", "level": "error", "message": {"text": "CVE-2026-23745: tar 6.2.1 \u2014 packages/pieces/community/couchbase/bun.lock"}, "properties": {"repobilityId": "ec5615c82efa93f4", "scanner": "scanner-primary", "fingerprint": "fa3bed40c417bc36", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-23745"]}}, {"ruleId": "scanner-be0c2aec7b47a03e", "level": "error", "message": {"text": "CVE-2026-23950: tar 6.2.1 \u2014 packages/pieces/community/couchbase/bun.lock"}, "properties": {"repobilityId": "e1a54f496ae4f3ce", "scanner": "scanner-primary", "fingerprint": "be0c2aec7b47a03e", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-23950"]}}, {"ruleId": "scanner-95d7a39261c759c9", "level": "error", "message": {"text": "CVE-2026-24842: tar 6.2.1 \u2014 packages/pieces/community/couchbase/bun.lock"}, "properties": {"repobilityId": "d0600211f79b7050", "scanner": "scanner-primary", "fingerprint": "95d7a39261c759c9", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-24842"]}}, {"ruleId": "scanner-f90a200684343997", "level": "error", "message": {"text": "CVE-2026-26960: tar 6.2.1 \u2014 packages/pieces/community/couchbase/bun.lock"}, "properties": {"repobilityId": "da8bd62871e9b83b", "scanner": "scanner-primary", "fingerprint": "f90a200684343997", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-26960"]}}, {"ruleId": "scanner-0ca6727ccae79d75", "level": "error", "message": {"text": "CVE-2026-29786: tar 6.2.1 \u2014 packages/pieces/community/couchbase/bun.lock"}, "properties": {"repobilityId": "0c4a4d6bb4a4f874", "scanner": "scanner-primary", "fingerprint": "0ca6727ccae79d75", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-29786"]}}, {"ruleId": "scanner-ffcf25f3aad096ed", "level": "error", "message": {"text": "CVE-2026-31802: tar 6.2.1 \u2014 packages/pieces/community/couchbase/bun.lock"}, "properties": {"repobilityId": "4835efb55c9a8c19", "scanner": "scanner-primary", "fingerprint": "ffcf25f3aad096ed", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-31802"]}}, {"ruleId": "scanner-9936b716edb53dd9", "level": "warning", "message": {"text": "CVE-2026-53655: tar 6.2.1 \u2014 packages/pieces/community/couchbase/bun.lock"}, "properties": {"repobilityId": "c060cbc736a200de", "scanner": "scanner-primary", "fingerprint": "9936b716edb53dd9", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-53655"]}}, {"ruleId": "scanner-d3e621bd841ad9e4", "level": "warning", "message": {"text": "CVE-2026-41907: uuid 10.0.0 \u2014 packages/pieces/community/fathom/bun.lock"}, "properties": {"repobilityId": "2eea012764a79700", "scanner": "scanner-primary", "fingerprint": "d3e621bd841ad9e4", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-41907"]}}, {"ruleId": "scanner-46802adcad21d935", "level": "warning", "message": {"text": "CVE-2026-41907: uuid 9.0.1 \u2014 packages/pieces/community/hume-ai/bun.lock"}, "properties": {"repobilityId": "7aa70b540c07d791", "scanner": "scanner-primary", "fingerprint": "46802adcad21d935", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-41907"]}}, {"ruleId": "scanner-e855e87a8b232a05", "level": "error", "message": {"text": "CVE-2026-48779: ws 8.18.3 \u2014 packages/pieces/community/hume-ai/bun.lock"}, "properties": {"repobilityId": "fb15109fbc5c3b7c", "scanner": "scanner-primary", "fingerprint": "e855e87a8b232a05", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-48779"]}}, {"ruleId": "scanner-a911150f0ee83a42", "level": "warning", "message": {"text": "CVE-2026-45736: ws 8.18.3 \u2014 packages/pieces/community/hume-ai/bun.lock"}, "properties": {"repobilityId": "4f353238b189e9ca", "scanner": "scanner-primary", "fingerprint": "a911150f0ee83a42", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["trivy", "vuln", "CVE-2026-45736"]}}, {"ruleId": "scanner-17012128e5dd8d1f", "level": "error", "message": {"text": "DS-0002: Image user should not be 'root' \u2014 .devcontainer/Dockerfile"}, "properties": {"repobilityId": "f3fb0929c161c149", "scanner": "scanner-primary", "fingerprint": "17012128e5dd8d1f", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["trivy", "misconfig"]}}, {"ruleId": "scanner-e9e8a77380ac3bd7", "level": "warning", "message": {"text": "DS-0013: 'RUN cd ...' to change directory \u2014 .devcontainer/Dockerfile"}, "properties": {"repobilityId": "fb5adb1d376c748a", "scanner": "scanner-primary", "fingerprint": "e9e8a77380ac3bd7", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["trivy", "misconfig"]}}, {"ruleId": "scanner-c9c8522741c191fe", "level": "note", "message": {"text": "DS-0026: No HEALTHCHECK defined \u2014 .devcontainer/Dockerfile"}, "properties": {"repobilityId": "b92ce3048e4ec526", "scanner": "scanner-primary", "fingerprint": "c9c8522741c191fe", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["trivy", "misconfig"]}}, {"ruleId": "scanner-e2c81574da3989e2", "level": "error", "message": {"text": "DS-0029: 'apt-get' missing '--no-install-recommends' \u2014 .devcontainer/Dockerfile"}, "properties": {"repobilityId": "4abfa8247e933ea8", "scanner": "scanner-primary", "fingerprint": "e2c81574da3989e2", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["trivy", "misconfig"]}}, {"ruleId": "scanner-e2c81574da3989e2", "level": "error", "message": {"text": "DS-0029: 'apt-get' missing '--no-install-recommends' \u2014 .devcontainer/Dockerfile"}, "properties": {"repobilityId": "4abfa8247e933ea8", "scanner": "scanner-primary", "fingerprint": "e2c81574da3989e2", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["trivy", "misconfig"]}}, {"ruleId": "scanner-3a3527e70129fb18", "level": "error", "message": {"text": "DS-0002: Image user should not be 'root' \u2014 Dockerfile"}, "properties": {"repobilityId": "691787f6b20605df", "scanner": "scanner-primary", "fingerprint": "3a3527e70129fb18", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["trivy", "misconfig"]}}, {"ruleId": "scanner-72ff79e0f8219b60", "level": "warning", "message": {"text": "DS-0013: 'RUN cd ...' to change directory \u2014 Dockerfile"}, "properties": {"repobilityId": "975852f52ce6eb22", "scanner": "scanner-primary", "fingerprint": "72ff79e0f8219b60", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["trivy", "misconfig"]}}, {"ruleId": "scanner-3c4041c454cda88e", "level": "note", "message": {"text": "DS-0026: No HEALTHCHECK defined \u2014 Dockerfile"}, "properties": {"repobilityId": "da995bb2cfa21f65", "scanner": "scanner-primary", "fingerprint": "3c4041c454cda88e", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["trivy", "misconfig"]}}, {"ruleId": "scanner-be17f34a4f475534", "level": "error", "message": {"text": "DS-0002: Image user should not be 'root' \u2014 packages/server/worker/test/e2e/Dockerfile"}, "properties": {"repobilityId": "a6bcd3098abea8d9", "scanner": "scanner-primary", "fingerprint": "be17f34a4f475534", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["trivy", "misconfig"]}}, {"ruleId": "scanner-455844ea37bb1040", "level": "note", "message": {"text": "DS-0026: No HEALTHCHECK defined \u2014 packages/server/worker/test/e2e/Dockerfile"}, "properties": {"repobilityId": "07ec9947375ff414", "scanner": "scanner-primary", "fingerprint": "455844ea37bb1040", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["trivy", "misconfig"]}}, {"ruleId": "scanner-b0d3a69283559657", "level": "warning", "message": {"text": "Secret leak: JWT token \u2014 .env.dev"}, "properties": {"repobilityId": "1df9a20fb802b200", "scanner": "scanner-primary", "fingerprint": "b0d3a69283559657", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["trivy", "secret"]}}, {"ruleId": "scanner-dea754a143151235", "level": "warning", "message": {"text": "Secret leak: JWT token \u2014 packages/pieces/community/cal-com/src/lib/triggers/index.ts"}, "properties": {"repobilityId": "c23acdc6a86c2341", "scanner": "scanner-primary", "fingerprint": "dea754a143151235", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["trivy", "secret"]}}, {"ruleId": "scanner-afb2bdef9937d972", "level": "error", "message": {"text": "Secret leak: AWS Access Key ID \u2014 packages/pieces/community/shippo/src/lib/triggers/new-shipping-label.ts"}, "properties": {"repobilityId": "f144cc1fdd227b1d", "scanner": "scanner-primary", "fingerprint": "afb2bdef9937d972", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["trivy", "secret"]}}, {"ruleId": "scanner-afb2bdef9937d972", "level": "error", "message": {"text": "Secret leak: AWS Access Key ID \u2014 packages/pieces/community/shippo/src/lib/triggers/new-shipping-label.ts"}, "properties": {"repobilityId": "f144cc1fdd227b1d", "scanner": "scanner-primary", "fingerprint": "afb2bdef9937d972", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["trivy", "secret"]}}, {"ruleId": "scanner-6d251fc0bb833d02", "level": "warning", "message": {"text": "Secret leak: JWT token \u2014 packages/pieces/community/videoask/src/lib/triggers/form-contact-message.ts"}, "properties": {"repobilityId": "0fcd2988d4072761", "scanner": "scanner-primary", "fingerprint": "6d251fc0bb833d02", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["trivy", "secret"]}}, {"ruleId": "scanner-6d251fc0bb833d02", "level": "warning", "message": {"text": "Secret leak: JWT token \u2014 packages/pieces/community/videoask/src/lib/triggers/form-contact-message.ts"}, "properties": {"repobilityId": "0fcd2988d4072761", "scanner": "scanner-primary", "fingerprint": "6d251fc0bb833d02", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["trivy", "secret"]}}, {"ruleId": "scanner-6d251fc0bb833d02", "level": "warning", "message": {"text": "Secret leak: JWT token \u2014 packages/pieces/community/videoask/src/lib/triggers/form-contact-message.ts"}, "properties": {"repobilityId": "0fcd2988d4072761", "scanner": "scanner-primary", "fingerprint": "6d251fc0bb833d02", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["trivy", "secret"]}}, {"ruleId": "scanner-179f06f695629aac", "level": "warning", "message": {"text": "Secret leak: JWT token \u2014 packages/pieces/community/videoask/src/lib/triggers/new-form-author-response.ts"}, "properties": {"repobilityId": "974382dbfc828d11", "scanner": "scanner-primary", "fingerprint": "179f06f695629aac", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["trivy", "secret"]}}, {"ruleId": "scanner-179f06f695629aac", "level": "warning", "message": {"text": "Secret leak: JWT token \u2014 packages/pieces/community/videoask/src/lib/triggers/new-form-author-response.ts"}, "properties": {"repobilityId": "974382dbfc828d11", "scanner": "scanner-primary", "fingerprint": "179f06f695629aac", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["trivy", "secret"]}}, {"ruleId": "scanner-179f06f695629aac", "level": "warning", "message": {"text": "Secret leak: JWT token \u2014 packages/pieces/community/videoask/src/lib/triggers/new-form-author-response.ts"}, "properties": {"repobilityId": "974382dbfc828d11", "scanner": "scanner-primary", "fingerprint": "179f06f695629aac", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["trivy", "secret"]}}, {"ruleId": "scanner-179f06f695629aac", "level": "warning", "message": {"text": "Secret leak: JWT token \u2014 packages/pieces/community/videoask/src/lib/triggers/new-form-author-response.ts"}, "properties": {"repobilityId": "974382dbfc828d11", "scanner": "scanner-primary", "fingerprint": "179f06f695629aac", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["trivy", "secret"]}}, {"ruleId": "scanner-179f06f695629aac", "level": "warning", "message": {"text": "Secret leak: JWT token \u2014 packages/pieces/community/videoask/src/lib/triggers/new-form-author-response.ts"}, "properties": {"repobilityId": "974382dbfc828d11", "scanner": "scanner-primary", "fingerprint": "179f06f695629aac", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["trivy", "secret"]}}, {"ruleId": "scanner-179f06f695629aac", "level": "warning", "message": {"text": "Secret leak: JWT token \u2014 packages/pieces/community/videoask/src/lib/triggers/new-form-author-response.ts"}, "properties": {"repobilityId": "974382dbfc828d11", "scanner": "scanner-primary", "fingerprint": "179f06f695629aac", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["trivy", "secret"]}}, {"ruleId": "scanner-02a12af4c8ca6e67", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: packages/pieces/CLAUDE.md"}, "properties": {"repobilityId": "69b905047df21df9", "scanner": "scanner-primary", "fingerprint": "02a12af4c8ca6e67", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/CLAUDE.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a0c631d1482becb4", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: packages/server/engine/CLAUDE.md"}, "properties": {"repobilityId": "ae5ba4e6be5f3bbb", "scanner": "scanner-primary", "fingerprint": "a0c631d1482becb4", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/server/engine/CLAUDE.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-122f91b7f2906dc4", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/settings.json"}, "properties": {"repobilityId": "a2967269048b6a9d", "scanner": "scanner-primary", "fingerprint": "122f91b7f2906dc4", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/settings.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-25856c3dfdad6fa7", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/agents/changelog.md"}, "properties": {"repobilityId": "4206696cb007ac90", "scanner": "scanner-primary", "fingerprint": "25856c3dfdad6fa7", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/agents/changelog.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-cd3f90d39d7ee280", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/agents/web.md"}, "properties": {"repobilityId": "d1aa8c3a4a87c0aa", "scanner": "scanner-primary", "fingerprint": "cd3f90d39d7ee280", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/agents/web.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b7773224123da479", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/agents/server.md"}, "properties": {"repobilityId": "8ed85d3457d109ff", "scanner": "scanner-primary", "fingerprint": "b7773224123da479", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/agents/server.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-49cf88554d4cd932", "level": "warning", "message": {"text": "Privileged port 9 in use"}, "properties": {"repobilityId": "31590a6ba3409390", "scanner": "scanner-primary", "fingerprint": "49cf88554d4cd932", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/continuous-delivery-cloud.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f8e91a9a075729ae", "level": "warning", "message": {"text": "Privileged port 14 in use"}, "properties": {"repobilityId": "2dbd4b719a1412ff", "scanner": "scanner-primary", "fingerprint": "f8e91a9a075729ae", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/continuous-delivery-release.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d63da3583b14afc0", "level": "warning", "message": {"text": "Dockerfile runs as root: Dockerfile"}, "properties": {"repobilityId": "a2ed1bd120e507db", "scanner": "scanner-primary", "fingerprint": "d63da3583b14afc0", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-33e0d7df56f6fa5b", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: node:24.14.0-bullseye-slim"}, "properties": {"repobilityId": "090f3e09b9fd02a1", "scanner": "scanner-primary", "fingerprint": "33e0d7df56f6fa5b", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-86677ba132f2d19e", "level": "warning", "message": {"text": "Dockerfile runs as root: packages/server/worker/test/e2e/Dockerfile"}, "properties": {"repobilityId": "b30f3a9818c22004", "scanner": "scanner-primary", "fingerprint": "86677ba132f2d19e", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-203ea90da160f990", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: node:24.14.0-bullseye-slim"}, "properties": {"repobilityId": "e7a1b092610e4b9b", "scanner": "scanner-primary", "fingerprint": "203ea90da160f990", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/server/worker/test/e2e/Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4a210ac3b4b59ff4", "level": "warning", "message": {"text": "Dockerfile runs as root: .devcontainer/Dockerfile"}, "properties": {"repobilityId": "7855b1f55d0800cf", "scanner": "scanner-primary", "fingerprint": "4a210ac3b4b59ff4", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-7c1eb98f2cf22465", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: mcr.microsoft.com/devcontainers/javascript-node:${VARIANT}"}, "properties": {"repobilityId": "2d2545800b80e2d4", "scanner": "scanner-primary", "fingerprint": "7c1eb98f2cf22465", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".devcontainer/Dockerfile"}, "region": {"startLine": 3}}}]}, {"ruleId": "scanner-5b43d4a583792c5d", "level": "error", "message": {"text": "Runtime dotenv file present in repo: .env.dev"}, "properties": {"repobilityId": "39400adf0f918d08", "scanner": "scanner-primary", "fingerprint": "5b43d4a583792c5d", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets", "config", "env-file", "runtime-env", "env_file_with_secret"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".env.dev"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-32b6bab68c4fb207", "level": "error", "message": {"text": "Runtime dotenv file present in repo: packages/server/api/.env.tests"}, "properties": {"repobilityId": "0f15aab075d4c624", "scanner": "scanner-primary", "fingerprint": "32b6bab68c4fb207", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets", "config", "env-file", "runtime-env", "env_file_with_secret"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/server/api/.env.tests"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3f7ba968bc4893d8", "level": "error", "message": {"text": "Runtime dotenv file present in repo: packages/tests-e2e/.env.e2e"}, "properties": {"repobilityId": "ec410fd6ebceff69", "scanner": "scanner-primary", "fingerprint": "3f7ba968bc4893d8", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets", "config", "env-file", "runtime-env", "env_file_with_secret"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/tests-e2e/.env.e2e"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f551c5ecfe7811d9", "level": "error", "message": {"text": "Possible secret in packages/pieces/community/shippo/src/lib/triggers/new-shipping-label.ts"}, "properties": {"repobilityId": "f0f9fe257416727f", "scanner": "scanner-primary", "fingerprint": "f551c5ecfe7811d9", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/shippo/src/lib/triggers/new-shipping-label.ts"}, "region": {"startLine": 76}}}]}, {"ruleId": "scanner-f551c5ecfe7811d9", "level": "error", "message": {"text": "Possible secret in packages/pieces/community/shippo/src/lib/triggers/new-shipping-label.ts"}, "properties": {"repobilityId": "f0f9fe257416727f", "scanner": "scanner-primary", "fingerprint": "f551c5ecfe7811d9", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/shippo/src/lib/triggers/new-shipping-label.ts"}, "region": {"startLine": 86}}}]}, {"ruleId": "scanner-e1f72b92d5d58df1", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in packages/pieces/community/mailchimp/src/i18n/translation.json:136"}, "properties": {"repobilityId": "5dcdbed689e6832b", "scanner": "scanner-primary", "fingerprint": "e1f72b92d5d58df1", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/mailchimp/src/i18n/translation.json"}, "region": {"startLine": 136}}}]}, {"ruleId": "scanner-4b0a6c153917f90d", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in packages/pieces/community/mailchimp/src/i18n/fr.json:136"}, "properties": {"repobilityId": "2df4bd54b57fe8f6", "scanner": "scanner-primary", "fingerprint": "4b0a6c153917f90d", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/mailchimp/src/i18n/fr.json"}, "region": {"startLine": 136}}}]}, {"ruleId": "scanner-636744103171c467", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in packages/pieces/community/mailchimp/src/i18n/de.json:136"}, "properties": {"repobilityId": "5c64894bf806ac71", "scanner": "scanner-primary", "fingerprint": "636744103171c467", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/mailchimp/src/i18n/de.json"}, "region": {"startLine": 136}}}]}, {"ruleId": "scanner-48408385ee78de2b", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in packages/pieces/community/mailchimp/src/i18n/pt.json:136"}, "properties": {"repobilityId": "a5d93719529ed811", "scanner": "scanner-primary", "fingerprint": "48408385ee78de2b", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/mailchimp/src/i18n/pt.json"}, "region": {"startLine": 136}}}]}, {"ruleId": "scanner-e832847d52bb3352", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in packages/pieces/community/mailchimp/src/i18n/nl.json:136"}, "properties": {"repobilityId": "0d7b399e1a1ae890", "scanner": "scanner-primary", "fingerprint": "e832847d52bb3352", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/mailchimp/src/i18n/nl.json"}, "region": {"startLine": 136}}}]}, {"ruleId": "scanner-88ca3b0696a93156", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in packages/pieces/community/mailchimp/src/i18n/ja.json:136"}, "properties": {"repobilityId": "a2f7c33cffa5e20d", "scanner": "scanner-primary", "fingerprint": "88ca3b0696a93156", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/mailchimp/src/i18n/ja.json"}, "region": {"startLine": 136}}}]}, {"ruleId": "scanner-a4444a6ed89f251a", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in packages/pieces/community/mailchimp/src/i18n/zh.json:136"}, "properties": {"repobilityId": "3b780c86a720110e", "scanner": "scanner-primary", "fingerprint": "a4444a6ed89f251a", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/mailchimp/src/i18n/zh.json"}, "region": {"startLine": 136}}}]}, {"ruleId": "scanner-88ef42b395857ca4", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in packages/pieces/community/mailchimp/src/i18n/es.json:136"}, "properties": {"repobilityId": "94beeae4a591ad6b", "scanner": "scanner-primary", "fingerprint": "88ef42b395857ca4", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/mailchimp/src/i18n/es.json"}, "region": {"startLine": 136}}}]}, {"ruleId": "scanner-5d90baf909ae4779", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in packages/pieces/community/mailchimp/src/lib/actions/archive-subscriber.ts:15"}, "properties": {"repobilityId": "2961df65ae091834", "scanner": "scanner-primary", "fingerprint": "5d90baf909ae4779", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/mailchimp/src/lib/actions/archive-subscriber.ts"}, "region": {"startLine": 15}}}]}, {"ruleId": "scanner-6406f8aa7bb97579", "level": "error", "message": {"text": "Possible secret in packages/pieces/community/cal-com/src/lib/triggers/index.ts"}, "properties": {"repobilityId": "91c54a358066ba1b", "scanner": "scanner-primary", "fingerprint": "6406f8aa7bb97579", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/cal-com/src/lib/triggers/index.ts"}, "region": {"startLine": 99}}}]}, {"ruleId": "scanner-af0bb05c7147ab15", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in packages/pieces/community/oracle-database/src/lib/common/runner-pool.ts:1"}, "properties": {"repobilityId": "f1cfbc845934cc85", "scanner": "scanner-primary", "fingerprint": "af0bb05c7147ab15", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/oracle-database/src/lib/common/runner-pool.ts"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-303f4fbb2f0d7ac5", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in packages/pieces/community/oracle-database/src/lib/common/thick-mode.ts:6"}, "properties": {"repobilityId": "f102b41f57b935bf", "scanner": "scanner-primary", "fingerprint": "303f4fbb2f0d7ac5", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/oracle-database/src/lib/common/thick-mode.ts"}, "region": {"startLine": 6}}}]}, {"ruleId": "scanner-1270695d292b8e06", "level": "error", "message": {"text": "Possible secret in packages/pieces/community/hashi-corp-vault/src/lib/actions/write-secret.ts"}, "properties": {"repobilityId": "3168c91e2757c567", "scanner": "scanner-primary", "fingerprint": "1270695d292b8e06", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/hashi-corp-vault/src/lib/actions/write-secret.ts"}, "region": {"startLine": 34}}}]}, {"ruleId": "scanner-90a47e603ca4fb12", "level": "error", "message": {"text": "Insecure pattern 'private_key_in_repo' in packages/pieces/community/snowflake/src/lib/auth.ts:15"}, "properties": {"repobilityId": "31ab5eb6266a777d", "scanner": "scanner-primary", "fingerprint": "90a47e603ca4fb12", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["owasp", "private_key_in_repo"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/snowflake/src/lib/auth.ts"}, "region": {"startLine": 15}}}]}, {"ruleId": "scanner-a311c67fe0a6e8ae", "level": "error", "message": {"text": "Insecure pattern 'private_key_in_repo' in packages/pieces/community/snowflake/src/lib/common/index.ts:40"}, "properties": {"repobilityId": "d1ddd162ed6eb6b7", "scanner": "scanner-primary", "fingerprint": "a311c67fe0a6e8ae", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["owasp", "private_key_in_repo"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/snowflake/src/lib/common/index.ts"}, "region": {"startLine": 40}}}]}, {"ruleId": "scanner-22956d6e9121c6a4", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in packages/pieces/community/vtiger/src/lib/common.ts:30"}, "properties": {"repobilityId": "c3561a9a3d780956", "scanner": "scanner-primary", "fingerprint": "22956d6e9121c6a4", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/vtiger/src/lib/common.ts"}, "region": {"startLine": 30}}}]}, {"ruleId": "scanner-71481c30ed8236ba", "level": "error", "message": {"text": "Possible secret in packages/pieces/community/tableau/src/lib/common/index.ts"}, "properties": {"repobilityId": "a50be3dcddb65182", "scanner": "scanner-primary", "fingerprint": "71481c30ed8236ba", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/tableau/src/lib/common/index.ts"}, "region": {"startLine": 49}}}]}, {"ruleId": "scanner-84ec1b26127f0cc4", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in packages/pieces/core/crypto/src/i18n/translation.json:34"}, "properties": {"repobilityId": "cfadb70686c96a0f", "scanner": "scanner-primary", "fingerprint": "84ec1b26127f0cc4", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/core/crypto/src/i18n/translation.json"}, "region": {"startLine": 34}}}]}, {"ruleId": "scanner-b1462de868fb6f3f", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in packages/pieces/core/crypto/src/i18n/id.json:29"}, "properties": {"repobilityId": "9a479076b7befe03", "scanner": "scanner-primary", "fingerprint": "b1462de868fb6f3f", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/core/crypto/src/i18n/id.json"}, "region": {"startLine": 29}}}]}, {"ruleId": "scanner-f2fa709094e0d08e", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in packages/pieces/core/crypto/src/i18n/fr.json:34"}, "properties": {"repobilityId": "6b0f6ebf7cf26599", "scanner": "scanner-primary", "fingerprint": "f2fa709094e0d08e", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/core/crypto/src/i18n/fr.json"}, "region": {"startLine": 34}}}]}, {"ruleId": "scanner-0b7ad8024e88b776", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in packages/pieces/core/crypto/src/i18n/ru.json:29"}, "properties": {"repobilityId": "c9396b9b3f0ab8f7", "scanner": "scanner-primary", "fingerprint": "0b7ad8024e88b776", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/core/crypto/src/i18n/ru.json"}, "region": {"startLine": 29}}}]}, {"ruleId": "scanner-4c4b48365cd2d664", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in packages/pieces/core/crypto/src/i18n/de.json:34"}, "properties": {"repobilityId": "a7354b0a5b2d344f", "scanner": "scanner-primary", "fingerprint": "4c4b48365cd2d664", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/core/crypto/src/i18n/de.json"}, "region": {"startLine": 34}}}]}, {"ruleId": "scanner-46eb8930b761d43b", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in packages/pieces/core/crypto/src/i18n/hi.json:29"}, "properties": {"repobilityId": "fe2daf0dd532e3a3", "scanner": "scanner-primary", "fingerprint": "46eb8930b761d43b", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/core/crypto/src/i18n/hi.json"}, "region": {"startLine": 29}}}]}, {"ruleId": "scanner-90c50b852056d80c", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in packages/pieces/core/crypto/src/i18n/ca.json:29"}, "properties": {"repobilityId": "bfa6e035d5ca1ac9", "scanner": "scanner-primary", "fingerprint": "90c50b852056d80c", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/core/crypto/src/i18n/ca.json"}, "region": {"startLine": 29}}}]}, {"ruleId": "scanner-4584d8e42bc0e7c7", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in packages/pieces/core/crypto/src/i18n/vi.json:29"}, "properties": {"repobilityId": "b44579c3a5013885", "scanner": "scanner-primary", "fingerprint": "4584d8e42bc0e7c7", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/core/crypto/src/i18n/vi.json"}, "region": {"startLine": 29}}}]}, {"ruleId": "scanner-8c3e5d2168be6753", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in packages/pieces/core/crypto/src/i18n/pt.json:34"}, "properties": {"repobilityId": "d8ac3316e678d020", "scanner": "scanner-primary", "fingerprint": "8c3e5d2168be6753", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/core/crypto/src/i18n/pt.json"}, "region": {"startLine": 34}}}]}, {"ruleId": "scanner-518287785fd0c6f1", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in packages/pieces/core/crypto/src/i18n/nl.json:34"}, "properties": {"repobilityId": "f65a54131047227a", "scanner": "scanner-primary", "fingerprint": "518287785fd0c6f1", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/core/crypto/src/i18n/nl.json"}, "region": {"startLine": 34}}}]}, {"ruleId": "scanner-d33865f94b2a3283", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in packages/pieces/core/crypto/src/i18n/ja.json:34"}, "properties": {"repobilityId": "a4e60b211264c209", "scanner": "scanner-primary", "fingerprint": "d33865f94b2a3283", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/core/crypto/src/i18n/ja.json"}, "region": {"startLine": 34}}}]}, {"ruleId": "scanner-8b81ec2f098c1c5a", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in packages/pieces/core/crypto/src/i18n/zh.json:34"}, "properties": {"repobilityId": "d70e91c982118865", "scanner": "scanner-primary", "fingerprint": "8b81ec2f098c1c5a", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/core/crypto/src/i18n/zh.json"}, "region": {"startLine": 34}}}]}, {"ruleId": "scanner-d32a450898b491b4", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in packages/pieces/core/crypto/src/i18n/es.json:34"}, "properties": {"repobilityId": "3efcea77afb88547", "scanner": "scanner-primary", "fingerprint": "d32a450898b491b4", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/core/crypto/src/i18n/es.json"}, "region": {"startLine": 34}}}]}, {"ruleId": "scanner-54a9c46e7f051b06", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in packages/pieces/core/crypto/src/lib/actions/hash-text.ts:16"}, "properties": {"repobilityId": "5e74d6e48d031885", "scanner": "scanner-primary", "fingerprint": "54a9c46e7f051b06", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/core/crypto/src/lib/actions/hash-text.ts"}, "region": {"startLine": 16}}}]}, {"ruleId": "scanner-6476e85c38188f80", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in packages/pieces/core/crypto/src/lib/actions/hmac-signature.ts:35"}, "properties": {"repobilityId": "02a7408122ee2666", "scanner": "scanner-primary", "fingerprint": "6476e85c38188f80", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/core/crypto/src/lib/actions/hmac-signature.ts"}, "region": {"startLine": 35}}}]}, {"ruleId": "scanner-f10cffb99f98adfb", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in packages/pieces/core/pdf/src/lib/actions/convert-to-image.ts:5"}, "properties": {"repobilityId": "41ecf07035766735", "scanner": "scanner-primary", "fingerprint": "f10cffb99f98adfb", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/core/pdf/src/lib/actions/convert-to-image.ts"}, "region": {"startLine": 5}}}]}, {"ruleId": "scanner-3772e1bb4fafb6cf", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in packages/server/worker/src/lib/sandbox/isolate.ts:1"}, "properties": {"repobilityId": "3a6b833eca97085b", "scanner": "scanner-primary", "fingerprint": "3772e1bb4fafb6cf", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/server/worker/src/lib/sandbox/isolate.ts"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-adc2c7070ff1dc09", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in packages/server/worker/src/lib/sandbox/fork.ts:1"}, "properties": {"repobilityId": "1d0da36a73d55a91", "scanner": "scanner-primary", "fingerprint": "adc2c7070ff1dc09", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/server/worker/src/lib/sandbox/fork.ts"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-de3b6b6491e456f2", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in packages/server/worker/src/lib/sandbox/sandbox.ts:1"}, "properties": {"repobilityId": "ac4305c3b2091491", "scanner": "scanner-primary", "fingerprint": "de3b6b6491e456f2", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/server/worker/src/lib/sandbox/sandbox.ts"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ef05f06dbdec5882", "level": "warning", "message": {"text": "Insecure pattern 'cors_wildcard' in packages/server/worker/src/lib/sandbox/sandbox.ts:78"}, "properties": {"repobilityId": "10399bda1b4fe002", "scanner": "scanner-primary", "fingerprint": "ef05f06dbdec5882", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "cors_wildcard"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/server/worker/src/lib/sandbox/sandbox.ts"}, "region": {"startLine": 78}}}]}, {"ruleId": "scanner-155b2fdaaba47e9c", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in packages/server/worker/src/lib/sandbox/types.ts:1"}, "properties": {"repobilityId": "2ae308d021a97793", "scanner": "scanner-primary", "fingerprint": "155b2fdaaba47e9c", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/server/worker/src/lib/sandbox/types.ts"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2b37ceb7f435a691", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in packages/server/worker/src/lib/utils/exec.ts:1"}, "properties": {"repobilityId": "620c729cb5f80a89", "scanner": "scanner-primary", "fingerprint": "2b37ceb7f435a691", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/server/worker/src/lib/utils/exec.ts"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-393a0c8309cd9e36", "level": "warning", "message": {"text": "Insecure pattern 'cors_wildcard' in packages/server/api/src/app/server.ts:51"}, "properties": {"repobilityId": "f845e03ce4f057a5", "scanner": "scanner-primary", "fingerprint": "393a0c8309cd9e36", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "cors_wildcard"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/server/api/src/app/server.ts"}, "region": {"startLine": 51}}}]}, {"ruleId": "scanner-a2f001f84a797924", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in packages/server/api/src/app/pieces/dev-piece-watcher.ts:1"}, "properties": {"repobilityId": "3410664bc2a9c113", "scanner": "scanner-primary", "fingerprint": "a2f001f84a797924", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/server/api/src/app/pieces/dev-piece-watcher.ts"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a938f63d729c0c8e", "level": "warning", "message": {"text": "Insecure pattern 'cors_wildcard' in packages/server/api/src/app/mcp/oauth/metadata/mcp-oauth-metadata.controller.ts:9"}, "properties": {"repobilityId": "4fbc77d121ec1c77", "scanner": "scanner-primary", "fingerprint": "a938f63d729c0c8e", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "cors_wildcard"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/server/api/src/app/mcp/oauth/metadata/mcp-oauth-metadata.controller.ts"}, "region": {"startLine": 9}}}]}, {"ruleId": "scanner-5534e02d8ad42e16", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in packages/server/engine/src/lib/core/code/no-op-code-sandbox.ts:1"}, "properties": {"repobilityId": "a30cfa87bf96e5cc", "scanner": "scanner-primary", "fingerprint": "5534e02d8ad42e16", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/server/engine/src/lib/core/code/no-op-code-sandbox.ts"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-897d0a35d8aaa26b", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in packages/cli/src/lib/utils/exec.ts:1"}, "properties": {"repobilityId": "b811d5d548e6ed88", "scanner": "scanner-primary", "fingerprint": "897d0a35d8aaa26b", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/cli/src/lib/utils/exec.ts"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c51e7d224e4894c2", "level": "error", "message": {"text": "Insecure pattern 'exec_used' in packages/cli/src/lib/utils/piece-utils.ts:60"}, "properties": {"repobilityId": "844096888e706860", "scanner": "scanner-primary", "fingerprint": "c51e7d224e4894c2", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "exec_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/cli/src/lib/utils/piece-utils.ts"}, "region": {"startLine": 60}}}]}, {"ruleId": "scanner-5f20f14d22202111", "level": "error", "message": {"text": "Insecure pattern 'exec_used' in packages/cli/src/lib/commands/generate-translation-file-for-piece.ts:25"}, "properties": {"repobilityId": "2413b274182c5611", "scanner": "scanner-primary", "fingerprint": "5f20f14d22202111", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "exec_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/cli/src/lib/commands/generate-translation-file-for-piece.ts"}, "region": {"startLine": 25}}}]}, {"ruleId": "scanner-6f332e13e90e9c7b", "level": "error", "message": {"text": "Possible secret in packages/shared/src/lib/ee/secret-managers/dto.ts"}, "properties": {"repobilityId": "ccdc82457e1d3b5b", "scanner": "scanner-primary", "fingerprint": "6f332e13e90e9c7b", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/shared/src/lib/ee/secret-managers/dto.ts"}, "region": {"startLine": 8}}}]}, {"ruleId": "scanner-2a366a39c78037db", "level": "error", "message": {"text": "Insecure pattern 'new_function_used' in packages/web/src/app/builder/piece-properties/custom-property.tsx:17"}, "properties": {"repobilityId": "cfe18e04c337bf25", "scanner": "scanner-primary", "fingerprint": "2a366a39c78037db", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "new_function_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/web/src/app/builder/piece-properties/custom-property.tsx"}, "region": {"startLine": 17}}}]}, {"ruleId": "scanner-ca117c953aa225ec", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in packages/web/src/app/builder/piece-properties/text-input-with-mentions/text-input-utils.ts:423"}, "properties": {"repobilityId": "aca96ead8a87dcaf", "scanner": "scanner-primary", "fingerprint": "ca117c953aa225ec", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/web/src/app/builder/piece-properties/text-input-with-mentions/text-input-utils.ts"}, "region": {"startLine": 423}}}]}, {"ruleId": "scanner-51a93cdb4a3ab9e9", "level": "warning", "message": {"text": "Insecure pattern 'dangerous_innerhtml' in packages/web/src/components/ui/chart.tsx:81"}, "properties": {"repobilityId": "681f69cb9c3113ef", "scanner": "scanner-primary", "fingerprint": "51a93cdb4a3ab9e9", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "dangerous_innerhtml"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/web/src/components/ui/chart.tsx"}, "region": {"startLine": 81}}}]}, {"ruleId": "scanner-b15dfa6afab58357", "level": "error", "message": {"text": "Possible secret in packages/tests-e2e/global-setup.ts"}, "properties": {"repobilityId": "87828b5b227e315b", "scanner": "scanner-primary", "fingerprint": "b15dfa6afab58357", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/tests-e2e/global-setup.ts"}, "region": {"startLine": 5}}}]}, {"ruleId": "scanner-efb0431684bb60ee", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in tools/setup-dev.js:3"}, "properties": {"repobilityId": "d9e9691767b8090d", "scanner": "scanner-primary", "fingerprint": "efb0431684bb60ee", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/setup-dev.js"}, "region": {"startLine": 3}}}]}, {"ruleId": "scanner-5f72be005f05659b", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in tools/scripts/install-bun.js:3"}, "properties": {"repobilityId": "25572908e7c6e464", "scanner": "scanner-primary", "fingerprint": "5f72be005f05659b", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/scripts/install-bun.js"}, "region": {"startLine": 3}}}]}, {"ruleId": "scanner-59e4907e268b0327", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in tools/scripts/check-migration-rollback.ts:1"}, "properties": {"repobilityId": "6ce528830f72339d", "scanner": "scanner-primary", "fingerprint": "59e4907e268b0327", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/scripts/check-migration-rollback.ts"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6b161dd0d8d5593b", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in tools/scripts/utils/publish-npm-package.ts:3"}, "properties": {"repobilityId": "35b98cbce55bebec", "scanner": "scanner-primary", "fingerprint": "6b161dd0d8d5593b", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/scripts/utils/publish-npm-package.ts"}, "region": {"startLine": 3}}}]}, {"ruleId": "scanner-6059f255e8268d78", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in tools/scripts/utils/exec.ts:1"}, "properties": {"repobilityId": "e965b3f7750b3450", "scanner": "scanner-primary", "fingerprint": "6059f255e8268d78", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/scripts/utils/exec.ts"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0f1b782d1d9cc7b1", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in tools/scripts/utils/piece-script-utils.ts:2"}, "properties": {"repobilityId": "c2666914c47e748c", "scanner": "scanner-primary", "fingerprint": "0f1b782d1d9cc7b1", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/scripts/utils/piece-script-utils.ts"}, "region": {"startLine": 2}}}]}, {"ruleId": "scanner-b09a639500d075dd", "level": "error", "message": {"text": "Insecure pattern 'exec_used' in tools/scripts/utils/package-pre-publish-checks.ts:46"}, "properties": {"repobilityId": "191d4b700fed3b78", "scanner": "scanner-primary", "fingerprint": "b09a639500d075dd", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "exec_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/scripts/utils/package-pre-publish-checks.ts"}, "region": {"startLine": 46}}}]}, {"ruleId": "scanner-a758166b77bbcaa3", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in tools/scripts/utils/package-pre-publish-checks.ts:2"}, "properties": {"repobilityId": "e8cc37ece011ecef", "scanner": "scanner-primary", "fingerprint": "a758166b77bbcaa3", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/scripts/utils/package-pre-publish-checks.ts"}, "region": {"startLine": 2}}}]}, {"ruleId": "scanner-4c9a0e2e3b25819c", "level": "error", "message": {"text": "Insecure pattern 'exec_used' in tools/scripts/pieces/publish-piece.ts:22"}, "properties": {"repobilityId": "5421d773774715cb", "scanner": "scanner-primary", "fingerprint": "4c9a0e2e3b25819c", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "exec_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/scripts/pieces/publish-piece.ts"}, "region": {"startLine": 22}}}]}, {"ruleId": "scanner-a31e2d8b1f9795e1", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in tools/scripts/pieces/bump-translated-pieces.ts:3"}, "properties": {"repobilityId": "3bd0e49aefde66d0", "scanner": "scanner-primary", "fingerprint": "a31e2d8b1f9795e1", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/scripts/pieces/bump-translated-pieces.ts"}, "region": {"startLine": 3}}}]}, {"ruleId": "scanner-2c58bb4fb8e61577", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in deploy/pulumi/index.ts:7"}, "properties": {"repobilityId": "03ef677a1f499d0d", "scanner": "scanner-primary", "fingerprint": "2c58bb4fb8e61577", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "deploy/pulumi/index.ts"}, "region": {"startLine": 7}}}]}, {"ruleId": "scanner-d68699391e51e606", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "bd466e9a9ec4c48c", "scanner": "scanner-primary", "fingerprint": "d68699391e51e606", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release-pieces.yml"}, "region": {"startLine": 22}}}]}, {"ruleId": "scanner-d68699391e51e606", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "43e30b4ed6383495", "scanner": "scanner-primary", "fingerprint": "d68699391e51e606", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release-pieces.yml"}, "region": {"startLine": 27}}}]}, {"ruleId": "scanner-d68699391e51e606", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "5fce7ec059607725", "scanner": "scanner-primary", "fingerprint": "d68699391e51e606", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release-pieces.yml"}, "region": {"startLine": 34}}}]}, {"ruleId": "scanner-d68699391e51e606", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "737a360e9d64c03a", "scanner": "scanner-primary", "fingerprint": "d68699391e51e606", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release-pieces.yml"}, "region": {"startLine": 39}}}]}, {"ruleId": "scanner-624e0cbf6cda36d2", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "162b2f936db158c4", "scanner": "scanner-primary", "fingerprint": "624e0cbf6cda36d2", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/continuous-delivery-rollback.yml"}, "region": {"startLine": 37}}}]}, {"ruleId": "scanner-f3cdc1518faaf4b6", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "ff05c664f354fba8", "scanner": "scanner-primary", "fingerprint": "f3cdc1518faaf4b6", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/reusable-generate-translations-shard.yml"}, "region": {"startLine": 24}}}]}, {"ruleId": "scanner-f3cdc1518faaf4b6", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "531f7e4dcbb94a4c", "scanner": "scanner-primary", "fingerprint": "f3cdc1518faaf4b6", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/reusable-generate-translations-shard.yml"}, "region": {"startLine": 29}}}]}, {"ruleId": "scanner-f3cdc1518faaf4b6", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "edfea241c0dc122b", "scanner": "scanner-primary", "fingerprint": "f3cdc1518faaf4b6", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/reusable-generate-translations-shard.yml"}, "region": {"startLine": 36}}}]}, {"ruleId": "scanner-f3cdc1518faaf4b6", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "b7179e154b37a6c3", "scanner": "scanner-primary", "fingerprint": "f3cdc1518faaf4b6", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/reusable-generate-translations-shard.yml"}, "region": {"startLine": 41}}}]}, {"ruleId": "scanner-65c9bd56493a81d3", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "985754ea6b652f1b", "scanner": "scanner-primary", "fingerprint": "65c9bd56493a81d3", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/e2e.yml"}, "region": {"startLine": 29}}}]}, {"ruleId": "scanner-65c9bd56493a81d3", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "a1e83fa2d04eaf19", "scanner": "scanner-primary", "fingerprint": "65c9bd56493a81d3", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/e2e.yml"}, "region": {"startLine": 80}}}]}, {"ruleId": "scanner-65c9bd56493a81d3", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "802f2de8621fdede", "scanner": "scanner-primary", "fingerprint": "65c9bd56493a81d3", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/e2e.yml"}, "region": {"startLine": 87}}}]}, {"ruleId": "scanner-65c9bd56493a81d3", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "985754ea6b652f1b", "scanner": "scanner-primary", "fingerprint": "65c9bd56493a81d3", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/e2e.yml"}, "region": {"startLine": 96}}}]}, {"ruleId": "scanner-f26e8370e5cd8a8b", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "23cb3d10b965c9c4", "scanner": "scanner-primary", "fingerprint": "f26e8370e5cd8a8b", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/emergency-cloud-deploy.yml"}, "region": {"startLine": 11}}}]}, {"ruleId": "scanner-f26e8370e5cd8a8b", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "a41a68feb0db30e2", "scanner": "scanner-primary", "fingerprint": "f26e8370e5cd8a8b", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/emergency-cloud-deploy.yml"}, "region": {"startLine": 17}}}]}, {"ruleId": "scanner-f26e8370e5cd8a8b", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "d3b919f74299491c", "scanner": "scanner-primary", "fingerprint": "f26e8370e5cd8a8b", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/emergency-cloud-deploy.yml"}, "region": {"startLine": 24}}}]}, {"ruleId": "scanner-f26e8370e5cd8a8b", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "1a158ef49a33b8ee", "scanner": "scanner-primary", "fingerprint": "f26e8370e5cd8a8b", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/emergency-cloud-deploy.yml"}, "region": {"startLine": 27}}}]}, {"ruleId": "scanner-d8a624cee0741b71", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "fb44ef5c5d13c276", "scanner": "scanner-primary", "fingerprint": "d8a624cee0741b71", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/continuous-delivery-stg.yml"}, "region": {"startLine": 174}}}]}, {"ruleId": "scanner-709025cc1d7ff991", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "9ad0f183eb4fd2e7", "scanner": "scanner-primary", "fingerprint": "709025cc1d7ff991", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/continuous-delivery-stg.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-85363e8bedfc8017", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "89e95594381253df", "scanner": "scanner-primary", "fingerprint": "85363e8bedfc8017", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/validate-publishable-packages.yml"}, "region": {"startLine": 16}}}]}, {"ruleId": "scanner-85363e8bedfc8017", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "d15a1b4336babdb7", "scanner": "scanner-primary", "fingerprint": "85363e8bedfc8017", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/validate-publishable-packages.yml"}, "region": {"startLine": 21}}}]}, {"ruleId": "scanner-85363e8bedfc8017", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "d109ff26b16d3200", "scanner": "scanner-primary", "fingerprint": "85363e8bedfc8017", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/validate-publishable-packages.yml"}, "region": {"startLine": 28}}}]}, {"ruleId": "scanner-85363e8bedfc8017", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "661b1f0950ad2058", "scanner": "scanner-primary", "fingerprint": "85363e8bedfc8017", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/validate-publishable-packages.yml"}, "region": {"startLine": 33}}}]}, {"ruleId": "scanner-e230b0c926ab2d0a", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "c12a1a8b8e1cd357", "scanner": "scanner-primary", "fingerprint": "e230b0c926ab2d0a", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/tag-release-candidate.yml"}, "region": {"startLine": 37}}}]}, {"ruleId": "scanner-d8cd20785bb346b2", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "981a0a228cf84e8e", "scanner": "scanner-primary", "fingerprint": "d8cd20785bb346b2", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/tag-release-candidate.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3333307085dec04f", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "ddadd2d82ce5dd78", "scanner": "scanner-primary", "fingerprint": "3333307085dec04f", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/continuous-delivery-cloud.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e1c1e12f22833679", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "ca7af073c48f5754", "scanner": "scanner-primary", "fingerprint": "e1c1e12f22833679", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/continuous-delivery-canary.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8c2ecddb93695fe0", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "a604720814f89e14", "scanner": "scanner-primary", "fingerprint": "8c2ecddb93695fe0", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/tests-e2e-ce.yml"}, "region": {"startLine": 61}}}]}, {"ruleId": "scanner-8c2ecddb93695fe0", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "5042b935a3285466", "scanner": "scanner-primary", "fingerprint": "8c2ecddb93695fe0", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/tests-e2e-ce.yml"}, "region": {"startLine": 67}}}]}, {"ruleId": "scanner-8c2ecddb93695fe0", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "c75ea4b6c8b5cca5", "scanner": "scanner-primary", "fingerprint": "8c2ecddb93695fe0", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/tests-e2e-ce.yml"}, "region": {"startLine": 74}}}]}, {"ruleId": "scanner-8c2ecddb93695fe0", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "729c9af71a6fbe3f", "scanner": "scanner-primary", "fingerprint": "8c2ecddb93695fe0", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/tests-e2e-ce.yml"}, "region": {"startLine": 79}}}]}, {"ruleId": "scanner-8c2ecddb93695fe0", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "295101e281ad3d20", "scanner": "scanner-primary", "fingerprint": "8c2ecddb93695fe0", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/tests-e2e-ce.yml"}, "region": {"startLine": 96}}}]}, {"ruleId": "scanner-8c2ecddb93695fe0", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "295101e281ad3d20", "scanner": "scanner-primary", "fingerprint": "8c2ecddb93695fe0", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/tests-e2e-ce.yml"}, "region": {"startLine": 104}}}]}, {"ruleId": "scanner-63d1b079b061865a", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "7d1defda8792f60b", "scanner": "scanner-primary", "fingerprint": "63d1b079b061865a", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/continuous-delivery-rollback-canary.yml"}, "region": {"startLine": 53}}}]}, {"ruleId": "scanner-81b9bc5865aba7e1", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "4cbf08f25f8209e0", "scanner": "scanner-primary", "fingerprint": "81b9bc5865aba7e1", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/crowdin-pr-merger.yml"}, "region": {"startLine": 18}}}]}, {"ruleId": "scanner-81b9bc5865aba7e1", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "54eb4e44dd1f33b7", "scanner": "scanner-primary", "fingerprint": "81b9bc5865aba7e1", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/crowdin-pr-merger.yml"}, "region": {"startLine": 23}}}]}, {"ruleId": "scanner-81b9bc5865aba7e1", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "b0a47df9cd3d0288", "scanner": "scanner-primary", "fingerprint": "81b9bc5865aba7e1", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/crowdin-pr-merger.yml"}, "region": {"startLine": 30}}}]}, {"ruleId": "scanner-81b9bc5865aba7e1", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "e2e566c64f6852d1", "scanner": "scanner-primary", "fingerprint": "81b9bc5865aba7e1", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/crowdin-pr-merger.yml"}, "region": {"startLine": 35}}}]}, {"ruleId": "scanner-81b9bc5865aba7e1", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "2999029434606b6a", "scanner": "scanner-primary", "fingerprint": "81b9bc5865aba7e1", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/crowdin-pr-merger.yml"}, "region": {"startLine": 43}}}]}, {"ruleId": "scanner-81b9bc5865aba7e1", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "2999029434606b6a", "scanner": "scanner-primary", "fingerprint": "81b9bc5865aba7e1", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/crowdin-pr-merger.yml"}, "region": {"startLine": 98}}}]}, {"ruleId": "scanner-81b9bc5865aba7e1", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "2999029434606b6a", "scanner": "scanner-primary", "fingerprint": "81b9bc5865aba7e1", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/crowdin-pr-merger.yml"}, "region": {"startLine": 118}}}]}, {"ruleId": "scanner-81b9bc5865aba7e1", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "2999029434606b6a", "scanner": "scanner-primary", "fingerprint": "81b9bc5865aba7e1", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/crowdin-pr-merger.yml"}, "region": {"startLine": 146}}}]}, {"ruleId": "scanner-81b9bc5865aba7e1", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "2999029434606b6a", "scanner": "scanner-primary", "fingerprint": "81b9bc5865aba7e1", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/crowdin-pr-merger.yml"}, "region": {"startLine": 158}}}]}, {"ruleId": "scanner-934dfa9df62402fd", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "61394d5fe328f6f0", "scanner": "scanner-primary", "fingerprint": "934dfa9df62402fd", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/reusable-finalize-translations-pr.yml"}, "region": {"startLine": 16}}}]}, {"ruleId": "scanner-934dfa9df62402fd", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "ae72dda0d62604bf", "scanner": "scanner-primary", "fingerprint": "934dfa9df62402fd", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/reusable-finalize-translations-pr.yml"}, "region": {"startLine": 21}}}]}, {"ruleId": "scanner-934dfa9df62402fd", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "66cb8065bc9e8c32", "scanner": "scanner-primary", "fingerprint": "934dfa9df62402fd", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/reusable-finalize-translations-pr.yml"}, "region": {"startLine": 28}}}]}, {"ruleId": "scanner-934dfa9df62402fd", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "19ae34a4df7f14e0", "scanner": "scanner-primary", "fingerprint": "934dfa9df62402fd", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/reusable-finalize-translations-pr.yml"}, "region": {"startLine": 33}}}]}, {"ruleId": "scanner-934dfa9df62402fd", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "71cac053ab204d26", "scanner": "scanner-primary", "fingerprint": "934dfa9df62402fd", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/reusable-finalize-translations-pr.yml"}, "region": {"startLine": 88}}}]}, {"ruleId": "scanner-7d9a3a1cd87b64fa", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "65fd788315638bd3", "scanner": "scanner-primary", "fingerprint": "7d9a3a1cd87b64fa", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/continuous-delivery-release.yml"}, "region": {"startLine": 43}}}]}, {"ruleId": "scanner-7d9a3a1cd87b64fa", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "65fd788315638bd3", "scanner": "scanner-primary", "fingerprint": "7d9a3a1cd87b64fa", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/continuous-delivery-release.yml"}, "region": {"startLine": 49}}}]}, {"ruleId": "scanner-7d9a3a1cd87b64fa", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "fb1b300bc4938fbf", "scanner": "scanner-primary", "fingerprint": "7d9a3a1cd87b64fa", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/continuous-delivery-release.yml"}, "region": {"startLine": 77}}}]}, {"ruleId": "scanner-d0abb4d5475521ab", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "44da8a5f7ec61d41", "scanner": "scanner-primary", "fingerprint": "d0abb4d5475521ab", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release-self-hosted.yml"}, "region": {"startLine": 21}}}]}, {"ruleId": "scanner-d0abb4d5475521ab", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "44da8a5f7ec61d41", "scanner": "scanner-primary", "fingerprint": "d0abb4d5475521ab", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release-self-hosted.yml"}, "region": {"startLine": 27}}}]}, {"ruleId": "scanner-d0abb4d5475521ab", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "0db794de395aaa8d", "scanner": "scanner-primary", "fingerprint": "d0abb4d5475521ab", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release-self-hosted.yml"}, "region": {"startLine": 36}}}]}, {"ruleId": "scanner-d0abb4d5475521ab", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "c67d89490ed7fc02", "scanner": "scanner-primary", "fingerprint": "d0abb4d5475521ab", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release-self-hosted.yml"}, "region": {"startLine": 56}}}]}, {"ruleId": "scanner-459c1a07465c319c", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "865a4caf9dd14e5b", "scanner": "scanner-primary", "fingerprint": "459c1a07465c319c", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/build-cloud-image.yml"}, "region": {"startLine": 11}}}]}, {"ruleId": "scanner-459c1a07465c319c", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "d61d77cfe044757a", "scanner": "scanner-primary", "fingerprint": "459c1a07465c319c", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/build-cloud-image.yml"}, "region": {"startLine": 17}}}]}, {"ruleId": "scanner-459c1a07465c319c", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "52f85c0be58c1fe7", "scanner": "scanner-primary", "fingerprint": "459c1a07465c319c", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/build-cloud-image.yml"}, "region": {"startLine": 24}}}]}, {"ruleId": "scanner-459c1a07465c319c", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "fc4ec6b59e7c3a31", "scanner": "scanner-primary", "fingerprint": "459c1a07465c319c", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/build-cloud-image.yml"}, "region": {"startLine": 27}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "75c59236dbb22313", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 30}}}]}, {"ruleId": "scanner-7d2c2580c56ad065", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "708c4a27684d6f6f", "scanner": "scanner-primary", "fingerprint": "7d2c2580c56ad065", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/setup-environment.yml"}, "region": {"startLine": 20}}}]}, {"ruleId": "scanner-7d2c2580c56ad065", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "9afbb913b5c8699d", "scanner": "scanner-primary", "fingerprint": "7d2c2580c56ad065", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/setup-environment.yml"}, "region": {"startLine": 41}}}]}, {"ruleId": "scanner-7d2c2580c56ad065", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "9afbb913b5c8699d", "scanner": "scanner-primary", "fingerprint": "7d2c2580c56ad065", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/setup-environment.yml"}, "region": {"startLine": 70}}}]}, {"ruleId": "scanner-6e737343dd91046d", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "2ae92b25ee7c120c", "scanner": "scanner-primary", "fingerprint": "6e737343dd91046d", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/benchmark.yml"}, "region": {"startLine": 47}}}]}, {"ruleId": "scanner-6e737343dd91046d", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "7db14bfc0fe7728e", "scanner": "scanner-primary", "fingerprint": "6e737343dd91046d", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/benchmark.yml"}, "region": {"startLine": 70}}}]}, {"ruleId": "scanner-6e737343dd91046d", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "f48bdd99890d505f", "scanner": "scanner-primary", "fingerprint": "6e737343dd91046d", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/benchmark.yml"}, "region": {"startLine": 109}}}]}, {"ruleId": "scanner-6e737343dd91046d", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "49817010a89b12df", "scanner": "scanner-primary", "fingerprint": "6e737343dd91046d", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/benchmark.yml"}, "region": {"startLine": 131}}}]}, {"ruleId": "scanner-fc180ed796895f59", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "7a42e47cad9f426e", "scanner": "scanner-primary", "fingerprint": "fc180ed796895f59", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/smoke-test.yml"}, "region": {"startLine": 27}}}]}, {"ruleId": "scanner-9a7a190bbd70d909", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "673f8fa8e429cc62", "scanner": "scanner-primary", "fingerprint": "9a7a190bbd70d909", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/tests-e2e-ee.yml"}, "region": {"startLine": 61}}}]}, {"ruleId": "scanner-9a7a190bbd70d909", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "d02aa4956918794b", "scanner": "scanner-primary", "fingerprint": "9a7a190bbd70d909", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/tests-e2e-ee.yml"}, "region": {"startLine": 67}}}]}, {"ruleId": "scanner-9a7a190bbd70d909", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "543d981c912d2dce", "scanner": "scanner-primary", "fingerprint": "9a7a190bbd70d909", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/tests-e2e-ee.yml"}, "region": {"startLine": 74}}}]}, {"ruleId": "scanner-9a7a190bbd70d909", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "9ad995b01f8a470f", "scanner": "scanner-primary", "fingerprint": "9a7a190bbd70d909", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/tests-e2e-ee.yml"}, "region": {"startLine": 79}}}]}, {"ruleId": "scanner-9a7a190bbd70d909", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "c05769522bf83d28", "scanner": "scanner-primary", "fingerprint": "9a7a190bbd70d909", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/tests-e2e-ee.yml"}, "region": {"startLine": 96}}}]}, {"ruleId": "scanner-9a7a190bbd70d909", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "c05769522bf83d28", "scanner": "scanner-primary", "fingerprint": "9a7a190bbd70d909", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/tests-e2e-ee.yml"}, "region": {"startLine": 104}}}]}, {"ruleId": "scanner-cb639d9a10a47b23", "level": "note", "message": {"text": "package.json defines install-time lifecycle scripts"}, "properties": {"repobilityId": "b86179956da3a4a8", "scanner": "scanner-primary", "fingerprint": "cb639d9a10a47b23", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "npm", "install-scripts"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-38903327eb433672", "level": "note", "message": {"text": "Very large file: packages/pieces/community/github/src/lib/trigger/index.ts (1480 lines)"}, "properties": {"repobilityId": "9bb586ac1555a90a", "scanner": "scanner-primary", "fingerprint": "38903327eb433672", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-7dc68ece56e9e5a5", "level": "note", "message": {"text": "Very large file: packages/pieces/community/pdfcrowd/src/lib/actions/url-to-pdf.ts (867 lines)"}, "properties": {"repobilityId": "112ffcb6446e2a1f", "scanner": "scanner-primary", "fingerprint": "7dc68ece56e9e5a5", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-f65fca313f1afae7", "level": "note", "message": {"text": "Very large file: packages/pieces/community/pdfcrowd/src/lib/actions/html-to-pdf.ts (867 lines)"}, "properties": {"repobilityId": "96657e3b537e5d64", "scanner": "scanner-primary", "fingerprint": "f65fca313f1afae7", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-58ba78a95a50c095", "level": "note", "message": {"text": "Very large file: packages/pieces/community/ampeco/src/index.ts (896 lines)"}, "properties": {"repobilityId": "0d97da0bac3cbda3", "scanner": "scanner-primary", "fingerprint": "58ba78a95a50c095", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-4d60965043374aed", "level": "note", "message": {"text": "Very large file: packages/server/api/src/app/database/postgres-connection.ts (836 lines)"}, "properties": {"repobilityId": "e39606c357ea4c88", "scanner": "scanner-primary", "fingerprint": "4d60965043374aed", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-6b715d0039d1161c", "level": "note", "message": {"text": "Very large file: packages/server/api/test/integration/ce/mcp/mcp-tools.test.ts (2565 lines)"}, "properties": {"repobilityId": "b127ba86621b0fb3", "scanner": "scanner-primary", "fingerprint": "6b715d0039d1161c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-be6c05c33eaab4d2", "level": "note", "message": {"text": "Very large file: packages/server/api/test/integration/cloud/project/project.test.ts (1303 lines)"}, "properties": {"repobilityId": "3a1bc13fd090db06", "scanner": "scanner-primary", "fingerprint": "be6c05c33eaab4d2", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-6893a6c8b0861585", "level": "warning", "message": {"text": "Very low test-to-source ratio"}, "properties": {"repobilityId": "54a7de3f06314bf0", "scanner": "scanner-primary", "fingerprint": "6893a6c8b0861585", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["tests", "coverage"]}}, {"ruleId": "scanner-88f301d8a90718ad", "level": "note", "message": {"text": "55 TODO/FIXME markers"}, "properties": {"repobilityId": "4b38c118003e07d2", "scanner": "scanner-primary", "fingerprint": "88f301d8a90718ad", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["maintenance"]}}, {"ruleId": "scanner-da65e6e3b0d80897", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/ee/embed-sdk/package.json"}, "properties": {"repobilityId": "806ab30534957789", "scanner": "scanner-primary", "fingerprint": "da65e6e3b0d80897", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/ee/embed-sdk/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-47093761247e3e2c", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/smartlead/package.json"}, "properties": {"repobilityId": "d408007bb7379313", "scanner": "scanner-primary", "fingerprint": "47093761247e3e2c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/smartlead/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3485d23d1944e53f", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/documentpro/package.json"}, "properties": {"repobilityId": "1ad18ed0401431bc", "scanner": "scanner-primary", "fingerprint": "3485d23d1944e53f", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/documentpro/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1708f33c3feb527a", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/tenzo/package.json"}, "properties": {"repobilityId": "77f9c492e2167413", "scanner": "scanner-primary", "fingerprint": "1708f33c3feb527a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/tenzo/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0fc6a5352d06c978", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/xquik/package.json"}, "properties": {"repobilityId": "dd120bc9a27cdeac", "scanner": "scanner-primary", "fingerprint": "0fc6a5352d06c978", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/xquik/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-55a5fcd3a6ed1fe1", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/workable/package.json"}, "properties": {"repobilityId": "1a6d37ad6f4e87c2", "scanner": "scanner-primary", "fingerprint": "55a5fcd3a6ed1fe1", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/workable/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1de18226622c0280", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/salesloft/package.json"}, "properties": {"repobilityId": "e5425f900d379b02", "scanner": "scanner-primary", "fingerprint": "1de18226622c0280", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/salesloft/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1dafd42b57f5656b", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/certopus/package.json"}, "properties": {"repobilityId": "aabfc85a8ea68eb3", "scanner": "scanner-primary", "fingerprint": "1dafd42b57f5656b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/certopus/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ede241bea1452d69", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/instantly-ai/package.json"}, "properties": {"repobilityId": "dbf1e4be39e37177", "scanner": "scanner-primary", "fingerprint": "ede241bea1452d69", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/instantly-ai/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b5289e6a28751c23", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/scrapegrapghai/package.json"}, "properties": {"repobilityId": "70066af5762538b7", "scanner": "scanner-primary", "fingerprint": "b5289e6a28751c23", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/scrapegrapghai/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d6472e880d0cbb4c", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/ask-handle/package.json"}, "properties": {"repobilityId": "8c146a8f2bffef2c", "scanner": "scanner-primary", "fingerprint": "d6472e880d0cbb4c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/ask-handle/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2f3aac4b8ac80d68", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/waitwhile/package.json"}, "properties": {"repobilityId": "f20147a167e37be3", "scanner": "scanner-primary", "fingerprint": "2f3aac4b8ac80d68", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/waitwhile/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-768204ef96bff9c8", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/alttextify/package.json"}, "properties": {"repobilityId": "4d91fd5e9a842739", "scanner": "scanner-primary", "fingerprint": "768204ef96bff9c8", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/alttextify/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e6079a6d0547953a", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/omnihr/package.json"}, "properties": {"repobilityId": "e780463cd5777392", "scanner": "scanner-primary", "fingerprint": "e6079a6d0547953a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/omnihr/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9af461edd3c29721", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/kissflow/package.json"}, "properties": {"repobilityId": "5912d96a56bd260c", "scanner": "scanner-primary", "fingerprint": "9af461edd3c29721", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/kissflow/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9449b167ebffb1d3", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/baremetrics/package.json"}, "properties": {"repobilityId": "dac67af01b4f0955", "scanner": "scanner-primary", "fingerprint": "9449b167ebffb1d3", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/baremetrics/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5728317dc53b25ca", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/instasent/package.json"}, "properties": {"repobilityId": "6d70f0323af64895", "scanner": "scanner-primary", "fingerprint": "5728317dc53b25ca", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/instasent/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0781b7a61a89aa3a", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/systeme-io/package.json"}, "properties": {"repobilityId": "cb524c547d6844c2", "scanner": "scanner-primary", "fingerprint": "0781b7a61a89aa3a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/systeme-io/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0dbe2a6d06f4327c", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/retune/package.json"}, "properties": {"repobilityId": "3e939df5dbd4257f", "scanner": "scanner-primary", "fingerprint": "0dbe2a6d06f4327c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/retune/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6a5ee7c576b8d7e4", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/freshdesk/package.json"}, "properties": {"repobilityId": "03db1c0e5ece5129", "scanner": "scanner-primary", "fingerprint": "6a5ee7c576b8d7e4", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/freshdesk/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-cd2a25d2745bd495", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/youtube/package.json"}, "properties": {"repobilityId": "2f02d68874473e47", "scanner": "scanner-primary", "fingerprint": "cd2a25d2745bd495", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/youtube/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3954ec16bbb1dee5", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/formitable/package.json"}, "properties": {"repobilityId": "e1e85cb3b000699a", "scanner": "scanner-primary", "fingerprint": "3954ec16bbb1dee5", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/formitable/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b77bdcabb5347447", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/zoho-invoice/package.json"}, "properties": {"repobilityId": "78dce3ffb9ff0fa4", "scanner": "scanner-primary", "fingerprint": "b77bdcabb5347447", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/zoho-invoice/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-89f4b7570fa47b20", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/respond-io/package.json"}, "properties": {"repobilityId": "bc68acac81da840f", "scanner": "scanner-primary", "fingerprint": "89f4b7570fa47b20", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/respond-io/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2987b01016afe121", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/generatebanners/package.json"}, "properties": {"repobilityId": "02ce37af9d66f405", "scanner": "scanner-primary", "fingerprint": "2987b01016afe121", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/generatebanners/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7d2cdf058b683afe", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/enrichlayer/package.json"}, "properties": {"repobilityId": "2b85967261c64492", "scanner": "scanner-primary", "fingerprint": "7d2cdf058b683afe", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/enrichlayer/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2f95835fd28a651e", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/productboard/package.json"}, "properties": {"repobilityId": "5f03980d7ead0186", "scanner": "scanner-primary", "fingerprint": "2f95835fd28a651e", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/productboard/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c4c56a9252970af4", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/livesession/package.json"}, "properties": {"repobilityId": "c4b03223bddb1909", "scanner": "scanner-primary", "fingerprint": "c4c56a9252970af4", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/livesession/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a72d7e57c30335cd", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/mem/package.json"}, "properties": {"repobilityId": "9a45a5977eb8330b", "scanner": "scanner-primary", "fingerprint": "a72d7e57c30335cd", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/mem/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-84b5120b32bb6834", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/respaid/package.json"}, "properties": {"repobilityId": "46e49363073b0035", "scanner": "scanner-primary", "fingerprint": "84b5120b32bb6834", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/respaid/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3f36804d448968a5", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/woodpecker/package.json"}, "properties": {"repobilityId": "9ffa49a2aca430ea", "scanner": "scanner-primary", "fingerprint": "3f36804d448968a5", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/woodpecker/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c320a28edcd5cca5", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/talkable/package.json"}, "properties": {"repobilityId": "7b6809ac88e37855", "scanner": "scanner-primary", "fingerprint": "c320a28edcd5cca5", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/talkable/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-98df0af9b5308795", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/llmrails/package.json"}, "properties": {"repobilityId": "869cb07a9cd2da22", "scanner": "scanner-primary", "fingerprint": "98df0af9b5308795", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/llmrails/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-69a3526c0d6cdefd", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/discourse/package.json"}, "properties": {"repobilityId": "fdbcb1dd93b86a1c", "scanner": "scanner-primary", "fingerprint": "69a3526c0d6cdefd", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/discourse/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a52040d80954754a", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/detecting-ai/package.json"}, "properties": {"repobilityId": "46e808469252c221", "scanner": "scanner-primary", "fingerprint": "a52040d80954754a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/detecting-ai/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-009278869b9098e7", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/feathery/package.json"}, "properties": {"repobilityId": "ca9ba330d3cfa3b9", "scanner": "scanner-primary", "fingerprint": "009278869b9098e7", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/feathery/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b6054ea9684b9aa5", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/exa/package.json"}, "properties": {"repobilityId": "cc4bd1811f2b5147", "scanner": "scanner-primary", "fingerprint": "b6054ea9684b9aa5", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/exa/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3c23cb6b9ff4cca4", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/personal-ai/package.json"}, "properties": {"repobilityId": "4f157e0d3c44875a", "scanner": "scanner-primary", "fingerprint": "3c23cb6b9ff4cca4", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/personal-ai/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-514af3b102bf17a6", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/mailgun/package.json"}, "properties": {"repobilityId": "9b8307e9d56692d1", "scanner": "scanner-primary", "fingerprint": "514af3b102bf17a6", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/mailgun/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c859b84ffc75f726", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/docusign/package.json"}, "properties": {"repobilityId": "6862a2352070b568", "scanner": "scanner-primary", "fingerprint": "c859b84ffc75f726", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/docusign/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-85ba11b7f87fca5b", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/raindrop/package.json"}, "properties": {"repobilityId": "7c597fda54ae502f", "scanner": "scanner-primary", "fingerprint": "85ba11b7f87fca5b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/raindrop/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-cc87a1667b8ff5ef", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/chatsistant/package.json"}, "properties": {"repobilityId": "164c917ab5a87798", "scanner": "scanner-primary", "fingerprint": "cc87a1667b8ff5ef", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/chatsistant/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9dc9b07005410b33", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/iloveapi/package.json"}, "properties": {"repobilityId": "0d7db83b742daba8", "scanner": "scanner-primary", "fingerprint": "9dc9b07005410b33", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/iloveapi/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3e9a0add9461d63f", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/google-docs/package.json"}, "properties": {"repobilityId": "a1aad76521f0fa2e", "scanner": "scanner-primary", "fingerprint": "3e9a0add9461d63f", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/google-docs/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-878f564adf83376d", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/google-cloud-storage/package.json"}, "properties": {"repobilityId": "6afa8945fb068d17", "scanner": "scanner-primary", "fingerprint": "878f564adf83376d", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/google-cloud-storage/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8785d8f55fe1e10d", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/shippo/package.json"}, "properties": {"repobilityId": "389ba5bb6ef3441f", "scanner": "scanner-primary", "fingerprint": "8785d8f55fe1e10d", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/shippo/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-92b23f73bd281efb", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/extracta-ai/package.json"}, "properties": {"repobilityId": "b3ee41b6e32bf58f", "scanner": "scanner-primary", "fingerprint": "92b23f73bd281efb", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/extracta-ai/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1864d57d26e4e7fc", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/phone-validator/package.json"}, "properties": {"repobilityId": "b8859b70da3bff21", "scanner": "scanner-primary", "fingerprint": "1864d57d26e4e7fc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/phone-validator/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-436464141179dbb5", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/stability-ai/package.json"}, "properties": {"repobilityId": "dbcf2ad331bb3753", "scanner": "scanner-primary", "fingerprint": "436464141179dbb5", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/stability-ai/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0437516eaf506928", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/onfleet/package.json"}, "properties": {"repobilityId": "17b0216e6df74106", "scanner": "scanner-primary", "fingerprint": "0437516eaf506928", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/onfleet/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e531e53f416bf653", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/bookedin/package.json"}, "properties": {"repobilityId": "43c9ffaa1fe92f9d", "scanner": "scanner-primary", "fingerprint": "e531e53f416bf653", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/bookedin/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f8c5f765aeb72b7a", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/fliqr-ai/package.json"}, "properties": {"repobilityId": "639ba6098d899276", "scanner": "scanner-primary", "fingerprint": "f8c5f765aeb72b7a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/fliqr-ai/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-26f58fef500033b4", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/taskade/package.json"}, "properties": {"repobilityId": "533029b16540ab55", "scanner": "scanner-primary", "fingerprint": "26f58fef500033b4", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/taskade/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6a2039e8b98d9e37", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/lokalise/package.json"}, "properties": {"repobilityId": "aeaa6247e49492e0", "scanner": "scanner-primary", "fingerprint": "6a2039e8b98d9e37", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/lokalise/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b15820008d6c3199", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/todoist/package.json"}, "properties": {"repobilityId": "2427d69768d55e38", "scanner": "scanner-primary", "fingerprint": "b15820008d6c3199", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/todoist/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b79782c6c7932686", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/freshservice/package.json"}, "properties": {"repobilityId": "08d2568466474af6", "scanner": "scanner-primary", "fingerprint": "b79782c6c7932686", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/freshservice/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-bc64b73f36230e50", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/bursty-ai/package.json"}, "properties": {"repobilityId": "cfb99cbcf8eb53df", "scanner": "scanner-primary", "fingerprint": "bc64b73f36230e50", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/bursty-ai/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ffacae4b0a59eb7a", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/outseta/package.json"}, "properties": {"repobilityId": "22627f7adae16c18", "scanner": "scanner-primary", "fingerprint": "ffacae4b0a59eb7a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/outseta/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-caf4f106eece7085", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/vlm-run/package.json"}, "properties": {"repobilityId": "3853f7a534778acc", "scanner": "scanner-primary", "fingerprint": "caf4f106eece7085", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/vlm-run/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-acefd88f946970c2", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/ntfy/package.json"}, "properties": {"repobilityId": "0515f8ef6f0701b7", "scanner": "scanner-primary", "fingerprint": "acefd88f946970c2", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/ntfy/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b710edd42e8cb75f", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/microsoft-sharepoint/package.json"}, "properties": {"repobilityId": "b5a9fd199995a5d4", "scanner": "scanner-primary", "fingerprint": "b710edd42e8cb75f", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/microsoft-sharepoint/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-fd7bc697c1fcd01f", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/webex/package.json"}, "properties": {"repobilityId": "48bfeccacc8a6219", "scanner": "scanner-primary", "fingerprint": "fd7bc697c1fcd01f", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/webex/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-30a122a3474b49cb", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/zagomail/package.json"}, "properties": {"repobilityId": "f5c80bf42f5e2902", "scanner": "scanner-primary", "fingerprint": "30a122a3474b49cb", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/zagomail/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6fde848ccc1b9015", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/fellow/package.json"}, "properties": {"repobilityId": "2a8b679dc82f0e15", "scanner": "scanner-primary", "fingerprint": "6fde848ccc1b9015", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/fellow/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7a1361dcd710070b", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/wistia/package.json"}, "properties": {"repobilityId": "0ace53c5c5164513", "scanner": "scanner-primary", "fingerprint": "7a1361dcd710070b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/wistia/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a9c09185423f5197", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/recurly/package.json"}, "properties": {"repobilityId": "17e331ac714ca970", "scanner": "scanner-primary", "fingerprint": "a9c09185423f5197", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/recurly/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0f010211d483a728", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/deepgram/package.json"}, "properties": {"repobilityId": "808b838bedae83c7", "scanner": "scanner-primary", "fingerprint": "0f010211d483a728", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/deepgram/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-27d7f9e65a7107eb", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/dittofeed/package.json"}, "properties": {"repobilityId": "95695bcb6bab6e07", "scanner": "scanner-primary", "fingerprint": "27d7f9e65a7107eb", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/dittofeed/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-98af620cbec7c2a2", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/pdfmonkey/package.json"}, "properties": {"repobilityId": "38a2f3280b123ae2", "scanner": "scanner-primary", "fingerprint": "98af620cbec7c2a2", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/pdfmonkey/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3783111283894216", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/cognito-forms/package.json"}, "properties": {"repobilityId": "c5a40a9bdd92050e", "scanner": "scanner-primary", "fingerprint": "3783111283894216", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/cognito-forms/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8198e052a7b0a203", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/azure-openai/package.json"}, "properties": {"repobilityId": "7f356797b022e1db", "scanner": "scanner-primary", "fingerprint": "8198e052a7b0a203", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/azure-openai/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-73ea481e5d5ec7f1", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/roe-ai/package.json"}, "properties": {"repobilityId": "17f4db127634b66a", "scanner": "scanner-primary", "fingerprint": "73ea481e5d5ec7f1", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/roe-ai/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a79ce6c819c22c0c", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/fillout-forms/package.json"}, "properties": {"repobilityId": "6906ce010f842514", "scanner": "scanner-primary", "fingerprint": "a79ce6c819c22c0c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/fillout-forms/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3bb1d25a06ddb10f", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/duckdb/package.json"}, "properties": {"repobilityId": "86952ae8d3234dc3", "scanner": "scanner-primary", "fingerprint": "3bb1d25a06ddb10f", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/duckdb/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-80a198acf0eb5090", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/canny/package.json"}, "properties": {"repobilityId": "24bb437e1edd436a", "scanner": "scanner-primary", "fingerprint": "80a198acf0eb5090", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/canny/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e09fd9d9dda5d3ba", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/giftbit/package.json"}, "properties": {"repobilityId": "510fb654072c1766", "scanner": "scanner-primary", "fingerprint": "e09fd9d9dda5d3ba", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/giftbit/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d23d652e886778f4", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/open-phone/package.json"}, "properties": {"repobilityId": "e691382876d40d31", "scanner": "scanner-primary", "fingerprint": "d23d652e886778f4", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/open-phone/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7dfc496fafcbad6b", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/sendy/package.json"}, "properties": {"repobilityId": "faa69453d5bfe9f4", "scanner": "scanner-primary", "fingerprint": "7dfc496fafcbad6b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/sendy/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1556e36c8f1ce64b", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/validatedmails/package.json"}, "properties": {"repobilityId": "b43c592b70823a3d", "scanner": "scanner-primary", "fingerprint": "1556e36c8f1ce64b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/validatedmails/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a2bfc23308268e27", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/groq/package.json"}, "properties": {"repobilityId": "e6c42d9d526817b4", "scanner": "scanner-primary", "fingerprint": "a2bfc23308268e27", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/groq/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-78de08dba1c10800", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/json/package.json"}, "properties": {"repobilityId": "38a62807ef395b5c", "scanner": "scanner-primary", "fingerprint": "78de08dba1c10800", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/json/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-09e476587fe56b93", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/smsmode/package.json"}, "properties": {"repobilityId": "9b827f4853b21db2", "scanner": "scanner-primary", "fingerprint": "09e476587fe56b93", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/smsmode/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-58a1946379df4113", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/magical-api/package.json"}, "properties": {"repobilityId": "aa85498eb052708e", "scanner": "scanner-primary", "fingerprint": "58a1946379df4113", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/magical-api/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7df670b7573aa675", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/cloutly/package.json"}, "properties": {"repobilityId": "ea9cf13cff33a510", "scanner": "scanner-primary", "fingerprint": "7df670b7573aa675", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/cloutly/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-78016ac160f98478", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/postmark/package.json"}, "properties": {"repobilityId": "3301551a633ea58a", "scanner": "scanner-primary", "fingerprint": "78016ac160f98478", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/postmark/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-becf73998a4b74a1", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/barcode-lookup/package.json"}, "properties": {"repobilityId": "2900cc94ac4940ca", "scanner": "scanner-primary", "fingerprint": "becf73998a4b74a1", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/barcode-lookup/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ed9de211ff4d4561", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/woocommerce/package.json"}, "properties": {"repobilityId": "3f1f39084c33e622", "scanner": "scanner-primary", "fingerprint": "ed9de211ff4d4561", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/woocommerce/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-309a1665c1283ab0", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/clickfunnels/package.json"}, "properties": {"repobilityId": "551a0843718377a5", "scanner": "scanner-primary", "fingerprint": "309a1665c1283ab0", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/clickfunnels/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-48e46e474bdae565", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/pinch-payments/package.json"}, "properties": {"repobilityId": "2bc9d2aab03ded4f", "scanner": "scanner-primary", "fingerprint": "48e46e474bdae565", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/pinch-payments/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f70400c79a833e62", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/vtex/package.json"}, "properties": {"repobilityId": "b97cab66bf8308d2", "scanner": "scanner-primary", "fingerprint": "f70400c79a833e62", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/vtex/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-68c9c10615558065", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/deftform/package.json"}, "properties": {"repobilityId": "52f6c105007ac8c6", "scanner": "scanner-primary", "fingerprint": "68c9c10615558065", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/deftform/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0944a10caca7ed86", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/pagerduty/package.json"}, "properties": {"repobilityId": "d48dc44affd86d09", "scanner": "scanner-primary", "fingerprint": "0944a10caca7ed86", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/pagerduty/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-dfb553664c5d9eac", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/square/package.json"}, "properties": {"repobilityId": "c2269935fb434f7f", "scanner": "scanner-primary", "fingerprint": "dfb553664c5d9eac", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/square/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d75eebc29a896b17", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/aiprise/package.json"}, "properties": {"repobilityId": "9ba0798863bee79e", "scanner": "scanner-primary", "fingerprint": "d75eebc29a896b17", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/aiprise/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-27cf4088b4fb32b6", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/microsoft-dynamics-365-business-central/package.json"}, "properties": {"repobilityId": "96806bb23ed9b5f2", "scanner": "scanner-primary", "fingerprint": "27cf4088b4fb32b6", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/microsoft-dynamics-365-business-central/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0d3da199467ba157", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/pastebin/package.json"}, "properties": {"repobilityId": "d4d4f9e6f9f91891", "scanner": "scanner-primary", "fingerprint": "0d3da199467ba157", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/pastebin/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9ed9699e0059b424", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/customgpt/package.json"}, "properties": {"repobilityId": "ac51259e8b5325fd", "scanner": "scanner-primary", "fingerprint": "9ed9699e0059b424", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/customgpt/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-07a5fc3a85e7d7a0", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/freshsales/package.json"}, "properties": {"repobilityId": "f580278ce0be56a0", "scanner": "scanner-primary", "fingerprint": "07a5fc3a85e7d7a0", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/freshsales/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0717df46ef2b6838", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/bexio/package.json"}, "properties": {"repobilityId": "3eb1b0d0ccac03f9", "scanner": "scanner-primary", "fingerprint": "0717df46ef2b6838", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/bexio/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-81b71903826dc2e1", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/formbricks/package.json"}, "properties": {"repobilityId": "f4b28b8e8996d55a", "scanner": "scanner-primary", "fingerprint": "81b71903826dc2e1", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/formbricks/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f1db852a42c30bce", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/google-drive/package.json"}, "properties": {"repobilityId": "8e5dfce5a980e413", "scanner": "scanner-primary", "fingerprint": "f1db852a42c30bce", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/google-drive/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-71bf222d234ae0a3", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/eth-name-service/package.json"}, "properties": {"repobilityId": "1b408bdb9896c1cb", "scanner": "scanner-primary", "fingerprint": "71bf222d234ae0a3", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/eth-name-service/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2d84a2e70a7e6ece", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/firecrawl/package.json"}, "properties": {"repobilityId": "a30ff92d8508b61f", "scanner": "scanner-primary", "fingerprint": "2d84a2e70a7e6ece", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/firecrawl/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-30ee81a8f2aa2c3b", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/comfyicu/package.json"}, "properties": {"repobilityId": "65817c01e3bb7499", "scanner": "scanner-primary", "fingerprint": "30ee81a8f2aa2c3b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/comfyicu/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ed423a1e846a7006", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/mooninvoice/package.json"}, "properties": {"repobilityId": "80ab4de15646a0d3", "scanner": "scanner-primary", "fingerprint": "ed423a1e846a7006", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/mooninvoice/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-fb4aba61bee3e862", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/meetgeek-ai/package.json"}, "properties": {"repobilityId": "a4d1efaf7d863c64", "scanner": "scanner-primary", "fingerprint": "fb4aba61bee3e862", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/meetgeek-ai/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a7d21a90b0496062", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/gistly/package.json"}, "properties": {"repobilityId": "d2f0689ecadcd0b6", "scanner": "scanner-primary", "fingerprint": "a7d21a90b0496062", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/gistly/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-df0a5922751d4f7d", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/typefully/package.json"}, "properties": {"repobilityId": "3708d9a9288070af", "scanner": "scanner-primary", "fingerprint": "df0a5922751d4f7d", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/typefully/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b0ea0aeb8b2ab568", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/coda/package.json"}, "properties": {"repobilityId": "0d4c0bbcca6b37ae", "scanner": "scanner-primary", "fingerprint": "b0ea0aeb8b2ab568", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/coda/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b407803c4d695bf5", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/bumpups/package.json"}, "properties": {"repobilityId": "23735b250241155f", "scanner": "scanner-primary", "fingerprint": "b407803c4d695bf5", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/bumpups/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8af19ca6930c4282", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/mempool-space/package.json"}, "properties": {"repobilityId": "7932134dba136a75", "scanner": "scanner-primary", "fingerprint": "8af19ca6930c4282", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/mempool-space/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7fff489e95f7688b", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/insighto-ai/package.json"}, "properties": {"repobilityId": "6a06560ce8b0f4b3", "scanner": "scanner-primary", "fingerprint": "7fff489e95f7688b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/insighto-ai/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1f55dc4b6279dd81", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/canva/package.json"}, "properties": {"repobilityId": "d2b22a16f9db5a3c", "scanner": "scanner-primary", "fingerprint": "1f55dc4b6279dd81", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/canva/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-cc488055993bbb1e", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/tavily/package.json"}, "properties": {"repobilityId": "6c5ae3a8fb65f896", "scanner": "scanner-primary", "fingerprint": "cc488055993bbb1e", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/tavily/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6ad74ab178dedeea", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/pdf4me/package.json"}, "properties": {"repobilityId": "694084b128ef2395", "scanner": "scanner-primary", "fingerprint": "6ad74ab178dedeea", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/pdf4me/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-94f91fb261ca0b5d", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/checkout/package.json"}, "properties": {"repobilityId": "48d465dace1c7abf", "scanner": "scanner-primary", "fingerprint": "94f91fb261ca0b5d", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/checkout/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-eee2a5c32a88c58f", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/segment/package.json"}, "properties": {"repobilityId": "4c4d0f00b7d87bfb", "scanner": "scanner-primary", "fingerprint": "eee2a5c32a88c58f", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/segment/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ed284a7fa7e6ee47", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/gcloud-pubsub/package.json"}, "properties": {"repobilityId": "e3ae796fed118053", "scanner": "scanner-primary", "fingerprint": "ed284a7fa7e6ee47", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/gcloud-pubsub/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ff6c3023f0629f20", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/dropbox/package.json"}, "properties": {"repobilityId": "be3b7ba084d117b0", "scanner": "scanner-primary", "fingerprint": "ff6c3023f0629f20", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/dropbox/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-18b48bd41196dd42", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/amazon-sqs/package.json"}, "properties": {"repobilityId": "742bdd53cff7fb3c", "scanner": "scanner-primary", "fingerprint": "18b48bd41196dd42", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/amazon-sqs/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-49fa332e0cd91cfa", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/buffer/package.json"}, "properties": {"repobilityId": "49347c67eda013bc", "scanner": "scanner-primary", "fingerprint": "49fa332e0cd91cfa", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/buffer/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-668f55c777cd2caa", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/serp-api/package.json"}, "properties": {"repobilityId": "cab125460df4164a", "scanner": "scanner-primary", "fingerprint": "668f55c777cd2caa", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/serp-api/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-20c3a41c0078fb69", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/matrix/package.json"}, "properties": {"repobilityId": "a50c32d0cecf9442", "scanner": "scanner-primary", "fingerprint": "20c3a41c0078fb69", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/matrix/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8d972b107f42dc0a", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/heartbeat/package.json"}, "properties": {"repobilityId": "a695079d9d7f880d", "scanner": "scanner-primary", "fingerprint": "8d972b107f42dc0a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/heartbeat/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-42f7cecb0dfb871f", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/pubrio/package.json"}, "properties": {"repobilityId": "5b9264f93a46e0b9", "scanner": "scanner-primary", "fingerprint": "42f7cecb0dfb871f", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/pubrio/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-91d7b65336a6c6ff", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/stripe/package.json"}, "properties": {"repobilityId": "416c4c414e53faf1", "scanner": "scanner-primary", "fingerprint": "91d7b65336a6c6ff", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/stripe/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4c0236b00dcf6399", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/dappier/package.json"}, "properties": {"repobilityId": "ae6f7f700c8226dc", "scanner": "scanner-primary", "fingerprint": "4c0236b00dcf6399", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/dappier/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7fcb58445a6b363a", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/clickup/package.json"}, "properties": {"repobilityId": "17102b0686b3449d", "scanner": "scanner-primary", "fingerprint": "7fcb58445a6b363a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/clickup/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f06cc1e7596bab03", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/wafeq/package.json"}, "properties": {"repobilityId": "9c07d08b2b6adb7f", "scanner": "scanner-primary", "fingerprint": "f06cc1e7596bab03", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/wafeq/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-72762dabf8cb374c", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/algolia/package.json"}, "properties": {"repobilityId": "2a25bf2d24349551", "scanner": "scanner-primary", "fingerprint": "72762dabf8cb374c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/algolia/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b3ac6835cca3fb61", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/pinterest/package.json"}, "properties": {"repobilityId": "919fb5c331692139", "scanner": "scanner-primary", "fingerprint": "b3ac6835cca3fb61", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/pinterest/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e3d51d719486fe61", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/image-router/package.json"}, "properties": {"repobilityId": "84f777021460ad10", "scanner": "scanner-primary", "fingerprint": "e3d51d719486fe61", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/image-router/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e3c929f5e3a1a5be", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/foreplay-co/package.json"}, "properties": {"repobilityId": "aeeda091efebee1b", "scanner": "scanner-primary", "fingerprint": "e3c929f5e3a1a5be", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/foreplay-co/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7b9341d111bc5726", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/surrealdb/package.json"}, "properties": {"repobilityId": "2e8ff21d6494016f", "scanner": "scanner-primary", "fingerprint": "7b9341d111bc5726", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/surrealdb/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-19307a22c2d346f5", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/air-ops/package.json"}, "properties": {"repobilityId": "7edf6723e1eb2c89", "scanner": "scanner-primary", "fingerprint": "19307a22c2d346f5", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/air-ops/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b9ab3fbb86ad8179", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/sendpulse/package.json"}, "properties": {"repobilityId": "990feb6f5821c3bf", "scanner": "scanner-primary", "fingerprint": "b9ab3fbb86ad8179", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/sendpulse/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3fe1fbd36e4be93d", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/youform/package.json"}, "properties": {"repobilityId": "5dae43a404391959", "scanner": "scanner-primary", "fingerprint": "3fe1fbd36e4be93d", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/youform/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4428e93003980d8b", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/figma/package.json"}, "properties": {"repobilityId": "e6e0a88688a41b9c", "scanner": "scanner-primary", "fingerprint": "4428e93003980d8b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/figma/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2d78823f854e7286", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/razorpay/package.json"}, "properties": {"repobilityId": "81db5717ca81437e", "scanner": "scanner-primary", "fingerprint": "2d78823f854e7286", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/razorpay/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-35a185d90da0872b", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/senja/package.json"}, "properties": {"repobilityId": "589800e292a95f58", "scanner": "scanner-primary", "fingerprint": "35a185d90da0872b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/senja/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6a5ee5a88aba8e03", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/chain-aware/package.json"}, "properties": {"repobilityId": "9295923b45349fcb", "scanner": "scanner-primary", "fingerprint": "6a5ee5a88aba8e03", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/chain-aware/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-fbf8895805921c6a", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/voipstudio/package.json"}, "properties": {"repobilityId": "0c2746378deb66fe", "scanner": "scanner-primary", "fingerprint": "fbf8895805921c6a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/voipstudio/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7a5014df8d57c553", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/timelines-ai/package.json"}, "properties": {"repobilityId": "dfc148c2f1d6c5fe", "scanner": "scanner-primary", "fingerprint": "7a5014df8d57c553", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/timelines-ai/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-589b16f03c9d0d0d", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/twitter/package.json"}, "properties": {"repobilityId": "06bc22e4d9089b69", "scanner": "scanner-primary", "fingerprint": "589b16f03c9d0d0d", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/twitter/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8a6bda4799e87a4b", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/kizeo-forms/package.json"}, "properties": {"repobilityId": "058b2efca9b1ab70", "scanner": "scanner-primary", "fingerprint": "8a6bda4799e87a4b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/kizeo-forms/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e72a169ae9c4a1b6", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/telnyx/package.json"}, "properties": {"repobilityId": "8095ac0b06aeab05", "scanner": "scanner-primary", "fingerprint": "e72a169ae9c4a1b6", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/telnyx/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-066dc6cf70f1af9a", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/chat-data/package.json"}, "properties": {"repobilityId": "43f8868bf03bac01", "scanner": "scanner-primary", "fingerprint": "066dc6cf70f1af9a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/chat-data/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-da6bad760a2f8fb5", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/leap-ai/package.json"}, "properties": {"repobilityId": "6791445ba809ecdb", "scanner": "scanner-primary", "fingerprint": "da6bad760a2f8fb5", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/leap-ai/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-00473a562e9666a3", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/readwise/package.json"}, "properties": {"repobilityId": "65376e484d99b302", "scanner": "scanner-primary", "fingerprint": "00473a562e9666a3", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/readwise/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-edc2adc37bf951f1", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/bocha-search/package.json"}, "properties": {"repobilityId": "297aeba3175f7ba7", "scanner": "scanner-primary", "fingerprint": "edc2adc37bf951f1", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/bocha-search/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-80e8ea0370c2bd3a", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/chess-com/package.json"}, "properties": {"repobilityId": "ae282daaf15f7286", "scanner": "scanner-primary", "fingerprint": "80e8ea0370c2bd3a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/chess-com/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f916a00b7764ea51", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/cohere/package.json"}, "properties": {"repobilityId": "dd3660c857baa4fc", "scanner": "scanner-primary", "fingerprint": "f916a00b7764ea51", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/cohere/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e030d949bb567393", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/quaderno/package.json"}, "properties": {"repobilityId": "d148955f7b292367", "scanner": "scanner-primary", "fingerprint": "e030d949bb567393", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/quaderno/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3d2dd804f985bbcc", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/emailit/package.json"}, "properties": {"repobilityId": "8ae2562e1086bac5", "scanner": "scanner-primary", "fingerprint": "3d2dd804f985bbcc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/emailit/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-680ec0c7966b32e8", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/umami/package.json"}, "properties": {"repobilityId": "7c43cba17d83269a", "scanner": "scanner-primary", "fingerprint": "680ec0c7966b32e8", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/umami/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-262c3a1eb60b2757", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/azure-blob-storage/package.json"}, "properties": {"repobilityId": "8be2ff02a03ed34e", "scanner": "scanner-primary", "fingerprint": "262c3a1eb60b2757", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/azure-blob-storage/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-23ff3b996faec483", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/opnform/package.json"}, "properties": {"repobilityId": "33e668c684bc071f", "scanner": "scanner-primary", "fingerprint": "23ff3b996faec483", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/opnform/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-171681e85e7a84de", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/mailchimp/package.json"}, "properties": {"repobilityId": "6e228b9ff485f9ea", "scanner": "scanner-primary", "fingerprint": "171681e85e7a84de", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/mailchimp/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-759c000f0c28216c", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/devin/package.json"}, "properties": {"repobilityId": "8da968132148bc34", "scanner": "scanner-primary", "fingerprint": "759c000f0c28216c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/devin/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-36ce16e6cf8f9188", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/odoo/package.json"}, "properties": {"repobilityId": "06aa4f32a78e51bd", "scanner": "scanner-primary", "fingerprint": "36ce16e6cf8f9188", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/odoo/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1a2db53bc322adf7", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/poper/package.json"}, "properties": {"repobilityId": "d64913287c8e0fd1", "scanner": "scanner-primary", "fingerprint": "1a2db53bc322adf7", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/poper/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c3d3bf1e51e58df4", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/typeform/package.json"}, "properties": {"repobilityId": "38d7cac6153ef066", "scanner": "scanner-primary", "fingerprint": "c3d3bf1e51e58df4", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/typeform/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a49e531d242f4cb9", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/digital-ocean/package.json"}, "properties": {"repobilityId": "f9963490a84adbea", "scanner": "scanner-primary", "fingerprint": "a49e531d242f4cb9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/digital-ocean/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-56f5490aa5fbdb9a", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/swarmnode/package.json"}, "properties": {"repobilityId": "3e734a4ead803a37", "scanner": "scanner-primary", "fingerprint": "56f5490aa5fbdb9a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/swarmnode/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e656985c6f346bd5", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/manychat/package.json"}, "properties": {"repobilityId": "5fed41ce6b9c7407", "scanner": "scanner-primary", "fingerprint": "e656985c6f346bd5", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/manychat/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-deb558bb4109a97a", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/autocalls/package.json"}, "properties": {"repobilityId": "aaf19ab8066c722d", "scanner": "scanner-primary", "fingerprint": "deb558bb4109a97a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/autocalls/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8a283e3e0a05022e", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/microsoft-365-people/package.json"}, "properties": {"repobilityId": "9ca8a9c8f10535ea", "scanner": "scanner-primary", "fingerprint": "8a283e3e0a05022e", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/microsoft-365-people/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2b9322755166fafa", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/mailchain/package.json"}, "properties": {"repobilityId": "86ea9efd411af9cd", "scanner": "scanner-primary", "fingerprint": "2b9322755166fafa", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/mailchain/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-32b6cbc6cf41bdcc", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/cartloom/package.json"}, "properties": {"repobilityId": "8c058ac6dc9a8f56", "scanner": "scanner-primary", "fingerprint": "32b6cbc6cf41bdcc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/cartloom/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3b1a47a3da187867", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/whatsscale/package.json"}, "properties": {"repobilityId": "5fb208bdfdfc05f2", "scanner": "scanner-primary", "fingerprint": "3b1a47a3da187867", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/whatsscale/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1297573da426c4c0", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/descript/package.json"}, "properties": {"repobilityId": "11cd3d154dee2060", "scanner": "scanner-primary", "fingerprint": "1297573da426c4c0", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/descript/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c304c92164642d40", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/retable/package.json"}, "properties": {"repobilityId": "10225baaf0e3f7cb", "scanner": "scanner-primary", "fingerprint": "c304c92164642d40", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/retable/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-655647a981e4b513", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/mollie/package.json"}, "properties": {"repobilityId": "af32cfce34bd1c6e", "scanner": "scanner-primary", "fingerprint": "655647a981e4b513", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/mollie/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-05d864b9160c865d", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/katana/package.json"}, "properties": {"repobilityId": "adfc96c0887ea018", "scanner": "scanner-primary", "fingerprint": "05d864b9160c865d", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/katana/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-06cf7395b349080d", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/pollybot-ai/package.json"}, "properties": {"repobilityId": "e5e7811922a61467", "scanner": "scanner-primary", "fingerprint": "06cf7395b349080d", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/pollybot-ai/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e4f4b7063c2b5f0b", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/azure-devops/package.json"}, "properties": {"repobilityId": "ebbfd1389a5022c1", "scanner": "scanner-primary", "fingerprint": "e4f4b7063c2b5f0b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/azure-devops/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a0054794c1ef7ba5", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/just-invoice/package.json"}, "properties": {"repobilityId": "2c6085497544db65", "scanner": "scanner-primary", "fingerprint": "a0054794c1ef7ba5", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/just-invoice/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a58e259c2e75be9d", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/hastewire/package.json"}, "properties": {"repobilityId": "58767f6f5913b4d4", "scanner": "scanner-primary", "fingerprint": "a58e259c2e75be9d", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/hastewire/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-49c676f66544f048", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/wufoo/package.json"}, "properties": {"repobilityId": "a2fba0ccb45f322c", "scanner": "scanner-primary", "fingerprint": "49c676f66544f048", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/wufoo/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d497d0f16df64926", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/cursor/package.json"}, "properties": {"repobilityId": "d192ee3caa53a20d", "scanner": "scanner-primary", "fingerprint": "d497d0f16df64926", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/cursor/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-bf23f55ea0ca4302", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/line/package.json"}, "properties": {"repobilityId": "0d9f0bfed314008f", "scanner": "scanner-primary", "fingerprint": "bf23f55ea0ca4302", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/line/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e0c4dcee91611b95", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/signrequest/package.json"}, "properties": {"repobilityId": "eae7a535e363fb7c", "scanner": "scanner-primary", "fingerprint": "e0c4dcee91611b95", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/signrequest/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-151f6a58d40a3ad7", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/gorgias/package.json"}, "properties": {"repobilityId": "7ed83d2d73abd213", "scanner": "scanner-primary", "fingerprint": "151f6a58d40a3ad7", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/gorgias/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-48c89a7ad3aa7600", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/crisp/package.json"}, "properties": {"repobilityId": "63efbfcd1e34a432", "scanner": "scanner-primary", "fingerprint": "48c89a7ad3aa7600", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/crisp/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-da1c432bb5e67488", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/google-search/package.json"}, "properties": {"repobilityId": "b6aa242a549da84e", "scanner": "scanner-primary", "fingerprint": "da1c432bb5e67488", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/google-search/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-cceb657b90f15502", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/luxury-presence/package.json"}, "properties": {"repobilityId": "3e48302d5cfda57f", "scanner": "scanner-primary", "fingerprint": "cceb657b90f15502", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/luxury-presence/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c077c8650785cdd6", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/hubspot/package.json"}, "properties": {"repobilityId": "4fbd36bb1566c921", "scanner": "scanner-primary", "fingerprint": "c077c8650785cdd6", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/hubspot/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a6fb0ecff3fab285", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/instabase/package.json"}, "properties": {"repobilityId": "adfd522163ded620", "scanner": "scanner-primary", "fingerprint": "a6fb0ecff3fab285", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/instabase/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-81e39a1e8724aab6", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/provenexpert/package.json"}, "properties": {"repobilityId": "2b211f13941b7063", "scanner": "scanner-primary", "fingerprint": "81e39a1e8724aab6", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/provenexpert/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-bdf46fcbaa707ae6", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/microsoft-365-planner/package.json"}, "properties": {"repobilityId": "575f0d3be1b4d571", "scanner": "scanner-primary", "fingerprint": "bdf46fcbaa707ae6", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/microsoft-365-planner/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-bb489fd7fb9bb12c", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/jira-cloud/package.json"}, "properties": {"repobilityId": "5137af82a728cc87", "scanner": "scanner-primary", "fingerprint": "bb489fd7fb9bb12c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/jira-cloud/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c1cc49522dfc24ef", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/documerge/package.json"}, "properties": {"repobilityId": "d93eeb05e5c25bd7", "scanner": "scanner-primary", "fingerprint": "c1cc49522dfc24ef", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/documerge/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1c6ff94999ea3d7a", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/lofty/package.json"}, "properties": {"repobilityId": "a0c502c79e83ec28", "scanner": "scanner-primary", "fingerprint": "1c6ff94999ea3d7a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/lofty/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7b9ea5986c63101a", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/azure-communication-services/package.json"}, "properties": {"repobilityId": "fd71ce6cb96b525a", "scanner": "scanner-primary", "fingerprint": "7b9ea5986c63101a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/azure-communication-services/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-beba83c570bab982", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/cryptolens/package.json"}, "properties": {"repobilityId": "341e94d374f5125a", "scanner": "scanner-primary", "fingerprint": "beba83c570bab982", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/cryptolens/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4312d13dad3e366f", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/chatling/package.json"}, "properties": {"repobilityId": "63d0064e89e9d379", "scanner": "scanner-primary", "fingerprint": "4312d13dad3e366f", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/chatling/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-807bb32c68f10663", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/chargekeep/package.json"}, "properties": {"repobilityId": "673202479e11e112", "scanner": "scanner-primary", "fingerprint": "807bb32c68f10663", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/chargekeep/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0993a006d5719e7c", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/teamleader/package.json"}, "properties": {"repobilityId": "4e09d2494284e5d5", "scanner": "scanner-primary", "fingerprint": "0993a006d5719e7c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/teamleader/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-141d044dd223a557", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/kallabot-ai/package.json"}, "properties": {"repobilityId": "536cc5a3cf57f68b", "scanner": "scanner-primary", "fingerprint": "141d044dd223a557", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/kallabot-ai/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-37caba694fbe8d5c", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/google-bigquery/package.json"}, "properties": {"repobilityId": "cb73bd27ab0392b8", "scanner": "scanner-primary", "fingerprint": "37caba694fbe8d5c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/google-bigquery/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1f75c7c405f3e0bd", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/azure-ad/package.json"}, "properties": {"repobilityId": "a2cd1998be4ed8c9", "scanner": "scanner-primary", "fingerprint": "1f75c7c405f3e0bd", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/azure-ad/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-17f156dfd2231a4b", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/cal-com/package.json"}, "properties": {"repobilityId": "59e8490461d7340c", "scanner": "scanner-primary", "fingerprint": "17f156dfd2231a4b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/cal-com/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b1f1e085fd3a118f", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/elevenlabs/package.json"}, "properties": {"repobilityId": "0feea25da774184c", "scanner": "scanner-primary", "fingerprint": "b1f1e085fd3a118f", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/elevenlabs/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ec6030169a715138", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/uxsniff/package.json"}, "properties": {"repobilityId": "87199fc580b340c9", "scanner": "scanner-primary", "fingerprint": "ec6030169a715138", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/uxsniff/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-86887a04fd6e3a83", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/maileroo/package.json"}, "properties": {"repobilityId": "5d5d0b8f2e4569d8", "scanner": "scanner-primary", "fingerprint": "86887a04fd6e3a83", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/maileroo/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e3505c1813724c32", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/free-agent/package.json"}, "properties": {"repobilityId": "ba99a33893c4255d", "scanner": "scanner-primary", "fingerprint": "e3505c1813724c32", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/free-agent/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-942c4198b84d7476", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/videoask/package.json"}, "properties": {"repobilityId": "c86cf69bd60bd339", "scanner": "scanner-primary", "fingerprint": "942c4198b84d7476", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/videoask/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e64d18c1c51bd283", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/circle/package.json"}, "properties": {"repobilityId": "7ec68c5655f103a4", "scanner": "scanner-primary", "fingerprint": "e64d18c1c51bd283", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/circle/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-cb5165256248efd3", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/seven/package.json"}, "properties": {"repobilityId": "520bd33eb0042fcb", "scanner": "scanner-primary", "fingerprint": "cb5165256248efd3", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/seven/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1d81918b42b58b93", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/omnisend/package.json"}, "properties": {"repobilityId": "ea5f3c8ca10e8d61", "scanner": "scanner-primary", "fingerprint": "1d81918b42b58b93", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/omnisend/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-30d49fba0a001f53", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/housecall-pro/package.json"}, "properties": {"repobilityId": "8d737892f54a6619", "scanner": "scanner-primary", "fingerprint": "30d49fba0a001f53", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/housecall-pro/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a3a8fa992b5c0cc9", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/imeetify/package.json"}, "properties": {"repobilityId": "b2091a227839c00f", "scanner": "scanner-primary", "fingerprint": "a3a8fa992b5c0cc9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/imeetify/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a2b0d14ce9ffd9bc", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/slite/package.json"}, "properties": {"repobilityId": "0416eeec0dc617c9", "scanner": "scanner-primary", "fingerprint": "a2b0d14ce9ffd9bc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/slite/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-88d3edd63b80fbb6", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/scenario/package.json"}, "properties": {"repobilityId": "9308bf52d286d1e6", "scanner": "scanner-primary", "fingerprint": "88d3edd63b80fbb6", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/scenario/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a0f062fd7b925313", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/ticktick/package.json"}, "properties": {"repobilityId": "421b66be6c289f6c", "scanner": "scanner-primary", "fingerprint": "a0f062fd7b925313", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/ticktick/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4349f5825a69d468", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/scrapeless/package.json"}, "properties": {"repobilityId": "db85fa3b93236c51", "scanner": "scanner-primary", "fingerprint": "4349f5825a69d468", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/scrapeless/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-103edc80af14b8d6", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/fragment/package.json"}, "properties": {"repobilityId": "a141a2e7def91391", "scanner": "scanner-primary", "fingerprint": "103edc80af14b8d6", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/fragment/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c29e7ba73f657978", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/peekshot/package.json"}, "properties": {"repobilityId": "173c9b06ffb66d95", "scanner": "scanner-primary", "fingerprint": "c29e7ba73f657978", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/peekshot/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f5c5e6ef802e507b", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/coralogix/package.json"}, "properties": {"repobilityId": "cc753ed1d838931d", "scanner": "scanner-primary", "fingerprint": "f5c5e6ef802e507b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/coralogix/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f0f7ebb89a048285", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/saleor/package.json"}, "properties": {"repobilityId": "853781454490946f", "scanner": "scanner-primary", "fingerprint": "f0f7ebb89a048285", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/saleor/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2073a21f8ba96bb3", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/zoho-books/package.json"}, "properties": {"repobilityId": "7f149563e18e8ff5", "scanner": "scanner-primary", "fingerprint": "2073a21f8ba96bb3", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/zoho-books/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-92a7e50faaa0d208", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/oracle-database/package.json"}, "properties": {"repobilityId": "1c7145e6a291d09f", "scanner": "scanner-primary", "fingerprint": "92a7e50faaa0d208", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/oracle-database/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a2152a99a70e5f7e", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/mysendingbox/package.json"}, "properties": {"repobilityId": "d23e858a844b4ac9", "scanner": "scanner-primary", "fingerprint": "a2152a99a70e5f7e", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/mysendingbox/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e6f759c7b036a6c7", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/splitwise/package.json"}, "properties": {"repobilityId": "1be93e7bedf0f1aa", "scanner": "scanner-primary", "fingerprint": "e6f759c7b036a6c7", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/splitwise/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-66730926a7f8e019", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/zoho-mail/package.json"}, "properties": {"repobilityId": "fcf4f87b38f56cac", "scanner": "scanner-primary", "fingerprint": "66730926a7f8e019", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/zoho-mail/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-499702aba4a92f00", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/zoho-desk/package.json"}, "properties": {"repobilityId": "18e1ee8949d86d00", "scanner": "scanner-primary", "fingerprint": "499702aba4a92f00", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/zoho-desk/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-09d04f45e2e09b3a", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/whatsable/package.json"}, "properties": {"repobilityId": "1443c086a8fc8023", "scanner": "scanner-primary", "fingerprint": "09d04f45e2e09b3a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/whatsable/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7aa9fee46fee4289", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/logsnag/package.json"}, "properties": {"repobilityId": "69e2dfe48a59950b", "scanner": "scanner-primary", "fingerprint": "7aa9fee46fee4289", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/logsnag/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6cb5533c3ce3e9c8", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/reachinbox/package.json"}, "properties": {"repobilityId": "03165480d87ca876", "scanner": "scanner-primary", "fingerprint": "6cb5533c3ce3e9c8", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/reachinbox/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-286d3ad9ddb01cab", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/coupa/package.json"}, "properties": {"repobilityId": "cb3730acb89b0307", "scanner": "scanner-primary", "fingerprint": "286d3ad9ddb01cab", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/coupa/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-815664e92ccb2fa1", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/pendo/package.json"}, "properties": {"repobilityId": "81e8dad39d37a20f", "scanner": "scanner-primary", "fingerprint": "815664e92ccb2fa1", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/pendo/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-24d782bcd2cbc1bc", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/fathom-analytics/package.json"}, "properties": {"repobilityId": "799a61040d7fdeab", "scanner": "scanner-primary", "fingerprint": "24d782bcd2cbc1bc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/fathom-analytics/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5f5b6693c09deea4", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/clicksend/package.json"}, "properties": {"repobilityId": "f225ecea8184e019", "scanner": "scanner-primary", "fingerprint": "5f5b6693c09deea4", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/clicksend/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-595aab35fcf1820f", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/vadoo-ai/package.json"}, "properties": {"repobilityId": "1af64f979fe6faa5", "scanner": "scanner-primary", "fingerprint": "595aab35fcf1820f", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/vadoo-ai/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-bc8a8585a890cba5", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/slashed/package.json"}, "properties": {"repobilityId": "861dd6ba742a1fbb", "scanner": "scanner-primary", "fingerprint": "bc8a8585a890cba5", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/slashed/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-07931ebfc419807e", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/time-ops/package.json"}, "properties": {"repobilityId": "ce08e1b071f74fd3", "scanner": "scanner-primary", "fingerprint": "07931ebfc419807e", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/time-ops/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b22140d0ebad2410", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/twilio/package.json"}, "properties": {"repobilityId": "a4706d98141c7618", "scanner": "scanner-primary", "fingerprint": "b22140d0ebad2410", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/twilio/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-26d8551eb94cdbf6", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/meistertask/package.json"}, "properties": {"repobilityId": "cb195dfd6fd860d6", "scanner": "scanner-primary", "fingerprint": "26d8551eb94cdbf6", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/meistertask/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-394beb2b9bbbc970", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/saastic/package.json"}, "properties": {"repobilityId": "c53af5ad570cd757", "scanner": "scanner-primary", "fingerprint": "394beb2b9bbbc970", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/saastic/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-649b15e98744be07", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/google-my-business/package.json"}, "properties": {"repobilityId": "6c7152e4a91ff8e3", "scanner": "scanner-primary", "fingerprint": "649b15e98744be07", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/google-my-business/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-17c8d8d1aec14050", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/filetopdf/package.json"}, "properties": {"repobilityId": "baeacb09c3c27c56", "scanner": "scanner-primary", "fingerprint": "17c8d8d1aec14050", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/filetopdf/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-89960c809ec83acb", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/tl-dv/package.json"}, "properties": {"repobilityId": "67ebc293f8e41763", "scanner": "scanner-primary", "fingerprint": "89960c809ec83acb", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/tl-dv/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b113da3b3411f9b1", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/ghostcms/package.json"}, "properties": {"repobilityId": "079a497480fb376b", "scanner": "scanner-primary", "fingerprint": "b113da3b3411f9b1", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/ghostcms/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b0814236b85837fd", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/feedhive/package.json"}, "properties": {"repobilityId": "13c20ab853f2ef51", "scanner": "scanner-primary", "fingerprint": "b0814236b85837fd", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/feedhive/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a98ddcd160f91d74", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/zoo/package.json"}, "properties": {"repobilityId": "88fff347f57c62a0", "scanner": "scanner-primary", "fingerprint": "a98ddcd160f91d74", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/zoo/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-61fa3e894b9e3837", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/gender-api/package.json"}, "properties": {"repobilityId": "318c3fc7a7fac2e9", "scanner": "scanner-primary", "fingerprint": "61fa3e894b9e3837", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/gender-api/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d99fb324ce80349f", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/teamwork/package.json"}, "properties": {"repobilityId": "02437a411b8d2e31", "scanner": "scanner-primary", "fingerprint": "d99fb324ce80349f", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/teamwork/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3aad004d658fd329", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/esignatures/package.json"}, "properties": {"repobilityId": "52d04dc1c49da69a", "scanner": "scanner-primary", "fingerprint": "3aad004d658fd329", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/esignatures/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-12c964b2998356d9", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/assembled/package.json"}, "properties": {"repobilityId": "3a50b35421a512e1", "scanner": "scanner-primary", "fingerprint": "12c964b2998356d9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/assembled/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-73d1d95c1ff406bf", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/kustomer/package.json"}, "properties": {"repobilityId": "2b2deea4ddc4e394", "scanner": "scanner-primary", "fingerprint": "73d1d95c1ff406bf", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/kustomer/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4f178d36571ceedb", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/aminos/package.json"}, "properties": {"repobilityId": "fbf5face68d5fe39", "scanner": "scanner-primary", "fingerprint": "4f178d36571ceedb", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/aminos/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a5011a383bfbfd63", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/whatsapp/package.json"}, "properties": {"repobilityId": "5b3ac55147a9d492", "scanner": "scanner-primary", "fingerprint": "a5011a383bfbfd63", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/whatsapp/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d76422e65fba212a", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/microsoft-outlook-calendar/package.json"}, "properties": {"repobilityId": "eb76a181a13f1e46", "scanner": "scanner-primary", "fingerprint": "d76422e65fba212a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/microsoft-outlook-calendar/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-72975ab91d016452", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/sitespeakai/package.json"}, "properties": {"repobilityId": "a099ca65a6a34d0c", "scanner": "scanner-primary", "fingerprint": "72975ab91d016452", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/sitespeakai/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a667a6be3e590032", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/editionguard/package.json"}, "properties": {"repobilityId": "8ff1e65559552405", "scanner": "scanner-primary", "fingerprint": "a667a6be3e590032", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/editionguard/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8bdecfb9c97e8114", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/cometapi/package.json"}, "properties": {"repobilityId": "596e1f1320422d2a", "scanner": "scanner-primary", "fingerprint": "8bdecfb9c97e8114", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/cometapi/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c120f46a2c623f8f", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/smaily/package.json"}, "properties": {"repobilityId": "5dbe0c858422b9fc", "scanner": "scanner-primary", "fingerprint": "c120f46a2c623f8f", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/smaily/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d0eb4e6a3f26187e", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/webling/package.json"}, "properties": {"repobilityId": "e376a145a96f6729", "scanner": "scanner-primary", "fingerprint": "d0eb4e6a3f26187e", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/webling/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5150f640196391ef", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/mailjet/package.json"}, "properties": {"repobilityId": "1b185e93734ba697", "scanner": "scanner-primary", "fingerprint": "5150f640196391ef", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/mailjet/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6f7eb241ca44158a", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/socialkit/package.json"}, "properties": {"repobilityId": "3e8fc3384e267385", "scanner": "scanner-primary", "fingerprint": "6f7eb241ca44158a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/socialkit/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-14ceccb5f0613021", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/postiz/package.json"}, "properties": {"repobilityId": "470414b0035c9a36", "scanner": "scanner-primary", "fingerprint": "14ceccb5f0613021", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/postiz/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2c18d3c37c86e1ea", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/muna-ai/package.json"}, "properties": {"repobilityId": "7d6dbcb21db31bc0", "scanner": "scanner-primary", "fingerprint": "2c18d3c37c86e1ea", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/muna-ai/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4b2951a597eb92b8", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/matomo/package.json"}, "properties": {"repobilityId": "82fbde0517e69ab7", "scanner": "scanner-primary", "fingerprint": "4b2951a597eb92b8", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/matomo/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-15056a5b546d76a6", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/telegram-bot/package.json"}, "properties": {"repobilityId": "000b9ba9d8c6e42f", "scanner": "scanner-primary", "fingerprint": "15056a5b546d76a6", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/telegram-bot/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1b3b94fa07661385", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/beebole/package.json"}, "properties": {"repobilityId": "5c11b56c4f5a2aee", "scanner": "scanner-primary", "fingerprint": "1b3b94fa07661385", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/beebole/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-05e82460838821ba", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/tidely/package.json"}, "properties": {"repobilityId": "f70d62df5f754030", "scanner": "scanner-primary", "fingerprint": "05e82460838821ba", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/tidely/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a118dc8ff64577e4", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/browserless/package.json"}, "properties": {"repobilityId": "586aa3f5e8e0a7d3", "scanner": "scanner-primary", "fingerprint": "a118dc8ff64577e4", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/browserless/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3d84c824a975fe4b", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/motion/package.json"}, "properties": {"repobilityId": "f818bde06cab5735", "scanner": "scanner-primary", "fingerprint": "3d84c824a975fe4b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/motion/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1f55fb414b951104", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/qdrant/package.json"}, "properties": {"repobilityId": "6e9d4d06581e2ef0", "scanner": "scanner-primary", "fingerprint": "1f55fb414b951104", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/qdrant/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-cf3eb1631997357a", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/sender/package.json"}, "properties": {"repobilityId": "83bbc2f3939049ab", "scanner": "scanner-primary", "fingerprint": "cf3eb1631997357a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/sender/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-49eda176af6328ac", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/lightfunnels/package.json"}, "properties": {"repobilityId": "13fdf238edc07851", "scanner": "scanner-primary", "fingerprint": "49eda176af6328ac", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/lightfunnels/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-bcf01f58a08c98f6", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/imap/package.json"}, "properties": {"repobilityId": "b589b59b2159ca69", "scanner": "scanner-primary", "fingerprint": "bcf01f58a08c98f6", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/imap/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0a894d52b085559c", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/knock/package.json"}, "properties": {"repobilityId": "abcf37a2b40947a4", "scanner": "scanner-primary", "fingerprint": "0a894d52b085559c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/knock/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-76483948e8f3a6c1", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/openmic-ai/package.json"}, "properties": {"repobilityId": "dfbfbb613e16c9b8", "scanner": "scanner-primary", "fingerprint": "76483948e8f3a6c1", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/openmic-ai/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8d73bd50cd4a6ea3", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/googlechat/package.json"}, "properties": {"repobilityId": "d4acbc0ad3f55ad7", "scanner": "scanner-primary", "fingerprint": "8d73bd50cd4a6ea3", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/googlechat/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0e46cecbb8e941e2", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/sap-ariba/package.json"}, "properties": {"repobilityId": "a3695b5e18c43219", "scanner": "scanner-primary", "fingerprint": "0e46cecbb8e941e2", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/sap-ariba/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9e4ac1f001cb8fb4", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/assemblyai/package.json"}, "properties": {"repobilityId": "74c12c0d74b2de07", "scanner": "scanner-primary", "fingerprint": "9e4ac1f001cb8fb4", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/assemblyai/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e7e708a7068627ca", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/okta/package.json"}, "properties": {"repobilityId": "13aeb5c150b72c3b", "scanner": "scanner-primary", "fingerprint": "e7e708a7068627ca", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/okta/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a294eefed43b4b4c", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/browse-ai/package.json"}, "properties": {"repobilityId": "ff2d455eb4f809f4", "scanner": "scanner-primary", "fingerprint": "a294eefed43b4b4c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/browse-ai/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-fc1fd073271a2a8f", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/attio/package.json"}, "properties": {"repobilityId": "29b71c08531bbd73", "scanner": "scanner-primary", "fingerprint": "fc1fd073271a2a8f", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/attio/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-25af826c8a384874", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/beehiiv/package.json"}, "properties": {"repobilityId": "648190561b17d768", "scanner": "scanner-primary", "fingerprint": "25af826c8a384874", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/beehiiv/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-39255e63059200cc", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/gravityforms/package.json"}, "properties": {"repobilityId": "1bb40f3658406044", "scanner": "scanner-primary", "fingerprint": "39255e63059200cc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/gravityforms/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ffef969d276069a6", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/predis-ai/package.json"}, "properties": {"repobilityId": "cbb904052efaf20c", "scanner": "scanner-primary", "fingerprint": "ffef969d276069a6", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/predis-ai/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-bdbce37552cd5873", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/hootsuite/package.json"}, "properties": {"repobilityId": "767ef4b25fed7673", "scanner": "scanner-primary", "fingerprint": "bdbce37552cd5873", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/hootsuite/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a973fddfc64e510f", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/plunk/package.json"}, "properties": {"repobilityId": "9b3a78c97074ce6c", "scanner": "scanner-primary", "fingerprint": "a973fddfc64e510f", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/plunk/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b3556602d6cb597d", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/billplz/package.json"}, "properties": {"repobilityId": "dfdeb2daab5f46f3", "scanner": "scanner-primary", "fingerprint": "b3556602d6cb597d", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/billplz/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-58b2f40c43af9ae1", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/valyu/package.json"}, "properties": {"repobilityId": "365b95e3bcf584ba", "scanner": "scanner-primary", "fingerprint": "58b2f40c43af9ae1", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/valyu/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9353d5dcbe56a74a", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/sessions-us/package.json"}, "properties": {"repobilityId": "54fcab2d81e05ab7", "scanner": "scanner-primary", "fingerprint": "9353d5dcbe56a74a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/sessions-us/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b0f44ec24df7701c", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/bigin-by-zoho/package.json"}, "properties": {"repobilityId": "f77aca7a84f128a5", "scanner": "scanner-primary", "fingerprint": "b0f44ec24df7701c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/bigin-by-zoho/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9b33018be4d91345", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/copy-ai/package.json"}, "properties": {"repobilityId": "8e57a5aea2f29f34", "scanner": "scanner-primary", "fingerprint": "9b33018be4d91345", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/copy-ai/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5ecabd0f7c03c7dd", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/clicdata/package.json"}, "properties": {"repobilityId": "efab792458e5d8e1", "scanner": "scanner-primary", "fingerprint": "5ecabd0f7c03c7dd", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/clicdata/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-fde2d9ec08bc0a16", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/motiontools/package.json"}, "properties": {"repobilityId": "da6723e49a28218d", "scanner": "scanner-primary", "fingerprint": "fde2d9ec08bc0a16", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/motiontools/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0dda381ff3978a95", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/fireflies-ai/package.json"}, "properties": {"repobilityId": "e6eea379c9de44e2", "scanner": "scanner-primary", "fingerprint": "0dda381ff3978a95", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/fireflies-ai/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-60c4cded2b6744fa", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/datafuel/package.json"}, "properties": {"repobilityId": "e92fb047c47ed1b6", "scanner": "scanner-primary", "fingerprint": "60c4cded2b6744fa", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/datafuel/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-85e41b818bba53bb", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/jotform/package.json"}, "properties": {"repobilityId": "5de8a02ea6bbadfd", "scanner": "scanner-primary", "fingerprint": "85e41b818bba53bb", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/jotform/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6443b6fcc248fa9f", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/avoma/package.json"}, "properties": {"repobilityId": "cfb6eb9698bcf7bc", "scanner": "scanner-primary", "fingerprint": "6443b6fcc248fa9f", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/avoma/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-58ef82b2337a1602", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/knack/package.json"}, "properties": {"repobilityId": "678e961a720c1900", "scanner": "scanner-primary", "fingerprint": "58ef82b2337a1602", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/knack/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-aab1b4b53b2c9ac9", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/beamer/package.json"}, "properties": {"repobilityId": "29c594e38a3cb234", "scanner": "scanner-primary", "fingerprint": "aab1b4b53b2c9ac9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/beamer/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4e23754903505032", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/what-converts/package.json"}, "properties": {"repobilityId": "b833fb253696adbf", "scanner": "scanner-primary", "fingerprint": "4e23754903505032", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/what-converts/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f8040f4ce36303e7", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/flowlu/package.json"}, "properties": {"repobilityId": "abf55fac7d956616", "scanner": "scanner-primary", "fingerprint": "f8040f4ce36303e7", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/flowlu/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-810bd7b12b570b1b", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/blockscout/package.json"}, "properties": {"repobilityId": "166c700f973ec546", "scanner": "scanner-primary", "fingerprint": "810bd7b12b570b1b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/blockscout/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3faf519d54377ac9", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/sendinblue/package.json"}, "properties": {"repobilityId": "de0a198536a57ca3", "scanner": "scanner-primary", "fingerprint": "3faf519d54377ac9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/sendinblue/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-689df17f3030b648", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/vouchery-io/package.json"}, "properties": {"repobilityId": "1b273fd6316b18b1", "scanner": "scanner-primary", "fingerprint": "689df17f3030b648", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/vouchery-io/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-407774eece9d6b84", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/textcortex-ai/package.json"}, "properties": {"repobilityId": "57c19ffee5210fc5", "scanner": "scanner-primary", "fingerprint": "407774eece9d6b84", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/textcortex-ai/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f504b9f0d693a06b", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/add-event/package.json"}, "properties": {"repobilityId": "c579440e832f0869", "scanner": "scanner-primary", "fingerprint": "f504b9f0d693a06b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/add-event/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7c6f7cfbe3113682", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/rendex/package.json"}, "properties": {"repobilityId": "f32d1e7225744768", "scanner": "scanner-primary", "fingerprint": "7c6f7cfbe3113682", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/rendex/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-376ba8747fcc32e2", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/fountain/package.json"}, "properties": {"repobilityId": "7f01e1480e7db5f3", "scanner": "scanner-primary", "fingerprint": "376ba8747fcc32e2", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/fountain/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7c3f4c9f802563a2", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/carbone/package.json"}, "properties": {"repobilityId": "1281cc0acf2082af", "scanner": "scanner-primary", "fingerprint": "7c3f4c9f802563a2", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/carbone/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ac9e307d9fc8ee18", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/eden-ai/package.json"}, "properties": {"repobilityId": "4dd41073167c81be", "scanner": "scanner-primary", "fingerprint": "ac9e307d9fc8ee18", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/eden-ai/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-148662aa2fc9b3f9", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/appfollow/package.json"}, "properties": {"repobilityId": "aefa37ccb4c11db6", "scanner": "scanner-primary", "fingerprint": "148662aa2fc9b3f9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/appfollow/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4bfb3ac21587bd71", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/parser-expert/package.json"}, "properties": {"repobilityId": "ddcf446d62f1c863", "scanner": "scanner-primary", "fingerprint": "4bfb3ac21587bd71", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/parser-expert/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f7c1e7160eb89244", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/sardis/package.json"}, "properties": {"repobilityId": "32b7969b8d98321d", "scanner": "scanner-primary", "fingerprint": "f7c1e7160eb89244", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/sardis/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-96bb200790287c4c", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/messagebird/package.json"}, "properties": {"repobilityId": "0fe597c0cebfa9c2", "scanner": "scanner-primary", "fingerprint": "96bb200790287c4c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/messagebird/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-fea2200356eb8902", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/neverbounce/package.json"}, "properties": {"repobilityId": "ad3070f2fe7a9299", "scanner": "scanner-primary", "fingerprint": "fea2200356eb8902", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/neverbounce/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-867e6ac907514b38", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/confluence/package.json"}, "properties": {"repobilityId": "a0aec8ae3dc55f9a", "scanner": "scanner-primary", "fingerprint": "867e6ac907514b38", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/confluence/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-26a49a4c1d2549ca", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/postgres/package.json"}, "properties": {"repobilityId": "8eea9673105c91f9", "scanner": "scanner-primary", "fingerprint": "26a49a4c1d2549ca", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/postgres/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-91eb125b9d053d5b", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/photoroom/package.json"}, "properties": {"repobilityId": "70ebeee02394f0f8", "scanner": "scanner-primary", "fingerprint": "91eb125b9d053d5b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/photoroom/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ae13a02c374ab907", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/loops/package.json"}, "properties": {"repobilityId": "bea8e152334481ec", "scanner": "scanner-primary", "fingerprint": "ae13a02c374ab907", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/loops/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-01262cde22eb8cb9", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/anyhook-graphql/package.json"}, "properties": {"repobilityId": "688783ef64bde58c", "scanner": "scanner-primary", "fingerprint": "01262cde22eb8cb9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/anyhook-graphql/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-969dbc39609a0b2e", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/google-sheets/package.json"}, "properties": {"repobilityId": "023cf9e17f5cecb3", "scanner": "scanner-primary", "fingerprint": "969dbc39609a0b2e", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/google-sheets/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-66a0dd34b46e919d", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/quickzu/package.json"}, "properties": {"repobilityId": "3b18ddf060f8f295", "scanner": "scanner-primary", "fingerprint": "66a0dd34b46e919d", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/quickzu/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-edd72e703e3ba336", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/slidespeak/package.json"}, "properties": {"repobilityId": "818fb795b4c94ca0", "scanner": "scanner-primary", "fingerprint": "edd72e703e3ba336", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/slidespeak/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-687eff75f039b00f", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/contentful/package.json"}, "properties": {"repobilityId": "0ac647a870de279b", "scanner": "scanner-primary", "fingerprint": "687eff75f039b00f", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/contentful/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3d6921bc38c280b8", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/metatext/package.json"}, "properties": {"repobilityId": "9a1a76851dadda0e", "scanner": "scanner-primary", "fingerprint": "3d6921bc38c280b8", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/metatext/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-75a6c0769d7023fd", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/capsule-crm/package.json"}, "properties": {"repobilityId": "41309d0b4a56f6ba", "scanner": "scanner-primary", "fingerprint": "75a6c0769d7023fd", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/capsule-crm/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-18a5687bf136a482", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/retell-ai/package.json"}, "properties": {"repobilityId": "cd108b778f851eb6", "scanner": "scanner-primary", "fingerprint": "18a5687bf136a482", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/retell-ai/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9066e3f1b0e59691", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/microsoft-copilot/package.json"}, "properties": {"repobilityId": "1798f1d0dee34e48", "scanner": "scanner-primary", "fingerprint": "9066e3f1b0e59691", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/microsoft-copilot/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c902c5431dd16d40", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/harvest/package.json"}, "properties": {"repobilityId": "29177bb28f45a829", "scanner": "scanner-primary", "fingerprint": "c902c5431dd16d40", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/harvest/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f3bee0ef69988e7f", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/vero/package.json"}, "properties": {"repobilityId": "8f861d66563ca7e9", "scanner": "scanner-primary", "fingerprint": "f3bee0ef69988e7f", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/vero/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-380bdcd109b73b32", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/presentation/package.json"}, "properties": {"repobilityId": "5402ec6ae7456aa2", "scanner": "scanner-primary", "fingerprint": "380bdcd109b73b32", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/presentation/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-86450acc5df1e532", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/brave-search/package.json"}, "properties": {"repobilityId": "55ccf10cef841235", "scanner": "scanner-primary", "fingerprint": "86450acc5df1e532", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/brave-search/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c07496a1ecd57330", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/granola/package.json"}, "properties": {"repobilityId": "d3d7a775623d9552", "scanner": "scanner-primary", "fingerprint": "c07496a1ecd57330", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/granola/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-34f5de64a9850391", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/bonjoro/package.json"}, "properties": {"repobilityId": "1bc91bb89372fdce", "scanner": "scanner-primary", "fingerprint": "34f5de64a9850391", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/bonjoro/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6acfb32f4bec4c5c", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/activecampaign/package.json"}, "properties": {"repobilityId": "b27a1ab3b710895c", "scanner": "scanner-primary", "fingerprint": "6acfb32f4bec4c5c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/activecampaign/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5c653429ba864ae3", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/paddle/package.json"}, "properties": {"repobilityId": "276c26b163df79f7", "scanner": "scanner-primary", "fingerprint": "5c653429ba864ae3", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/paddle/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6553a35c822e290c", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/deepl/package.json"}, "properties": {"repobilityId": "a419bf4b854f1d4b", "scanner": "scanner-primary", "fingerprint": "6553a35c822e290c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/deepl/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2a5384865c942388", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/skyprep/package.json"}, "properties": {"repobilityId": "ef84b6332ff3fe0f", "scanner": "scanner-primary", "fingerprint": "2a5384865c942388", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/skyprep/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4d12cddd8d9ea4b0", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/klipy/package.json"}, "properties": {"repobilityId": "f899dbe1c430abdb", "scanner": "scanner-primary", "fingerprint": "4d12cddd8d9ea4b0", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/klipy/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b864162f8e8a937c", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/twitch/package.json"}, "properties": {"repobilityId": "7ed68ce282634a4e", "scanner": "scanner-primary", "fingerprint": "b864162f8e8a937c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/twitch/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ec5f23646816df23", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/medullar/package.json"}, "properties": {"repobilityId": "4914d93cb7054b0b", "scanner": "scanner-primary", "fingerprint": "ec5f23646816df23", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/medullar/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-bec545e3e2a7a3c3", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/grok-xai/package.json"}, "properties": {"repobilityId": "1e3b5c165b98952b", "scanner": "scanner-primary", "fingerprint": "bec545e3e2a7a3c3", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/grok-xai/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-52cd194045d1f874", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/amazon-secrets-manager/package.json"}, "properties": {"repobilityId": "38012745f8f3b7fa", "scanner": "scanner-primary", "fingerprint": "52cd194045d1f874", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/amazon-secrets-manager/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-db329a9b8ec76df3", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/klenty/package.json"}, "properties": {"repobilityId": "5d1852bff4a4e825", "scanner": "scanner-primary", "fingerprint": "db329a9b8ec76df3", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/klenty/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3a8de29e0c14df03", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/apollo/package.json"}, "properties": {"repobilityId": "322ef3f69d0f5fc9", "scanner": "scanner-primary", "fingerprint": "3a8de29e0c14df03", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/apollo/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d97603a03df78e18", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/chatfly/package.json"}, "properties": {"repobilityId": "637da7ee9741a287", "scanner": "scanner-primary", "fingerprint": "d97603a03df78e18", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/chatfly/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-cb790ae1d6853aa8", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/zuora/package.json"}, "properties": {"repobilityId": "18c5b1ac809ce444", "scanner": "scanner-primary", "fingerprint": "cb790ae1d6853aa8", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/zuora/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-88cf5371d1c799eb", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/google-forms/package.json"}, "properties": {"repobilityId": "ae247c9f44383dd1", "scanner": "scanner-primary", "fingerprint": "88cf5371d1c799eb", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/google-forms/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-09d7a8ef093c321e", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/zerobounce/package.json"}, "properties": {"repobilityId": "25c444843fa8988e", "scanner": "scanner-primary", "fingerprint": "09d7a8ef093c321e", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/zerobounce/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4e86ad9f561b10f6", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/smartsuite/package.json"}, "properties": {"repobilityId": "64a264c2e82de495", "scanner": "scanner-primary", "fingerprint": "4e86ad9f561b10f6", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/smartsuite/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-096d31461eecf59c", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/vidnoz/package.json"}, "properties": {"repobilityId": "345bb56457439cae", "scanner": "scanner-primary", "fingerprint": "096d31461eecf59c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/vidnoz/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5c71fcf63fb9cd5a", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/kimai/package.json"}, "properties": {"repobilityId": "86a8bb9be59113dc", "scanner": "scanner-primary", "fingerprint": "5c71fcf63fb9cd5a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/kimai/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-523bbf9b0ff313c7", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/greenpt/package.json"}, "properties": {"repobilityId": "5835fb3d1e895b61", "scanner": "scanner-primary", "fingerprint": "523bbf9b0ff313c7", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/greenpt/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5c1cae565175c639", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/rabbitmq/package.json"}, "properties": {"repobilityId": "2c2395c4a488f48e", "scanner": "scanner-primary", "fingerprint": "5c1cae565175c639", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/rabbitmq/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-fcb1aca3da4f8a52", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/queue/package.json"}, "properties": {"repobilityId": "ef23189e7d07690f", "scanner": "scanner-primary", "fingerprint": "fcb1aca3da4f8a52", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/queue/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5254a30c261f9897", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/formsite/package.json"}, "properties": {"repobilityId": "776ac04d8ecf8d31", "scanner": "scanner-primary", "fingerprint": "5254a30c261f9897", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/formsite/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-bbacdab880a59876", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/promptmate/package.json"}, "properties": {"repobilityId": "bb605145966fee54", "scanner": "scanner-primary", "fingerprint": "bbacdab880a59876", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/promptmate/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9e41ec84cabde4ea", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/pdf-co/package.json"}, "properties": {"repobilityId": "c429866ee7b11106", "scanner": "scanner-primary", "fingerprint": "9e41ec84cabde4ea", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/pdf-co/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a757bef32e3b857b", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/village/package.json"}, "properties": {"repobilityId": "873b58a16711b85d", "scanner": "scanner-primary", "fingerprint": "a757bef32e3b857b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/village/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b6d8f88b8d8b0219", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/rss/package.json"}, "properties": {"repobilityId": "0d0f16057e5fd90a", "scanner": "scanner-primary", "fingerprint": "b6d8f88b8d8b0219", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/rss/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6f89f2c332b273f6", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/chat-aid/package.json"}, "properties": {"repobilityId": "1cf302dece9cb302", "scanner": "scanner-primary", "fingerprint": "6f89f2c332b273f6", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/chat-aid/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8ffa12257f9f1e69", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/hedy/package.json"}, "properties": {"repobilityId": "7a44a0538db0cb2f", "scanner": "scanner-primary", "fingerprint": "8ffa12257f9f1e69", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/hedy/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-18989dbede88cb2f", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/quickbase/package.json"}, "properties": {"repobilityId": "531cefa42c8dd009", "scanner": "scanner-primary", "fingerprint": "18989dbede88cb2f", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/quickbase/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5b1c36ef84723e6a", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/alai/package.json"}, "properties": {"repobilityId": "a3a76c9f67894fa2", "scanner": "scanner-primary", "fingerprint": "5b1c36ef84723e6a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/alai/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f8cdc5d63ba93eb0", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/everhour/package.json"}, "properties": {"repobilityId": "1835fd81c611e180", "scanner": "scanner-primary", "fingerprint": "f8cdc5d63ba93eb0", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/everhour/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-95882bdba55cbc45", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/pylon/package.json"}, "properties": {"repobilityId": "309232dcd299b249", "scanner": "scanner-primary", "fingerprint": "95882bdba55cbc45", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/pylon/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e8e615a211626612", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/mindee/package.json"}, "properties": {"repobilityId": "b8039b98b5671d01", "scanner": "scanner-primary", "fingerprint": "e8e615a211626612", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/mindee/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-fbabf52d3393e6fb", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/alt-text-ai/package.json"}, "properties": {"repobilityId": "b7e4d6973514a290", "scanner": "scanner-primary", "fingerprint": "fbabf52d3393e6fb", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/alt-text-ai/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e1bda135543b59e9", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/hashi-corp-vault/package.json"}, "properties": {"repobilityId": "7645cca835acf729", "scanner": "scanner-primary", "fingerprint": "e1bda135543b59e9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/hashi-corp-vault/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5539ea522fd33ffc", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/wonderchat/package.json"}, "properties": {"repobilityId": "7e4f1f5a461ec1ac", "scanner": "scanner-primary", "fingerprint": "5539ea522fd33ffc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/wonderchat/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a267220b8c704ee6", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/oneclickimpact/package.json"}, "properties": {"repobilityId": "0724f63ed021c6ee", "scanner": "scanner-primary", "fingerprint": "a267220b8c704ee6", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/oneclickimpact/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6a09498e36cd4376", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/kudosity/package.json"}, "properties": {"repobilityId": "e4069cdfe2eb3df7", "scanner": "scanner-primary", "fingerprint": "6a09498e36cd4376", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/kudosity/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d9acb5afd84b37cc", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/nuelink/package.json"}, "properties": {"repobilityId": "64ef41acad939a60", "scanner": "scanner-primary", "fingerprint": "d9acb5afd84b37cc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/nuelink/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ab504264953f896a", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/smartsheet/package.json"}, "properties": {"repobilityId": "cfd27020327c9b67", "scanner": "scanner-primary", "fingerprint": "ab504264953f896a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/smartsheet/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3bf5a019edc92433", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/asknews/package.json"}, "properties": {"repobilityId": "c906693c95d97a62", "scanner": "scanner-primary", "fingerprint": "3bf5a019edc92433", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/asknews/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8ee506035b37fe06", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/orimon/package.json"}, "properties": {"repobilityId": "85e378acdf552c08", "scanner": "scanner-primary", "fingerprint": "8ee506035b37fe06", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/orimon/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-879ad0f15fcbb88f", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/dust/package.json"}, "properties": {"repobilityId": "f64bd410fa0e0798", "scanner": "scanner-primary", "fingerprint": "879ad0f15fcbb88f", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/dust/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-92141023190918d3", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/parallel/package.json"}, "properties": {"repobilityId": "44672938d234d0b6", "scanner": "scanner-primary", "fingerprint": "92141023190918d3", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/parallel/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-73ab71b5000c779c", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/klaviyo/package.json"}, "properties": {"repobilityId": "a06e96780af5ecbd", "scanner": "scanner-primary", "fingerprint": "73ab71b5000c779c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/klaviyo/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7fbae0ab7b02ec84", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/magicslides/package.json"}, "properties": {"repobilityId": "c1cda68756747a65", "scanner": "scanner-primary", "fingerprint": "7fbae0ab7b02ec84", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/magicslides/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-37fb5d47a793f815", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/invoiceninja/package.json"}, "properties": {"repobilityId": "8a2f73f1fc6a1b29", "scanner": "scanner-primary", "fingerprint": "37fb5d47a793f815", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/invoiceninja/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-aadfb98abf85b330", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/savvycal/package.json"}, "properties": {"repobilityId": "b4aecf30760973e5", "scanner": "scanner-primary", "fingerprint": "aadfb98abf85b330", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/savvycal/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c670be9addd3ca92", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/acuity-scheduling/package.json"}, "properties": {"repobilityId": "a1b58f8290a44d81", "scanner": "scanner-primary", "fingerprint": "c670be9addd3ca92", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/acuity-scheduling/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-37b7ef934a2e0457", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/camb-ai/package.json"}, "properties": {"repobilityId": "b1d5c45021a1dff7", "scanner": "scanner-primary", "fingerprint": "37b7ef934a2e0457", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/camb-ai/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b34fc46e37d3dc5a", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/modelslab/package.json"}, "properties": {"repobilityId": "5ff9f37727e36760", "scanner": "scanner-primary", "fingerprint": "b34fc46e37d3dc5a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/modelslab/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e6cc7d0e2ecaed55", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/simpliroute/package.json"}, "properties": {"repobilityId": "7e2cffa47b9d95a4", "scanner": "scanner-primary", "fingerprint": "e6cc7d0e2ecaed55", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/simpliroute/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1088e592ce13fcbb", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/parseur/package.json"}, "properties": {"repobilityId": "38b8b8cd938932eb", "scanner": "scanner-primary", "fingerprint": "1088e592ce13fcbb", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/parseur/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a09a11777f173160", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/salesforce/package.json"}, "properties": {"repobilityId": "ca8ab4030730f790", "scanner": "scanner-primary", "fingerprint": "a09a11777f173160", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/salesforce/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6b9c9d04b99c7d26", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/cloudconvert/package.json"}, "properties": {"repobilityId": "b8e1e9b74e393fa0", "scanner": "scanner-primary", "fingerprint": "6b9c9d04b99c7d26", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/cloudconvert/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-341ff37efee97b0f", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/constant-contact/package.json"}, "properties": {"repobilityId": "57c379d608a18d15", "scanner": "scanner-primary", "fingerprint": "341ff37efee97b0f", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/constant-contact/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2064e563022e39c5", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/aircall/package.json"}, "properties": {"repobilityId": "fc94535967bbe2a6", "scanner": "scanner-primary", "fingerprint": "2064e563022e39c5", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/aircall/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d750dbec8ee42926", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/captain-data/package.json"}, "properties": {"repobilityId": "112782b0562d34c4", "scanner": "scanner-primary", "fingerprint": "d750dbec8ee42926", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/captain-data/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-935114564fae9d7c", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/supabase/package.json"}, "properties": {"repobilityId": "f660ed754b7353d6", "scanner": "scanner-primary", "fingerprint": "935114564fae9d7c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/supabase/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-875b08323dfb7d4f", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/getresponse/package.json"}, "properties": {"repobilityId": "c09adfc1364e8d8b", "scanner": "scanner-primary", "fingerprint": "875b08323dfb7d4f", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/getresponse/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b33ed5b6fa246116", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/datocms/package.json"}, "properties": {"repobilityId": "8f618684393aa5d0", "scanner": "scanner-primary", "fingerprint": "b33ed5b6fa246116", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/datocms/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6bd25e79549a08eb", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/reddit/package.json"}, "properties": {"repobilityId": "c17f847fa354e4fd", "scanner": "scanner-primary", "fingerprint": "6bd25e79549a08eb", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/reddit/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-45bf8d14374b0299", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/vapi/package.json"}, "properties": {"repobilityId": "c3b2fcebd607320d", "scanner": "scanner-primary", "fingerprint": "45bf8d14374b0299", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/vapi/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e6b3779fc798a859", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/google-search-console/package.json"}, "properties": {"repobilityId": "d866649874a12304", "scanner": "scanner-primary", "fingerprint": "e6b3779fc798a859", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/google-search-console/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3253bfcd13bde9b8", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/elastic-email/package.json"}, "properties": {"repobilityId": "8b8d3590d67c22ce", "scanner": "scanner-primary", "fingerprint": "3253bfcd13bde9b8", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/elastic-email/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3673112b310aae4d", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/opportify/package.json"}, "properties": {"repobilityId": "e40fc33d848b2258", "scanner": "scanner-primary", "fingerprint": "3673112b310aae4d", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/opportify/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b0a06290d4c330ba", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/missive/package.json"}, "properties": {"repobilityId": "d072fba49df2642b", "scanner": "scanner-primary", "fingerprint": "b0a06290d4c330ba", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/missive/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-43fea8266718614e", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/wootric/package.json"}, "properties": {"repobilityId": "b25ea226c1b5b0aa", "scanner": "scanner-primary", "fingerprint": "43fea8266718614e", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/wootric/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-caee7d13b2880c8c", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/krisp-call/package.json"}, "properties": {"repobilityId": "f2c1319ab0ba59b3", "scanner": "scanner-primary", "fingerprint": "caee7d13b2880c8c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/krisp-call/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0b488f6f72584f76", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/soap/package.json"}, "properties": {"repobilityId": "0d2c1efc4005559a", "scanner": "scanner-primary", "fingerprint": "0b488f6f72584f76", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/soap/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8975b9ba754faeb3", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/wrike/package.json"}, "properties": {"repobilityId": "dd1e8c1a65bbb210", "scanner": "scanner-primary", "fingerprint": "8975b9ba754faeb3", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/wrike/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-49837e879f2be36c", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/mysql/package.json"}, "properties": {"repobilityId": "3356ab843727f468", "scanner": "scanner-primary", "fingerprint": "49837e879f2be36c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/mysql/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-790f9d55b1d2a47e", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/backblaze/package.json"}, "properties": {"repobilityId": "f48a889a82e897b0", "scanner": "scanner-primary", "fingerprint": "790f9d55b1d2a47e", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/backblaze/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5ea18af9aa21cabf", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/airtop/package.json"}, "properties": {"repobilityId": "e0219d855f864766", "scanner": "scanner-primary", "fingerprint": "5ea18af9aa21cabf", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/airtop/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e085cfab308057fc", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/formstack/package.json"}, "properties": {"repobilityId": "88b49972d2c27c44", "scanner": "scanner-primary", "fingerprint": "e085cfab308057fc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/formstack/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0a6557c7006ca2a7", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/zendesk/package.json"}, "properties": {"repobilityId": "5fa5c989ac690ef5", "scanner": "scanner-primary", "fingerprint": "0a6557c7006ca2a7", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/zendesk/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-41a2fa4405ce2e84", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/hugging-face/package.json"}, "properties": {"repobilityId": "8f5f59f2509dd020", "scanner": "scanner-primary", "fingerprint": "41a2fa4405ce2e84", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/hugging-face/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e3225fa93af64d0a", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/webscraping-ai/package.json"}, "properties": {"repobilityId": "d5e13cc4ea5588e6", "scanner": "scanner-primary", "fingerprint": "e3225fa93af64d0a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/webscraping-ai/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-43ca29d8776d2b74", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/zoho-campaigns/package.json"}, "properties": {"repobilityId": "81f6c67d8ca36c1b", "scanner": "scanner-primary", "fingerprint": "43ca29d8776d2b74", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/zoho-campaigns/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9268a2f2493eb86e", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/surveymonkey/package.json"}, "properties": {"repobilityId": "7d4ab0043318561c", "scanner": "scanner-primary", "fingerprint": "9268a2f2493eb86e", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/surveymonkey/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4046cb17ec504b79", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/convertkit/package.json"}, "properties": {"repobilityId": "ddbe847c1c86a6ea", "scanner": "scanner-primary", "fingerprint": "4046cb17ec504b79", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/convertkit/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2254ed7142c6f0ce", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/clockify/package.json"}, "properties": {"repobilityId": "af732eea53e018cb", "scanner": "scanner-primary", "fingerprint": "2254ed7142c6f0ce", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/clockify/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0f118d741669a723", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/youcanbookme/package.json"}, "properties": {"repobilityId": "e4a819bad99c18a6", "scanner": "scanner-primary", "fingerprint": "0f118d741669a723", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/youcanbookme/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3561c96abfb68658", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/upgradechat/package.json"}, "properties": {"repobilityId": "507e8c5b8645ff59", "scanner": "scanner-primary", "fingerprint": "3561c96abfb68658", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/upgradechat/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3adee213b50c8616", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/dimo/package.json"}, "properties": {"repobilityId": "e09f6f51ac4f66dd", "scanner": "scanner-primary", "fingerprint": "3adee213b50c8616", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/dimo/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-bb365ec976530b30", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/gameball/package.json"}, "properties": {"repobilityId": "0ecac54a66f33749", "scanner": "scanner-primary", "fingerprint": "bb365ec976530b30", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/gameball/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ed42294bcbc15b8a", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/mind-studio/package.json"}, "properties": {"repobilityId": "145b486d59e191c8", "scanner": "scanner-primary", "fingerprint": "ed42294bcbc15b8a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/mind-studio/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-17dd0c0cac7b6b56", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/microsoft-outlook/package.json"}, "properties": {"repobilityId": "3da952a92862b72a", "scanner": "scanner-primary", "fingerprint": "17dd0c0cac7b6b56", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/microsoft-outlook/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-67bf9eeb2b9b7f5a", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/mastodon/package.json"}, "properties": {"repobilityId": "0af8c4d82e27a674", "scanner": "scanner-primary", "fingerprint": "67bf9eeb2b9b7f5a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/mastodon/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7e0bfb7a630b5e01", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/chaindesk/package.json"}, "properties": {"repobilityId": "2c34a9e7b0898074", "scanner": "scanner-primary", "fingerprint": "7e0bfb7a630b5e01", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/chaindesk/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c94a6c0e6f8d60c4", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/kommo/package.json"}, "properties": {"repobilityId": "f2eb77a5eda6e6c8", "scanner": "scanner-primary", "fingerprint": "c94a6c0e6f8d60c4", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/kommo/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b60a118fc4d6cf40", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/wordpress/package.json"}, "properties": {"repobilityId": "48ddbb819c14e178", "scanner": "scanner-primary", "fingerprint": "b60a118fc4d6cf40", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/wordpress/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-fdea3ac64702f9bd", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/flow-helper/package.json"}, "properties": {"repobilityId": "898e6bab57fd444b", "scanner": "scanner-primary", "fingerprint": "fdea3ac64702f9bd", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/flow-helper/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-30237355fb11b6fc", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/predict-leads/package.json"}, "properties": {"repobilityId": "3e78e284b04a7479", "scanner": "scanner-primary", "fingerprint": "30237355fb11b6fc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/predict-leads/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-dcfafb19f8a621ba", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/phantombuster/package.json"}, "properties": {"repobilityId": "c1532af220ad608a", "scanner": "scanner-primary", "fingerprint": "dcfafb19f8a621ba", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/phantombuster/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-37318c0a02add021", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/plausible/package.json"}, "properties": {"repobilityId": "7ca58315819b00b6", "scanner": "scanner-primary", "fingerprint": "37318c0a02add021", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/plausible/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-731940c58a42bb7c", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/open-router/package.json"}, "properties": {"repobilityId": "f934dc4e46b5eb02", "scanner": "scanner-primary", "fingerprint": "731940c58a42bb7c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/open-router/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-56a87fba2b75f1ac", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/millionverifier/package.json"}, "properties": {"repobilityId": "b6cafbd648c9d82d", "scanner": "scanner-primary", "fingerprint": "56a87fba2b75f1ac", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/millionverifier/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e15402d1bb96af9c", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/placid/package.json"}, "properties": {"repobilityId": "8ad5702b23724181", "scanner": "scanner-primary", "fingerprint": "e15402d1bb96af9c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/placid/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8e56a3bab900f17e", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/wedof/package.json"}, "properties": {"repobilityId": "cfab3a950cafbe8b", "scanner": "scanner-primary", "fingerprint": "8e56a3bab900f17e", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/wedof/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-aefd6d62032bb391", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/digital-pilot/package.json"}, "properties": {"repobilityId": "c21663297e0b5a2c", "scanner": "scanner-primary", "fingerprint": "aefd6d62032bb391", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/digital-pilot/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-21ea0afef41e3908", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/griptape/package.json"}, "properties": {"repobilityId": "4663f9ad338c6bfc", "scanner": "scanner-primary", "fingerprint": "21ea0afef41e3908", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/griptape/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-71e0bde8d71dfe39", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/ninox/package.json"}, "properties": {"repobilityId": "70d5730b4a9ec738", "scanner": "scanner-primary", "fingerprint": "71e0bde8d71dfe39", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/ninox/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-53422ce5ec434903", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/simplyprint/package.json"}, "properties": {"repobilityId": "cdf93966d3ec9eb3", "scanner": "scanner-primary", "fingerprint": "53422ce5ec434903", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/simplyprint/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b9d4124dfcac5702", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/help-scout/package.json"}, "properties": {"repobilityId": "e80b3dcddb4f1a83", "scanner": "scanner-primary", "fingerprint": "b9d4124dfcac5702", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/help-scout/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-52f93b8d20516400", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/afforai/package.json"}, "properties": {"repobilityId": "5a2318deba751eec", "scanner": "scanner-primary", "fingerprint": "52f93b8d20516400", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/afforai/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1c857083a5e77dbf", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/brilliant-directories/package.json"}, "properties": {"repobilityId": "28b877d916ffdffe", "scanner": "scanner-primary", "fingerprint": "1c857083a5e77dbf", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/brilliant-directories/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e7abf11b44e4fe64", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/quickbooks/package.json"}, "properties": {"repobilityId": "d62269cb8b0b5925", "scanner": "scanner-primary", "fingerprint": "e7abf11b44e4fe64", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/quickbooks/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7e6281e87a38bcb5", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/bluesky/package.json"}, "properties": {"repobilityId": "e1f6103d673529c8", "scanner": "scanner-primary", "fingerprint": "7e6281e87a38bcb5", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/bluesky/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-39b0bff33b201563", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/heymarket-sms/package.json"}, "properties": {"repobilityId": "a1b0c8e5cdc10450", "scanner": "scanner-primary", "fingerprint": "39b0bff33b201563", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/heymarket-sms/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1ea56b28db6e204e", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/stable-diffusion-webui/package.json"}, "properties": {"repobilityId": "66f7805a55f29c35", "scanner": "scanner-primary", "fingerprint": "1ea56b28db6e204e", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/stable-diffusion-webui/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6f310a5df832b195", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/denser-ai/package.json"}, "properties": {"repobilityId": "f3769737e912d1e6", "scanner": "scanner-primary", "fingerprint": "6f310a5df832b195", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/denser-ai/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-dfcc1682618934f9", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/google-slides/package.json"}, "properties": {"repobilityId": "a2af559e08d29b68", "scanner": "scanner-primary", "fingerprint": "dfcc1682618934f9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/google-slides/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-73821407bcc15448", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/softr/package.json"}, "properties": {"repobilityId": "961e150b57b96981", "scanner": "scanner-primary", "fingerprint": "73821407bcc15448", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/softr/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-74ce2547f907c191", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/wayfront/package.json"}, "properties": {"repobilityId": "cfaaf069360e0e7b", "scanner": "scanner-primary", "fingerprint": "74ce2547f907c191", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/wayfront/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-06546964891546e0", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/jogg-ai/package.json"}, "properties": {"repobilityId": "ec0e03723d5863d2", "scanner": "scanner-primary", "fingerprint": "06546964891546e0", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/jogg-ai/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a6fbafedbbd36fa3", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/campaign-monitor/package.json"}, "properties": {"repobilityId": "16190557479c5da9", "scanner": "scanner-primary", "fingerprint": "a6fbafedbbd36fa3", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/campaign-monitor/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d324c38f348e9462", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/bolna/package.json"}, "properties": {"repobilityId": "3197deed3fba48f3", "scanner": "scanner-primary", "fingerprint": "d324c38f348e9462", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/bolna/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e9c69d5f4befd22c", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/podio/package.json"}, "properties": {"repobilityId": "b8a0cb7f281acad7", "scanner": "scanner-primary", "fingerprint": "e9c69d5f4befd22c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/podio/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8066c35717c2a155", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/raia-ai/package.json"}, "properties": {"repobilityId": "1c43247d487713df", "scanner": "scanner-primary", "fingerprint": "8066c35717c2a155", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/raia-ai/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3d94c344a59d9d38", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/pinecone/package.json"}, "properties": {"repobilityId": "f310869ff0cd8439", "scanner": "scanner-primary", "fingerprint": "3d94c344a59d9d38", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/pinecone/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d4a3707471dbfefc", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/cody/package.json"}, "properties": {"repobilityId": "663deee64a4508fe", "scanner": "scanner-primary", "fingerprint": "d4a3707471dbfefc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/cody/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-39bb91d9c1445cd6", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/microsoft-dynamics-crm/package.json"}, "properties": {"repobilityId": "b5ad4d1ddd51510a", "scanner": "scanner-primary", "fingerprint": "39bb91d9c1445cd6", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/microsoft-dynamics-crm/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3decf976e980aba4", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/box/package.json"}, "properties": {"repobilityId": "e6304e304a5c7f52", "scanner": "scanner-primary", "fingerprint": "3decf976e980aba4", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/box/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f06bcbda9787494c", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/vercel/package.json"}, "properties": {"repobilityId": "ead4d9fd0e266ca2", "scanner": "scanner-primary", "fingerprint": "f06bcbda9787494c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/vercel/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-78d276c20af1aef3", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/snowflake/package.json"}, "properties": {"repobilityId": "838ea2e620f96fb0", "scanner": "scanner-primary", "fingerprint": "78d276c20af1aef3", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/snowflake/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e63933a8cd4c91b3", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/chatbase/package.json"}, "properties": {"repobilityId": "38c3d05028a98c97", "scanner": "scanner-primary", "fingerprint": "e63933a8cd4c91b3", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/chatbase/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d7aabce93e4600ea", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/ibm-cognose/package.json"}, "properties": {"repobilityId": "21b092efcc949fbc", "scanner": "scanner-primary", "fingerprint": "d7aabce93e4600ea", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/ibm-cognose/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-08fd5e8b76037e4d", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/openai/package.json"}, "properties": {"repobilityId": "cce58ff7df702866", "scanner": "scanner-primary", "fingerprint": "08fd5e8b76037e4d", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/openai/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-43394763334540c2", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/leexi/package.json"}, "properties": {"repobilityId": "1919fb20d1d9c5d3", "scanner": "scanner-primary", "fingerprint": "43394763334540c2", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/leexi/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-14529f62c1b33b3e", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/discord/package.json"}, "properties": {"repobilityId": "664996237ea7702f", "scanner": "scanner-primary", "fingerprint": "14529f62c1b33b3e", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/discord/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0e911f1b9b620603", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/insightly/package.json"}, "properties": {"repobilityId": "eb2e78f803690576", "scanner": "scanner-primary", "fingerprint": "0e911f1b9b620603", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/insightly/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-12ac1cc6cdd5e763", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/famulor/package.json"}, "properties": {"repobilityId": "a63c5df6b6ec1fdb", "scanner": "scanner-primary", "fingerprint": "12ac1cc6cdd5e763", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/famulor/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-17dd1dbab40f54e1", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/chartly/package.json"}, "properties": {"repobilityId": "33199e15a4cd37c5", "scanner": "scanner-primary", "fingerprint": "17dd1dbab40f54e1", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/chartly/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c9ddba512ba80971", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/mixpanel/package.json"}, "properties": {"repobilityId": "5f26dd8c4f295863", "scanner": "scanner-primary", "fingerprint": "c9ddba512ba80971", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/mixpanel/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f0307dbdcf8fa702", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/ninjapipe/package.json"}, "properties": {"repobilityId": "341d8a8bfdfbc277", "scanner": "scanner-primary", "fingerprint": "f0307dbdcf8fa702", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/ninjapipe/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2d2aa79d5cfa10ce", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/moonclerk/package.json"}, "properties": {"repobilityId": "194a90f31944e2d2", "scanner": "scanner-primary", "fingerprint": "2d2aa79d5cfa10ce", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/moonclerk/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b1a1214160bafaa4", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/intruder/package.json"}, "properties": {"repobilityId": "6bfbcf78704e77cf", "scanner": "scanner-primary", "fingerprint": "b1a1214160bafaa4", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/intruder/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-22cb1290d8e8a2a8", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/lobstermail/package.json"}, "properties": {"repobilityId": "feecf2613541efe6", "scanner": "scanner-primary", "fingerprint": "22cb1290d8e8a2a8", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/lobstermail/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a307df5d570de683", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/sign-now/package.json"}, "properties": {"repobilityId": "85ebd269477620fd", "scanner": "scanner-primary", "fingerprint": "a307df5d570de683", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/sign-now/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2289e21def6589fc", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/dumpling-ai/package.json"}, "properties": {"repobilityId": "1577f812817cae3f", "scanner": "scanner-primary", "fingerprint": "2289e21def6589fc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/dumpling-ai/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-24eb1255cc6b96c7", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/mautic/package.json"}, "properties": {"repobilityId": "7fe629f17089bd4e", "scanner": "scanner-primary", "fingerprint": "24eb1255cc6b96c7", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/mautic/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-00dd1645561c9013", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/vtiger/package.json"}, "properties": {"repobilityId": "218d898fac87ad45", "scanner": "scanner-primary", "fingerprint": "00dd1645561c9013", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/vtiger/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-85d23bb417a40292", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/folk/package.json"}, "properties": {"repobilityId": "2a6ef2191d6fb35c", "scanner": "scanner-primary", "fingerprint": "85d23bb417a40292", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/folk/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-05a4287ef6e33266", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/bubble/package.json"}, "properties": {"repobilityId": "beb52174f51b10b2", "scanner": "scanner-primary", "fingerprint": "05a4287ef6e33266", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/bubble/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-aec76c98f353de5f", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/github/package.json"}, "properties": {"repobilityId": "2b9ca952aa135622", "scanner": "scanner-primary", "fingerprint": "aec76c98f353de5f", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/github/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2b9c235342a00e3d", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/goodmem/package.json"}, "properties": {"repobilityId": "763651ce288f8609", "scanner": "scanner-primary", "fingerprint": "2b9c235342a00e3d", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/goodmem/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-43a76b69eb48f262", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/microsoft-power-bi/package.json"}, "properties": {"repobilityId": "68b6d5e2a2e32678", "scanner": "scanner-primary", "fingerprint": "43a76b69eb48f262", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/microsoft-power-bi/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a3491d85350fcf59", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/logrocket/package.json"}, "properties": {"repobilityId": "2094188c5c55f85d", "scanner": "scanner-primary", "fingerprint": "a3491d85350fcf59", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/logrocket/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-fa14ed0722bc4565", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/promotekit/package.json"}, "properties": {"repobilityId": "3f3765d0ae48cb45", "scanner": "scanner-primary", "fingerprint": "fa14ed0722bc4565", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/promotekit/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ec03f80348cffa2c", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/streak/package.json"}, "properties": {"repobilityId": "5dad7c932a6b1432", "scanner": "scanner-primary", "fingerprint": "ec03f80348cffa2c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/streak/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-dad3cca5d826d36d", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/airparser/package.json"}, "properties": {"repobilityId": "84791f056e14690b", "scanner": "scanner-primary", "fingerprint": "dad3cca5d826d36d", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/airparser/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-bd5e97a93f2d5554", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/mistral-ai/package.json"}, "properties": {"repobilityId": "d4dd51bec92a612c", "scanner": "scanner-primary", "fingerprint": "bd5e97a93f2d5554", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/mistral-ai/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2be10da2b867cc3c", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/prompthub/package.json"}, "properties": {"repobilityId": "03d44d67b34a9012", "scanner": "scanner-primary", "fingerprint": "2be10da2b867cc3c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/prompthub/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-736f0b9de9019e09", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/metabase/package.json"}, "properties": {"repobilityId": "b0898c65684a33ba", "scanner": "scanner-primary", "fingerprint": "736f0b9de9019e09", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/metabase/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8783aac332fea765", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/serpstat/package.json"}, "properties": {"repobilityId": "10666430f412cad7", "scanner": "scanner-primary", "fingerprint": "8783aac332fea765", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/serpstat/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a0fa6fe1e872368b", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/send-it/package.json"}, "properties": {"repobilityId": "07a3d121e38b7ae6", "scanner": "scanner-primary", "fingerprint": "a0fa6fe1e872368b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/send-it/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-25bf508fcb315a48", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/qwilr/package.json"}, "properties": {"repobilityId": "0b1689a0f072ddf3", "scanner": "scanner-primary", "fingerprint": "25bf508fcb315a48", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/qwilr/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1b5e756128d7fa5f", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/mixmax/package.json"}, "properties": {"repobilityId": "87ba2428950e3b37", "scanner": "scanner-primary", "fingerprint": "1b5e756128d7fa5f", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/mixmax/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ac52bafcdb108f5c", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/front/package.json"}, "properties": {"repobilityId": "87546c7d354c8316", "scanner": "scanner-primary", "fingerprint": "ac52bafcdb108f5c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/front/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-feced5d23273b77d", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/toggl-track/package.json"}, "properties": {"repobilityId": "2e6967c7d4eecedc", "scanner": "scanner-primary", "fingerprint": "feced5d23273b77d", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/toggl-track/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ab1b29a2d54b67d2", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/zendesk-sell/package.json"}, "properties": {"repobilityId": "1f2e048a2a0c684a", "scanner": "scanner-primary", "fingerprint": "ab1b29a2d54b67d2", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/zendesk-sell/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f3045bb34b370298", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/chatnode/package.json"}, "properties": {"repobilityId": "2450fd1fd04cb99e", "scanner": "scanner-primary", "fingerprint": "f3045bb34b370298", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/chatnode/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0a0dac66ce17a181", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/jina-ai/package.json"}, "properties": {"repobilityId": "2c00b5993be51ef2", "scanner": "scanner-primary", "fingerprint": "0a0dac66ce17a181", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/jina-ai/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-84713c5f818a3a88", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/instagram-business/package.json"}, "properties": {"repobilityId": "a4d129d8a38201ab", "scanner": "scanner-primary", "fingerprint": "84713c5f818a3a88", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/instagram-business/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8e162db563b33133", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/mongodb/package.json"}, "properties": {"repobilityId": "beb524fdca963b42", "scanner": "scanner-primary", "fingerprint": "8e162db563b33133", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/mongodb/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-743b89f7309c4a0e", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/airtable/package.json"}, "properties": {"repobilityId": "f8c2af55cc23f470", "scanner": "scanner-primary", "fingerprint": "743b89f7309c4a0e", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/airtable/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-883141f67581dece", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/gitea/package.json"}, "properties": {"repobilityId": "433ef1e903d30cb9", "scanner": "scanner-primary", "fingerprint": "883141f67581dece", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/gitea/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5c7f8b43291501a9", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/facebook-leads/package.json"}, "properties": {"repobilityId": "a8840602f76ce421", "scanner": "scanner-primary", "fingerprint": "5c7f8b43291501a9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/facebook-leads/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-554299cda852aebf", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/robolly/package.json"}, "properties": {"repobilityId": "bb970fb162c7383b", "scanner": "scanner-primary", "fingerprint": "554299cda852aebf", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/robolly/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-569260131bef732c", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/short-io/package.json"}, "properties": {"repobilityId": "9170e2fc04379416", "scanner": "scanner-primary", "fingerprint": "569260131bef732c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/short-io/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f1b224cfd8f7bd23", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/linkup/package.json"}, "properties": {"repobilityId": "e187255ff0ea0c08", "scanner": "scanner-primary", "fingerprint": "f1b224cfd8f7bd23", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/linkup/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-15d3dddddef6f6c4", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/mcp/package.json"}, "properties": {"repobilityId": "5e12836267e42fc8", "scanner": "scanner-primary", "fingerprint": "15d3dddddef6f6c4", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/mcp/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-007cd9c71b23c52d", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/datadog/package.json"}, "properties": {"repobilityId": "d3996ff644d1cdfa", "scanner": "scanner-primary", "fingerprint": "007cd9c71b23c52d", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/datadog/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b5cdd1ae6be056e7", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/fireberry/package.json"}, "properties": {"repobilityId": "7920326da89b0776", "scanner": "scanner-primary", "fingerprint": "b5cdd1ae6be056e7", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/fireberry/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a2c6d0db9c5c9be8", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/insta-charts/package.json"}, "properties": {"repobilityId": "242e95e20f43a601", "scanner": "scanner-primary", "fingerprint": "a2c6d0db9c5c9be8", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/insta-charts/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-223558705d8e3ea6", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/posthog/package.json"}, "properties": {"repobilityId": "73940d5896088f27", "scanner": "scanner-primary", "fingerprint": "223558705d8e3ea6", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/posthog/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-daa27a09a7d40c79", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/google-tasks/package.json"}, "properties": {"repobilityId": "a1a2d2fbc32b3caf", "scanner": "scanner-primary", "fingerprint": "daa27a09a7d40c79", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/google-tasks/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-145f8b99c96ce452", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/microsoft-todo/package.json"}, "properties": {"repobilityId": "583566f9c1ddce8f", "scanner": "scanner-primary", "fingerprint": "145f8b99c96ce452", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/microsoft-todo/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1216fb7cbe379efe", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/teamhood/package.json"}, "properties": {"repobilityId": "a04b0c392b60c667", "scanner": "scanner-primary", "fingerprint": "1216fb7cbe379efe", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/teamhood/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-40b6acb6261f83d2", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/runware/package.json"}, "properties": {"repobilityId": "4bbe64d356cc214d", "scanner": "scanner-primary", "fingerprint": "40b6acb6261f83d2", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/runware/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0b465db73f7ab77f", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/flowise/package.json"}, "properties": {"repobilityId": "c9f0ba52aab2dd28", "scanner": "scanner-primary", "fingerprint": "0b465db73f7ab77f", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/flowise/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-482729c90dec8c1d", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/cashfree-payments/package.json"}, "properties": {"repobilityId": "78a9d11494450847", "scanner": "scanner-primary", "fingerprint": "482729c90dec8c1d", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/cashfree-payments/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-07b5e0c8e9ccd0d7", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/lemlist/package.json"}, "properties": {"repobilityId": "7f8260d725b370de", "scanner": "scanner-primary", "fingerprint": "07b5e0c8e9ccd0d7", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/lemlist/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7a50bc38c8accb82", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/gamma/package.json"}, "properties": {"repobilityId": "8b6ad039f1d6a146", "scanner": "scanner-primary", "fingerprint": "7a50bc38c8accb82", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/gamma/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-293734102dc5e5be", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/http-oauth2/package.json"}, "properties": {"repobilityId": "d8506ebd8a62a68a", "scanner": "scanner-primary", "fingerprint": "293734102dc5e5be", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/http-oauth2/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-28cd0eec09c605c8", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/trello/package.json"}, "properties": {"repobilityId": "f105a6cb72924f7b", "scanner": "scanner-primary", "fingerprint": "28cd0eec09c605c8", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/trello/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-34fc0150a0bf79b1", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/bika/package.json"}, "properties": {"repobilityId": "4ac26ba4261c0a3a", "scanner": "scanner-primary", "fingerprint": "34fc0150a0bf79b1", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/bika/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3a0512adb90c9201", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/omni-co/package.json"}, "properties": {"repobilityId": "40db5d181a0bc28c", "scanner": "scanner-primary", "fingerprint": "3a0512adb90c9201", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/omni-co/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-dee366f4e8ec434e", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/moxie-crm/package.json"}, "properties": {"repobilityId": "79f5d7f185df7ce2", "scanner": "scanner-primary", "fingerprint": "dee366f4e8ec434e", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/moxie-crm/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-af1a4d34b7eccf49", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/workday/package.json"}, "properties": {"repobilityId": "6f46fd16fdd6deaa", "scanner": "scanner-primary", "fingerprint": "af1a4d34b7eccf49", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/workday/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-69579104bc977884", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/bannerbear/package.json"}, "properties": {"repobilityId": "b37931a02b045ad3", "scanner": "scanner-primary", "fingerprint": "69579104bc977884", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/bannerbear/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-485da92a719fdc6f", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/ko-fi/package.json"}, "properties": {"repobilityId": "18268ba9b1ced00c", "scanner": "scanner-primary", "fingerprint": "485da92a719fdc6f", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/ko-fi/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-447c67f6d1f615f2", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/amazon-textract/package.json"}, "properties": {"repobilityId": "b6d388580e31f79b", "scanner": "scanner-primary", "fingerprint": "447c67f6d1f615f2", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/amazon-textract/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4c45b9f17d400207", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/buttondown/package.json"}, "properties": {"repobilityId": "66ca6be92477eb7b", "scanner": "scanner-primary", "fingerprint": "4c45b9f17d400207", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/buttondown/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-acb313f3c4bcc3e7", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/amazon-ses/package.json"}, "properties": {"repobilityId": "2265429213982212", "scanner": "scanner-primary", "fingerprint": "acb313f3c4bcc3e7", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/amazon-ses/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2dce1791671ff3d2", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/sendr/package.json"}, "properties": {"repobilityId": "4faf9a297d5cb4cd", "scanner": "scanner-primary", "fingerprint": "2dce1791671ff3d2", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/sendr/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2aff792f15d41a57", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/formspark/package.json"}, "properties": {"repobilityId": "6783160d7fadadd7", "scanner": "scanner-primary", "fingerprint": "2aff792f15d41a57", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/formspark/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-bea992e45279ed40", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/xero/package.json"}, "properties": {"repobilityId": "3b5c717b7818909e", "scanner": "scanner-primary", "fingerprint": "bea992e45279ed40", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/xero/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-94b204aa0ef381ab", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/aianswer/package.json"}, "properties": {"repobilityId": "99c83850a850d84a", "scanner": "scanner-primary", "fingerprint": "94b204aa0ef381ab", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/aianswer/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-85d21164a92a422d", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/drupal/package.json"}, "properties": {"repobilityId": "e6ef50245c4196ac", "scanner": "scanner-primary", "fingerprint": "85d21164a92a422d", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/drupal/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5acb2f429f90096c", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/nifty/package.json"}, "properties": {"repobilityId": "f40fadb4bcaf2d4e", "scanner": "scanner-primary", "fingerprint": "5acb2f429f90096c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/nifty/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9daf8674cb7c44f5", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/bokio/package.json"}, "properties": {"repobilityId": "351163c2e3935221", "scanner": "scanner-primary", "fingerprint": "9daf8674cb7c44f5", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/bokio/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-229e6bbac00c3092", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/amazon-sns/package.json"}, "properties": {"repobilityId": "7b30060c0e066c71", "scanner": "scanner-primary", "fingerprint": "229e6bbac00c3092", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/amazon-sns/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b87d59c6bb2ee146", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/uscreen/package.json"}, "properties": {"repobilityId": "8b39bbef84dce89e", "scanner": "scanner-primary", "fingerprint": "b87d59c6bb2ee146", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/uscreen/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-56d965b08140c92a", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/tally/package.json"}, "properties": {"repobilityId": "c170653bc73b9c44", "scanner": "scanner-primary", "fingerprint": "56d965b08140c92a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/tally/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7c45c123e29a2212", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/gmail/package.json"}, "properties": {"repobilityId": "b32d67b2bd563ee8", "scanner": "scanner-primary", "fingerprint": "7c45c123e29a2212", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/gmail/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-24db2bfd290a046a", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/hackernews/package.json"}, "properties": {"repobilityId": "aa766945a1cb1c16", "scanner": "scanner-primary", "fingerprint": "24db2bfd290a046a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/hackernews/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-27093551e87504e0", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/call-rounded/package.json"}, "properties": {"repobilityId": "520c5f8fde02b066", "scanner": "scanner-primary", "fingerprint": "27093551e87504e0", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/call-rounded/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-94b1e7d023668199", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/paperform/package.json"}, "properties": {"repobilityId": "711c45b8f932df12", "scanner": "scanner-primary", "fingerprint": "94b1e7d023668199", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/paperform/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7deb19d3bd8c04f7", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/bamboohr/package.json"}, "properties": {"repobilityId": "90bfa07af6a8cc15", "scanner": "scanner-primary", "fingerprint": "7deb19d3bd8c04f7", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/bamboohr/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ab39b9d54684c415", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/echowin/package.json"}, "properties": {"repobilityId": "1ba1c7603eb5c65b", "scanner": "scanner-primary", "fingerprint": "ab39b9d54684c415", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/echowin/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4bb36ddc1a3f3eb4", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/chainalysis-api/package.json"}, "properties": {"repobilityId": "aab270e81be1baa4", "scanner": "scanner-primary", "fingerprint": "4bb36ddc1a3f3eb4", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/chainalysis-api/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-44eef3eb35934552", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/sendfox/package.json"}, "properties": {"repobilityId": "7c8e8b60432603a5", "scanner": "scanner-primary", "fingerprint": "44eef3eb35934552", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/sendfox/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6dd696a1656d4aac", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/zeplin/package.json"}, "properties": {"repobilityId": "01cbdfc20a73a254", "scanner": "scanner-primary", "fingerprint": "6dd696a1656d4aac", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/zeplin/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-429711ab6dad71ab", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/pastefy/package.json"}, "properties": {"repobilityId": "44f20cdb94497efe", "scanner": "scanner-primary", "fingerprint": "429711ab6dad71ab", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/pastefy/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1772eb21a834eab4", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/easy-peasy-ai/package.json"}, "properties": {"repobilityId": "8a1d610d98d73aeb", "scanner": "scanner-primary", "fingerprint": "1772eb21a834eab4", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/easy-peasy-ai/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-02ed68dca829f190", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/apitemplate-io/package.json"}, "properties": {"repobilityId": "e926a918b1b09c6f", "scanner": "scanner-primary", "fingerprint": "02ed68dca829f190", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/apitemplate-io/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2e55631a377bb537", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/netsuite/package.json"}, "properties": {"repobilityId": "0d7644b6cf7677b0", "scanner": "scanner-primary", "fingerprint": "2e55631a377bb537", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/netsuite/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f7f1f96bb0d0e7c3", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/heygen/package.json"}, "properties": {"repobilityId": "461ba976481d23d7", "scanner": "scanner-primary", "fingerprint": "f7f1f96bb0d0e7c3", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/heygen/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5853ee6481d2a0f7", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/frame/package.json"}, "properties": {"repobilityId": "2b982f344b308342", "scanner": "scanner-primary", "fingerprint": "5853ee6481d2a0f7", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/frame/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-38eff7d988f77571", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/reoon-verifier/package.json"}, "properties": {"repobilityId": "1087f4643505e54a", "scanner": "scanner-primary", "fingerprint": "38eff7d988f77571", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/reoon-verifier/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1d6257fe1ad46fea", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/mailer-lite/package.json"}, "properties": {"repobilityId": "40d04fa5452e65e8", "scanner": "scanner-primary", "fingerprint": "1d6257fe1ad46fea", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/mailer-lite/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b36164f7d6c374c3", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/totalcms/package.json"}, "properties": {"repobilityId": "39df9fe1d6904b5c", "scanner": "scanner-primary", "fingerprint": "b36164f7d6c374c3", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/totalcms/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f0f43680190167f1", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/intercom/package.json"}, "properties": {"repobilityId": "5fcdfb199dc7b272", "scanner": "scanner-primary", "fingerprint": "f0f43680190167f1", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/intercom/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-feff34ea3461a2b0", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/writesonic-bulk/package.json"}, "properties": {"repobilityId": "72525331ceb63986", "scanner": "scanner-primary", "fingerprint": "feff34ea3461a2b0", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/writesonic-bulk/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-19d0aac4c5bd1517", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/activepieces/package.json"}, "properties": {"repobilityId": "2b7dde957ab3827d", "scanner": "scanner-primary", "fingerprint": "19d0aac4c5bd1517", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/activepieces/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b4fa7afc2c0d70c7", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/docsbot/package.json"}, "properties": {"repobilityId": "61cf404e777cf4b1", "scanner": "scanner-primary", "fingerprint": "b4fa7afc2c0d70c7", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/docsbot/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6c4d9f1cc90aaaad", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/spotify/package.json"}, "properties": {"repobilityId": "7bff56401bf30e58", "scanner": "scanner-primary", "fingerprint": "6c4d9f1cc90aaaad", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/spotify/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-bb97149f63860ebb", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/baserow/package.json"}, "properties": {"repobilityId": "c86189d9e0c25a1b", "scanner": "scanner-primary", "fingerprint": "bb97149f63860ebb", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/baserow/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d2e9e0b28ae5d3ec", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/pushover/package.json"}, "properties": {"repobilityId": "e547535ce6cf5267", "scanner": "scanner-primary", "fingerprint": "d2e9e0b28ae5d3ec", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/pushover/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-57227e4805569e6a", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/bitly/package.json"}, "properties": {"repobilityId": "cbd3ed1d5d9032a0", "scanner": "scanner-primary", "fingerprint": "57227e4805569e6a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/bitly/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-cdb8266ee0ec5ae6", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/frill/package.json"}, "properties": {"repobilityId": "6eb136bd1e3062a6", "scanner": "scanner-primary", "fingerprint": "cdb8266ee0ec5ae6", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/frill/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5d64f07125604efc", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/perplexity-ai/package.json"}, "properties": {"repobilityId": "de4e87ba99d108d3", "scanner": "scanner-primary", "fingerprint": "5d64f07125604efc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/perplexity-ai/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-304c9142c426fb23", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/service-now/package.json"}, "properties": {"repobilityId": "86f63083202d626e", "scanner": "scanner-primary", "fingerprint": "304c9142c426fb23", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/service-now/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5533244f4463e590", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/sperse/package.json"}, "properties": {"repobilityId": "41a05684dddad4cd", "scanner": "scanner-primary", "fingerprint": "5533244f4463e590", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/sperse/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-498586fdc3d3ae82", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/avian/package.json"}, "properties": {"repobilityId": "49650fa2d0d8ff9c", "scanner": "scanner-primary", "fingerprint": "498586fdc3d3ae82", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/avian/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d3cb0d9bbcb2ce7f", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/quizell/package.json"}, "properties": {"repobilityId": "2ddd0def79fdcd41", "scanner": "scanner-primary", "fingerprint": "d3cb0d9bbcb2ce7f", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/quizell/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-350bc30ec66fe8be", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/zoom/package.json"}, "properties": {"repobilityId": "ce400ef299ba9662", "scanner": "scanner-primary", "fingerprint": "350bc30ec66fe8be", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/zoom/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7e673b7f2f1228f2", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/clarifai/package.json"}, "properties": {"repobilityId": "e8899b63e6f80e98", "scanner": "scanner-primary", "fingerprint": "7e673b7f2f1228f2", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/clarifai/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-214fd6d92e21ac7b", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/localai/package.json"}, "properties": {"repobilityId": "5cf69e29c44f3b33", "scanner": "scanner-primary", "fingerprint": "214fd6d92e21ac7b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/localai/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2d873791dea7acec", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/dub/package.json"}, "properties": {"repobilityId": "c169485b23f6b27d", "scanner": "scanner-primary", "fingerprint": "2d873791dea7acec", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/dub/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4c5abf2a92a15d02", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/trust/package.json"}, "properties": {"repobilityId": "e19a7cc4cf9697cb", "scanner": "scanner-primary", "fingerprint": "4c5abf2a92a15d02", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/trust/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0bba18f5626f35ba", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/tarvent/package.json"}, "properties": {"repobilityId": "6ab6859031d87947", "scanner": "scanner-primary", "fingerprint": "0bba18f5626f35ba", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/tarvent/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1625c23d0c3c6a05", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/youtrack/package.json"}, "properties": {"repobilityId": "043912581f4c14f6", "scanner": "scanner-primary", "fingerprint": "1625c23d0c3c6a05", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/youtrack/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8a80731714dc7765", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/oracle-fusion-cloud-erp/package.json"}, "properties": {"repobilityId": "a9ee6249ab983411", "scanner": "scanner-primary", "fingerprint": "8a80731714dc7765", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/oracle-fusion-cloud-erp/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-fcf383c92291af30", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/sendgrid/package.json"}, "properties": {"repobilityId": "eec684500dff323e", "scanner": "scanner-primary", "fingerprint": "fcf383c92291af30", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/sendgrid/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2f83f14f9462fdce", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/greip/package.json"}, "properties": {"repobilityId": "af41bf785349adda", "scanner": "scanner-primary", "fingerprint": "2f83f14f9462fdce", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/greip/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1545e38daf24bdc3", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/seek-table/package.json"}, "properties": {"repobilityId": "396675058dc0c63d", "scanner": "scanner-primary", "fingerprint": "1545e38daf24bdc3", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/seek-table/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2b72e4f752c70238", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/murf-api/package.json"}, "properties": {"repobilityId": "e9543e3c193929ef", "scanner": "scanner-primary", "fingerprint": "2b72e4f752c70238", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/murf-api/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-46dac2adde377f4d", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/week-done/package.json"}, "properties": {"repobilityId": "767f0101c5f50a8a", "scanner": "scanner-primary", "fingerprint": "46dac2adde377f4d", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/week-done/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a49a825574c1d853", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/lever/package.json"}, "properties": {"repobilityId": "b3ff35914b509d23", "scanner": "scanner-primary", "fingerprint": "a49a825574c1d853", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/lever/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3d59c8b857a2464b", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/lusha/package.json"}, "properties": {"repobilityId": "a96b0e03b8d3a342", "scanner": "scanner-primary", "fingerprint": "3d59c8b857a2464b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/lusha/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-53b9d56b73a3e978", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/flow-parser/package.json"}, "properties": {"repobilityId": "c0e771e3f96bd43e", "scanner": "scanner-primary", "fingerprint": "53b9d56b73a3e978", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/flow-parser/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-bd04fdfa1b51611b", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/bigcommerce/package.json"}, "properties": {"repobilityId": "ecfc6a3d5f29b9c6", "scanner": "scanner-primary", "fingerprint": "bd04fdfa1b51611b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/bigcommerce/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-264a1c63eff91081", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/manus/package.json"}, "properties": {"repobilityId": "3f328fe768866b1e", "scanner": "scanner-primary", "fingerprint": "264a1c63eff91081", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/manus/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e764b5aff01b29e2", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/netlify/package.json"}, "properties": {"repobilityId": "d014c6dee3bd03b0", "scanner": "scanner-primary", "fingerprint": "e764b5aff01b29e2", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/netlify/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5eea5df5555c7fdf", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/moveo-ai/package.json"}, "properties": {"repobilityId": "04caa11a4cab58cf", "scanner": "scanner-primary", "fingerprint": "5eea5df5555c7fdf", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/moveo-ai/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3fcd7ce80354e09a", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/pipedrive/package.json"}, "properties": {"repobilityId": "f95213f7548a9f78", "scanner": "scanner-primary", "fingerprint": "3fcd7ce80354e09a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/pipedrive/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-08d79a25a40e4645", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/chatwoot/package.json"}, "properties": {"repobilityId": "1ce0a41a920a18b6", "scanner": "scanner-primary", "fingerprint": "08d79a25a40e4645", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/chatwoot/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-80c233a560d583fa", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/vbout/package.json"}, "properties": {"repobilityId": "a9e3105620dd44b2", "scanner": "scanner-primary", "fingerprint": "80c233a560d583fa", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/vbout/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-194b7bc35d832faf", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/nocodb/package.json"}, "properties": {"repobilityId": "c491ea481cf165d5", "scanner": "scanner-primary", "fingerprint": "194b7bc35d832faf", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/nocodb/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3cbef2673db0cf82", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/lead-connector/package.json"}, "properties": {"repobilityId": "c67504581f62fea7", "scanner": "scanner-primary", "fingerprint": "3cbef2673db0cf82", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/lead-connector/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-409dfa40e60089b2", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/mailercheck/package.json"}, "properties": {"repobilityId": "e6eea1bd39620f7b", "scanner": "scanner-primary", "fingerprint": "409dfa40e60089b2", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/mailercheck/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f72dfd30b8694ceb", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/calendly/package.json"}, "properties": {"repobilityId": "573d535e2e392611", "scanner": "scanner-primary", "fingerprint": "f72dfd30b8694ceb", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/calendly/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5a178d55e8cdf07b", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/smoove/package.json"}, "properties": {"repobilityId": "943a1cb9d6c61271", "scanner": "scanner-primary", "fingerprint": "5a178d55e8cdf07b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/smoove/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-43dd850c6da4fedb", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/lucidya/package.json"}, "properties": {"repobilityId": "40bf96d5c7e87e25", "scanner": "scanner-primary", "fingerprint": "43dd850c6da4fedb", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/lucidya/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-78316218ce911d11", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/vimeo/package.json"}, "properties": {"repobilityId": "9b0f692f6affa42d", "scanner": "scanner-primary", "fingerprint": "78316218ce911d11", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/vimeo/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e6dd83063e0362e0", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/deepseek/package.json"}, "properties": {"repobilityId": "ebd19cb77bada4c6", "scanner": "scanner-primary", "fingerprint": "e6dd83063e0362e0", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/deepseek/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2258b192676de42a", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/doctly/package.json"}, "properties": {"repobilityId": "d01877d6cf054b44", "scanner": "scanner-primary", "fingerprint": "2258b192676de42a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/doctly/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-02c39fb1687ae3ba", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/connectuc/package.json"}, "properties": {"repobilityId": "2dcff019e1ed35e5", "scanner": "scanner-primary", "fingerprint": "02c39fb1687ae3ba", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/connectuc/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d2dc0bb93e85b339", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/grist/package.json"}, "properties": {"repobilityId": "70666c3f921906bb", "scanner": "scanner-primary", "fingerprint": "d2dc0bb93e85b339", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/grist/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-064f43b38fbd5cc3", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/tidycal/package.json"}, "properties": {"repobilityId": "1c7ed51f591f5715", "scanner": "scanner-primary", "fingerprint": "064f43b38fbd5cc3", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/tidycal/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-532dff188779f4ec", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/chargebee/package.json"}, "properties": {"repobilityId": "47cb617773f2366e", "scanner": "scanner-primary", "fingerprint": "532dff188779f4ec", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/chargebee/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e962f8f32ab1dcde", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/lets-calendar/package.json"}, "properties": {"repobilityId": "e0ae70f88fba3714", "scanner": "scanner-primary", "fingerprint": "e962f8f32ab1dcde", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/lets-calendar/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d41061c2590aa341", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/apify/package.json"}, "properties": {"repobilityId": "ab12b5d362dc971e", "scanner": "scanner-primary", "fingerprint": "d41061c2590aa341", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/apify/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a46dc59eae3e2b46", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/acumbamail/package.json"}, "properties": {"repobilityId": "ce55e1bcedfb5b74", "scanner": "scanner-primary", "fingerprint": "a46dc59eae3e2b46", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/acumbamail/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b0796ad5e5dfc1a5", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/slack/package.json"}, "properties": {"repobilityId": "11a8c33e3539808a", "scanner": "scanner-primary", "fingerprint": "b0796ad5e5dfc1a5", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/slack/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-585603ca768ea16a", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/skyvern/package.json"}, "properties": {"repobilityId": "f57cecce5e38e86d", "scanner": "scanner-primary", "fingerprint": "585603ca768ea16a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/skyvern/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6cf8ee3d48df3f2e", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/zoho-bookings/package.json"}, "properties": {"repobilityId": "33f2112737210fe6", "scanner": "scanner-primary", "fingerprint": "6cf8ee3d48df3f2e", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/zoho-bookings/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3d6a61dafb2692ef", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/resend/package.json"}, "properties": {"repobilityId": "1fab5a4fc103149c", "scanner": "scanner-primary", "fingerprint": "3d6a61dafb2692ef", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/resend/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-76daf18c62879ed1", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/jira-data-center/package.json"}, "properties": {"repobilityId": "5683374e1ceca622", "scanner": "scanner-primary", "fingerprint": "76daf18c62879ed1", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/jira-data-center/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-fb963efc8f3f7660", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/wealthbox/package.json"}, "properties": {"repobilityId": "eb1196e65fa31eab", "scanner": "scanner-primary", "fingerprint": "fb963efc8f3f7660", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/wealthbox/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8f91400a31cca493", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/reply-io/package.json"}, "properties": {"repobilityId": "64e82dea81694862", "scanner": "scanner-primary", "fingerprint": "8f91400a31cca493", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/reply-io/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7f84d833d511b978", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/vidlab7/package.json"}, "properties": {"repobilityId": "5951b6fc275b183a", "scanner": "scanner-primary", "fingerprint": "7f84d833d511b978", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/vidlab7/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4781b9c3a545656d", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/runway/package.json"}, "properties": {"repobilityId": "68c6d92adbc6fd1a", "scanner": "scanner-primary", "fingerprint": "4781b9c3a545656d", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/runway/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1e56ab1b36ea2b73", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/binance/package.json"}, "properties": {"repobilityId": "a95f5c39be4a6262", "scanner": "scanner-primary", "fingerprint": "1e56ab1b36ea2b73", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/binance/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-bd9ad1a63325d4c2", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/greenhouse/package.json"}, "properties": {"repobilityId": "03cbe40afc570772", "scanner": "scanner-primary", "fingerprint": "bd9ad1a63325d4c2", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/greenhouse/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f00ee623c0f63f73", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/monday/package.json"}, "properties": {"repobilityId": "d40fa25323a96f6c", "scanner": "scanner-primary", "fingerprint": "f00ee623c0f63f73", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/monday/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-652060a43f2f234b", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/rapidtext-ai/package.json"}, "properties": {"repobilityId": "9cb3302680d751e4", "scanner": "scanner-primary", "fingerprint": "652060a43f2f234b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/rapidtext-ai/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b516f20897fab563", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/pandadoc/package.json"}, "properties": {"repobilityId": "1aa0d3ef3d9e30b5", "scanner": "scanner-primary", "fingerprint": "b516f20897fab563", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/pandadoc/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a8eedecdbcb244f2", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/cyberark/package.json"}, "properties": {"repobilityId": "459f6a6a4800a43a", "scanner": "scanner-primary", "fingerprint": "a8eedecdbcb244f2", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/cyberark/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-93c60dac9b1dca43", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/customer-io/package.json"}, "properties": {"repobilityId": "0d25a290bb8a39cd", "scanner": "scanner-primary", "fingerprint": "93c60dac9b1dca43", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/customer-io/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0a7d28c82a8153f8", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/gptzero-detect-ai/package.json"}, "properties": {"repobilityId": "20f4f2ce8151e3c9", "scanner": "scanner-primary", "fingerprint": "0a7d28c82a8153f8", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/gptzero-detect-ai/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4e03e47ce5c095ca", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/google-gemini/package.json"}, "properties": {"repobilityId": "273be0ea94d63a00", "scanner": "scanner-primary", "fingerprint": "4e03e47ce5c095ca", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/google-gemini/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7d799d68d67a9c70", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/ai/package.json"}, "properties": {"repobilityId": "344bcbe677e5afa9", "scanner": "scanner-primary", "fingerprint": "7d799d68d67a9c70", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/ai/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e16dea26319eeb22", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/zoho-crm/package.json"}, "properties": {"repobilityId": "38bbd4feae422961", "scanner": "scanner-primary", "fingerprint": "e16dea26319eeb22", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/zoho-crm/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8f6764db77766b9d", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/microsoft-excel-365/package.json"}, "properties": {"repobilityId": "efe5f7f05c830199", "scanner": "scanner-primary", "fingerprint": "8f6764db77766b9d", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/microsoft-excel-365/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-90d1b771e5a5cf0a", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/clearoutphone/package.json"}, "properties": {"repobilityId": "d17ed009013757ab", "scanner": "scanner-primary", "fingerprint": "90d1b771e5a5cf0a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/clearoutphone/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-fc595093dd8a3960", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/weekdone/package.json"}, "properties": {"repobilityId": "73f2f805c3590394", "scanner": "scanner-primary", "fingerprint": "fc595093dd8a3960", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/weekdone/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e148d2f2123fc225", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/supadata/package.json"}, "properties": {"repobilityId": "770e4c0ae4d7ea25", "scanner": "scanner-primary", "fingerprint": "e148d2f2123fc225", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/supadata/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-90679b16c6bce810", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/hunter/package.json"}, "properties": {"repobilityId": "adb0ce6ee4a5178d", "scanner": "scanner-primary", "fingerprint": "90679b16c6bce810", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/hunter/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-cd5405e8e3201ce6", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/gotify/package.json"}, "properties": {"repobilityId": "888c5681b75ef2e5", "scanner": "scanner-primary", "fingerprint": "cd5405e8e3201ce6", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/gotify/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7e058fc91c867485", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/linka/package.json"}, "properties": {"repobilityId": "8fcf1c9c3c77f8a7", "scanner": "scanner-primary", "fingerprint": "7e058fc91c867485", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/linka/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-05e938d173239e3b", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/drip/package.json"}, "properties": {"repobilityId": "eb00c9a9e7267d99", "scanner": "scanner-primary", "fingerprint": "05e938d173239e3b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/drip/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-05abf93f49c26496", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/truelayer/package.json"}, "properties": {"repobilityId": "eea3826b597c883d", "scanner": "scanner-primary", "fingerprint": "05abf93f49c26496", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/truelayer/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6a9c1310a05f98be", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/paywhirl/package.json"}, "properties": {"repobilityId": "485f9dcbb662e03e", "scanner": "scanner-primary", "fingerprint": "6a9c1310a05f98be", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/paywhirl/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9423453d5f5fa084", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/pocketbase/package.json"}, "properties": {"repobilityId": "f18953c923e68ea2", "scanner": "scanner-primary", "fingerprint": "9423453d5f5fa084", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/pocketbase/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-73e9404c3a768785", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/twenty/package.json"}, "properties": {"repobilityId": "6defabebe417c107", "scanner": "scanner-primary", "fingerprint": "73e9404c3a768785", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/twenty/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c37ec1b88245e75f", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/flipando/package.json"}, "properties": {"repobilityId": "0fd12f57f0e6b9d3", "scanner": "scanner-primary", "fingerprint": "c37ec1b88245e75f", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/flipando/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-611b6d6d510bb67b", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/qawafel/package.json"}, "properties": {"repobilityId": "0c6359c948ab97fd", "scanner": "scanner-primary", "fingerprint": "611b6d6d510bb67b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/qawafel/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6d0c188a6955885b", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/amazon-s3/package.json"}, "properties": {"repobilityId": "07d2b26aa5a3b389", "scanner": "scanner-primary", "fingerprint": "6d0c188a6955885b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/amazon-s3/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-796612eb11a32889", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/facebook-pages/package.json"}, "properties": {"repobilityId": "50733ed8cb881105", "scanner": "scanner-primary", "fingerprint": "796612eb11a32889", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/facebook-pages/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-881d032d1f59bf65", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/twin-labs/package.json"}, "properties": {"repobilityId": "e98d5ff56f4bb646", "scanner": "scanner-primary", "fingerprint": "881d032d1f59bf65", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/twin-labs/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b896fcccc0189c15", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/notion/package.json"}, "properties": {"repobilityId": "f5835760da25636d", "scanner": "scanner-primary", "fingerprint": "b896fcccc0189c15", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/notion/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8ce207529add7181", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/asana/package.json"}, "properties": {"repobilityId": "b50c73d2b0449c5f", "scanner": "scanner-primary", "fingerprint": "8ce207529add7181", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/asana/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0b3b3672ad64244c", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/synthesia/package.json"}, "properties": {"repobilityId": "ee8a37b8c7ef2973", "scanner": "scanner-primary", "fingerprint": "0b3b3672ad64244c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/synthesia/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f91562772b60c453", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/aidbase/package.json"}, "properties": {"repobilityId": "c1c3db44ad8fae0f", "scanner": "scanner-primary", "fingerprint": "f91562772b60c453", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/aidbase/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-73334de2784d7d1b", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/copper/package.json"}, "properties": {"repobilityId": "2a4520ff5cb7b005", "scanner": "scanner-primary", "fingerprint": "73334de2784d7d1b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/copper/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-bcb0eed0549a47ea", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/google-contacts/package.json"}, "properties": {"repobilityId": "458f84c665b5e8d2", "scanner": "scanner-primary", "fingerprint": "bcb0eed0549a47ea", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/google-contacts/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-376d9b5a12aabbd7", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/bland-ai/package.json"}, "properties": {"repobilityId": "77554b873465a43d", "scanner": "scanner-primary", "fingerprint": "376d9b5a12aabbd7", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/bland-ai/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a6fd1c8c8494a863", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/tapfiliate/package.json"}, "properties": {"repobilityId": "cb74308d2928bc4f", "scanner": "scanner-primary", "fingerprint": "a6fd1c8c8494a863", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/tapfiliate/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-33fe5234fd3add81", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/cloudinary/package.json"}, "properties": {"repobilityId": "78443902f7d45edb", "scanner": "scanner-primary", "fingerprint": "33fe5234fd3add81", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/cloudinary/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-22e23f694cd027be", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/thankster/package.json"}, "properties": {"repobilityId": "3a091928c8594564", "scanner": "scanner-primary", "fingerprint": "22e23f694cd027be", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/thankster/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-85ba7d73b0018d1f", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/gladia/package.json"}, "properties": {"repobilityId": "7d8b2034ced810a5", "scanner": "scanner-primary", "fingerprint": "85ba7d73b0018d1f", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/gladia/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-289959644d03017e", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/straico/package.json"}, "properties": {"repobilityId": "cd1cff665500def1", "scanner": "scanner-primary", "fingerprint": "289959644d03017e", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/straico/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1a2e9e733316d774", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/octopush-sms/package.json"}, "properties": {"repobilityId": "c8a45147d17e9178", "scanner": "scanner-primary", "fingerprint": "1a2e9e733316d774", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/octopush-sms/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c6bccb909158cf45", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/lemon-squeezy/package.json"}, "properties": {"repobilityId": "0ba5f1ef92ee68d0", "scanner": "scanner-primary", "fingerprint": "c6bccb909158cf45", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/lemon-squeezy/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a7c19e7e259d51ab", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/strale/package.json"}, "properties": {"repobilityId": "f77f2fec6dfe25f0", "scanner": "scanner-primary", "fingerprint": "a7c19e7e259d51ab", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/strale/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-761c63b03b398746", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/claude/package.json"}, "properties": {"repobilityId": "df242acad846cc3b", "scanner": "scanner-primary", "fingerprint": "761c63b03b398746", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/claude/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3a84078c2da4a736", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/clockodo/package.json"}, "properties": {"repobilityId": "324c69efcd8c2d11", "scanner": "scanner-primary", "fingerprint": "3a84078c2da4a736", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/clockodo/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8db4e3a823fd5613", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/emailoctopus/package.json"}, "properties": {"repobilityId": "b028f0a3606d4503", "scanner": "scanner-primary", "fingerprint": "8db4e3a823fd5613", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/emailoctopus/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f83b0c7b5e93545d", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/jungle-grid/package.json"}, "properties": {"repobilityId": "d498ca356b82a1a2", "scanner": "scanner-primary", "fingerprint": "f83b0c7b5e93545d", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/jungle-grid/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-aff6a910f7dc97df", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/agentx/package.json"}, "properties": {"repobilityId": "eaeab46109780314", "scanner": "scanner-primary", "fingerprint": "aff6a910f7dc97df", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/agentx/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0f94cacead51c6c7", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/gitlab/package.json"}, "properties": {"repobilityId": "68a1d5dd6dfd1eb6", "scanner": "scanner-primary", "fingerprint": "0f94cacead51c6c7", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/gitlab/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d2b271c0b0debafc", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/webflow/package.json"}, "properties": {"repobilityId": "4a0e1cc8981946ba", "scanner": "scanner-primary", "fingerprint": "d2b271c0b0debafc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/webflow/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a0c61b02db228de3", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/influencers-club/package.json"}, "properties": {"repobilityId": "64dfac0e138536c9", "scanner": "scanner-primary", "fingerprint": "a0c61b02db228de3", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/influencers-club/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-56995ad90ff5decc", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/tiny-talk-ai/package.json"}, "properties": {"repobilityId": "3217210098fa952e", "scanner": "scanner-primary", "fingerprint": "56995ad90ff5decc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/tiny-talk-ai/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e356ca19901ed7f0", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/mattermost/package.json"}, "properties": {"repobilityId": "a777d99e82269430", "scanner": "scanner-primary", "fingerprint": "e356ca19901ed7f0", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/mattermost/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5768c0f919610c4c", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/dashworks/package.json"}, "properties": {"repobilityId": "05b187c01db195d9", "scanner": "scanner-primary", "fingerprint": "5768c0f919610c4c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/dashworks/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-91321ac859c200ad", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/microsoft-onedrive/package.json"}, "properties": {"repobilityId": "5fe6fd1a68bd3962", "scanner": "scanner-primary", "fingerprint": "91321ac859c200ad", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/microsoft-onedrive/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4023b4ab1cc957c7", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/glide/package.json"}, "properties": {"repobilityId": "4f9b323449b291b9", "scanner": "scanner-primary", "fingerprint": "4023b4ab1cc957c7", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/glide/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3b772cf38bdd5017", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/visible/package.json"}, "properties": {"repobilityId": "150d94ec5b661f89", "scanner": "scanner-primary", "fingerprint": "3b772cf38bdd5017", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/visible/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8b40bbd69009f369", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/pdfcrowd/package.json"}, "properties": {"repobilityId": "d3c71c3325293e84", "scanner": "scanner-primary", "fingerprint": "8b40bbd69009f369", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/pdfcrowd/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c9f47fc8588dca8e", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/ampeco/package.json"}, "properties": {"repobilityId": "fdbc9be86549a9b3", "scanner": "scanner-primary", "fingerprint": "c9f47fc8588dca8e", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/ampeco/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-35a743c9f7838b54", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/useinbox/package.json"}, "properties": {"repobilityId": "7007676cabc7d3c7", "scanner": "scanner-primary", "fingerprint": "35a743c9f7838b54", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/useinbox/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2335124cba5ac7cd", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/uptimerobot/package.json"}, "properties": {"repobilityId": "d6135b2f67b2d22a", "scanner": "scanner-primary", "fingerprint": "2335124cba5ac7cd", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/uptimerobot/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-24df02d4d96d2c3a", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/simplepdf/package.json"}, "properties": {"repobilityId": "3e3baede53ddc018", "scanner": "scanner-primary", "fingerprint": "24df02d4d96d2c3a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/simplepdf/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-114ed9d1e8709662", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/microsoft-onenote/package.json"}, "properties": {"repobilityId": "69def6b82e59eb27", "scanner": "scanner-primary", "fingerprint": "114ed9d1e8709662", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/microsoft-onenote/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ad843f948a995130", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/guidelite/package.json"}, "properties": {"repobilityId": "a35311a58426a1a6", "scanner": "scanner-primary", "fingerprint": "ad843f948a995130", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/guidelite/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-43fb5c48572fa9ce", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/linkedin/package.json"}, "properties": {"repobilityId": "c122cdedf9e0631c", "scanner": "scanner-primary", "fingerprint": "43fb5c48572fa9ce", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/linkedin/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e6475a4931ea2c7b", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/linear/package.json"}, "properties": {"repobilityId": "73446e10933619ba", "scanner": "scanner-primary", "fingerprint": "e6475a4931ea2c7b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/linear/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-87ee3b35085950d5", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/microsoft-teams/package.json"}, "properties": {"repobilityId": "e081e57debe7f814", "scanner": "scanner-primary", "fingerprint": "87ee3b35085950d5", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/microsoft-teams/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0928f4b0326a69a1", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/contiguity/package.json"}, "properties": {"repobilityId": "4c40f5565ad693ec", "scanner": "scanner-primary", "fingerprint": "0928f4b0326a69a1", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/contiguity/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ddbd40655c49b5fd", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/shopify/package.json"}, "properties": {"repobilityId": "974c2c64a4506c81", "scanner": "scanner-primary", "fingerprint": "ddbd40655c49b5fd", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/shopify/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8de7013a954dcf57", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/apitable/package.json"}, "properties": {"repobilityId": "9ba6f074b99fa0b9", "scanner": "scanner-primary", "fingerprint": "8de7013a954dcf57", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/apitable/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-611efca200d2defb", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/oncehub/package.json"}, "properties": {"repobilityId": "b53c5e5f30ba4f61", "scanner": "scanner-primary", "fingerprint": "611efca200d2defb", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/oncehub/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-554afe97841f622a", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/recall-ai/package.json"}, "properties": {"repobilityId": "7806eb992e4b5359", "scanner": "scanner-primary", "fingerprint": "554afe97841f622a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/recall-ai/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3f4f668f7016ea09", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/google-calendar/package.json"}, "properties": {"repobilityId": "fcd2ac3d476bda3e", "scanner": "scanner-primary", "fingerprint": "3f4f668f7016ea09", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/google-calendar/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-375896cd0b412652", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/bettermode/package.json"}, "properties": {"repobilityId": "947bc86e4b11c9d9", "scanner": "scanner-primary", "fingerprint": "375896cd0b412652", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/bettermode/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5dfda908e2e880d2", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/google-vertexai/package.json"}, "properties": {"repobilityId": "af47051cc4f4ba71", "scanner": "scanner-primary", "fingerprint": "5dfda908e2e880d2", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/google-vertexai/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-61530316f4493766", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/actualbudget/package.json"}, "properties": {"repobilityId": "460aa5764db8472c", "scanner": "scanner-primary", "fingerprint": "61530316f4493766", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/actualbudget/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1b62cf848490212f", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/ashby/package.json"}, "properties": {"repobilityId": "0e508364611d5162", "scanner": "scanner-primary", "fingerprint": "1b62cf848490212f", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/ashby/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f7a6ad07504067ea", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/clearout/package.json"}, "properties": {"repobilityId": "6d8605265756e561", "scanner": "scanner-primary", "fingerprint": "f7a6ad07504067ea", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/clearout/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e8147f9a6f64420d", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/teable/package.json"}, "properties": {"repobilityId": "68f64f4c750aa497", "scanner": "scanner-primary", "fingerprint": "e8147f9a6f64420d", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/teable/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-10afa39189f40326", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/mycase-piece/package.json"}, "properties": {"repobilityId": "7e1c6b0cd74aa783", "scanner": "scanner-primary", "fingerprint": "10afa39189f40326", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/mycase-piece/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0cbf68d0193a46b2", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/anyhook-websocket/package.json"}, "properties": {"repobilityId": "41cb5137c75d7525", "scanner": "scanner-primary", "fingerprint": "0cbf68d0193a46b2", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/anyhook-websocket/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a2d4fd6d673cf383", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/pushbullet/package.json"}, "properties": {"repobilityId": "0580c3ada67cbc47", "scanner": "scanner-primary", "fingerprint": "a2d4fd6d673cf383", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/pushbullet/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4808971de622c008", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/tableau/package.json"}, "properties": {"repobilityId": "58c81c2747bfa3d8", "scanner": "scanner-primary", "fingerprint": "4808971de622c008", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/tableau/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2a12b1c417e40320", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/close/package.json"}, "properties": {"repobilityId": "fcf23ab66bbd1796", "scanner": "scanner-primary", "fingerprint": "2a12b1c417e40320", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/close/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6c93e36f0b314e07", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/hystruct/package.json"}, "properties": {"repobilityId": "a342a326c7181477", "scanner": "scanner-primary", "fingerprint": "6c93e36f0b314e07", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/hystruct/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-31be745d659e96aa", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/proxycurl/package.json"}, "properties": {"repobilityId": "4b339f78b55d2a9a", "scanner": "scanner-primary", "fingerprint": "31be745d659e96aa", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/proxycurl/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e7e276eb245fb7d1", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/returning-ai/package.json"}, "properties": {"repobilityId": "d7c13e5cb4ea8bb8", "scanner": "scanner-primary", "fingerprint": "e7e276eb245fb7d1", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/returning-ai/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8c2715085c03db4d", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/simplybookme/package.json"}, "properties": {"repobilityId": "6c3759efefb49feb", "scanner": "scanner-primary", "fingerprint": "8c2715085c03db4d", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/simplybookme/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-618b7e01b2c94255", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/community/surveytale/package.json"}, "properties": {"repobilityId": "a210b39a456546de", "scanner": "scanner-primary", "fingerprint": "618b7e01b2c94255", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/community/surveytale/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-241249330a9f01f1", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/core/crypto/package.json"}, "properties": {"repobilityId": "9da2901615c38d03", "scanner": "scanner-primary", "fingerprint": "241249330a9f01f1", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/core/crypto/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9feef3e141f46a94", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/core/sftp/package.json"}, "properties": {"repobilityId": "a6104e46cb9c33a7", "scanner": "scanner-primary", "fingerprint": "9feef3e141f46a94", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/core/sftp/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7f3b85a92098b2e0", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/core/text-helper/package.json"}, "properties": {"repobilityId": "2b14e715f5267e4f", "scanner": "scanner-primary", "fingerprint": "7f3b85a92098b2e0", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/core/text-helper/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8c625f882db2429a", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/core/delay/package.json"}, "properties": {"repobilityId": "d6317d8f3518a30e", "scanner": "scanner-primary", "fingerprint": "8c625f882db2429a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/core/delay/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b684dad3c3107feb", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/core/pdf/package.json"}, "properties": {"repobilityId": "a4aedce11e2007aa", "scanner": "scanner-primary", "fingerprint": "b684dad3c3107feb", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/core/pdf/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d3606cb3113d25be", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/core/manual-trigger/package.json"}, "properties": {"repobilityId": "ef10d5f244119806", "scanner": "scanner-primary", "fingerprint": "d3606cb3113d25be", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/core/manual-trigger/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7e237ca68dcb7ab3", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/core/csv/package.json"}, "properties": {"repobilityId": "f6ce1b8f7e29100e", "scanner": "scanner-primary", "fingerprint": "7e237ca68dcb7ab3", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/core/csv/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6256bd69e0e4f3f4", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/core/forms/package.json"}, "properties": {"repobilityId": "cc04072247e4abe6", "scanner": "scanner-primary", "fingerprint": "6256bd69e0e4f3f4", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/core/forms/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2e9589d317243860", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/core/qrcode/package.json"}, "properties": {"repobilityId": "f969454c608c9d05", "scanner": "scanner-primary", "fingerprint": "2e9589d317243860", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/core/qrcode/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-fd71a625f7bf7a58", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/core/approval/package.json"}, "properties": {"repobilityId": "79b167dd06f4a6cf", "scanner": "scanner-primary", "fingerprint": "fd71a625f7bf7a58", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/core/approval/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-83a5b05a1778d7e7", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/core/data-mapper/package.json"}, "properties": {"repobilityId": "caa5c264a4f4f35a", "scanner": "scanner-primary", "fingerprint": "83a5b05a1778d7e7", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/core/data-mapper/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-73ffd9ba487481c1", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/core/smtp/package.json"}, "properties": {"repobilityId": "f89a416d50ed5e97", "scanner": "scanner-primary", "fingerprint": "73ffd9ba487481c1", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/core/smtp/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-90f11e84f65e45fe", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/core/date-helper/package.json"}, "properties": {"repobilityId": "0d60a66824df012c", "scanner": "scanner-primary", "fingerprint": "90f11e84f65e45fe", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/core/date-helper/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f774ec509aee4756", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/core/subflows/package.json"}, "properties": {"repobilityId": "ea0d2ff057882782", "scanner": "scanner-primary", "fingerprint": "f774ec509aee4756", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/core/subflows/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e5416587dd35c42b", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/core/connections/package.json"}, "properties": {"repobilityId": "3d96f919ae0561b7", "scanner": "scanner-primary", "fingerprint": "e5416587dd35c42b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/core/connections/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e6c84952d461d936", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/core/math-helper/package.json"}, "properties": {"repobilityId": "2ea1cb8818b15d61", "scanner": "scanner-primary", "fingerprint": "e6c84952d461d936", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/core/math-helper/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-12f3790160a01279", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/core/tags/package.json"}, "properties": {"repobilityId": "02af230e09740d00", "scanner": "scanner-primary", "fingerprint": "12f3790160a01279", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/core/tags/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b90c719d45522aca", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/core/xml/package.json"}, "properties": {"repobilityId": "e6251ea4cb412b93", "scanner": "scanner-primary", "fingerprint": "b90c719d45522aca", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/core/xml/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8cf19c9d6e9fd007", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/core/store/package.json"}, "properties": {"repobilityId": "88e314ce1e069598", "scanner": "scanner-primary", "fingerprint": "8cf19c9d6e9fd007", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/core/store/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4a7c273dbf4161dc", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/core/schedule/package.json"}, "properties": {"repobilityId": "9be90d9cb65d701e", "scanner": "scanner-primary", "fingerprint": "4a7c273dbf4161dc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/core/schedule/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-100a216894d1107a", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/core/tables/package.json"}, "properties": {"repobilityId": "b5b8b89fbf30838e", "scanner": "scanner-primary", "fingerprint": "100a216894d1107a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/core/tables/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4c0ce65341b42638", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/core/file-helper/package.json"}, "properties": {"repobilityId": "654606c5f8ad4032", "scanner": "scanner-primary", "fingerprint": "4c0ce65341b42638", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/core/file-helper/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-47ec1e7d0abb1baf", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/core/graphql/package.json"}, "properties": {"repobilityId": "7fe9af9f8a0e14a7", "scanner": "scanner-primary", "fingerprint": "47ec1e7d0abb1baf", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/core/graphql/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9c2e84e928a2d461", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/core/data-summarizer/package.json"}, "properties": {"repobilityId": "0571264b439ac53f", "scanner": "scanner-primary", "fingerprint": "9c2e84e928a2d461", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/core/data-summarizer/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ecd73145f5ba2e61", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/core/webhook/package.json"}, "properties": {"repobilityId": "5a3e822d7083a57b", "scanner": "scanner-primary", "fingerprint": "ecd73145f5ba2e61", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/core/webhook/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e4187f9d95597a53", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/core/image-helper/package.json"}, "properties": {"repobilityId": "85b5dcc38524ba2b", "scanner": "scanner-primary", "fingerprint": "e4187f9d95597a53", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/core/image-helper/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-dfecfb3416fddc68", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/core/http/package.json"}, "properties": {"repobilityId": "60dba83615bb9d99", "scanner": "scanner-primary", "fingerprint": "dfecfb3416fddc68", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/core/http/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-03c82a10e3c11be7", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/common/package.json"}, "properties": {"repobilityId": "4b0aaddc9f70daa6", "scanner": "scanner-primary", "fingerprint": "03c82a10e3c11be7", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/common/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3b4666b850492620", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/pieces/framework/package.json"}, "properties": {"repobilityId": "996a75be554a506c", "scanner": "scanner-primary", "fingerprint": "3b4666b850492620", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/pieces/framework/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-cdfcd3b64a3d186a", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/server/worker/package.json"}, "properties": {"repobilityId": "83b8060bc04ea67e", "scanner": "scanner-primary", "fingerprint": "cdfcd3b64a3d186a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/server/worker/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-fd074175edb33bb4", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/server/api/package.json"}, "properties": {"repobilityId": "62db272071aff470", "scanner": "scanner-primary", "fingerprint": "fd074175edb33bb4", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/server/api/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d9eed5bdc011fb80", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/server/utils/package.json"}, "properties": {"repobilityId": "e300ae424978cd30", "scanner": "scanner-primary", "fingerprint": "d9eed5bdc011fb80", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/server/utils/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0636a4349c508cd7", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/server/engine/package.json"}, "properties": {"repobilityId": "b39593ac2fd78c89", "scanner": "scanner-primary", "fingerprint": "0636a4349c508cd7", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/server/engine/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8c2e3196a4ef0cdd", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/cli/package.json"}, "properties": {"repobilityId": "2faf23490612d7a6", "scanner": "scanner-primary", "fingerprint": "8c2e3196a4ef0cdd", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/cli/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2699d5f16ae11282", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/shared/package.json"}, "properties": {"repobilityId": "37ac218a4ef9b430", "scanner": "scanner-primary", "fingerprint": "2699d5f16ae11282", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/shared/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a28850983a0b02d5", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/web/package.json"}, "properties": {"repobilityId": "8f313f0fe526a925", "scanner": "scanner-primary", "fingerprint": "a28850983a0b02d5", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/web/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b1797387beff57ea", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/tests-e2e/package.json"}, "properties": {"repobilityId": "8b1b7648d9f280f2", "scanner": "scanner-primary", "fingerprint": "b1797387beff57ea", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/tests-e2e/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-59269b813570052a", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: deploy/pulumi/package.json"}, "properties": {"repobilityId": "37ee4290afad0586", "scanner": "scanner-primary", "fingerprint": "59269b813570052a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "deploy/pulumi/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3ab5d313dda8e5f9", "level": "note", "message": {"text": "Debug logging residue appears in source files"}, "properties": {"repobilityId": "6413f1e8221d7a9a", "scanner": "scanner-primary", "fingerprint": "3ab5d313dda8e5f9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["debug", "cleanup", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-72b2a6250083a784", "level": "warning", "message": {"text": "Placeholder or mock-heavy implementation detected"}, "properties": {"repobilityId": "116458db3d981731", "scanner": "scanner-primary", "fingerprint": "72b2a6250083a784", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "incomplete", "generated-repo-pattern"]}}, {"ruleId": "scanner-2d0c7b7ab8f8aacf", "level": "warning", "message": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "properties": {"repobilityId": "2d80cb6b1167dfb6", "scanner": "scanner-primary", "fingerprint": "2d0c7b7ab8f8aacf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "critical-flow", "generated-repo-pattern"]}}, {"ruleId": "scanner-749d4bc1bd66df5f", "level": "warning", "message": {"text": "Agent instructions exist but release-hardening basics are missing"}, "properties": {"repobilityId": "0fcd96813cba20a9", "scanner": "scanner-primary", "fingerprint": "749d4bc1bd66df5f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-f369621a49264642", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/ee/embed-sdk/src/index.ts:612"}, "properties": {"repobilityId": "116bfe5191abacbe", "scanner": "scanner-primary", "fingerprint": "f369621a49264642", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-f0522bed0137287a", "level": "none", "message": {"text": "Commented-code block (5 lines) in packages/pieces/community/youtube/src/lib/triggers/new-video.trigger.ts:266"}, "properties": {"repobilityId": "a39cb9f5315292c5", "scanner": "scanner-primary", "fingerprint": "f0522bed0137287a", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-35592686dc167921", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/enrichlayer/src/lib/actions/get-person-profile.ts:150"}, "properties": {"repobilityId": "7d5631af2dbd4d04", "scanner": "scanner-primary", "fingerprint": "35592686dc167921", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-804c823f8162de9f", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/enrichlayer/src/lib/actions/get-school-profile.ts:38"}, "properties": {"repobilityId": "0a60ce691015671b", "scanner": "scanner-primary", "fingerprint": "804c823f8162de9f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-3857daea048f0a1e", "level": "none", "message": {"text": "Commented-code block (7 lines) in packages/pieces/community/canny/src/index.ts:30"}, "properties": {"repobilityId": "3aad65b3602416e3", "scanner": "scanner-primary", "fingerprint": "3857daea048f0a1e", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-c6d0582f87001bed", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/canny/src/lib/actions/list-posts.ts:76"}, "properties": {"repobilityId": "9f8e51b361d510b6", "scanner": "scanner-primary", "fingerprint": "c6d0582f87001bed", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-ac3bba2d33a70487", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/google-drive/src/lib/common/get-file-content.ts:13"}, "properties": {"repobilityId": "0888977b291f3c22", "scanner": "scanner-primary", "fingerprint": "ac3bba2d33a70487", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-2ee94e5aa7c29023", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/eth-name-service/src/lib/common/common.ts:25"}, "properties": {"repobilityId": "c43009f1b5cdd8f3", "scanner": "scanner-primary", "fingerprint": "2ee94e5aa7c29023", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-61664c348f6824bc", "level": "none", "message": {"text": "Commented-code block (5 lines) in packages/pieces/community/coda/src/lib/common/types.ts:46"}, "properties": {"repobilityId": "355833aeba51cab1", "scanner": "scanner-primary", "fingerprint": "61664c348f6824bc", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-c84358c20d9b7678", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/canva/src/lib/common/index.ts:302"}, "properties": {"repobilityId": "6a8ea367d191006d", "scanner": "scanner-primary", "fingerprint": "c84358c20d9b7678", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-ff637c68b650f63c", "level": "note", "message": {"text": "Legacy-named symbol `copy_v2` in packages/pieces/community/dropbox/src/lib/actions/copy-folder.ts:53"}, "properties": {"repobilityId": "c35ae7f60f624d86", "scanner": "scanner-primary", "fingerprint": "ff637c68b650f63c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-6c3271a45feb2df9", "level": "note", "message": {"text": "Legacy-named symbol `search_v2` in packages/pieces/community/dropbox/src/lib/actions/search.ts:104"}, "properties": {"repobilityId": "49b64ed05d0bb829", "scanner": "scanner-primary", "fingerprint": "6c3271a45feb2df9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-22c38fc64d632ff0", "level": "note", "message": {"text": "Legacy-named symbol `create_folder_v2` in packages/pieces/community/dropbox/src/lib/actions/create-new-folder.ts:38"}, "properties": {"repobilityId": "6429ee6bc47649a6", "scanner": "scanner-primary", "fingerprint": "22c38fc64d632ff0", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-7eed61f3be0c9f11", "level": "note", "message": {"text": "Legacy-named symbol `move_v2` in packages/pieces/community/dropbox/src/lib/actions/move-folder.ts:54"}, "properties": {"repobilityId": "d10d48c850431ea9", "scanner": "scanner-primary", "fingerprint": "7eed61f3be0c9f11", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-58542582205816fd", "level": "note", "message": {"text": "Legacy-named symbol `move_v2` in packages/pieces/community/dropbox/src/lib/actions/move-file.ts:52"}, "properties": {"repobilityId": "d52993262feea5e3", "scanner": "scanner-primary", "fingerprint": "58542582205816fd", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-38ead0385b9e8fea", "level": "note", "message": {"text": "Legacy-named symbol `copy_v2` in packages/pieces/community/dropbox/src/lib/actions/copy-file.ts:53"}, "properties": {"repobilityId": "4cbd82c95248b60a", "scanner": "scanner-primary", "fingerprint": "38ead0385b9e8fea", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-7418b2a7b049f975", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/clickup/src/lib/actions/tasks/filter-workspace-tasks.ts:62"}, "properties": {"repobilityId": "1ae8623fe560b183", "scanner": "scanner-primary", "fingerprint": "7418b2a7b049f975", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-86a9163608b0bedb", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/mailchimp/src/lib/actions/remove-subscriber-from-tag.ts:36"}, "properties": {"repobilityId": "6ea975f40276bd09", "scanner": "scanner-primary", "fingerprint": "86a9163608b0bedb", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-42d97633510032f8", "level": "none", "message": {"text": "Commented-code block (22 lines) in packages/pieces/community/pollybot-ai/src/lib/common/common.ts:34"}, "properties": {"repobilityId": "47cbd301a5e5fe85", "scanner": "scanner-primary", "fingerprint": "42d97633510032f8", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-3ea57cbb39a7c667", "level": "none", "message": {"text": "Commented-code block (7 lines) in packages/pieces/community/hubspot/src/lib/common/props.ts:141"}, "properties": {"repobilityId": "6639b4757514eb74", "scanner": "scanner-primary", "fingerprint": "3ea57cbb39a7c667", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-93813a302f98074c", "level": "note", "message": {"text": "Legacy-named symbol `locationDeprecated` in packages/pieces/community/lofty/src/lib/actions/update-lead.ts:102"}, "properties": {"repobilityId": "ae60aa1e0e567f8b", "scanner": "scanner-primary", "fingerprint": "93813a302f98074c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-26d494630c50f9db", "level": "note", "message": {"text": "Legacy-named symbol `locationDeprecated` in packages/pieces/community/lofty/src/lib/actions/create-lead.ts:100"}, "properties": {"repobilityId": "dca04b2f4ea72bb5", "scanner": "scanner-primary", "fingerprint": "26d494630c50f9db", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-7fad0fd715e3012f", "level": "none", "message": {"text": "Commented-code block (7 lines) in packages/pieces/community/azure-ad/src/lib/auth.ts:4"}, "properties": {"repobilityId": "38d3b1f01757207c", "scanner": "scanner-primary", "fingerprint": "7fad0fd715e3012f", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-bfdf89f2925e4879", "level": "none", "message": {"text": "Commented-code block (5 lines) in packages/pieces/community/slite/src/lib/common/client.ts:78"}, "properties": {"repobilityId": "3a7b8206cdfe14f5", "scanner": "scanner-primary", "fingerprint": "bfdf89f2925e4879", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-1af6ab98e0be58a7", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/splitwise/src/lib/common/api.ts:3"}, "properties": {"repobilityId": "8d30ef1c19991350", "scanner": "scanner-primary", "fingerprint": "1af6ab98e0be58a7", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-7206b547154cc5f7", "level": "none", "message": {"text": "Commented-code block (6 lines) in packages/pieces/community/coupa/src/lib/triggers/new-or-updated-object.ts:54"}, "properties": {"repobilityId": "bddeddcef4ea37ac", "scanner": "scanner-primary", "fingerprint": "7206b547154cc5f7", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-8f8217436916bca3", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/kustomer/src/lib/actions/get-custom-objects.ts:23"}, "properties": {"repobilityId": "c8a10cd95aa37c03", "scanner": "scanner-primary", "fingerprint": "8f8217436916bca3", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-3b312d8870654471", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/aminos/src/lib/actions/createUser.ts:44"}, "properties": {"repobilityId": "86132224f206e62a", "scanner": "scanner-primary", "fingerprint": "3b312d8870654471", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-aad91cfee5fd7db3", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/imap/src/lib/common/imap.ts:134"}, "properties": {"repobilityId": "962a06b2f047c569", "scanner": "scanner-primary", "fingerprint": "aad91cfee5fd7db3", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-ff9ef5fd2b6edbe5", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/sap-ariba/src/lib/actions/get-contract-workspace.ts:36"}, "properties": {"repobilityId": "8be45f6381a74985", "scanner": "scanner-primary", "fingerprint": "ff9ef5fd2b6edbe5", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-25aa7b9300897374", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/sap-ariba/src/lib/actions/search-contract-workspaces.ts:59"}, "properties": {"repobilityId": "a3cc9a2e6d03d945", "scanner": "scanner-primary", "fingerprint": "25aa7b9300897374", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-12dae5c809d5a81c", "level": "none", "message": {"text": "Commented-code block (5 lines) in packages/pieces/community/add-event/src/lib/common/client.ts:80"}, "properties": {"repobilityId": "43691e0354b0e38d", "scanner": "scanner-primary", "fingerprint": "12dae5c809d5a81c", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-fd882ec18f8a7ebc", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/confluence/src/lib/actions/list-comments.ts:64"}, "properties": {"repobilityId": "9bd8f25a8bb499d9", "scanner": "scanner-primary", "fingerprint": "fd882ec18f8a7ebc", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-e54411490b27214c", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/anyhook-graphql/src/lib/common/common.ts:21"}, "properties": {"repobilityId": "98e62ca9fc94de80", "scanner": "scanner-primary", "fingerprint": "e54411490b27214c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-ce7fd7dafb7d95ca", "level": "none", "message": {"text": "Commented-code block (12 lines) in packages/pieces/community/microsoft-copilot/src/lib/actions/chat-with-copilot.ts:31"}, "properties": {"repobilityId": "1277424ba8d427c0", "scanner": "scanner-primary", "fingerprint": "ce7fd7dafb7d95ca", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-4b71c86e7841ab71", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/mindee/src/lib/actions/predict-document.ts:82"}, "properties": {"repobilityId": "afbc65d8c31d14c1", "scanner": "scanner-primary", "fingerprint": "4b71c86e7841ab71", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-d6da72d1f461e8f0", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/invoiceninja/src/lib/actions/create-invoice.ts:193"}, "properties": {"repobilityId": "c85bfd92b4c9af5e", "scanner": "scanner-primary", "fingerprint": "d6da72d1f461e8f0", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-c96a8a764c23746c", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/invoiceninja/src/lib/actions/action-recurring.ts:72"}, "properties": {"repobilityId": "e266435e80fdd434", "scanner": "scanner-primary", "fingerprint": "c96a8a764c23746c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-ccb0913aceda1126", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/invoiceninja/src/lib/actions/create-recurring.ts:264"}, "properties": {"repobilityId": "822e60c2e9db7789", "scanner": "scanner-primary", "fingerprint": "ccb0913aceda1126", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-24cb4975e98ab6b5", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/supabase/src/lib/common/props.ts:25"}, "properties": {"repobilityId": "778b1888b97b31b4", "scanner": "scanner-primary", "fingerprint": "24cb4975e98ab6b5", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-b24aaa8f58dae86e", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/supabase/src/lib/actions/update-row.ts:65"}, "properties": {"repobilityId": "fc39283cbd637aa4", "scanner": "scanner-primary", "fingerprint": "b24aaa8f58dae86e", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-a6c5478bac66a010", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/supabase/src/lib/actions/get-table-schema.ts:39"}, "properties": {"repobilityId": "88cad52ff38e99ca", "scanner": "scanner-primary", "fingerprint": "a6c5478bac66a010", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-7ab437f51e362cba", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/supabase/src/lib/actions/list-tables.ts:28"}, "properties": {"repobilityId": "51970a24942ab660", "scanner": "scanner-primary", "fingerprint": "7ab437f51e362cba", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-18fc54dcdf7e8d9b", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/supabase/src/lib/actions/delete-rows.ts:73"}, "properties": {"repobilityId": "4d3f8d1460655203", "scanner": "scanner-primary", "fingerprint": "18fc54dcdf7e8d9b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-bd248afe59a9696a", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/supabase/src/lib/actions/upsert-row.ts:64"}, "properties": {"repobilityId": "344b8afec51bcbf0", "scanner": "scanner-primary", "fingerprint": "bd248afe59a9696a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-0098a39592c37fa9", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/reddit/src/lib/actions/retrieve-reddit-post.ts:39"}, "properties": {"repobilityId": "2e6d4c91f273fbb2", "scanner": "scanner-primary", "fingerprint": "0098a39592c37fa9", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-829f8ce11f2709f1", "level": "none", "message": {"text": "Commented-code block (14 lines) in packages/pieces/community/convertkit/src/lib/common/tags/index.ts:226"}, "properties": {"repobilityId": "0c73cdbe429ab8f4", "scanner": "scanner-primary", "fingerprint": "829f8ce11f2709f1", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-a0c5ff0ec173522a", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/convertkit/src/lib/actions/purchases.ts:320"}, "properties": {"repobilityId": "d7aae17595e9e145", "scanner": "scanner-primary", "fingerprint": "a0c5ff0ec173522a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-4898b5c4a7864df6", "level": "none", "message": {"text": "Commented-code block (5 lines) in packages/pieces/community/simplyprint/src/lib/trigger/samples.ts:1"}, "properties": {"repobilityId": "442a32406ab10f51", "scanner": "scanner-primary", "fingerprint": "4898b5c4a7864df6", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-e06010661bb26170", "level": "none", "message": {"text": "Commented-code block (5 lines) in packages/pieces/community/simplyprint/src/lib/trigger/factory.ts:25"}, "properties": {"repobilityId": "a37dc1316023b8cd", "scanner": "scanner-primary", "fingerprint": "e06010661bb26170", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-7716bf1f5cb5ebbb", "level": "none", "message": {"text": "Commented-code block (6 lines) in packages/pieces/community/simplyprint/src/lib/common/chunked-upload.ts:5"}, "properties": {"repobilityId": "b0b467dd1d89371d", "scanner": "scanner-primary", "fingerprint": "7716bf1f5cb5ebbb", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-319f4303e9cf71b8", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/simplyprint/src/lib/common/chunked-upload.ts:117"}, "properties": {"repobilityId": "5a9a71b8125b8f7a", "scanner": "scanner-primary", "fingerprint": "319f4303e9cf71b8", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-f61c36727abd7cbb", "level": "none", "message": {"text": "Commented-code block (6 lines) in packages/pieces/community/simplyprint/src/lib/common/files.ts:12"}, "properties": {"repobilityId": "015bf42d1016caaf", "scanner": "scanner-primary", "fingerprint": "f61c36727abd7cbb", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-ff64fc05b0508d7c", "level": "none", "message": {"text": "Commented-code block (5 lines) in packages/pieces/community/simplyprint/src/lib/common/props.ts:21"}, "properties": {"repobilityId": "0bc2ba8eabaa2d98", "scanner": "scanner-primary", "fingerprint": "ff64fc05b0508d7c", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-9e51637f1c68945d", "level": "none", "message": {"text": "Commented-code block (8 lines) in packages/pieces/community/simplyprint/src/lib/actions/assign-tag.ts:71"}, "properties": {"repobilityId": "76f1513246c345b9", "scanner": "scanner-primary", "fingerprint": "9e51637f1c68945d", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-70d1c5de56ba8f66", "level": "none", "message": {"text": "Commented-code block (5 lines) in packages/pieces/community/simplyprint/src/lib/actions/deny-queue-item.ts:36"}, "properties": {"repobilityId": "0524b3d12d34419e", "scanner": "scanner-primary", "fingerprint": "70d1c5de56ba8f66", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-794ed0b32246bdfb", "level": "none", "message": {"text": "Commented-code block (5 lines) in packages/pieces/community/simplyprint/src/lib/actions/assign-filament.ts:56"}, "properties": {"repobilityId": "dd8a6867f0e1f686", "scanner": "scanner-primary", "fingerprint": "794ed0b32246bdfb", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-ae93fcc354ea1911", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/simplyprint/src/lib/actions/download-file.ts:11"}, "properties": {"repobilityId": "4eddcc22d6c6896d", "scanner": "scanner-primary", "fingerprint": "ae93fcc354ea1911", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-02e485a96255edf6", "level": "none", "message": {"text": "Commented-code block (5 lines) in packages/pieces/community/simplyprint/src/lib/actions/list-printers.ts:33"}, "properties": {"repobilityId": "db0f722a98e4a59a", "scanner": "scanner-primary", "fingerprint": "02e485a96255edf6", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-2433b76ef8262486", "level": "none", "message": {"text": "Commented-code block (5 lines) in packages/pieces/community/simplyprint/src/lib/actions/get-statistics.ts:20"}, "properties": {"repobilityId": "cef8c029a59b5d4f", "scanner": "scanner-primary", "fingerprint": "2433b76ef8262486", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-7decec18014cc2f2", "level": "none", "message": {"text": "Commented-code block (5 lines) in packages/pieces/community/simplyprint/src/lib/actions/get-filament.ts:28"}, "properties": {"repobilityId": "1bbe71a460e3bf8f", "scanner": "scanner-primary", "fingerprint": "7decec18014cc2f2", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-8a566b0658e89f15", "level": "none", "message": {"text": "Commented-code block (5 lines) in packages/pieces/community/simplyprint/src/lib/actions/list-queue.ts:42"}, "properties": {"repobilityId": "696541b4f5b4ce6e", "scanner": "scanner-primary", "fingerprint": "8a566b0658e89f15", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-9431a517b9115b5b", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/bluesky/src/lib/actions/create-post.ts:125"}, "properties": {"repobilityId": "b3f7f2a44bc74741", "scanner": "scanner-primary", "fingerprint": "9431a517b9115b5b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-b7021d9deceb1e18", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/pinecone/src/lib/actions/get-vector.ts:30"}, "properties": {"repobilityId": "762fec00a521bc9f", "scanner": "scanner-primary", "fingerprint": "b7021d9deceb1e18", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-7918a747c6539e4e", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/discord/src/lib/triggers/new-member.ts:65"}, "properties": {"repobilityId": "2e21c968d7490563", "scanner": "scanner-primary", "fingerprint": "7918a747c6539e4e", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-ece0e005b8043da3", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/chartly/src/lib/actions/get-chart.ts:38"}, "properties": {"repobilityId": "8549905e2ecd1a9e", "scanner": "scanner-primary", "fingerprint": "ece0e005b8043da3", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-de022b51ad848082", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/chartly/src/lib/actions/create-chart.ts:153"}, "properties": {"repobilityId": "d6f5beb5068ac315", "scanner": "scanner-primary", "fingerprint": "de022b51ad848082", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-2da4de7ee5ef4f6e", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/goodmem/src/lib/actions/get-memory.ts:16"}, "properties": {"repobilityId": "3ae4c77f51428b9e", "scanner": "scanner-primary", "fingerprint": "2da4de7ee5ef4f6e", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-9ad9a76df8429c9a", "level": "none", "message": {"text": "Commented-code block (5 lines) in packages/pieces/community/front/src/lib/actions/find-account.ts:63"}, "properties": {"repobilityId": "8cd4f801125740fd", "scanner": "scanner-primary", "fingerprint": "9ad9a76df8429c9a", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-d7011fa04c3413b8", "level": "note", "message": {"text": "Legacy-named symbol `dealEntersStage_previous_stages_v2` in packages/pieces/community/zendesk-sell/src/lib/triggers/deal_enters_stage.ts:12"}, "properties": {"repobilityId": "c8bc2aa0f769b9f0", "scanner": "scanner-primary", "fingerprint": "d7011fa04c3413b8", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-1be7c710ca687220", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/flowise/src/index.ts:71"}, "properties": {"repobilityId": "f197cf52b0f7a4b2", "scanner": "scanner-primary", "fingerprint": "1be7c710ca687220", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-c71e1e0cbcf0115a", "level": "note", "message": {"text": "Legacy-named symbol `send_copy` in packages/pieces/community/xero/src/lib/actions/create-repeating-sales-invoice.ts:99"}, "properties": {"repobilityId": "d9a850ffa3971683", "scanner": "scanner-primary", "fingerprint": "c71e1e0cbcf0115a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-e4898d41d2e412bc", "level": "none", "message": {"text": "Commented-code block (5 lines) in packages/pieces/community/apitemplate-io/src/lib/common/client.ts:86"}, "properties": {"repobilityId": "786d2ad9b7052e59", "scanner": "scanner-primary", "fingerprint": "e4898d41d2e412bc", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-34e1c072d0715b93", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/youtrack/src/lib/actions/download-attachment.ts:34"}, "properties": {"repobilityId": "c9c74ea829d65302", "scanner": "scanner-primary", "fingerprint": "34e1c072d0715b93", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-2177d715e032bbfb", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/lusha/src/lib/actions/companies/enrich.ts:32"}, "properties": {"repobilityId": "3948aa1331946c27", "scanner": "scanner-primary", "fingerprint": "2177d715e032bbfb", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-07b7021526a80125", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/lusha/src/lib/actions/companies/search.ts:69"}, "properties": {"repobilityId": "5125bede89d29ef1", "scanner": "scanner-primary", "fingerprint": "07b7021526a80125", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-a5fadd0036dd8b47", "level": "note", "message": {"text": "Legacy-named symbol `is_deprecated` in packages/pieces/community/vimeo/src/lib/triggers/new-video-by-search.ts:161"}, "properties": {"repobilityId": "f16e8ff35eee4a17", "scanner": "scanner-primary", "fingerprint": "a5fadd0036dd8b47", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-f91c98f8c7d4d929", "level": "note", "message": {"text": "Legacy-named symbol `amount_unused` in packages/pieces/community/chargebee/src/lib/triggers/payment-succeeded.ts:35"}, "properties": {"repobilityId": "a77be98db630719b", "scanner": "scanner-primary", "fingerprint": "f91c98f8c7d4d929", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-2f0b214cb9672f79", "level": "note", "message": {"text": "Legacy-named symbol `amount_unused` in packages/pieces/community/chargebee/src/lib/triggers/payment-failed.ts:36"}, "properties": {"repobilityId": "30275d9960280091", "scanner": "scanner-primary", "fingerprint": "2f0b214cb9672f79", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-fb6b6b9e2a292392", "level": "none", "message": {"text": "Commented-code block (6 lines) in packages/pieces/community/zoho-bookings/src/lib/common/index.ts:148"}, "properties": {"repobilityId": "65b251d9ce3cd3a2", "scanner": "scanner-primary", "fingerprint": "fb6b6b9e2a292392", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-84d694ef2d8a73f0", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/ai/src/lib/common/ai-sdk.ts:138"}, "properties": {"repobilityId": "c043047d0a0be77c", "scanner": "scanner-primary", "fingerprint": "84d694ef2d8a73f0", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-9a34db646578fbb2", "level": "none", "message": {"text": "Commented-code block (12 lines) in packages/pieces/community/microsoft-excel-365/src/lib/actions/append-multiple-rows.ts:54"}, "properties": {"repobilityId": "b48db2332eeeba81", "scanner": "scanner-primary", "fingerprint": "9a34db646578fbb2", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-92399e034abd72f8", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/facebook-pages/src/lib/actions/create-video-post.ts:11"}, "properties": {"repobilityId": "495e47f5d14048a7", "scanner": "scanner-primary", "fingerprint": "92399e034abd72f8", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-e6749c9fa50903f2", "level": "none", "message": {"text": "Commented-code block (7 lines) in packages/pieces/community/webflow/src/lib/actions/refund-order.ts:17"}, "properties": {"repobilityId": "33216860a23157ff", "scanner": "scanner-primary", "fingerprint": "e6749c9fa50903f2", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-25e0adb060bfc21a", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/tiny-talk-ai/src/lib/actions/ask-bot.ts:25"}, "properties": {"repobilityId": "7509b4231df54ff1", "scanner": "scanner-primary", "fingerprint": "25e0adb060bfc21a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-23c5507a45dd42fb", "level": "note", "message": {"text": "Legacy-named symbol `no_copy` in packages/pieces/community/pdfcrowd/src/lib/actions/url-to-pdf.ts:460"}, "properties": {"repobilityId": "8fae76234652c8d3", "scanner": "scanner-primary", "fingerprint": "23c5507a45dd42fb", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-9e36c365d7a2ff49", "level": "note", "message": {"text": "Legacy-named symbol `no_copy` in packages/pieces/community/pdfcrowd/src/lib/actions/html-to-pdf.ts:460"}, "properties": {"repobilityId": "a14fd0292591ccaa", "scanner": "scanner-primary", "fingerprint": "9e36c365d7a2ff49", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-e08c41deb5130352", "level": "note", "message": {"text": "Legacy-named symbol `nDeprecated` in packages/pieces/community/ampeco/src/lib/actions/resources/charge-points/charge-point-create.ts:119"}, "properties": {"repobilityId": "97126c59b4b38aa2", "scanner": "scanner-primary", "fingerprint": "e08c41deb5130352", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-68d050db702fc8da", "level": "note", "message": {"text": "Legacy-named symbol `nDeprecated` in packages/pieces/community/ampeco/src/lib/actions/resources/charge-points/charge-point-update.ts:130"}, "properties": {"repobilityId": "bd2b87230409b103", "scanner": "scanner-primary", "fingerprint": "68d050db702fc8da", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-838852fc26c2608d", "level": "none", "message": {"text": "Commented-code block (34 lines) in packages/pieces/community/useinbox/src/lib/common/props.ts:364"}, "properties": {"repobilityId": "656d201a45038a97", "scanner": "scanner-primary", "fingerprint": "838852fc26c2608d", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-07217c2aebafd8e6", "level": "none", "message": {"text": "Commented-code block (6 lines) in packages/pieces/community/useinbox/src/lib/actions/update-contact.ts:56"}, "properties": {"repobilityId": "57de695c7932f448", "scanner": "scanner-primary", "fingerprint": "07217c2aebafd8e6", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-145eb6f83555e1c9", "level": "none", "message": {"text": "Commented-code block (8 lines) in packages/pieces/community/useinbox/src/lib/actions/add-contact-to-list.ts:50"}, "properties": {"repobilityId": "c45012d7986711fc", "scanner": "scanner-primary", "fingerprint": "145eb6f83555e1c9", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-2126ebc81be16fcc", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/linkedin/src/lib/common/index.ts:121"}, "properties": {"repobilityId": "bf7df7118982f2f3", "scanner": "scanner-primary", "fingerprint": "2126ebc81be16fcc", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-d8d6c4aa9b8193f7", "level": "none", "message": {"text": "Commented-code block (6 lines) in packages/pieces/community/linear/src/lib/common/props.ts:444"}, "properties": {"repobilityId": "286e1d7e1b49bc73", "scanner": "scanner-primary", "fingerprint": "d8d6c4aa9b8193f7", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-03660cb339fd3dde", "level": "none", "message": {"text": "Commented-code block (41 lines) in packages/pieces/community/recall-ai/src/lib/actions/create-bot.ts:26"}, "properties": {"repobilityId": "7fcabb29306e8901", "scanner": "scanner-primary", "fingerprint": "03660cb339fd3dde", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-ad161db1ab594e61", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/pieces/community/anyhook-websocket/src/lib/common/common.ts:21"}, "properties": {"repobilityId": "0c094fefbc96dd9e", "scanner": "scanner-primary", "fingerprint": "ad161db1ab594e61", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-d676b7a44e3b7006", "level": "none", "message": {"text": "Commented-code block (8 lines) in packages/pieces/framework/src/lib/context/versioning.ts:9"}, "properties": {"repobilityId": "3f2a1a794c0975df", "scanner": "scanner-primary", "fingerprint": "d676b7a44e3b7006", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-9aa1c4706a71ee58", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/server/worker/test/lib/worker.test.ts:507"}, "properties": {"repobilityId": "a3a53d9632991d63", "scanner": "scanner-primary", "fingerprint": "9aa1c4706a71ee58", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-99b34953bc3958d6", "level": "none", "message": {"text": "Commented-code block (5 lines) in packages/server/worker/test/lib/execute/create-sandbox-for-job.test.ts:233"}, "properties": {"repobilityId": "0708bd403d1705bf", "scanner": "scanner-primary", "fingerprint": "99b34953bc3958d6", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-f9ecb6aae7dbada2", "level": "none", "message": {"text": "Commented-code block (7 lines) in packages/server/worker/test/e2e/sandbox-real-third-party.e2e.test.ts:129"}, "properties": {"repobilityId": "a290571adf9a0056", "scanner": "scanner-primary", "fingerprint": "f9ecb6aae7dbada2", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-d791b7f549823d44", "level": "none", "message": {"text": "Commented-code block (6 lines) in packages/server/worker/test/e2e/fixtures/egress-probe.js:2"}, "properties": {"repobilityId": "73008a99222cdcc6", "scanner": "scanner-primary", "fingerprint": "d791b7f549823d44", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-8bfcaf16d67a8dbe", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/server/api/src/app/ee/license-keys/license-keys-service.ts:21"}, "properties": {"repobilityId": "36b3cd91cc836b0a", "scanner": "scanner-primary", "fingerprint": "8bfcaf16d67a8dbe", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-c384d1ccef09fa70", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/server/api/src/app/ee/authentication/federated-authn/google-authn-provider.ts:57"}, "properties": {"repobilityId": "beac65c376cbc3a1", "scanner": "scanner-primary", "fingerprint": "c384d1ccef09fa70", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-8c2619594a306c30", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/server/api/src/app/ee/platform/platform-plan/openrouter/openrouter-api.ts:10"}, "properties": {"repobilityId": "d950b88751491444", "scanner": "scanner-primary", "fingerprint": "8c2619594a306c30", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-621447c307b56a12", "level": "none", "message": {"text": "Commented-code block (5 lines) in packages/server/api/src/app/flows/flow-version/migrations/expression-rewriter.ts:33"}, "properties": {"repobilityId": "b9463e36413c7d2a", "scanner": "scanner-primary", "fingerprint": "621447c307b56a12", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-b2042395257d852d", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/server/api/src/app/pieces/piece-sync-service.ts:82"}, "properties": {"repobilityId": "511bffa2046d0a65", "scanner": "scanner-primary", "fingerprint": "b2042395257d852d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-82fb1134a07d26df", "level": "note", "message": {"text": "Legacy-named symbol `ai_provider_backup` in packages/server/api/src/app/database/migration/sqlite/1748824241409-AIProviderRefactorSqlite.ts:24"}, "properties": {"repobilityId": "b7348ac8f243d32b", "scanner": "scanner-primary", "fingerprint": "82fb1134a07d26df", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-4790fb5d9f0b6d79", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/server/api/src/app/template/community-templates.service.ts:15"}, "properties": {"repobilityId": "8949c7fcbff2a77d", "scanner": "scanner-primary", "fingerprint": "4790fb5d9f0b6d79", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-ebe34bff2c8eb526", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/server/api/src/app/template/template-telemetry/template-telemetry.service.ts:32"}, "properties": {"repobilityId": "21e68f225aa04f4f", "scanner": "scanner-primary", "fingerprint": "ebe34bff2c8eb526", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-fda7c649b432e8ee", "level": "none", "message": {"text": "Commented-code block (7 lines) in packages/server/api/test/unit/app/flows/migrations/expression-rewriter.test.ts:322"}, "properties": {"repobilityId": "fbee61e4a901c7fe", "scanner": "scanner-primary", "fingerprint": "fda7c649b432e8ee", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-6710f02a648551bc", "level": "none", "message": {"text": "Commented-code block (5 lines) in packages/server/api/test/integration/ce/flows/flow/error-handler.test.ts:19"}, "properties": {"repobilityId": "63bf35c54d613d2e", "scanner": "scanner-primary", "fingerprint": "6710f02a648551bc", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-e6b25400d6befcdc", "level": "none", "message": {"text": "Commented-code block (7 lines) in packages/server/engine/src/lib/engine-file-api.ts:87"}, "properties": {"repobilityId": "e8d22af8969d59d4", "scanner": "scanner-primary", "fingerprint": "e6b25400d6befcdc", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-a297030e404b020a", "level": "none", "message": {"text": "Commented-code block (5 lines) in packages/server/engine/src/lib/worker-socket.ts:55"}, "properties": {"repobilityId": "18b048e13b7b9bef", "scanner": "scanner-primary", "fingerprint": "a297030e404b020a", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-d13203c2ca76a733", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/server/engine/src/lib/handler/context/engine-constants.ts:230"}, "properties": {"repobilityId": "46910c38c7a2e320", "scanner": "scanner-primary", "fingerprint": "d13203c2ca76a733", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-603cdcfc3863d8dc", "level": "none", "message": {"text": "Commented-code block (6 lines) in packages/server/engine/src/lib/network/ssrf-guard.ts:20"}, "properties": {"repobilityId": "8354e17d8d53e02a", "scanner": "scanner-primary", "fingerprint": "603cdcfc3863d8dc", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-3f164222936593c0", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/server/engine/src/lib/piece-context/store.ts:42"}, "properties": {"repobilityId": "8f0e6c7cee79cd80", "scanner": "scanner-primary", "fingerprint": "3f164222936593c0", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-bbd9929431944a70", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/server/engine/src/lib/piece-context/flows.ts:12"}, "properties": {"repobilityId": "33830dd291f995b5", "scanner": "scanner-primary", "fingerprint": "bbd9929431944a70", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-330b14f915c5205a", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/server/engine/src/lib/piece-context/variable-resolver.ts:10"}, "properties": {"repobilityId": "e75b496899337a25", "scanner": "scanner-primary", "fingerprint": "330b14f915c5205a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-b2d2f9dd084047c8", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/server/engine/src/lib/piece-context/waitpoint-client.ts:5"}, "properties": {"repobilityId": "d0a89245dd1e3688", "scanner": "scanner-primary", "fingerprint": "b2d2f9dd084047c8", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-5b90c3f771a19c6a", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/server/engine/src/lib/piece-context/connection-resolver.ts:11"}, "properties": {"repobilityId": "4a1528cb3b3ed732", "scanner": "scanner-primary", "fingerprint": "5b90c3f771a19c6a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-5e8e71ccb67b7803", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/server/engine/src/lib/variables/processors/file.ts:40"}, "properties": {"repobilityId": "3123cb676c847360", "scanner": "scanner-primary", "fingerprint": "5e8e71ccb67b7803", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-7b3da2def94b0790", "level": "none", "message": {"text": "Commented-code block (5 lines) in packages/server/engine/src/lib/tools/index.ts:410"}, "properties": {"repobilityId": "8647640bb66b37b2", "scanner": "scanner-primary", "fingerprint": "7b3da2def94b0790", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-185f2d623c50cd0d", "level": "none", "message": {"text": "Commented-code block (5 lines) in packages/server/engine/src/lib/operations/flow.operation.ts:223"}, "properties": {"repobilityId": "90272f5160e94c17", "scanner": "scanner-primary", "fingerprint": "185f2d623c50cd0d", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-79e560ae760df829", "level": "none", "message": {"text": "Commented-code block (6 lines) in packages/server/engine/test/network/worker-socket.test.ts:40"}, "properties": {"repobilityId": "4463356d8308d58a", "scanner": "scanner-primary", "fingerprint": "79e560ae760df829", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-38aabfdfca9cb164", "level": "none", "message": {"text": "Commented-code block (5 lines) in packages/server/engine/test/operations/flow-operation-invariants.test.ts:244"}, "properties": {"repobilityId": "b56f4962747a9595", "scanner": "scanner-primary", "fingerprint": "38aabfdfca9cb164", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-a19b341c07d2903b", "level": "note", "message": {"text": "Legacy-named symbol `ap_sep_v1` in packages/shared/src/lib/ee/secret-managers/index.ts:237"}, "properties": {"repobilityId": "227f307c20fb1f28", "scanner": "scanner-primary", "fingerprint": "a19b341c07d2903b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-b16eaa1a5fe7ad41", "level": "none", "message": {"text": "Commented-code block (5 lines) in packages/shared/src/lib/automation/flows/operations/add-action-util.ts:32"}, "properties": {"repobilityId": "4cbd68f6fd196737", "scanner": "scanner-primary", "fingerprint": "b16eaa1a5fe7ad41", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-effeb51f497799ff", "level": "none", "message": {"text": "Commented-code block (6 lines) in packages/shared/src/lib/formula/formula-evaluator.ts:7"}, "properties": {"repobilityId": "c7c020bb4f80a239", "scanner": "scanner-primary", "fingerprint": "effeb51f497799ff", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-2c593cb756c3b729", "level": "none", "message": {"text": "Commented-code block (5 lines) in packages/shared/src/lib/formula/function-implementations.ts:12"}, "properties": {"repobilityId": "045a3aac8a3d2431", "scanner": "scanner-primary", "fingerprint": "2c593cb756c3b729", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-f8d40e97de4fa0df", "level": "none", "message": {"text": "Commented-code block (6 lines) in packages/shared/src/lib/core/common/utils/mustache-utils.ts:1"}, "properties": {"repobilityId": "13f179151252a01f", "scanner": "scanner-primary", "fingerprint": "f8d40e97de4fa0df", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-bd4cdbdade747597", "level": "none", "message": {"text": "Commented-code block (5 lines) in packages/web/src/app/builder/data-selector/utils-schema.ts:58"}, "properties": {"repobilityId": "3c85482abd475b97", "scanner": "scanner-primary", "fingerprint": "bd4cdbdade747597", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-c3316ee93b87679b", "level": "none", "message": {"text": "Commented-code block (5 lines) in packages/web/src/app/builder/data-selector/utils.ts:257"}, "properties": {"repobilityId": "f16ad3b1e222bda3", "scanner": "scanner-primary", "fingerprint": "c3316ee93b87679b", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-174fd2c1c4740bfe", "level": "none", "message": {"text": "Commented-code block (6 lines) in packages/web/src/app/builder/piece-properties/text-input-with-mentions/text-input-utils.ts:167"}, "properties": {"repobilityId": "7c313f96efbcfbf7", "scanner": "scanner-primary", "fingerprint": "174fd2c1c4740bfe", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-bdc33847440c2641", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/web/src/app/builder/flow-canvas/utils/flow-screenshot-utils.ts:275"}, "properties": {"repobilityId": "41a33e7c659fe1de", "scanner": "scanner-primary", "fingerprint": "bdc33847440c2641", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-a00af740a16776fd", "level": "none", "message": {"text": "Commented-code block (6 lines) in packages/web/src/components/custom/smart-output-viewer/output-field-row.tsx:214"}, "properties": {"repobilityId": "af8308464ef9b77c", "scanner": "scanner-primary", "fingerprint": "a00af740a16776fd", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-7ca72b6c322b2ec6", "level": "none", "message": {"text": "Commented-code block (5 lines) in packages/web/src/components/custom/smart-output-viewer/output-table-view.tsx:160"}, "properties": {"repobilityId": "d23b48665a516422", "scanner": "scanner-primary", "fingerprint": "7ca72b6c322b2ec6", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-e114162c1c8c0a58", "level": "note", "message": {"text": "Legacy-named symbol `projOld` in packages/web/src/features/projects/stores/projects-collection.test.ts:393"}, "properties": {"repobilityId": "1632dee30a9310ed", "scanner": "scanner-primary", "fingerprint": "e114162c1c8c0a58", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-c7113f7887e15795", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 tools/scripts/utils/piece-script-utils.ts:75"}, "properties": {"repobilityId": "433d541f603dc3ba", "scanner": "scanner-primary", "fingerprint": "c7113f7887e15795", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-f9e08b985a7f720a", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 tools/scripts/pieces/update-pieces-metadata.ts:21"}, "properties": {"repobilityId": "9f7429f213e341ec", "scanner": "scanner-primary", "fingerprint": "f9e08b985a7f720a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-98cfc3fff68ee3c1", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 tools/scripts/pieces/find-changed-pieces.ts:48"}, "properties": {"repobilityId": "17520443d5f7d1d7", "scanner": "scanner-primary", "fingerprint": "98cfc3fff68ee3c1", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-4d223bfdf539b12d", "level": "note", "message": {"text": "42 env vars used in code but missing from .env.example"}, "properties": {"repobilityId": "5bbbd2b50dcb630d", "scanner": "scanner-primary", "fingerprint": "4d223bfdf539b12d", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "config-drift"]}}, {"ruleId": "scanner-b8e8ed17581976d8", "level": "error", "message": {"text": "Dangling fetch: POST https://pastebin.com/api/ (packages/pieces/community/pastebin/src/lib/common/client.ts:54)"}, "properties": {"repobilityId": "473376f00e3372eb", "scanner": "scanner-primary", "fingerprint": "b8e8ed17581976d8", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "axios"]}}, {"ruleId": "scanner-39a33761c8928ebb", "level": "error", "message": {"text": "Dangling fetch: GET https://pastebin.com/raw/ (packages/pieces/community/pastebin/src/lib/common/client.ts:80)"}, "properties": {"repobilityId": "0ec90a27a5d321c2", "scanner": "scanner-primary", "fingerprint": "39a33761c8928ebb", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "axios"]}}, {"ruleId": "scanner-8272682284ce427a", "level": "error", "message": {"text": "Dangling fetch: GET https://www.googleapis.com/drive/v3/files/${fileId}?fields=mimeType&supportsAllDrives=true (packages/pieces/community/google-drive/src/lib/common/get-file-content.ts:13)"}, "properties": {"repobilityId": "230e07ea542769a5", "scanner": "scanner-primary", "fingerprint": "8272682284ce427a", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-8864d154b8b98dd6", "level": "error", "message": {"text": "Dangling fetch: GET https://secure.splitwise.com/api/v3.0/get_current_user (packages/pieces/community/splitwise/src/lib/auth.ts:14)"}, "properties": {"repobilityId": "1fab1a72dbac0895", "scanner": "scanner-primary", "fingerprint": "8864d154b8b98dd6", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-ca98109c6985d590", "level": "error", "message": {"text": "Dangling fetch: GET https://secure.splitwise.com/api/v3.0/get_categories (packages/pieces/community/splitwise/src/lib/common/api.ts:3)"}, "properties": {"repobilityId": "501bc0599aba3d5c", "scanner": "scanner-primary", "fingerprint": "ca98109c6985d590", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-597b91e45dbdc806", "level": "error", "message": {"text": "Dangling fetch: GET https://secure.splitwise.com/api/v3.0/get_groups (packages/pieces/community/splitwise/src/lib/common/api.ts:20)"}, "properties": {"repobilityId": "23330cfaf60a0c98", "scanner": "scanner-primary", "fingerprint": "597b91e45dbdc806", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-f16125783b660875", "level": "error", "message": {"text": "Dangling fetch: GET https://secure.splitwise.com/api/v3.0/get_expenses?${params} (packages/pieces/community/splitwise/src/lib/common/api.ts:42)"}, "properties": {"repobilityId": "8bcb2a16512a2883", "scanner": "scanner-primary", "fingerprint": "f16125783b660875", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-396de02db07c4ee6", "level": "error", "message": {"text": "Dangling fetch: POST https://secure.splitwise.com/api/v3.0/create_expense (packages/pieces/community/splitwise/src/lib/common/api.ts:59)"}, "properties": {"repobilityId": "e645f804a1c11051", "scanner": "scanner-primary", "fingerprint": "396de02db07c4ee6", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-23ec4ed9588b98cf", "level": "error", "message": {"text": "Dangling fetch: GET https://api.chartly.dev/v1/status (packages/pieces/community/chartly/src/lib/common/auth.ts:13)"}, "properties": {"repobilityId": "15fb18b3322a3b10", "scanner": "scanner-primary", "fingerprint": "23ec4ed9588b98cf", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-48377a4ecc1fd29e", "level": "error", "message": {"text": "Dangling fetch: GET https://api.chartly.dev/v1/chart/${chart_id.trim()} (packages/pieces/community/chartly/src/lib/actions/get-chart.ts:38)"}, "properties": {"repobilityId": "c24ff0de33b0e9f8", "scanner": "scanner-primary", "fingerprint": "48377a4ecc1fd29e", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-291a474e8f6d894d", "level": "error", "message": {"text": "Dangling fetch: POST https://api.chartly.dev/v1/chart (packages/pieces/community/chartly/src/lib/actions/create-chart.ts:153)"}, "properties": {"repobilityId": "6555643252541d8e", "scanner": "scanner-primary", "fingerprint": "291a474e8f6d894d", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-be91fa44773dbcff", "level": "error", "message": {"text": "Dangling fetch: GET https://api.instacharts.io/v1/templates (packages/pieces/community/insta-charts/src/lib/actions/generate-chart-image.ts:32)"}, "properties": {"repobilityId": "6dfe5b890091e5a0", "scanner": "scanner-primary", "fingerprint": "be91fa44773dbcff", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-f060be082da00bba", "level": "error", "message": {"text": "Dangling fetch: POST https://api.instacharts.io/v1/generate/image (packages/pieces/community/insta-charts/src/lib/actions/generate-chart-image.ts:159)"}, "properties": {"repobilityId": "6678f052a22703f8", "scanner": "scanner-primary", "fingerprint": "f060be082da00bba", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-c2891a847719f7d1", "level": "error", "message": {"text": "Dangling fetch: GET https://public.chainalysis.com/api/v1/address/${address} (packages/pieces/community/chainalysis-api/src/lib/actions/check-address-sanction.ts:24)"}, "properties": {"repobilityId": "b3d81b8bdd58d31a", "scanner": "scanner-primary", "fingerprint": "c2891a847719f7d1", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-675207f44b17104b", "level": "error", "message": {"text": "Dangling fetch: POST https://api.lusha.com/prospecting/company/enrich (packages/pieces/community/lusha/src/lib/actions/companies/enrich.ts:32)"}, "properties": {"repobilityId": "1a6e9e7aa50cee70", "scanner": "scanner-primary", "fingerprint": "675207f44b17104b", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-520f8c8d86ada738", "level": "error", "message": {"text": "Dangling fetch: POST https://api.lusha.com/prospecting/company/search (packages/pieces/community/lusha/src/lib/actions/companies/search.ts:69)"}, "properties": {"repobilityId": "e831424e1e76bba6", "scanner": "scanner-primary", "fingerprint": "520f8c8d86ada738", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-fa68488b3df7d18a", "level": "error", "message": {"text": "Dangling fetch: POST https://api.tinytalk.ai/v1/chat/completions (packages/pieces/community/tiny-talk-ai/src/lib/actions/ask-bot.ts:25)"}, "properties": {"repobilityId": "72c53a6c3abd33e0", "scanner": "scanner-primary", "fingerprint": "fa68488b3df7d18a", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-eb73368d5cd18aad", "level": "error", "message": {"text": "Dangling fetch: GET http://127.0.0.1:${healthPort}/v1/health (packages/server/worker/test/lib/worker.test.ts:494)"}, "properties": {"repobilityId": "b48d156483a0fbb6", "scanner": "scanner-primary", "fingerprint": "eb73368d5cd18aad", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-d7b2eb8a7ca07079", "level": "error", "message": {"text": "Dangling fetch: GET http://127.0.0.1:${healthPort}/v1/health (packages/server/worker/test/lib/worker.test.ts:507)"}, "properties": {"repobilityId": "2355efc77bb3bfe6", "scanner": "scanner-primary", "fingerprint": "d7b2eb8a7ca07079", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-09db99a70f88824c", "level": "error", "message": {"text": "Dangling fetch: GET http://127.0.0.1:${healthPort}/worker/health (packages/server/worker/test/lib/worker.test.ts:514)"}, "properties": {"repobilityId": "2ecb79ed60502d3f", "scanner": "scanner-primary", "fingerprint": "09db99a70f88824c", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-42e0f91bf183ca77", "level": "error", "message": {"text": "Dangling fetch: GET http://127.0.0.1:${healthPort}/api/v1/health (packages/server/worker/test/lib/worker.test.ts:521)"}, "properties": {"repobilityId": "ab3785f6226a30d2", "scanner": "scanner-primary", "fingerprint": "42e0f91bf183ca77", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-71ab81e23a3dca7f", "level": "error", "message": {"text": "Dangling fetch: GET http://127.0.0.1:${healthPort}/unknown (packages/server/worker/test/lib/worker.test.ts:528)"}, "properties": {"repobilityId": "70644300bf8ce179", "scanner": "scanner-primary", "fingerprint": "71ab81e23a3dca7f", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-63a191a19cdba82c", "level": "error", "message": {"text": "Dangling fetch: POST https://oauth2.googleapis.com/token (packages/server/api/src/app/ee/authentication/federated-authn/google-authn-provider.ts:57)"}, "properties": {"repobilityId": "9e1ae303b1d759cb", "scanner": "scanner-primary", "fingerprint": "63a191a19cdba82c", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-487a0dfcccf46fb9", "level": "error", "message": {"text": "Dangling fetch: POST https://us-central1-activepieces-b3803.cloudfunctions.net/addContact (packages/server/api/src/app/authentication/authentication-utils.ts:222)"}, "properties": {"repobilityId": "687dd89f46f457b5", "scanner": "scanner-primary", "fingerprint": "487a0dfcccf46fb9", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-fd1dc91abf32142d", "level": "note", "message": {"text": "Unused endpoint: GET /me"}, "properties": {"repobilityId": "0cbe9d82ea283c58", "scanner": "scanner-primary", "fingerprint": "fd1dc91abf32142d", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-675937fc8a335036", "level": "note", "message": {"text": "Unused endpoint: POST /webhooks/subscriptions"}, "properties": {"repobilityId": "21ed1d992d693f7c", "scanner": "scanner-primary", "fingerprint": "675937fc8a335036", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-ad7fb3966d0e94b6", "level": "note", "message": {"text": "Unused endpoint: GET /cases"}, "properties": {"repobilityId": "5894acd6e2385e46", "scanner": "scanner-primary", "fingerprint": "ad7fb3966d0e94b6", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-8dc3604aad441973", "level": "note", "message": {"text": "Unused endpoint: GET /staff"}, "properties": {"repobilityId": "3775dcca63b6551b", "scanner": "scanner-primary", "fingerprint": "8dc3604aad441973", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-de0ae69a00ed42d9", "level": "note", "message": {"text": "Unused endpoint: POST /time_entries"}, "properties": {"repobilityId": "50642dad14215f4e", "scanner": "scanner-primary", "fingerprint": "de0ae69a00ed42d9", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-0fb42b2ffd281301", "level": "note", "message": {"text": "Unused endpoint: GET /case_stages"}, "properties": {"repobilityId": "fdba5627d53903fc", "scanner": "scanner-primary", "fingerprint": "0fb42b2ffd281301", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-cc32cbe8c445ae1a", "level": "note", "message": {"text": "Unused endpoint: GET /practice_areas"}, "properties": {"repobilityId": "4b661b6f5b7a8c1c", "scanner": "scanner-primary", "fingerprint": "cc32cbe8c445ae1a", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-0729b84d4e27d0b9", "level": "note", "message": {"text": "Unused endpoint: GET /clients"}, "properties": {"repobilityId": "1643b2c53e02bf89", "scanner": "scanner-primary", "fingerprint": "0729b84d4e27d0b9", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-a35ce3e9c9f59e0a", "level": "note", "message": {"text": "Unused endpoint: GET /companies"}, "properties": {"repobilityId": "c238b39ed7aa2f9f", "scanner": "scanner-primary", "fingerprint": "a35ce3e9c9f59e0a", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-0a59a9b06457ac4f", "level": "note", "message": {"text": "Unused endpoint: POST /locations"}, "properties": {"repobilityId": "e77e1b1de8cfc075", "scanner": "scanner-primary", "fingerprint": "0a59a9b06457ac4f", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-18ac64d26f2a044d", "level": "note", "message": {"text": "Unused endpoint: POST /case_stages"}, "properties": {"repobilityId": "77e07734f61f3fd7", "scanner": "scanner-primary", "fingerprint": "18ac64d26f2a044d", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-0ef086013a9b36ca", "level": "note", "message": {"text": "Unused endpoint: GET /people_groups"}, "properties": {"repobilityId": "8606ac527f91af08", "scanner": "scanner-primary", "fingerprint": "0ef086013a9b36ca", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-ae6a9aa131d04375", "level": "note", "message": {"text": "Unused endpoint: POST /expenses"}, "properties": {"repobilityId": "caadd655d042d185", "scanner": "scanner-primary", "fingerprint": "ae6a9aa131d04375", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-0f6d42e08e3e9ef7", "level": "note", "message": {"text": "Unused endpoint: POST /practice_areas"}, "properties": {"repobilityId": "f75eb752a3bb1a91", "scanner": "scanner-primary", "fingerprint": "0f6d42e08e3e9ef7", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-a22e4396af9d5790", "level": "note", "message": {"text": "Unused endpoint: POST /clients"}, "properties": {"repobilityId": "0af614dec2015dd9", "scanner": "scanner-primary", "fingerprint": "a22e4396af9d5790", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-3023d2ed2b6e911c", "level": "note", "message": {"text": "Unused endpoint: GET /locations"}, "properties": {"repobilityId": "81ac1e8c3c92f0e4", "scanner": "scanner-primary", "fingerprint": "3023d2ed2b6e911c", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-ea58cdec24ed9293", "level": "note", "message": {"text": "Unused endpoint: GET /referral_sources"}, "properties": {"repobilityId": "60ff3de3c96c8422", "scanner": "scanner-primary", "fingerprint": "ea58cdec24ed9293", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-52c40df350200e83", "level": "note", "message": {"text": "Unused endpoint: POST /leads"}, "properties": {"repobilityId": "c0744cf76a390a58", "scanner": "scanner-primary", "fingerprint": "52c40df350200e83", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-b1985d10564cd776", "level": "note", "message": {"text": "Unused endpoint: POST /cases"}, "properties": {"repobilityId": "4125fb9622c921aa", "scanner": "scanner-primary", "fingerprint": "b1985d10564cd776", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-ec39abb0b24cc5b2", "level": "note", "message": {"text": "Unused endpoint: POST /companies"}, "properties": {"repobilityId": "8951fb4c726ba916", "scanner": "scanner-primary", "fingerprint": "ec39abb0b24cc5b2", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-b9112ba133290f7a", "level": "note", "message": {"text": "Unused endpoint: POST /custom_fields"}, "properties": {"repobilityId": "9ba3e84d8b3a1130", "scanner": "scanner-primary", "fingerprint": "b9112ba133290f7a", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-d479e8384824bea0", "level": "note", "message": {"text": "Unused endpoint: POST /referral_sources"}, "properties": {"repobilityId": "8044610d0e7042af", "scanner": "scanner-primary", "fingerprint": "d479e8384824bea0", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-8b3eb3012ac06c04", "level": "note", "message": {"text": "Unused endpoint: POST /tasks"}, "properties": {"repobilityId": "c3cf1a1bcd3a4fdd", "scanner": "scanner-primary", "fingerprint": "8b3eb3012ac06c04", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-9e0b360c59d868e1", "level": "note", "message": {"text": "Unused endpoint: GET /calls"}, "properties": {"repobilityId": "8cf161e10000a382", "scanner": "scanner-primary", "fingerprint": "9e0b360c59d868e1", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-6eb19a2be7a6629c", "level": "note", "message": {"text": "Unused endpoint: GET /leads"}, "properties": {"repobilityId": "a1e98e3a31d892e6", "scanner": "scanner-primary", "fingerprint": "6eb19a2be7a6629c", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-b253facae3c4682f", "level": "note", "message": {"text": "Unused endpoint: POST /calls"}, "properties": {"repobilityId": "a65d6327f45c6bfa", "scanner": "scanner-primary", "fingerprint": "b253facae3c4682f", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-150a51bfa1c53963", "level": "note", "message": {"text": "Unused endpoint: POST /events"}, "properties": {"repobilityId": "8ac711af5305252a", "scanner": "scanner-primary", "fingerprint": "150a51bfa1c53963", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-7b6916fca2a210e7", "level": "note", "message": {"text": "Unused endpoint: GET /redirect"}, "properties": {"repobilityId": "a27020287611db9c", "scanner": "scanner-primary", "fingerprint": "7b6916fca2a210e7", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-db219c7555b0e77a", "level": "note", "message": {"text": "Unused endpoint: POST /mcp/validate"}, "properties": {"repobilityId": "ae79105ffb690bf6", "scanner": "scanner-primary", "fingerprint": "db219c7555b0e77a", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-267cc5bf71026878", "level": "note", "message": {"text": "Unused endpoint: GET /populated-flows"}, "properties": {"repobilityId": "c3b046378cd01f0b", "scanner": "scanner-primary", "fingerprint": "267cc5bf71026878", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-8dfdaa61a04e0f15", "level": "note", "message": {"text": "Unused endpoint: GET /flows"}, "properties": {"repobilityId": "e58e4bcad2361417", "scanner": "scanner-primary", "fingerprint": "8dfdaa61a04e0f15", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-5baa8971ebe192a1", "level": "note", "message": {"text": "Unused endpoint: GET /"}, "properties": {"repobilityId": "17c516b30800302d", "scanner": "scanner-primary", "fingerprint": "5baa8971ebe192a1", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-c7b84f6c03c5597e", "level": "note", "message": {"text": "Unused endpoint: GET /queue-metrics"}, "properties": {"repobilityId": "4ad3ca979a1be9e0", "scanner": "scanner-primary", "fingerprint": "c7b84f6c03c5597e", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-f25c5f53e9b75e9b", "level": "note", "message": {"text": "Unused endpoint: DELETE /app-connections"}, "properties": {"repobilityId": "7feda1f902d8dc52", "scanner": "scanner-primary", "fingerprint": "f25c5f53e9b75e9b", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-2a12fe1d6a7a3e9b", "level": "note", "message": {"text": "Unused endpoint: GET /app-connections"}, "properties": {"repobilityId": "7e4c563d6d0c3326", "scanner": "scanner-primary", "fingerprint": "2a12fe1d6a7a3e9b", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-849ab0622aaf73b7", "level": "note", "message": {"text": "Unused endpoint: POST /app-connections"}, "properties": {"repobilityId": "1d857a4509cf4f62", "scanner": "scanner-primary", "fingerprint": "849ab0622aaf73b7", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-7a009b1a56794f45", "level": "note", "message": {"text": "Unused endpoint: POST /"}, "properties": {"repobilityId": "99e697d8dbd93c61", "scanner": "scanner-primary", "fingerprint": "7a009b1a56794f45", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-cca2ff1c40a333cd", "level": "note", "message": {"text": "Unused endpoint: DELETE /:connectionkeyId"}, "properties": {"repobilityId": "ccb85178f9a51387", "scanner": "scanner-primary", "fingerprint": "cca2ff1c40a333cd", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-e53dac75d7d9c626", "level": "note", "message": {"text": "Unused endpoint: POST /:id"}, "properties": {"repobilityId": "4cb33d5601424a7c", "scanner": "scanner-primary", "fingerprint": "e53dac75d7d9c626", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-7a61c112b611f4bb", "level": "note", "message": {"text": "Unused endpoint: DELETE /:id"}, "properties": {"repobilityId": "a41ae3061f7617eb", "scanner": "scanner-primary", "fingerprint": "7a61c112b611f4bb", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-1461946ab835599d", "level": "note", "message": {"text": "Unused endpoint: DELETE /cache"}, "properties": {"repobilityId": "2b46231e9bd84ede", "scanner": "scanner-primary", "fingerprint": "1461946ab835599d", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-ca5756175765b49d", "level": "note", "message": {"text": "Unused endpoint: GET /:id"}, "properties": {"repobilityId": "96b359ac3f4b8fd0", "scanner": "scanner-primary", "fingerprint": "ca5756175765b49d", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-8d5b2b188d08ca82", "level": "note", "message": {"text": "Unused endpoint: PUT /:id"}, "properties": {"repobilityId": "2f5abc2c705e0814", "scanner": "scanner-primary", "fingerprint": "8d5b2b188d08ca82", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-5fbc954f63526821", "level": "note", "message": {"text": "Unused endpoint: PATCH /:id"}, "properties": {"repobilityId": "498e5d93daddaf85", "scanner": "scanner-primary", "fingerprint": "5fbc954f63526821", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-85bad0707ff041d0", "level": "note", "message": {"text": "Unused endpoint: GET /ServiceProviderConfig"}, "properties": {"repobilityId": "8e2922d1674e8bcf", "scanner": "scanner-primary", "fingerprint": "85bad0707ff041d0", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-442a9280d228fefd", "level": "note", "message": {"text": "Unused endpoint: GET /ResourceTypes"}, "properties": {"repobilityId": "e3bbfc7d3d99c615", "scanner": "scanner-primary", "fingerprint": "442a9280d228fefd", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-fd94c3f014c6e392", "level": "note", "message": {"text": "Unused endpoint: GET /Schemas"}, "properties": {"repobilityId": "a11dfc3fcd295dc8", "scanner": "scanner-primary", "fingerprint": "fd94c3f014c6e392", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-a963c0ff10acb754", "level": "note", "message": {"text": "Unused endpoint: POST /external-token"}, "properties": {"repobilityId": "91be5fa6c22c3af6", "scanner": "scanner-primary", "fingerprint": "a963c0ff10acb754", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-8ee7ac4b5c5364e8", "level": "note", "message": {"text": "Unused endpoint: POST /conversations"}, "properties": {"repobilityId": "b373a09b9a13025a", "scanner": "scanner-primary", "fingerprint": "8ee7ac4b5c5364e8", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-6f0fc82742855439", "level": "note", "message": {"text": "Unused endpoint: GET /conversations"}, "properties": {"repobilityId": "832a59d0f574890b", "scanner": "scanner-primary", "fingerprint": "6f0fc82742855439", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}]}]}