Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.
Sign up free Scan another repo

sanhvo86-hesem/mom

https://github.com/sanhvo86-hesem/mom · scanned 2026-06-16 00:05 UTC (2 months, 3 weeks ago)

591 raw signals (104 security + 487 graph)

File as issue Image
UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 2 months, 3 weeks ago · v1 · 455 actionable findings from 2 signal sources. 233 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON
Combined
55.5
/100
Security checks
56
8 findings
System graph
56
88.9% cov · 447 findings
Critical
11
click to filter
Agents
10
0 votes
Crowd
0
reported
Severity distribution — click a segment to filter
Active filters: excluding tests × Reset all
Severity: Critical 11 High 5 Medium 235 Low 172 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 8 System graph 447 Crowd 0 Layer: Quality 212 Security 169 Software 27 Frontend 37 Network 7 Hardware 1 Cicd 2
Corpus Intelligence Cross-corpus context (cohort percentile, top patterns, fix plan) is shown only on repositories you own. Sign up and connect your repo to view it.
Scan summary Repository scanned at 55.5/100 with 88.9% coverage. It contains 18546 nodes across 0 cross-layer flows, written primarily in mixed languages. Engine surfaced 487 findings — concentrated in quality (221), security (170), frontend (37). Risk profile is high: 11 critical, 2 high, 235 medium. Recommended next step: open the quality layer findings first — that's where the highest-impact wins live.

Showing 420 of 455 actionable findings. 688 raw detector signals were grouped into reader-sized issues. Click TP / FP to vote on a finding's accuracy — votes adjust the confidence weighting and improve detection across the platform.

critical Security checks quality Practices conf 0.82 2 occurrences Foundry mined mock as real or placeholder: sanhvo86-hesem/mom
Graph query export: Mock, sample, placeholder, or self-attested behavior treated as real Query id: mock_as_real_or_placeholder Query type: motif_query Intent: Hard negatives for fake completeness and missing real data paths. Motif: mock_as_real_or_placeholder Training usage: hard_negative Graph gol…
2 occurrences
repo-level (2 hits)
critical Security checks security auth conf 0.78 20 occurrences Foundry mined security auth guardrail gaps: sanhvo86-hesem/mom
Graph query export: Security/auth changes without enough guardrails Query id: security_auth_guardrail_gaps Query type: motif_query Intent: Assumption-check security/auth examples requiring stronger tests or CI. Motif: security_auth_without_guardrails Training usage: assumption_check Graph gold labe…
20 occurrences
repo-level (20 hits)
critical System graph security Secrets conf 1.00 3 occurrences Possible secret in mom/api/openapi.yaml
Detected pattern matching password_literal. Rotate the credential and move to a secret manager.
lines 1780, 1785, 3503
mom/api/openapi.yaml:1780, 1785, 3503 (3 hits)
critical System graph security Secrets conf 1.00 Possible secret in mom/docs/forms/design-system/upgrade_lib.py
Detected pattern matching password_literal. Rotate the credential and move to a secret manager.
mom/docs/forms/design-system/upgrade_lib.py:376
critical System graph security Secrets conf 1.00 Possible secret in mom/ops/vps/db-pull.sh
Detected pattern matching password_literal. Rotate the credential and move to a secret manager.
mom/ops/vps/db-pull.sh:99
critical System graph security Secrets conf 1.00 Possible secret in mom/ops/vps/run-db-migrations.sh
Detected pattern matching password_literal. Rotate the credential and move to a secret manager.
mom/ops/vps/run-db-migrations.sh:80
critical System graph security Secrets conf 1.00 Possible secret in mom/scripts/portal/08-deploy-dashboard.js
Detected pattern matching password_literal. Rotate the credential and move to a secret manager.
mom/scripts/portal/08-deploy-dashboard.js:2918
critical System graph security Secrets conf 1.00 Possible secret in mom/tools/registry/registry-v3-data.mjs
Detected pattern matching password_literal. Rotate the credential and move to a secret manager.
mom/tools/registry/registry-v3-data.mjs:241
critical System graph security Secrets conf 1.00 Possible secret in tools/vps-setup/iac/group_vars/all.yml
Detected pattern matching password_literal. Rotate the credential and move to a secret manager.
tools/vps-setup/iac/group_vars/all.yml:21
critical System graph security Secrets conf 1.00 Possible secret in tools/vps-setup/scripts/data-push.sh
Detected pattern matching password_literal. Rotate the credential and move to a secret manager.
tools/vps-setup/scripts/data-push.sh:505
critical System graph security Secrets conf 1.00 Possible secret in tools/vps-setup/scripts/db-push.sh
Detected pattern matching password_literal. Rotate the credential and move to a secret manager.
tools/vps-setup/scripts/db-push.sh:226
high Security checks quality Practices conf 0.84 12 occurrences Foundry mined bad chains: sanhvo86-hesem/mom
Comment chain pattern product: bad_chains Repo: sanhvo86-hesem/mom Thread: sanhvo86-hesem/mom#5 Outcome: not_resolved_or_not_observed Thread label: thread_has_human_issue_without_fix_context Source graph label: source_backed_multi_signal_graph Reasons: source_graph_has_real_artifacts, source_graph_…
12 occurrences
repo-level (12 hits)
high Security checks quality Quality conf 0.76 27 occurrences Foundry mined schema ui api mismatch: sanhvo86-hesem/mom
Graph query export: Schema, UI, and API mismatch Query id: schema_ui_api_mismatch Query type: motif_query Intent: Assumption-check examples for data-path consistency across layers. Motif: schema_ui_api_mismatch Training usage: assumption_check Graph gold label: weak_supervision_needs_review Repo: s…
27 occurrences
repo-level (27 hits)
high Security checks quality Testing conf 0.78 14 occurrences Foundry mined test ci gap after feedback: sanhvo86-hesem/mom
Graph query export: Feedback exposes missing tests or CI Query id: test_ci_gap_after_feedback Query type: motif_query Intent: Hard negatives for feedback/fix chains without adequate guardrails. Motif: test_ci_gap_after_feedback Training usage: hard_negative Graph gold label: supported_by_verificati…
14 occurrences
repo-level (14 hits)
high System graph security security conf 1.00 Insecure pattern 'new_function_used' in mom/scripts/portal/06-tiptap-pilot.js:9
Found a known-risky pattern (new_function_used). Review and replace if possible.
mom/scripts/portal/06-tiptap-pilot.js:9 New function used
medium Security checks quality Practices conf 0.62 54 occurrences Foundry mined assumption checks: sanhvo86-hesem/mom
Comment chain pattern product: assumption_checks Repo: sanhvo86-hesem/mom Thread: sanhvo86-hesem/mom#416 Outcome: claimed_resolved_unverified Thread label: thread_has_human_issue_and_fix_context Source graph label: source_backed_multi_signal_graph Reasons: source_graph_has_real_artifacts, source_gr…
54 occurrences
repo-level (54 hits)
medium Security checks quality maintenance conf 0.70 52 occurrences Foundry mined blueprint gap alignment: sanhvo86-hesem/mom
Graph query export: Human feedback aligned with blueprint or architecture gaps Query id: blueprint_gap_alignment Query type: motif_query Intent: Curriculum-gap examples connecting issue threads to helicopter-view gaps. Motif: blueprint_gap_alignment Training usage: curriculum_gap Graph gold label: …
52 occurrences
repo-level (52 hits)
medium Security checks quality Practices conf 0.70 20 occurrences Foundry mined unresolved feedback: sanhvo86-hesem/mom
Graph query export: Human feedback without linked fix evidence Query id: unresolved_feedback Query type: motif_query Intent: Negative/unresolved examples that should not be hallucinated into fixes. Motif: unlinked_feedback_needs_evidence Training usage: negative_or_unresolved Graph gold label: need…
20 occurrences
repo-level (20 hits)
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — mom/assets/js/pwa-init.js:323
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — mom/scripts/portal/00ba-graphics-governance-service.js:850
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — mom/scripts/portal/00bb-graphics-authority.js:50
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — mom/scripts/portal/00bd-blockkit.js:527
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — mom/scripts/portal/00bf-archetypekit.js:111
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — mom/scripts/portal/00bg-lego-theme.js:236
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — mom/scripts/portal/00d-admin-ai-control.js:476
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — mom/scripts/portal/00e-admin-translation-provider.js:61
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — mom/scripts/portal/00f-admin-translation-module.js:100
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — mom/scripts/portal/00j-admin-shared.js:481
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — mom/scripts/portal/01-data-config.js:4064
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — mom/scripts/portal/01-module-router.js:71
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — mom/scripts/portal/02-state-auth-ui.js:1645
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — mom/scripts/portal/04-workflow-actions.js:2019
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — mom/scripts/portal/08-deploy-dashboard.js:473
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — mom/scripts/portal/09-online-forms.js:2930
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — mom/scripts/portal/09b-form-fill-download.js:24
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — mom/scripts/portal/09c-record-id-generator.js:124
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — mom/scripts/portal/09e-so-jo-wo-dashboard.js:173
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — mom/scripts/portal/09h-allocation-tracker.js:496
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — mom/scripts/portal/10-eqms-form-runtime.js:35
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — mom/scripts/portal/11-dcc-header-renderer.js:184
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — mom/scripts/portal/12-kpi-badge-renderer.js:17
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — mom/scripts/portal/12-raci-authority-sidebar.js:74
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — mom/scripts/portal/13-jd-scorecard-renderer.js:229
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — mom/scripts/portal/13-master-data-control.js:828
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — mom/scripts/portal/14-exception-dashboard.js:573
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — mom/scripts/portal/14-mes-control-center.js:254
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — mom/scripts/portal/15-quality-exception-hub.js:16
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — mom/scripts/portal/16-supplier-quality.js:15
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — mom/scripts/portal/17-quoting-engine.js:16
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — mom/scripts/portal/18-evidence-vault.js:16
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — mom/scripts/portal/19-customer-portal-admin.js:16
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — mom/scripts/portal/20-cnc-programs.js:16
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — mom/scripts/portal/21-product-passport.js:16
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — mom/scripts/portal/22-ai-quality-scheduling.js:16
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — mom/scripts/portal/22b-ai-chat-interface.js:18
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — mom/scripts/portal/22c-ai-recommendations.js:19
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — mom/scripts/portal/23-compliance-reports.js:16
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — mom/scripts/portal/24-fmea-control-plan.js:16
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — mom/scripts/portal/25-apqp-ppap.js:16
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — mom/scripts/portal/26-mobile-shopfloor.js:16
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — mom/scripts/portal/27-knowledge-base.js:16
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — mom/scripts/portal/28-continuous-improvement.js:16
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — mom/scripts/portal/29-energy-dashboard.js:16
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — mom/scripts/portal/30-production-dispatch.js:16
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — mom/scripts/portal/32-admin-metadata-studio.js:27
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — mom/scripts/portal/33-vps-control-tower.js:22
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — mom/scripts/portal/34-purchasing-workspace.js:23
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — mom/scripts/portal/40-eqms-shell.js:1846
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — mom/scripts/portal/41-eqms-quality-tower.js:121
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — mom/scripts/portal/47-eqms-engineering-change.js:118
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — mom/scripts/portal/49-eqms-training.js:385
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — mom/scripts/portal/50-eqms-audits.js:149
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — mom/scripts/portal/70-module-template-v4-hydration.js:347
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — mom/scripts/portal/87-mda-machine-runtime.js:16
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — mom/scripts/portal/89-binding-resolver.js:63
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — mom/scripts/portal/91-record-object-page.js:46
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — mom/scripts/portal/92-code-block-host.js:77
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — mom/sw.js:203
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Agent instructions conf 1.00 Agent instructions exist but release-hardening basics are missing
AI-coder instruction files were found, but the repo is missing license. Treat this as a contract gap: the agent is guided, but the generated output is not yet guarded by the controls that make it repeatable.
Repo hardeningGenerated repo pattern
medium System graph security Analyzer error conf 1.00 Analyzer timeout: security.gitleaks
analyzer exceeded 60.0s wall-clock (thread mode — daemon abandoned). Bump REPOBILITY_ANALYZER_TIMEOUT_S if expected.
Timeout
medium System graph quality Placeholder conf 1.00 Critical user flow still appears backed by mock or placeholder data
A payment/auth/admin/order/billing-style flow contains mock, fake, TODO, dummy, or placeholder markers in runtime source. In the Fable corpus this is a high-leverage completeness smell: the app can look finished while the money, identity, or tenant flow is still scaffolded.
Mock dataCritical flowGenerated repo pattern
medium System graph cicd CI/CD security conf 1.00 4 occurrences GitHub Action is tag-pinned rather than SHA-pinned
appleboy/ssh-action@v1 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA.
2 files, 4 locations
.github/workflows/deploy.yml:498, 558 (2 hits)
.github/workflows/hmv4-e2e.yml:152, 201 (2 hits)
CI/CD securitySupply chainGithub actions
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in dashboard.html:1455
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
dashboard.html:1455 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/assets/js/pwa-init.js:189
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/assets/js/pwa-init.js:189 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/assets/js/sync-manager.js:514
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/assets/js/sync-manager.js:514 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/design/cnc-dashboard-ui-study.html:1135
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/design/cnc-dashboard-ui-study.html:1135 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/docs/glossary/index.html:190
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/docs/glossary/index.html:190 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/docs/operations/work-instructions/01-WI-100/champion-availability-roster.html:50
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/docs/operations/work-instructions/01-WI-100/champion-availability-roster.html:50 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/docs/training/system-ops/03-Deploy-Playbook/TRN-DEP-PLAYBOOK.html:194
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/docs/training/system-ops/03-Deploy-Playbook/TRN-DEP-PLAYBOOK.html:194 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/form-runtimes/frm-403-scar.html:377
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/form-runtimes/frm-403-scar.html:377 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/build-howto-mockups.html:192
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/build-howto-mockups.html:192 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/form-runtimes/frm-403-scar.js:647
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/form-runtimes/frm-403-scar.js:647 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/00-version-check.js:68
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/00-version-check.js:68 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/00bb-graphics-authority.js:701
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/00bb-graphics-authority.js:701 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/00bd-blockkit.js:516
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/00bd-blockkit.js:516 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/00bf-archetypekit.js:198
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/00bf-archetypekit.js:198 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/00bh-blocks-facade.js:91
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/00bh-blocks-facade.js:91 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/00c-admin-appearance.js:1670
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/00c-admin-appearance.js:1670 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/00d-admin-ai-control.js:37
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/00d-admin-ai-control.js:37 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/00d-admin-appearance-theme.js:153
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/00d-admin-appearance-theme.js:153 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/00d-sidebar-block.js:104
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/00d-sidebar-block.js:104 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/00e-admin-translation-provider.js:34
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/00e-admin-translation-provider.js:34 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/00f-admin-translation-module.js:130
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/00f-admin-translation-module.js:130 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/00g-admin-governance-tabs.js:50
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/00g-admin-governance-tabs.js:50 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/00h-admin-content-tabs.js:87
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/00h-admin-content-tabs.js:87 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/00i-admin-permissions-tabs.js:120
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/00i-admin-permissions-tabs.js:120 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/00j-admin-shared.js:118
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/00j-admin-shared.js:118 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/00k-admin-roles.js:353
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/00k-admin-roles.js:353 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/00l-admin-iam-console.js:59
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/00l-admin-iam-console.js:59 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/00m-admin-decision-thresholds.js:223
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/00m-admin-decision-thresholds.js:223 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/00m-admin-org-console.js:1102
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/00m-admin-org-console.js:1102 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/00n-admin-raci-matrix.js:262
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/00n-admin-raci-matrix.js:262 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/00o-admin-kpi-registry.js:697
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/00o-admin-kpi-registry.js:697 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/00p-admin-email-intake.js:95
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/00p-admin-email-intake.js:95 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/01-data-config.js:504
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/01-data-config.js:504 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/01-module-router.js:24
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/01-module-router.js:24 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/02-state-auth-ui.js:224
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/02-state-auth-ui.js:224 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/03-commands-table.js:152
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/03-commands-table.js:152 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/03-editor-core.js:388
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/03-editor-core.js:388 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/04-workflow-actions.js:83
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/04-workflow-actions.js:83 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/05-workflow-panel.js:15
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/05-workflow-panel.js:15 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/06-tiptap-pilot.js:608
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/06-tiptap-pilot.js:608 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/08-deploy-dashboard.js:523
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/08-deploy-dashboard.js:523 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/09-online-forms.js:166
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/09-online-forms.js:166 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/09b-form-fill-download.js:984
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/09b-form-fill-download.js:984 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/09c-record-id-generator.js:233
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/09c-record-id-generator.js:233 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/09d-upload-verify.js:133
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/09d-upload-verify.js:133 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/09e-so-jo-wo-dashboard.js:275
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/09e-so-jo-wo-dashboard.js:275 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/09f-form-builder-engine.js:694
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/09f-form-builder-engine.js:694 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/09g-cascading-dropdown.js:101
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/09g-cascading-dropdown.js:101 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/09h-allocation-tracker.js:307
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/09h-allocation-tracker.js:307 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/09v3-orders-components.js:362
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/09v3-orders-components.js:362 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/09v3-orders-shell.js:137
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/09v3-orders-shell.js:137 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/09v3-workspace-intake.js:20
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/09v3-workspace-intake.js:20 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/09v3-workspace-stubs.js:34
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/09v3-workspace-stubs.js:34 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/09v3-workspace-today.js:21
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/09v3-workspace-today.js:21 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/10-eqms-form-runtime.js:532
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/10-eqms-form-runtime.js:532 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/11-e-signature.js:293
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/11-e-signature.js:293 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/12-kpi-badge-renderer.js:118
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/12-kpi-badge-renderer.js:118 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/12-searchable-input.js:131
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/12-searchable-input.js:131 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/13-master-data-control.js:1036
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/13-master-data-control.js:1036 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/14-exception-dashboard.js:677
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/14-exception-dashboard.js:677 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/14-mes-control-center.js:622
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/14-mes-control-center.js:622 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/15-quality-exception-hub.js:349
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/15-quality-exception-hub.js:349 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/16-supplier-quality.js:432
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/16-supplier-quality.js:432 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/17-quoting-engine.js:430
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/17-quoting-engine.js:430 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/18-evidence-vault.js:524
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/18-evidence-vault.js:524 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/19-customer-portal-admin.js:209
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/19-customer-portal-admin.js:209 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/20-cnc-programs.js:404
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/20-cnc-programs.js:404 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/21-product-passport.js:444
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/21-product-passport.js:444 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/22-ai-quality-scheduling.js:357
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/22-ai-quality-scheduling.js:357 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/22a-echarts-bridge.js:729
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/22a-echarts-bridge.js:729 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/22b-ai-chat-interface.js:128
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/22b-ai-chat-interface.js:128 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/22c-ai-recommendations.js:84
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/22c-ai-recommendations.js:84 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/23-compliance-reports.js:740
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/23-compliance-reports.js:740 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/24-fmea-control-plan.js:543
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/24-fmea-control-plan.js:543 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/25-apqp-ppap.js:591
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/25-apqp-ppap.js:591 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/26-mobile-shopfloor.js:554
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/26-mobile-shopfloor.js:554 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/27-knowledge-base.js:400
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/27-knowledge-base.js:400 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/28-continuous-improvement.js:416
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/28-continuous-improvement.js:416 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/29-energy-dashboard.js:392
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/29-energy-dashboard.js:392 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/30-production-dispatch.js:227
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/30-production-dispatch.js:227 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/32-admin-metadata-studio.js:1466
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/32-admin-metadata-studio.js:1466 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/32-module-studio.js:473
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/32-module-studio.js:473 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/32-schema-studio.js:628
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/32-schema-studio.js:628 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/32b-mstudio-lego-workbench.js:1251
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/32b-mstudio-lego-workbench.js:1251 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/33-mb2-arrange.js:124
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/33-mb2-arrange.js:124 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/33-mb2-canvas.js:50
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/33-mb2-canvas.js:50 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/33-mb2-core.js:275
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/33-mb2-core.js:275 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/33-mb2-palette.js:153
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/33-mb2-palette.js:153 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/33-mb2-runtime.js:31
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/33-mb2-runtime.js:31 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/33-mb2-versions.js:24
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/33-mb2-versions.js:24 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/33-vps-control-tower.js:1706
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/33-vps-control-tower.js:1706 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/34-purchasing-workspace.js:51
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/34-purchasing-workspace.js:51 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/40-eqms-shell.js:808
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/40-eqms-shell.js:808 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/41-eqms-quality-tower.js:1099
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/41-eqms-quality-tower.js:1099 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/42-eqms-complaints.js:217
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/42-eqms-complaints.js:217 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/43-eqms-deviations.js:800
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/43-eqms-deviations.js:800 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/44-eqms-ncr.js:865
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/44-eqms-ncr.js:865 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/45-eqms-capa.js:878
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/45-eqms-capa.js:878 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/46-eqms-change-control.js:139
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/46-eqms-change-control.js:139 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/47-eqms-engineering-change.js:884
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/47-eqms-engineering-change.js:884 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/48-eqms-documents.js:155
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/48-eqms-documents.js:155 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/49-eqms-training.js:213
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/49-eqms-training.js:213 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/50-eqms-audits.js:1169
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/50-eqms-audits.js:1169 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/51-eqms-suppliers.js:792
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/51-eqms-suppliers.js:792 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/52-eqms-supplier-audits.js:949
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/52-eqms-supplier-audits.js:949 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/53-eqms-risks.js:229
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/53-eqms-risks.js:229 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/54-eqms-calibration.js:213
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/54-eqms-calibration.js:213 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/55-eqms-lab-investigations.js:274
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/55-eqms-lab-investigations.js:274 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/57-eqms-spc.js:203
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/57-eqms-spc.js:203 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/58-eqms-batch-release.js:192
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/58-eqms-batch-release.js:192 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/59-eqms-validation.js:168
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/59-eqms-validation.js:168 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/60-eqms-doc-visualizer.js:343
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/60-eqms-doc-visualizer.js:343 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/60-eqms-field-actions.js:158
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/60-eqms-field-actions.js:158 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/61-eqms-genealogy.js:141
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/61-eqms-genealogy.js:141 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/62-eqms-quality-agreements.js:144
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/62-eqms-quality-agreements.js:144 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/63-eqms-concessions.js:132
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/63-eqms-concessions.js:132 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/64-eqms-fai.js:119
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/64-eqms-fai.js:119 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/66-eqms-aml.js:111
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/66-eqms-aml.js:111 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/67-eqms-warranty.js:131
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/67-eqms-warranty.js:131 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/68-eqms-lessons-learned.js:112
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/68-eqms-lessons-learned.js:112 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/69-eqms-csat.js:109
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/69-eqms-csat.js:109 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/70-eqms-sampling-plans.js:142
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/70-eqms-sampling-plans.js:142 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/80-uom-control-center.js:123
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/80-uom-control-center.js:123 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/81-uom-quantity-widget.js:283
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/81-uom-quantity-widget.js:283 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/83-mda-control-center.js:860
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/83-mda-control-center.js:860 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/84-mda-workspace.js:145
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/84-mda-workspace.js:145 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/85-mda-uom-control.js:162
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/85-mda-uom-control.js:162 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/86-mda-quality-distribution.js:39
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/86-mda-quality-distribution.js:39 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/87-mda-machine-runtime.js:281
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/87-mda-machine-runtime.js:281 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/88-governed-data-grid.js:127
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/88-governed-data-grid.js:127 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/90-qrcodegen.js:10
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/90-qrcodegen.js:10 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/91-record-object-page.js:47
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/91-record-object-page.js:47 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/92-code-block-host.js:50
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/92-code-block-host.js:50 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in mom/scripts/portal/DEMO-gpt-blueprint.js:90
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
mom/scripts/portal/DEMO-gpt-blueprint.js:90 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_outerhtml_assignment' in mom/scripts/portal/00c-admin-appearance.js:2113
Found a known-risky pattern (direct_outerhtml_assignment). Review and replace if possible.
mom/scripts/portal/00c-admin-appearance.js:2113 Direct outerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_outerhtml_assignment' in mom/scripts/portal/01-module-router.js:441
Found a known-risky pattern (direct_outerhtml_assignment). Review and replace if possible.
mom/scripts/portal/01-module-router.js:441 Direct outerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_outerhtml_assignment' in mom/scripts/portal/03-editor-core.js:5443
Found a known-risky pattern (direct_outerhtml_assignment). Review and replace if possible.
mom/scripts/portal/03-editor-core.js:5443 Direct outerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_outerhtml_assignment' in mom/scripts/portal/09v3-orders-shell.js:208
Found a known-risky pattern (direct_outerhtml_assignment). Review and replace if possible.
mom/scripts/portal/09v3-orders-shell.js:208 Direct outerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_outerhtml_assignment' in mom/scripts/portal/10-eqms-form-runtime.js:1752
Found a known-risky pattern (direct_outerhtml_assignment). Review and replace if possible.
mom/scripts/portal/10-eqms-form-runtime.js:1752 Direct outerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_outerhtml_assignment' in mom/scripts/portal/32-module-studio.js:474
Found a known-risky pattern (direct_outerhtml_assignment). Review and replace if possible.
mom/scripts/portal/32-module-studio.js:474 Direct outerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'domparser_html_parse' in mom/scripts/portal/08-deploy-dashboard.js:481
Found a known-risky pattern (domparser_html_parse). Review and replace if possible.
mom/scripts/portal/08-deploy-dashboard.js:481 Domparser html parse
medium System graph security security conf 1.00 Insecure pattern 'domparser_html_parse' in mom/scripts/portal/12-raci-authority-sidebar.js:79
Found a known-risky pattern (domparser_html_parse). Review and replace if possible.
mom/scripts/portal/12-raci-authority-sidebar.js:79 Domparser html parse
medium System graph security security conf 1.00 Insecure pattern 'insert_adjacent_html' in mom/scripts/portal/00p-admin-email-intake.js:918
Found a known-risky pattern (insert_adjacent_html). Review and replace if possible.
mom/scripts/portal/00p-admin-email-intake.js:918 Insert adjacent html
medium System graph security security conf 1.00 Insecure pattern 'insert_adjacent_html' in mom/scripts/portal/02-state-auth-ui.js:15415
Found a known-risky pattern (insert_adjacent_html). Review and replace if possible.
mom/scripts/portal/02-state-auth-ui.js:15415 Insert adjacent html
medium System graph security security conf 1.00 Insecure pattern 'insert_adjacent_html' in mom/scripts/portal/09e-so-jo-wo-dashboard.js:732
Found a known-risky pattern (insert_adjacent_html). Review and replace if possible.
mom/scripts/portal/09e-so-jo-wo-dashboard.js:732 Insert adjacent html
medium System graph security security conf 1.00 Insecure pattern 'insert_adjacent_html' in mom/scripts/portal/13-jd-scorecard-renderer.js:214
Found a known-risky pattern (insert_adjacent_html). Review and replace if possible.
mom/scripts/portal/13-jd-scorecard-renderer.js:214 Insert adjacent html
medium System graph security security conf 1.00 Insecure pattern 'insert_adjacent_html' in mom/scripts/portal/22b-ai-chat-interface.js:144
Found a known-risky pattern (insert_adjacent_html). Review and replace if possible.
mom/scripts/portal/22b-ai-chat-interface.js:144 Insert adjacent html
medium System graph security security conf 1.00 Insecure pattern 'insert_adjacent_html' in mom/scripts/portal/60-eqms-doc-visualizer.js:873
Found a known-risky pattern (insert_adjacent_html). Review and replace if possible.
mom/scripts/portal/60-eqms-doc-visualizer.js:873 Insert adjacent html
medium System graph security security conf 1.00 Insecure pattern 'insert_adjacent_html' in mom/scripts/portal/83-mda-control-center.js:987
Found a known-risky pattern (insert_adjacent_html). Review and replace if possible.
mom/scripts/portal/83-mda-control-center.js:987 Insert adjacent html
medium System graph security security conf 1.00 Insecure pattern 'local_storage_auth_token' in mom/scripts/portal/02-state-auth-ui.js:9132
Found a known-risky pattern (local_storage_auth_token). Review and replace if possible.
mom/scripts/portal/02-state-auth-ui.js:9132 Local storage auth token
medium System graph security security conf 1.00 Insecure pattern 'node_child_process' in tools/scripts/mda-lego-rebuild-lab.mjs:5
Found a known-risky pattern (node_child_process). Review and replace if possible.
tools/scripts/mda-lego-rebuild-lab.mjs:5 Node child process
medium System graph security security conf 1.00 Insecure pattern 'node_child_process' in tools/scripts/repo-structure/audit-repo-structure.mjs:2
Found a known-risky pattern (node_child_process). Review and replace if possible.
tools/scripts/repo-structure/audit-repo-structure.mjs:2 Node child process
medium System graph quality Integrity conf 1.00 Network/subprocess call without timeout or try/except — mom/tools/benchmark/run_runtime_benchmark.py:49
`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 Network/subprocess call without timeout or try/except — tools/auto-audit-pipeline.py:293
`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 Network/subprocess call without timeout or try/except — tools/dora/compute_dora.py:125
`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 Network/subprocess call without timeout or try/except — tools/scripts/wi-annex/audit_content_regression.py:37
`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 Network/subprocess call without timeout or try/except — tools/scripts/wi-annex/normalize_wi_annex_headers.py:113
`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries.
runtime safetyRobustness
medium System graph quality Placeholder conf 1.00 Placeholder or mock-heavy implementation detected
Found 824 placeholder/mock markers across 153 source files. This often means the repo looks complete while core flows still use generated scaffolding or fake data.
Mock dataIncompleteGenerated repo pattern
medium System graph network Security conf 1.00 Privileged port 10 in use
Port 10 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer.
tools/scripts/generate-deploy-playbooks.sh Ports
medium System graph network Security conf 1.00 Privileged port 12 in use
Port 12 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer.
mom/api/openapi.yaml Ports
medium System graph network Security conf 1.00 Privileged port 127 in use
Port 127 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer.
mom/ops/vps/deploy-control-tower-sync.sh Ports
medium System graph network Security conf 1.00 Privileged port 15 in use
Port 15 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer.
mom/api/openapi.yaml Ports
medium System graph network Security conf 1.00 Privileged port 30 in use
Port 30 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer.
tools/cron/deploy-availability-check.sh Ports
medium System graph network Security conf 1.00 Privileged port 42 in use
Port 42 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer.
mom/api/openapi.yaml Ports
medium System graph network Security conf 1.00 Privileged port 9 in use
Port 9 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer.
tools/scripts/generate-deploy-playbooks.sh Ports
medium System graph quality Tests conf 1.00 Very low test-to-source ratio
16 test file(s) for 405 source file(s) (ratio 0.04). Consider adding integration or unit tests for critical paths.
Coverage
low System graph hardware Coverage conf 1.00 Containers defined but no K8s/orchestration manifest found
Repo has Dockerfiles/compose but no Kubernetes/Nomad manifests. If the target deployment is K8s, the manifests may live in a separate ops repo.
Deployment
low System graph quality Debug conf 1.00 Debug logging residue appears in source files
Found 1420 console/debugger/print-style debug statements in non-test source. This is a common fast-generation residue before production cleanup.
CleanupRepo hardeningGenerated repo pattern
low System graph cicd CI/CD security conf 1.00 20 occurrences GitHub Action is tag-pinned rather than SHA-pinned
actions/cache@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA.
3 files, 20 locations
.github/workflows/hmv4-e2e.yml:64, 69, 144, 147, 157, 178, 193, 196, +2 more (10 hits)
.github/workflows/ci.yml:174, 186, 233, 344, 795, 813, 835, 854 (8 hits)
.github/workflows/deploy.yml:371, 392 (2 hits)
CI/CD securitySupply chainGithub actions
low System graph frontend Frontend quality conf 1.00 Icon-only button without accessible name — mom/scripts/portal/00c-admin-appearance-module-sample.js:437
A `<button>` whose only child is a single glyph or symbol needs `title=` or `aria-label=` so screen readers (and tooltips on hover) work. Why: P3 in CHECKLIST.md — icon-only buttons skipped a title. Rule id: fq.button.no-label
Fq button no label
low System graph frontend Frontend quality conf 1.00 Icon-only button without accessible name — mom/scripts/portal/00c-admin-appearance.js:1987
A `<button>` whose only child is a single glyph or symbol needs `title=` or `aria-label=` so screen readers (and tooltips on hover) work. Why: P3 in CHECKLIST.md — icon-only buttons skipped a title. Rule id: fq.button.no-label
Fq button no label
low System graph frontend Frontend quality conf 1.00 Icon-only button without accessible name — mom/scripts/portal/00f-admin-translation-module.js:488
A `<button>` whose only child is a single glyph or symbol needs `title=` or `aria-label=` so screen readers (and tooltips on hover) work. Why: P3 in CHECKLIST.md — icon-only buttons skipped a title. Rule id: fq.button.no-label
Fq button no label
low System graph frontend Frontend quality conf 1.00 Icon-only button without accessible name — mom/scripts/portal/00i-admin-permissions-tabs.js:724
A `<button>` whose only child is a single glyph or symbol needs `title=` or `aria-label=` so screen readers (and tooltips on hover) work. Why: P3 in CHECKLIST.md — icon-only buttons skipped a title. Rule id: fq.button.no-label
Fq button no label
low System graph frontend Frontend quality conf 1.00 Icon-only button without accessible name — mom/scripts/portal/00l-admin-iam-console.js:935
A `<button>` whose only child is a single glyph or symbol needs `title=` or `aria-label=` so screen readers (and tooltips on hover) work. Why: P3 in CHECKLIST.md — icon-only buttons skipped a title. Rule id: fq.button.no-label
Fq button no label
low System graph frontend Frontend quality conf 1.00 Icon-only button without accessible name — mom/scripts/portal/00p-admin-email-intake.js:2090
A `<button>` whose only child is a single glyph or symbol needs `title=` or `aria-label=` so screen readers (and tooltips on hover) work. Why: P3 in CHECKLIST.md — icon-only buttons skipped a title. Rule id: fq.button.no-label
Fq button no label
low System graph frontend Frontend quality conf 1.00 Icon-only button without accessible name — mom/scripts/portal/02-state-auth-ui.js:4609
A `<button>` whose only child is a single glyph or symbol needs `title=` or `aria-label=` so screen readers (and tooltips on hover) work. Why: P3 in CHECKLIST.md — icon-only buttons skipped a title. Rule id: fq.button.no-label
Fq button no label
low System graph frontend Frontend quality conf 1.00 Icon-only button without accessible name — mom/scripts/portal/03-editor-core.js:667
A `<button>` whose only child is a single glyph or symbol needs `title=` or `aria-label=` so screen readers (and tooltips on hover) work. Why: P3 in CHECKLIST.md — icon-only buttons skipped a title. Rule id: fq.button.no-label
Fq button no label
low System graph frontend Frontend quality conf 1.00 Icon-only button without accessible name — mom/scripts/portal/05-workflow-panel.js:762
A `<button>` whose only child is a single glyph or symbol needs `title=` or `aria-label=` so screen readers (and tooltips on hover) work. Why: P3 in CHECKLIST.md — icon-only buttons skipped a title. Rule id: fq.button.no-label
Fq button no label
low System graph frontend Frontend quality conf 1.00 Icon-only button without accessible name — mom/scripts/portal/09b-form-fill-download.js:1212
A `<button>` whose only child is a single glyph or symbol needs `title=` or `aria-label=` so screen readers (and tooltips on hover) work. Why: P3 in CHECKLIST.md — icon-only buttons skipped a title. Rule id: fq.button.no-label
Fq button no label
low System graph frontend Frontend quality conf 1.00 Icon-only button without accessible name — mom/scripts/portal/09e-so-jo-wo-dashboard.js:603
A `<button>` whose only child is a single glyph or symbol needs `title=` or `aria-label=` so screen readers (and tooltips on hover) work. Why: P3 in CHECKLIST.md — icon-only buttons skipped a title. Rule id: fq.button.no-label
Fq button no label
low System graph frontend Frontend quality conf 1.00 Icon-only button without accessible name — mom/scripts/portal/09f-form-builder-engine.js:586
A `<button>` whose only child is a single glyph or symbol needs `title=` or `aria-label=` so screen readers (and tooltips on hover) work. Why: P3 in CHECKLIST.md — icon-only buttons skipped a title. Rule id: fq.button.no-label
Fq button no label
low System graph frontend Frontend quality conf 1.00 Icon-only button without accessible name — mom/scripts/portal/10-eqms-form-runtime.js:1411
A `<button>` whose only child is a single glyph or symbol needs `title=` or `aria-label=` so screen readers (and tooltips on hover) work. Why: P3 in CHECKLIST.md — icon-only buttons skipped a title. Rule id: fq.button.no-label
Fq button no label
low System graph frontend Frontend quality conf 1.00 Icon-only button without accessible name — mom/scripts/portal/13-master-data-control.js:1040
A `<button>` whose only child is a single glyph or symbol needs `title=` or `aria-label=` so screen readers (and tooltips on hover) work. Why: P3 in CHECKLIST.md — icon-only buttons skipped a title. Rule id: fq.button.no-label
Fq button no label
low System graph frontend Frontend quality conf 1.00 Icon-only button without accessible name — mom/scripts/portal/32a-mstudio-presets-settings.js:565
A `<button>` whose only child is a single glyph or symbol needs `title=` or `aria-label=` so screen readers (and tooltips on hover) work. Why: P3 in CHECKLIST.md — icon-only buttons skipped a title. Rule id: fq.button.no-label
Fq button no label
low System graph frontend Frontend quality conf 1.00 Icon-only button without accessible name — mom/scripts/portal/33-mb2-inspector.js:96
A `<button>` whose only child is a single glyph or symbol needs `title=` or `aria-label=` so screen readers (and tooltips on hover) work. Why: P3 in CHECKLIST.md — icon-only buttons skipped a title. Rule id: fq.button.no-label
Fq button no label
low System graph frontend Frontend quality conf 1.00 Icon-only button without accessible name — mom/scripts/portal/DEMO-gpt-blueprint.js:121
A `<button>` whose only child is a single glyph or symbol needs `title=` or `aria-label=` so screen readers (and tooltips on hover) work. Why: P3 in CHECKLIST.md — icon-only buttons skipped a title. Rule id: fq.button.no-label
Fq button no label
low System graph security security conf 1.00 Insecure pattern 'document_write' in mom/scripts/portal/00m-admin-org-console.js:3601
Found a known-risky pattern (document_write). Review and replace if possible.
mom/scripts/portal/00m-admin-org-console.js:3601 Document write
low System graph security security conf 1.00 Insecure pattern 'document_write' in mom/scripts/portal/03-editor-core.js:7057
Found a known-risky pattern (document_write). Review and replace if possible.
mom/scripts/portal/03-editor-core.js:7057 Document write
low System graph quality Agent instructions conf 1.00 Multiple root agent instruction files without precedence
The repo has multiple top-level AI-coder instruction files. Without precedence rules, different agents may follow different policies.
Governance
low System graph quality Integrity conf 1.00 10 occurrences Near-duplicate function bodies in 2 places
Functions with the same first-5-line body hash: tools/engines/create_remaining_words_excel.py:main, tools/engines/create_full_remaining_excel.py:main This is *the* AI-coder failure mode (4× more duplication in vibe-coded repos — see https://jw.hn/ai-code-hygiene). Consolidate or document why they'…
10 occurrences
repo-level (10 hits)
duplicatesduplication
low System graph quality Integrity conf 1.00 4 occurrences Near-duplicate function bodies in 3 places
Functions with the same first-5-line body hash: tools/scripts/form-repair/fix_forms_minimal.py:color_hex, tools/scripts/form-repair/fix_forms_final.py:color_hex, tools/scripts/form-repair/fix_forms_definitive.py:color_hex This is *the* AI-coder failure mode (4× more duplication in vibe-coded repos…
4 occurrences
repo-level (4 hits)
duplicatesduplication
low System graph quality Integrity conf 1.00 5 occurrences Near-duplicate function bodies in 4 places
Functions with the same first-5-line body hash: tools/scripts/form-repair/fix_forms_minimal.py:process, tools/scripts/form-repair/fix_forms_final.py:process_file, tools/scripts/form-repair/fix_forms_definitive.py:process, tools/scripts/form-repair/fix_forms_v3.py:process_file This is *the* AI-code…
5 occurrences
repo-level (5 hits)
duplicatesduplication
low System graph quality Integrity conf 1.00 Near-duplicate function bodies in 9 places
Functions with the same first-5-line body hash: tools/scripts/form-repair/fix_forms_minimal.py:main, tools/scripts/form-repair/fix_corruption.py:main, tools/scripts/form-repair/consolidate_tabs.py:main, tools/scripts/form-repair/fix_sheetviews_v2.py:main This is *the* AI-coder failure mode (4× mor…
duplicatesduplication
low System graph quality License conf 1.00 No license file detected
No LICENSE/COPYING/NOTICE file was found. Generated repositories often omit licensing, which blocks reuse and automated intake.
Repo hardeningGenerated repo pattern
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `0_Pioneer_US_v2` in tools/scripts/registry/reference-data.mjs:47
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `_applyLineSpacingLegacy` in mom/scripts/portal/03-commands-layout.js:71
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `_fontSizeToLegacy` in mom/scripts/portal/06-tiptap-pilot.js:143
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `_renderOnlineFormsLegacy` in mom/scripts/portal/09-online-forms.js:3259
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `archived_legacy` in mom/tools/contracts/generate_business_contract_bundle.py:992
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `BrowserLegacy` in mom/scripts/portal/32-schema-studio.js:3050
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `claude_cli_opus_v1` in tools/scripts/translation/dcc_claude_cli_vi_to_en.py:427
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `controlled_copy` in tools/scripts/language-polish/deep_operational_vietnamese_pass_20260324b.mjs:264
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `fix_sheetviews_v2` in tools/scripts/form-repair/optimize_form_content.py:612
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `hesem_portal_view_state_v1` in mom/scripts/portal/02-state-auth-ui.js:10
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `is_deprecated` in mom/scripts/portal/32b-mstudio-lego-workbench.js:573
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `loadDraftLegacy` in mom/scripts/portal/09b-form-fill-download.js:906
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `machine_type_legacy` in mom/scripts/portal/13-master-data-control.js:272
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `matched_legacy` in mom/tools/registry/generate_wave2_canonical_governance.py:228
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `nllb_200_distilled_600m_int8_v1` in tools/scripts/translation/dcc_nllb_vi_to_en.py:104
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `openDowntimeModalLegacy` in mom/scripts/portal/14-mes-control-center.js:2053
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `qa_manager_v2` in mom/scripts/portal/00k-admin-roles.js:544
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `renderSignatureBlockLegacy` in mom/scripts/portal/10-eqms-form-runtime.js:1475
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `sec_old` in tools/renumber_gates_8.py:374
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `upgrade_lib_v2` in mom/docs/forms/design-system/batch_upgrade_all.py:23
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `upgrade_lib_v2` in mom/docs/forms/design-system/upgrade_lib_v2.py:2
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `variable_library_v2` in tools/scripts/generate_erp_variables.py:12
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph software Dead code conf 1.00 Possibly dead Python function: audit_domain
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
tools/auto-audit-pipeline.py:174
low System graph software Dead code conf 1.00 Possibly dead Python function: clear_cell
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
tools/scripts/form-repair/optimize_form_content.py:58

Showing first 300 of 420. Refine filters or use the findings page for deep search.

For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.
For AI agents + API integrations
Email me when this repo regresses
Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.
API access

This page is publicly accessible at: https://repobility.com/scan/31c0cf45-25a4-4052-912f-f27074a3ba68/

To check status programmatically (no auth required): 

curl -s https://repobility.com/api/v1/public/scan/31c0cf45-25a4-4052-912f-f27074a3ba68/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.