{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "scanner-1d5a63ba371ae714", "name": "Possibly dead Python function: t_sum3", "shortDescription": {"text": "Possibly dead Python function: t_sum3"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f7bf7378c82bd4a2", "name": "Possibly dead Python function: t_subadd", "shortDescription": {"text": "Possibly dead Python function: t_subadd"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8aa87d0c1f0a5b96", "name": "Possibly dead Python function: t_muladd", "shortDescription": {"text": "Possibly dead Python function: t_muladd"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a190f2a31314f28f", "name": "Possibly dead Python function: t_diff", "shortDescription": {"text": "Possibly dead Python function: t_diff"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-62698e46cd0f287e", "name": "Possibly dead Python function: one", "shortDescription": {"text": "Possibly dead Python function: one"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fba16674626ef256", "name": "Possibly dead Python function: one", "shortDescription": {"text": "Possibly dead Python function: one"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fd2164428971b0c3", "name": "Possibly dead Python function: one", "shortDescription": {"text": "Possibly dead Python function: one"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c12815b3be19ee01", "name": "Possibly dead Python function: one", "shortDescription": {"text": "Possibly dead Python function: one"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e6e346a6ad04ad60", "name": "Stray `console.log` in TS/JS \u2014 tests/reflow.test.ts:473", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 tests/reflow.test.ts:473"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b3918c87037ddc08", "name": "Stray `console.log` in TS/JS \u2014 scripts/gen-atlas.ts:134", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/gen-atlas.ts:134"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0f187087a48812b3", "name": "Stray `console.log` in TS/JS \u2014 src/node.ts:82", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 src/node.ts:82"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f4bbbb58c45296cf", "name": "Stray `console.log` in TS/JS \u2014 src/worker.ts:71", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 src/worker.ts:71"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a7bfe8a832634d14", "name": "Stray `console.log` in TS/JS \u2014 src/dashboard/vendor.ts:5", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 src/dashboard/vendor.ts:5"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4c69084e3a96fd54", "name": "Stray `console.log` in TS/JS \u2014 src/core/tracker.ts:373", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 src/core/tracker.ts:373"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6ad69ce7a309e801", "name": "Insecure pattern 'eval_used' in README.md:28", "shortDescription": {"text": "Insecure pattern 'eval_used' in README.md:28"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-9d1c1198c880ff8a", "name": "Insecure pattern 'node_child_process' in scripts/build.mjs:8", "shortDescription": {"text": "Insecure pattern 'node_child_process' in scripts/build.mjs:8"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1189887a249863c6", "name": "Insecure pattern 'eval_used' in eval/README.md:23", "shortDescription": {"text": "Insecure pattern 'eval_used' in eval/README.md:23"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-631b6e454878f4d6", "name": "Insecure pattern 'node_child_process' in eval/run-eval.mjs:28", "shortDescription": {"text": "Insecure pattern 'node_child_process' in eval/run-eval.mjs:28"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a7f776f339f05656", "name": "Insecure pattern 'subprocess_shell_true' in eval/swe-bench/run_pilot.py:28", "shortDescription": {"text": "Insecure pattern 'subprocess_shell_true' in eval/swe-bench/run_pilot.py:28"}, "fullDescription": {"text": "Found a known-risky pattern (subprocess_shell_true). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e961f5335cbc5676", "name": "Insecure pattern 'node_child_process' in eval/lib/anthropic-client.mjs:33", "shortDescription": {"text": "Insecure pattern 'node_child_process' in eval/lib/anthropic-client.mjs:33"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8fa827bb53d18afa", "name": "Possible secret in eval/corpus/sessions.json", "shortDescription": {"text": "Possible secret in eval/corpus/sessions.json"}, "fullDescription": {"text": "Detected pattern matching private_key. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-7e7b0f3f4f3232e9", "name": "Insecure pattern 'private_key_in_repo' in eval/corpus/sessions.json:78", "shortDescription": {"text": "Insecure pattern 'private_key_in_repo' in eval/corpus/sessions.json:78"}, "fullDescription": {"text": "Found a known-risky pattern (private_key_in_repo). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-118f23d676cfc0b4", "name": "Insecure pattern 'subprocess_shell_true' in eval/swe-bench-pro/run_pro.py:53", "shortDescription": {"text": "Insecure pattern 'subprocess_shell_true' in eval/swe-bench-pro/run_pro.py:53"}, "fullDescription": {"text": "Found a known-risky pattern (subprocess_shell_true). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-11bd16b5ee50fdcb", "name": "Insecure pattern 'subprocess_shell_true' in eval/swe-bench-pro/rep_nav.py:44", "shortDescription": {"text": "Insecure pattern 'subprocess_shell_true' in eval/swe-bench-pro/rep_nav.py:44"}, "fullDescription": {"text": "Found a known-risky pattern (subprocess_shell_true). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2dc6c3b019410a60", "name": "Insecure pattern 'cors_wildcard' in src/dashboard.ts:884", "shortDescription": {"text": "Insecure pattern 'cors_wildcard' in src/dashboard.ts:884"}, "fullDescription": {"text": "Found a known-risky pattern (cors_wildcard). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-76318ffc22c47551", "name": "Insecure pattern 'new_function_used' in src/dashboard/vendor.ts:5", "shortDescription": {"text": "Insecure pattern 'new_function_used' in src/dashboard/vendor.ts:5"}, "fullDescription": {"text": "Found a known-risky pattern (new_function_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-190a2bbbeee98362", "name": "Insecure pattern 'direct_innerhtml_assignment' in src/dashboard/vendor.ts:5", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in src/dashboard/vendor.ts:5"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d7afd5a18ac4286c", "name": "Insecure pattern 'insert_adjacent_html' in src/dashboard/vendor.ts:5", "shortDescription": {"text": "Insecure pattern 'insert_adjacent_html' in src/dashboard/vendor.ts:5"}, "fullDescription": {"text": "Found a known-risky pattern (insert_adjacent_html). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1838a141491ce38c", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1061880dd5d9b6a7", "name": "Very large file: tests/render.test.ts (2299 lines)", "shortDescription": {"text": "Very large file: tests/render.test.ts (2299 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-67e27c0e4e368d24", "name": "Very large file: src/dashboard.ts (1111 lines)", "shortDescription": {"text": "Very large file: src/dashboard.ts (1111 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1103ec049ece7b10", "name": "Very large file: src/core/transform.ts (2698 lines)", "shortDescription": {"text": "Very large file: src/core/transform.ts (2698 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3ab5d313dda8e5f9", "name": "Debug logging residue appears in source files", "shortDescription": {"text": "Debug logging residue appears in source files"}, "fullDescription": {"text": "Found 138 console/debugger/print-style debug statements in non-test source. This is a common fast-generation residue before production cleanup."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2d0c7b7ab8f8aacf", "name": "Critical user flow still appears backed by mock or placeholder data", "shortDescription": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "fullDescription": {"text": "A payment/auth/admin/order/billing-style flow contains mock, fake, TODO, dummy, or placeholder markers in runtime source. In the Fable corpus this is a high-leverage completeness smell: the app can look finished while the money, identity, or tenant flow is still scaffolded."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ea8f3013f588db25", "name": "Shallow git history limits provenance confidence", "shortDescription": {"text": "Shallow git history limits provenance confidence"}, "fullDescription": {"text": "The repository is a shallow clone. Origin/evolution analysis cannot distinguish fresh generation, imported legacy code, or long-lived human code with high confidence."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8424db9c75e04ba4", "name": "Very short observed git history", "shortDescription": {"text": "Very short observed git history"}, "fullDescription": {"text": "The repo has multiple source files but two or fewer visible commits. This is not a failure by itself, but it lowers confidence in evolution-based diagnosis."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-d26addd66c784127", "name": "Commented-code block (5 lines) in tests/proxy-usage.test.ts:448", "shortDescription": {"text": "Commented-code block (5 lines) in tests/proxy-usage.test.ts:448"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-e8f1f02ca66a9bd3", "name": "Commented-code block (7 lines) in tests/render.test.ts:221", "shortDescription": {"text": "Commented-code block (7 lines) in tests/render.test.ts:221"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-cbe9b885adf82dcd", "name": "Commented-code block (7 lines) in tests/history.test.ts:262", "shortDescription": {"text": "Commented-code block (7 lines) in tests/history.test.ts:262"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-6126a59336131802", "name": "Commented-code block (8 lines) in tests/tracker.test.ts:69", "shortDescription": {"text": "Commented-code block (8 lines) in tests/tracker.test.ts:69"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-956915abf76b681e", "name": "Commented-code block (8 lines) in tests/gate-flap.test.ts:44", "shortDescription": {"text": "Commented-code block (8 lines) in tests/gate-flap.test.ts:44"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-03fc2bc28d0890f8", "name": "Commented-code block (6 lines) in scripts/gen-atlas.ts:291", "shortDescription": {"text": "Commented-code block (6 lines) in scripts/gen-atlas.ts:291"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-5ca3e6807f14a8e6", "name": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/vendor-ui.mjs:17", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/vendor-ui.mjs:17"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e5e5fffc53fc002b", "name": "Commented-code block (6 lines) in eval/eval-l1-ocr.mjs:137", "shortDescription": {"text": "Commented-code block (6 lines) in eval/eval-l1-ocr.mjs:137"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-25423de204ac3058", "name": "Network/subprocess call without timeout or try/except \u2014 eval/swe-bench/run_pilot.py:28", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 eval/swe-bench/run_pilot.py:28"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9a3e85566e32af69", "name": "Network/subprocess call without timeout or try/except \u2014 eval/swe-bench-pro/run_pro.py:53", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 eval/swe-bench-pro/run_pro.py:53"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-00a37a1861f32942", "name": "Network/subprocess call without timeout or try/except \u2014 eval/swe-bench-pro/rep_nav.py:44", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 eval/swe-bench-pro/rep_nav.py:44"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0700f09657d8ba90", "name": "Commented-code block (5 lines) in src/dashboard.ts:183", "shortDescription": {"text": "Commented-code block (5 lines) in src/dashboard.ts:183"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-49b9f1d345b01bff", "name": "Commented-code block (7 lines) in src/node.ts:445", "shortDescription": {"text": "Commented-code block (7 lines) in src/node.ts:445"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-efdb08868f9cb2f1", "name": "Commented-code block (5 lines) in src/worker.ts:55", "shortDescription": {"text": "Commented-code block (5 lines) in src/worker.ts:55"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-1125352410714dbe", "name": "`fetch()` without try/.catch or AbortSignal \u2014 src/worker.ts:47", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/worker.ts:47"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9e8727918678b0af", "name": "Commented-code block (9 lines) in src/dashboard/fragments.ts:500", "shortDescription": {"text": "Commented-code block (9 lines) in src/dashboard/fragments.ts:500"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-742d942fa53893b0", "name": "Legacy-named symbol `uptime_sec_unused` in src/dashboard/types.ts:52", "shortDescription": {"text": "Legacy-named symbol `uptime_sec_unused` in src/dashboard/types.ts:52"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ab029350fc98ee25", "name": "Commented-code block (6 lines) in src/core/transform.ts:177", "shortDescription": {"text": "Commented-code block (6 lines) in src/core/transform.ts:177"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-695f22fdc5b51fd7", "name": "Commented-code block (7 lines) in src/core/history.ts:189", "shortDescription": {"text": "Commented-code block (7 lines) in src/core/history.ts:189"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-6a9727cbafabc69a", "name": "Commented-code block (7 lines) in src/core/render.ts:188", "shortDescription": {"text": "Commented-code block (7 lines) in src/core/render.ts:188"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-7ede49c4b17e247a", "name": "Commented-code block (6 lines) in src/core/atlas.ts:1", "shortDescription": {"text": "Commented-code block (6 lines) in src/core/atlas.ts:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-1e8d5221abf43061", "name": "Commented-code block (5 lines) in src/core/proxy.ts:397", "shortDescription": {"text": "Commented-code block (5 lines) in src/core/proxy.ts:397"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-7f6040c72342a344", "name": "Commented-code block (5 lines) in src/core/tracker.ts:353", "shortDescription": {"text": "Commented-code block (5 lines) in src/core/tracker.ts:353"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-be46ea126aa5d8dc", "name": "Near-duplicate function bodies in 3 places", "shortDescription": {"text": "Near-duplicate function bodies in 3 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\neval/gist-recall/run3.py:ask, eval/gist-recall/run2.py:ask, eval/gist-recall/run.py:ask\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/20896"}, "properties": {"repository": "teamchong/pxpipe", "repoUrl": "https://github.com/teamchong/pxpipe", "branch": "main"}, "results": [{"ruleId": "scanner-1d5a63ba371ae714", "level": "note", "message": {"text": "Possibly dead Python function: t_sum3"}, "properties": {"repobilityId": "3aea7f61d2f92710", "scanner": "scanner-primary", "fingerprint": "1d5a63ba371ae714", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "eval/gsm8k/gen_novel.py:8"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f7bf7378c82bd4a2", "level": "note", "message": {"text": "Possibly dead Python function: t_subadd"}, "properties": {"repobilityId": "0644960bd1b74d0f", "scanner": "scanner-primary", "fingerprint": "f7bf7378c82bd4a2", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "eval/gsm8k/gen_novel.py:12"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8aa87d0c1f0a5b96", "level": "note", "message": {"text": "Possibly dead Python function: t_muladd"}, "properties": {"repobilityId": "4d713f4373436b13", "scanner": "scanner-primary", "fingerprint": "8aa87d0c1f0a5b96", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "eval/gsm8k/gen_novel.py:16"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a190f2a31314f28f", "level": "note", "message": {"text": "Possibly dead Python function: t_diff"}, "properties": {"repobilityId": "4316c64e4f3d4020", "scanner": "scanner-primary", "fingerprint": "a190f2a31314f28f", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "eval/gsm8k/gen_novel.py:20"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-62698e46cd0f287e", "level": "note", "message": {"text": "Possibly dead Python function: one"}, "properties": {"repobilityId": "692200a7e4dd59b4", "scanner": "scanner-primary", "fingerprint": "62698e46cd0f287e", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "eval/gsm8k/bench.py:33"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-fba16674626ef256", "level": "note", "message": {"text": "Possibly dead Python function: one"}, "properties": {"repobilityId": "692200a7e4dd59b4", "scanner": "scanner-primary", "fingerprint": "fba16674626ef256", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "eval/gist-recall/run3.py:20"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-fd2164428971b0c3", "level": "note", "message": {"text": "Possibly dead Python function: one"}, "properties": {"repobilityId": "692200a7e4dd59b4", "scanner": "scanner-primary", "fingerprint": "fd2164428971b0c3", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "eval/gist-recall/run2.py:20"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c12815b3be19ee01", "level": "note", "message": {"text": "Possibly dead Python function: one"}, "properties": {"repobilityId": "692200a7e4dd59b4", "scanner": "scanner-primary", "fingerprint": "c12815b3be19ee01", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "eval/gist-recall/run.py:20"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e6e346a6ad04ad60", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 tests/reflow.test.ts:473"}, "properties": {"repobilityId": "a5b6f58845b76786", "scanner": "scanner-primary", "fingerprint": "e6e346a6ad04ad60", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-b3918c87037ddc08", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/gen-atlas.ts:134"}, "properties": {"repobilityId": "edd9aa91bdb97d40", "scanner": "scanner-primary", "fingerprint": "b3918c87037ddc08", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-0f187087a48812b3", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 src/node.ts:82"}, "properties": {"repobilityId": "4359c23e271ed862", "scanner": "scanner-primary", "fingerprint": "0f187087a48812b3", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-f4bbbb58c45296cf", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 src/worker.ts:71"}, "properties": {"repobilityId": "2398a1d5dd9ae505", "scanner": "scanner-primary", "fingerprint": "f4bbbb58c45296cf", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-a7bfe8a832634d14", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 src/dashboard/vendor.ts:5"}, "properties": {"repobilityId": "fd9bf020f7236681", "scanner": "scanner-primary", "fingerprint": "a7bfe8a832634d14", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-4c69084e3a96fd54", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 src/core/tracker.ts:373"}, "properties": {"repobilityId": "883d841423144ba9", "scanner": "scanner-primary", "fingerprint": "4c69084e3a96fd54", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-6ad69ce7a309e801", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in README.md:28"}, "properties": {"repobilityId": "e44bf8409cbb7354", "scanner": "scanner-primary", "fingerprint": "6ad69ce7a309e801", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "README.md"}, "region": {"startLine": 28}}}]}, {"ruleId": "scanner-9d1c1198c880ff8a", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in scripts/build.mjs:8"}, "properties": {"repobilityId": "a7d0f47b903899f9", "scanner": "scanner-primary", "fingerprint": "9d1c1198c880ff8a", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/build.mjs"}, "region": {"startLine": 8}}}]}, {"ruleId": "scanner-1189887a249863c6", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in eval/README.md:23"}, "properties": {"repobilityId": "beabb31a3d714c56", "scanner": "scanner-primary", "fingerprint": "1189887a249863c6", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "eval/README.md"}, "region": {"startLine": 23}}}]}, {"ruleId": "scanner-631b6e454878f4d6", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in eval/run-eval.mjs:28"}, "properties": {"repobilityId": "436ede1accd0bed5", "scanner": "scanner-primary", "fingerprint": "631b6e454878f4d6", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "eval/run-eval.mjs"}, "region": {"startLine": 28}}}]}, {"ruleId": "scanner-a7f776f339f05656", "level": "warning", "message": {"text": "Insecure pattern 'subprocess_shell_true' in eval/swe-bench/run_pilot.py:28"}, "properties": {"repobilityId": "12627527c791c528", "scanner": "scanner-primary", "fingerprint": "a7f776f339f05656", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "subprocess_shell_true"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "eval/swe-bench/run_pilot.py"}, "region": {"startLine": 28}}}]}, {"ruleId": "scanner-e961f5335cbc5676", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in eval/lib/anthropic-client.mjs:33"}, "properties": {"repobilityId": "7851c4991b0d1a78", "scanner": "scanner-primary", "fingerprint": "e961f5335cbc5676", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "eval/lib/anthropic-client.mjs"}, "region": {"startLine": 33}}}]}, {"ruleId": "scanner-8fa827bb53d18afa", "level": "error", "message": {"text": "Possible secret in eval/corpus/sessions.json"}, "properties": {"repobilityId": "7a1704092a581392", "scanner": "scanner-primary", "fingerprint": "8fa827bb53d18afa", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "eval/corpus/sessions.json"}, "region": {"startLine": 78}}}]}, {"ruleId": "scanner-8fa827bb53d18afa", "level": "error", "message": {"text": "Possible secret in eval/corpus/sessions.json"}, "properties": {"repobilityId": "7a1704092a581392", "scanner": "scanner-primary", "fingerprint": "8fa827bb53d18afa", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "eval/corpus/sessions.json"}, "region": {"startLine": 78}}}]}, {"ruleId": "scanner-7e7b0f3f4f3232e9", "level": "error", "message": {"text": "Insecure pattern 'private_key_in_repo' in eval/corpus/sessions.json:78"}, "properties": {"repobilityId": "0d40d420f761573a", "scanner": "scanner-primary", "fingerprint": "7e7b0f3f4f3232e9", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["owasp", "private_key_in_repo"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "eval/corpus/sessions.json"}, "region": {"startLine": 78}}}]}, {"ruleId": "scanner-118f23d676cfc0b4", "level": "warning", "message": {"text": "Insecure pattern 'subprocess_shell_true' in eval/swe-bench-pro/run_pro.py:53"}, "properties": {"repobilityId": "d7e2efa63641a2a2", "scanner": "scanner-primary", "fingerprint": "118f23d676cfc0b4", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "subprocess_shell_true"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "eval/swe-bench-pro/run_pro.py"}, "region": {"startLine": 53}}}]}, {"ruleId": "scanner-11bd16b5ee50fdcb", "level": "warning", "message": {"text": "Insecure pattern 'subprocess_shell_true' in eval/swe-bench-pro/rep_nav.py:44"}, "properties": {"repobilityId": "bf4f7b0b76d79177", "scanner": "scanner-primary", "fingerprint": "11bd16b5ee50fdcb", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "subprocess_shell_true"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "eval/swe-bench-pro/rep_nav.py"}, "region": {"startLine": 44}}}]}, {"ruleId": "scanner-2dc6c3b019410a60", "level": "warning", "message": {"text": "Insecure pattern 'cors_wildcard' in src/dashboard.ts:884"}, "properties": {"repobilityId": "1b3cb00715a5922f", "scanner": "scanner-primary", "fingerprint": "2dc6c3b019410a60", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "cors_wildcard"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/dashboard.ts"}, "region": {"startLine": 884}}}]}, {"ruleId": "scanner-76318ffc22c47551", "level": "error", "message": {"text": "Insecure pattern 'new_function_used' in src/dashboard/vendor.ts:5"}, "properties": {"repobilityId": "805869e88808a15d", "scanner": "scanner-primary", "fingerprint": "76318ffc22c47551", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "new_function_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/dashboard/vendor.ts"}, "region": {"startLine": 5}}}]}, {"ruleId": "scanner-190a2bbbeee98362", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in src/dashboard/vendor.ts:5"}, "properties": {"repobilityId": "8500eff60264a239", "scanner": "scanner-primary", "fingerprint": "190a2bbbeee98362", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/dashboard/vendor.ts"}, "region": {"startLine": 5}}}]}, {"ruleId": "scanner-d7afd5a18ac4286c", "level": "warning", "message": {"text": "Insecure pattern 'insert_adjacent_html' in src/dashboard/vendor.ts:5"}, "properties": {"repobilityId": "9e010700f8543754", "scanner": "scanner-primary", "fingerprint": "d7afd5a18ac4286c", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "insert_adjacent_html"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/dashboard/vendor.ts"}, "region": {"startLine": 5}}}]}, {"ruleId": "scanner-1838a141491ce38c", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "b8fd4f5048f96576", "scanner": "scanner-primary", "fingerprint": "1838a141491ce38c", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1061880dd5d9b6a7", "level": "note", "message": {"text": "Very large file: tests/render.test.ts (2299 lines)"}, "properties": {"repobilityId": "577592bcdc5b567f", "scanner": "scanner-primary", "fingerprint": "1061880dd5d9b6a7", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-67e27c0e4e368d24", "level": "note", "message": {"text": "Very large file: src/dashboard.ts (1111 lines)"}, "properties": {"repobilityId": "6279851bfbca74c6", "scanner": "scanner-primary", "fingerprint": "67e27c0e4e368d24", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-1103ec049ece7b10", "level": "note", "message": {"text": "Very large file: src/core/transform.ts (2698 lines)"}, "properties": {"repobilityId": "c81bb0b96e29f3be", "scanner": "scanner-primary", "fingerprint": "1103ec049ece7b10", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-3ab5d313dda8e5f9", "level": "note", "message": {"text": "Debug logging residue appears in source files"}, "properties": {"repobilityId": "27fa206e96d66e8a", "scanner": "scanner-primary", "fingerprint": "3ab5d313dda8e5f9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["debug", "cleanup", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-2d0c7b7ab8f8aacf", "level": "warning", "message": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "properties": {"repobilityId": "f8e15b28e871f352", "scanner": "scanner-primary", "fingerprint": "2d0c7b7ab8f8aacf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "critical-flow", "generated-repo-pattern"]}}, {"ruleId": "scanner-ea8f3013f588db25", "level": "note", "message": {"text": "Shallow git history limits provenance confidence"}, "properties": {"repobilityId": "c5fd9cf01a23cc5c", "scanner": "scanner-primary", "fingerprint": "ea8f3013f588db25", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-8424db9c75e04ba4", "level": "none", "message": {"text": "Very short observed git history"}, "properties": {"repobilityId": "0490b61b4af3d46d", "scanner": "scanner-primary", "fingerprint": "8424db9c75e04ba4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-d26addd66c784127", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/proxy-usage.test.ts:448"}, "properties": {"repobilityId": "1d304fdec33dac33", "scanner": "scanner-primary", "fingerprint": "d26addd66c784127", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-e8f1f02ca66a9bd3", "level": "none", "message": {"text": "Commented-code block (7 lines) in tests/render.test.ts:221"}, "properties": {"repobilityId": "059a6c209095e91d", "scanner": "scanner-primary", "fingerprint": "e8f1f02ca66a9bd3", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-cbe9b885adf82dcd", "level": "none", "message": {"text": "Commented-code block (7 lines) in tests/history.test.ts:262"}, "properties": {"repobilityId": "188822bfcdca2be6", "scanner": "scanner-primary", "fingerprint": "cbe9b885adf82dcd", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-6126a59336131802", "level": "none", "message": {"text": "Commented-code block (8 lines) in tests/tracker.test.ts:69"}, "properties": {"repobilityId": "cf620950d1279d14", "scanner": "scanner-primary", "fingerprint": "6126a59336131802", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-956915abf76b681e", "level": "none", "message": {"text": "Commented-code block (8 lines) in tests/gate-flap.test.ts:44"}, "properties": {"repobilityId": "5a35278478bdcb61", "scanner": "scanner-primary", "fingerprint": "956915abf76b681e", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-03fc2bc28d0890f8", "level": "none", "message": {"text": "Commented-code block (6 lines) in scripts/gen-atlas.ts:291"}, "properties": {"repobilityId": "ea45ff0d6cb24b77", "scanner": "scanner-primary", "fingerprint": "03fc2bc28d0890f8", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-5ca3e6807f14a8e6", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/vendor-ui.mjs:17"}, "properties": {"repobilityId": "2c995096a5060e62", "scanner": "scanner-primary", "fingerprint": "5ca3e6807f14a8e6", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-e5e5fffc53fc002b", "level": "none", "message": {"text": "Commented-code block (6 lines) in eval/eval-l1-ocr.mjs:137"}, "properties": {"repobilityId": "c85b3e3dd1dca38b", "scanner": "scanner-primary", "fingerprint": "e5e5fffc53fc002b", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-25423de204ac3058", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 eval/swe-bench/run_pilot.py:28"}, "properties": {"repobilityId": "282880a66d507c27", "scanner": "scanner-primary", "fingerprint": "25423de204ac3058", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-9a3e85566e32af69", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 eval/swe-bench-pro/run_pro.py:53"}, "properties": {"repobilityId": "503fc41c41ab7408", "scanner": "scanner-primary", "fingerprint": "9a3e85566e32af69", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-00a37a1861f32942", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 eval/swe-bench-pro/rep_nav.py:44"}, "properties": {"repobilityId": "c8200763731a3834", "scanner": "scanner-primary", "fingerprint": "00a37a1861f32942", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-0700f09657d8ba90", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/dashboard.ts:183"}, "properties": {"repobilityId": "8991d5c0515fb580", "scanner": "scanner-primary", "fingerprint": "0700f09657d8ba90", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-49b9f1d345b01bff", "level": "none", "message": {"text": "Commented-code block (7 lines) in src/node.ts:445"}, "properties": {"repobilityId": "66000a8c274e74f6", "scanner": "scanner-primary", "fingerprint": "49b9f1d345b01bff", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-efdb08868f9cb2f1", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/worker.ts:55"}, "properties": {"repobilityId": "3f7539fca48807a6", "scanner": "scanner-primary", "fingerprint": "efdb08868f9cb2f1", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-1125352410714dbe", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/worker.ts:47"}, "properties": {"repobilityId": "35e3369055e38bf7", "scanner": "scanner-primary", "fingerprint": "1125352410714dbe", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-9e8727918678b0af", "level": "none", "message": {"text": "Commented-code block (9 lines) in src/dashboard/fragments.ts:500"}, "properties": {"repobilityId": "f052ebc66c291c17", "scanner": "scanner-primary", "fingerprint": "9e8727918678b0af", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-742d942fa53893b0", "level": "note", "message": {"text": "Legacy-named symbol `uptime_sec_unused` in src/dashboard/types.ts:52"}, "properties": {"repobilityId": "ea59b23ebfad18ca", "scanner": "scanner-primary", "fingerprint": "742d942fa53893b0", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-ab029350fc98ee25", "level": "none", "message": {"text": "Commented-code block (6 lines) in src/core/transform.ts:177"}, "properties": {"repobilityId": "c094be89767a847b", "scanner": "scanner-primary", "fingerprint": "ab029350fc98ee25", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-695f22fdc5b51fd7", "level": "none", "message": {"text": "Commented-code block (7 lines) in src/core/history.ts:189"}, "properties": {"repobilityId": "c263d0c59e67ed4d", "scanner": "scanner-primary", "fingerprint": "695f22fdc5b51fd7", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-6a9727cbafabc69a", "level": "none", "message": {"text": "Commented-code block (7 lines) in src/core/render.ts:188"}, "properties": {"repobilityId": "4f65b1cf29ea291b", "scanner": "scanner-primary", "fingerprint": "6a9727cbafabc69a", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-7ede49c4b17e247a", "level": "none", "message": {"text": "Commented-code block (6 lines) in src/core/atlas.ts:1"}, "properties": {"repobilityId": "7daf7ae1d87b0bd9", "scanner": "scanner-primary", "fingerprint": "7ede49c4b17e247a", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-1e8d5221abf43061", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/core/proxy.ts:397"}, "properties": {"repobilityId": "5e44548578ee4dec", "scanner": "scanner-primary", "fingerprint": "1e8d5221abf43061", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-7f6040c72342a344", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/core/tracker.ts:353"}, "properties": {"repobilityId": "d5f884f7972813dc", "scanner": "scanner-primary", "fingerprint": "7f6040c72342a344", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-be46ea126aa5d8dc", "level": "note", "message": {"text": "Near-duplicate function bodies in 3 places"}, "properties": {"repobilityId": "2208b22981f40d58", "scanner": "scanner-primary", "fingerprint": "be46ea126aa5d8dc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-be46ea126aa5d8dc", "level": "note", "message": {"text": "Near-duplicate function bodies in 3 places"}, "properties": {"repobilityId": "66eb8aaa24b80f8a", "scanner": "scanner-primary", "fingerprint": "be46ea126aa5d8dc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-be46ea126aa5d8dc", "level": "note", "message": {"text": "Near-duplicate function bodies in 3 places"}, "properties": {"repobilityId": "a6d81b26648d5779", "scanner": "scanner-primary", "fingerprint": "be46ea126aa5d8dc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-be46ea126aa5d8dc", "level": "note", "message": {"text": "Near-duplicate function bodies in 3 places"}, "properties": {"repobilityId": "cbcf7475f1eebe93", "scanner": "scanner-primary", "fingerprint": "be46ea126aa5d8dc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}]}]}