{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "scanner-56517501981edc85", "name": "Stray `console.log` in TS/JS \u2014 final-login-test.js:8", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 final-login-test.js:8"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a867dd0132c59d7e", "name": "Stray `console.log` in TS/JS \u2014 login-test.js:8", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 login-test.js:8"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1ef54b64bca88f3e", "name": "Stray `console.log` in TS/JS \u2014 dashboard-inspect.js:8", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 dashboard-inspect.js:8"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-65d706b082b23601", "name": "Stray `console.log` in TS/JS \u2014 verify_login.js:14", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 verify_login.js:14"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-aa2af86c04cbaa24", "name": "Stray `console.log` in TS/JS \u2014 detailed-test.js:16", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 detailed-test.js:16"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-042a019e36c3bbdc", "name": "Stray `console.log` in TS/JS \u2014 test-login-flow.js:4", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 test-login-flow.js:4"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3e00d0180cd2234a", "name": "Stray `console.log` in TS/JS \u2014 test-chatbots.js:16", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 test-chatbots.js:16"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d0e16cdd8d6990ee", "name": "Icon-only button without accessible name \u2014 src/components/ChatWidget/AppointmentBookingModal.jsx:122", "shortDescription": {"text": "Icon-only button without accessible name \u2014 src/components/ChatWidget/AppointmentBookingModal.jsx:122"}, "fullDescription": {"text": "A `<button>` whose only child is a single glyph or symbol needs `title=` or `aria-label=` so screen readers (and tooltips on hover) work.\n\nWhy: P3 in CHECKLIST.md \u2014 icon-only buttons skipped a title.\nRule id: fq.button.no-label"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a30d2afafa8624b2", "name": "Icon-only button without accessible name \u2014 src/components/Calendar/AppointmentDrawer.jsx:58", "shortDescription": {"text": "Icon-only button without accessible name \u2014 src/components/Calendar/AppointmentDrawer.jsx:58"}, "fullDescription": {"text": "A `<button>` whose only child is a single glyph or symbol needs `title=` or `aria-label=` so screen readers (and tooltips on hover) work.\n\nWhy: P3 in CHECKLIST.md \u2014 icon-only buttons skipped a title.\nRule id: fq.button.no-label"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1f9506915c5e96b0", "name": "Stray `console.log` in TS/JS \u2014 src/pages/private/operacion/ConversationDetail.jsx:45", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 src/pages/private/operacion/ConversationDetail.jsx:45"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c350dc7ae11f0ca1", "name": "Stray `console.log` in TS/JS \u2014 src/pages/private/operacion/QuoteDetail.jsx:19", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 src/pages/private/operacion/QuoteDetail.jsx:19"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1590b646ccf60d61", "name": "Insecure pattern 'direct_innerhtml_assignment' in src/utils/generateFullChatHtml.js:166", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in src/utils/generateFullChatHtml.js:166"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ef76638773a6964d", "name": "Insecure pattern 'document_write' in src/components/BotDetail/TableQRCode.jsx:14", "shortDescription": {"text": "Insecure pattern 'document_write' in src/components/BotDetail/TableQRCode.jsx:14"}, "fullDescription": {"text": "Found a known-risky pattern (document_write). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-004baa0fc3385e45", "name": "Insecure pattern 'local_storage_auth_token' in src/pages/public/Login.jsx:29", "shortDescription": {"text": "Insecure pattern 'local_storage_auth_token' in src/pages/public/Login.jsx:29"}, "fullDescription": {"text": "Found a known-risky pattern (local_storage_auth_token). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6840729c6d50b90d", "name": "Insecure pattern 'local_storage_auth_token' in src/pages/public/Signup.jsx:49", "shortDescription": {"text": "Insecure pattern 'local_storage_auth_token' in src/pages/public/Signup.jsx:49"}, "fullDescription": {"text": "Found a known-risky pattern (local_storage_auth_token). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4e26c82474247ff4", "name": "Insecure pattern 'local_storage_auth_token' in src/pages/public/GoogleCallback.jsx:34", "shortDescription": {"text": "Insecure pattern 'local_storage_auth_token' in src/pages/public/GoogleCallback.jsx:34"}, "fullDescription": {"text": "Found a known-risky pattern (local_storage_auth_token). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-fa4e7264a6eb0a33", "name": "Insecure pattern 'local_storage_auth_token' in src/pages/public/AcceptInvite.jsx:46", "shortDescription": {"text": "Insecure pattern 'local_storage_auth_token' in src/pages/public/AcceptInvite.jsx:46"}, "fullDescription": {"text": "Found a known-risky pattern (local_storage_auth_token). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d0fe3bdb9161eed0", "name": "Insecure pattern 'direct_innerhtml_assignment' in public/embed.html:444", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in public/embed.html:444"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5cfb9e306a9c9f70", "name": "Insecure pattern 'direct_innerhtml_assignment' in public/fullchat.html:410", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in public/fullchat.html:410"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c3cf556326d26d8b", "name": "Insecure pattern 'direct_innerhtml_assignment' in public/gpt-imfluid.html:636", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in public/gpt-imfluid.html:636"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1ac69b6f67712130", "name": "Insecure pattern 'direct_innerhtml_assignment' in public/gpt.html:689", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in public/gpt.html:689"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-00ed4a495b97c6a0", "name": "Insecure pattern 'direct_innerhtml_assignment' in public/gpt-larufina.html:636", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in public/gpt-larufina.html:636"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ce621aa3b8726027", "name": "Very large file: src/pages/private/chatbots/BotDetail.jsx (1326 lines)", "shortDescription": {"text": "Very large file: src/pages/private/chatbots/BotDetail.jsx (1326 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6893a6c8b0861585", "name": "Very low test-to-source ratio", "shortDescription": {"text": "Very low test-to-source ratio"}, "fullDescription": {"text": "6 test file(s) for 95 source file(s) (ratio 0.06). Consider adding integration or unit tests for critical paths."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-141b30a41e03817b", "name": "No license file detected", "shortDescription": {"text": "No license file detected"}, "fullDescription": {"text": "No LICENSE/COPYING/NOTICE file was found. Generated repositories often omit licensing, which blocks reuse and automated intake."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3ab5d313dda8e5f9", "name": "Debug logging residue appears in source files", "shortDescription": {"text": "Debug logging residue appears in source files"}, "fullDescription": {"text": "Found 200 console/debugger/print-style debug statements in non-test source. This is a common fast-generation residue before production cleanup."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-72b2a6250083a784", "name": "Placeholder or mock-heavy implementation detected", "shortDescription": {"text": "Placeholder or mock-heavy implementation detected"}, "fullDescription": {"text": "Found 161 placeholder/mock markers across 32 source files. This often means the repo looks complete while core flows still use generated scaffolding or fake data."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2d0c7b7ab8f8aacf", "name": "Critical user flow still appears backed by mock or placeholder data", "shortDescription": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "fullDescription": {"text": "A payment/auth/admin/order/billing-style flow contains mock, fake, TODO, dummy, or placeholder markers in runtime source. In the Fable corpus this is a high-leverage completeness smell: the app can look finished while the money, identity, or tenant flow is still scaffolded."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b9088664ace7f748", "name": "Composite production-readiness gap", "shortDescription": {"text": "Composite production-readiness gap"}, "fullDescription": {"text": "Multiple low-cost hardening controls are missing together: license, ci, tests. Opus verification showed these co-occurring gaps are a better readiness signal than reading each flag in isolation."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-156ebac62c9f28b4", "name": "`fetch()` without try/.catch or AbortSignal \u2014 src/utils/generateFullChatHtml.js:150", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/utils/generateFullChatHtml.js:150"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1b5a76780c3df9aa", "name": "1 env vars used in code but missing from .env.example", "shortDescription": {"text": "1 env vars used in code but missing from .env.example"}, "fullDescription": {"text": "Drift between code and config docs. The first few: `VITE_APP_URL`. Add them (with a placeholder/comment) to .env.example so onboarding doesn't break."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-bcedec6fd1f2dbfc", "name": "Frontend route `/auth/google/success` has no Link/navigate to it \u2014 src/App.jsx", "shortDescription": {"text": "Frontend route `/auth/google/success` has no Link/navigate to it \u2014 src/App.jsx"}, "fullDescription": {"text": "The route is registered but no `<Link to=\u2026>` or `navigate(\u2026)` in the codebase navigates here. Either it's reachable only via direct URL (intentional), it's dead, or the link broke during a refactor."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-db6f00a52c36d3de", "name": "Frontend route `/verificar-email` has no Link/navigate to it \u2014 src/App.jsx", "shortDescription": {"text": "Frontend route `/verificar-email` has no Link/navigate to it \u2014 src/App.jsx"}, "fullDescription": {"text": "The route is registered but no `<Link to=\u2026>` or `navigate(\u2026)` in the codebase navigates here. Either it's reachable only via direct URL (intentional), it's dead, or the link broke during a refactor."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0c145881cf107489", "name": "Frontend route `/invitar` has no Link/navigate to it \u2014 src/App.jsx", "shortDescription": {"text": "Frontend route `/invitar` has no Link/navigate to it \u2014 src/App.jsx"}, "fullDescription": {"text": "The route is registered but no `<Link to=\u2026>` or `navigate(\u2026)` in the codebase navigates here. Either it's reachable only via direct URL (intentional), it's dead, or the link broke during a refactor."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-106ce0da0cab4419", "name": "Frontend route `/mesa/:tableToken` has no Link/navigate to it \u2014 src/App.jsx", "shortDescription": {"text": "Frontend route `/mesa/:tableToken` has no Link/navigate to it \u2014 src/App.jsx"}, "fullDescription": {"text": "The route is registered but no `<Link to=\u2026>` or `navigate(\u2026)` in the codebase navigates here. Either it's reachable only via direct URL (intentional), it's dead, or the link broke during a refactor."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-03351e8415b0577b", "name": "Frontend route `/chat/:embedKey` has no Link/navigate to it \u2014 src/App.jsx", "shortDescription": {"text": "Frontend route `/chat/:embedKey` has no Link/navigate to it \u2014 src/App.jsx"}, "fullDescription": {"text": "The route is registered but no `<Link to=\u2026>` or `navigate(\u2026)` in the codebase navigates here. Either it's reachable only via direct URL (intentional), it's dead, or the link broke during a refactor."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5b8da95310dab68a", "name": "Frontend route `/widget` has no Link/navigate to it \u2014 src/App.jsx", "shortDescription": {"text": "Frontend route `/widget` has no Link/navigate to it \u2014 src/App.jsx"}, "fullDescription": {"text": "The route is registered but no `<Link to=\u2026>` or `navigate(\u2026)` in the codebase navigates here. Either it's reachable only via direct URL (intentional), it's dead, or the link broke during a refactor."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c4c69f24314d98c3", "name": "Frontend route `/cotizacion/:id` has no Link/navigate to it \u2014 src/App.jsx", "shortDescription": {"text": "Frontend route `/cotizacion/:id` has no Link/navigate to it \u2014 src/App.jsx"}, "fullDescription": {"text": "The route is registered but no `<Link to=\u2026>` or `navigate(\u2026)` in the codebase navigates here. Either it's reachable only via direct URL (intentional), it's dead, or the link broke during a refactor."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7fac04d0b18c2cd8", "name": "Frontend route `/cotizacion-publica` has no Link/navigate to it \u2014 src/App.jsx", "shortDescription": {"text": "Frontend route `/cotizacion-publica` has no Link/navigate to it \u2014 src/App.jsx"}, "fullDescription": {"text": "The route is registered but no `<Link to=\u2026>` or `navigate(\u2026)` in the codebase navigates here. Either it's reachable only via direct URL (intentional), it's dead, or the link broke during a refactor."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1e28fca0858db6df", "name": "Frontend route `/chatbots/:id` has no Link/navigate to it \u2014 src/App.jsx", "shortDescription": {"text": "Frontend route `/chatbots/:id` has no Link/navigate to it \u2014 src/App.jsx"}, "fullDescription": {"text": "The route is registered but no `<Link to=\u2026>` or `navigate(\u2026)` in the codebase navigates here. Either it's reachable only via direct URL (intentional), it's dead, or the link broke during a refactor."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-59aa1466bc24cfec", "name": "Frontend route `/chatbots/:id/embed` has no Link/navigate to it \u2014 src/App.jsx", "shortDescription": {"text": "Frontend route `/chatbots/:id/embed` has no Link/navigate to it \u2014 src/App.jsx"}, "fullDescription": {"text": "The route is registered but no `<Link to=\u2026>` or `navigate(\u2026)` in the codebase navigates here. Either it's reachable only via direct URL (intentional), it's dead, or the link broke during a refactor."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-216f975a6137bb61", "name": "Frontend route `/integraciones` has no Link/navigate to it \u2014 src/App.jsx", "shortDescription": {"text": "Frontend route `/integraciones` has no Link/navigate to it \u2014 src/App.jsx"}, "fullDescription": {"text": "The route is registered but no `<Link to=\u2026>` or `navigate(\u2026)` in the codebase navigates here. Either it's reachable only via direct URL (intentional), it's dead, or the link broke during a refactor."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-13ce5bd44836c61e", "name": "Frontend route `/conversaciones/:id` has no Link/navigate to it \u2014 src/App.jsx", "shortDescription": {"text": "Frontend route `/conversaciones/:id` has no Link/navigate to it \u2014 src/App.jsx"}, "fullDescription": {"text": "The route is registered but no `<Link to=\u2026>` or `navigate(\u2026)` in the codebase navigates here. Either it's reachable only via direct URL (intentional), it's dead, or the link broke during a refactor."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5c5c23f223ed11f9", "name": "Frontend route `/leads` has no Link/navigate to it \u2014 src/App.jsx", "shortDescription": {"text": "Frontend route `/leads` has no Link/navigate to it \u2014 src/App.jsx"}, "fullDescription": {"text": "The route is registered but no `<Link to=\u2026>` or `navigate(\u2026)` in the codebase navigates here. Either it's reachable only via direct URL (intentional), it's dead, or the link broke during a refactor."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2798d4deaa2d318b", "name": "Frontend route `/cotizaciones/:id` has no Link/navigate to it \u2014 src/App.jsx", "shortDescription": {"text": "Frontend route `/cotizaciones/:id` has no Link/navigate to it \u2014 src/App.jsx"}, "fullDescription": {"text": "The route is registered but no `<Link to=\u2026>` or `navigate(\u2026)` in the codebase navigates here. Either it's reachable only via direct URL (intentional), it's dead, or the link broke during a refactor."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/24574"}, "properties": {"repository": "bezpiania/bezpian-front", "repoUrl": "https://github.com/bezpiania/bezpian-front", "branch": "main"}, "results": [{"ruleId": "scanner-56517501981edc85", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 final-login-test.js:8"}, "properties": {"repobilityId": "7113a69151286f74", "scanner": "scanner-primary", "fingerprint": "56517501981edc85", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-a867dd0132c59d7e", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 login-test.js:8"}, "properties": {"repobilityId": "3b50378fbed288f1", "scanner": "scanner-primary", "fingerprint": "a867dd0132c59d7e", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-1ef54b64bca88f3e", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 dashboard-inspect.js:8"}, "properties": {"repobilityId": "c2bea18fc73e8979", "scanner": "scanner-primary", "fingerprint": "1ef54b64bca88f3e", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-65d706b082b23601", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 verify_login.js:14"}, "properties": {"repobilityId": "1444c59029a79497", "scanner": "scanner-primary", "fingerprint": "65d706b082b23601", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-aa2af86c04cbaa24", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 detailed-test.js:16"}, "properties": {"repobilityId": "9d78218a2aae8df0", "scanner": "scanner-primary", "fingerprint": "aa2af86c04cbaa24", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-042a019e36c3bbdc", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 test-login-flow.js:4"}, "properties": {"repobilityId": "39b3b8e164689728", "scanner": "scanner-primary", "fingerprint": "042a019e36c3bbdc", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-3e00d0180cd2234a", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 test-chatbots.js:16"}, "properties": {"repobilityId": "e5ebb4ce83cec80f", "scanner": "scanner-primary", "fingerprint": "3e00d0180cd2234a", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-d0e16cdd8d6990ee", "level": "note", "message": {"text": "Icon-only button without accessible name \u2014 src/components/ChatWidget/AppointmentBookingModal.jsx:122"}, "properties": {"repobilityId": "558bb77808259f2e", "scanner": "scanner-primary", "fingerprint": "d0e16cdd8d6990ee", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.button.no-label"]}}, {"ruleId": "scanner-a30d2afafa8624b2", "level": "note", "message": {"text": "Icon-only button without accessible name \u2014 src/components/Calendar/AppointmentDrawer.jsx:58"}, "properties": {"repobilityId": "53a3d05de7c7c28a", "scanner": "scanner-primary", "fingerprint": "a30d2afafa8624b2", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.button.no-label"]}}, {"ruleId": "scanner-1f9506915c5e96b0", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 src/pages/private/operacion/ConversationDetail.jsx:45"}, "properties": {"repobilityId": "0b4c97d526f29849", "scanner": "scanner-primary", "fingerprint": "1f9506915c5e96b0", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-c350dc7ae11f0ca1", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 src/pages/private/operacion/QuoteDetail.jsx:19"}, "properties": {"repobilityId": "9ea54aedc0e143cc", "scanner": "scanner-primary", "fingerprint": "c350dc7ae11f0ca1", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-1590b646ccf60d61", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in src/utils/generateFullChatHtml.js:166"}, "properties": {"repobilityId": "4ef8b478a4b574d4", "scanner": "scanner-primary", "fingerprint": "1590b646ccf60d61", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/utils/generateFullChatHtml.js"}, "region": {"startLine": 166}}}]}, {"ruleId": "scanner-ef76638773a6964d", "level": "note", "message": {"text": "Insecure pattern 'document_write' in src/components/BotDetail/TableQRCode.jsx:14"}, "properties": {"repobilityId": "1170303f8df2f761", "scanner": "scanner-primary", "fingerprint": "ef76638773a6964d", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["owasp", "document_write"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/components/BotDetail/TableQRCode.jsx"}, "region": {"startLine": 14}}}]}, {"ruleId": "scanner-004baa0fc3385e45", "level": "warning", "message": {"text": "Insecure pattern 'local_storage_auth_token' in src/pages/public/Login.jsx:29"}, "properties": {"repobilityId": "4fbab56caffc560f", "scanner": "scanner-primary", "fingerprint": "004baa0fc3385e45", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "local_storage_auth_token"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/pages/public/Login.jsx"}, "region": {"startLine": 29}}}]}, {"ruleId": "scanner-6840729c6d50b90d", "level": "warning", "message": {"text": "Insecure pattern 'local_storage_auth_token' in src/pages/public/Signup.jsx:49"}, "properties": {"repobilityId": "d8b5cf1bf466eac2", "scanner": "scanner-primary", "fingerprint": "6840729c6d50b90d", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "local_storage_auth_token"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/pages/public/Signup.jsx"}, "region": {"startLine": 49}}}]}, {"ruleId": "scanner-4e26c82474247ff4", "level": "warning", "message": {"text": "Insecure pattern 'local_storage_auth_token' in src/pages/public/GoogleCallback.jsx:34"}, "properties": {"repobilityId": "30cad9849291580e", "scanner": "scanner-primary", "fingerprint": "4e26c82474247ff4", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "local_storage_auth_token"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/pages/public/GoogleCallback.jsx"}, "region": {"startLine": 34}}}]}, {"ruleId": "scanner-fa4e7264a6eb0a33", "level": "warning", "message": {"text": "Insecure pattern 'local_storage_auth_token' in src/pages/public/AcceptInvite.jsx:46"}, "properties": {"repobilityId": "5cee92252d689f2f", "scanner": "scanner-primary", "fingerprint": "fa4e7264a6eb0a33", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "local_storage_auth_token"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/pages/public/AcceptInvite.jsx"}, "region": {"startLine": 46}}}]}, {"ruleId": "scanner-d0fe3bdb9161eed0", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in public/embed.html:444"}, "properties": {"repobilityId": "568fdf3d4d6bd3f8", "scanner": "scanner-primary", "fingerprint": "d0fe3bdb9161eed0", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "public/embed.html"}, "region": {"startLine": 444}}}]}, {"ruleId": "scanner-5cfb9e306a9c9f70", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in public/fullchat.html:410"}, "properties": {"repobilityId": "ca76965a4554675e", "scanner": "scanner-primary", "fingerprint": "5cfb9e306a9c9f70", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "public/fullchat.html"}, "region": {"startLine": 410}}}]}, {"ruleId": "scanner-c3cf556326d26d8b", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in public/gpt-imfluid.html:636"}, "properties": {"repobilityId": "6a76c9f98f6118dd", "scanner": "scanner-primary", "fingerprint": "c3cf556326d26d8b", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "public/gpt-imfluid.html"}, "region": {"startLine": 636}}}]}, {"ruleId": "scanner-1ac69b6f67712130", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in public/gpt.html:689"}, "properties": {"repobilityId": "3837490bfe5dccae", "scanner": "scanner-primary", "fingerprint": "1ac69b6f67712130", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "public/gpt.html"}, "region": {"startLine": 689}}}]}, {"ruleId": "scanner-00ed4a495b97c6a0", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in public/gpt-larufina.html:636"}, "properties": {"repobilityId": "0ee431f4db15b64a", "scanner": "scanner-primary", "fingerprint": "00ed4a495b97c6a0", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "public/gpt-larufina.html"}, "region": {"startLine": 636}}}]}, {"ruleId": "scanner-ce621aa3b8726027", "level": "note", "message": {"text": "Very large file: src/pages/private/chatbots/BotDetail.jsx (1326 lines)"}, "properties": {"repobilityId": "dc382628648ff4e7", "scanner": "scanner-primary", "fingerprint": "ce621aa3b8726027", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-6893a6c8b0861585", "level": "warning", "message": {"text": "Very low test-to-source ratio"}, "properties": {"repobilityId": "54a7de3f06314bf0", "scanner": "scanner-primary", "fingerprint": "6893a6c8b0861585", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["tests", "coverage"]}}, {"ruleId": "scanner-141b30a41e03817b", "level": "note", "message": {"text": "No license file detected"}, "properties": {"repobilityId": "046532f690aa9222", "scanner": "scanner-primary", "fingerprint": "141b30a41e03817b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["license", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-3ab5d313dda8e5f9", "level": "note", "message": {"text": "Debug logging residue appears in source files"}, "properties": {"repobilityId": "350e2f836c1d330a", "scanner": "scanner-primary", "fingerprint": "3ab5d313dda8e5f9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["debug", "cleanup", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-72b2a6250083a784", "level": "warning", "message": {"text": "Placeholder or mock-heavy implementation detected"}, "properties": {"repobilityId": "43480f4a24b67040", "scanner": "scanner-primary", "fingerprint": "72b2a6250083a784", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "incomplete", "generated-repo-pattern"]}}, {"ruleId": "scanner-2d0c7b7ab8f8aacf", "level": "warning", "message": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "properties": {"repobilityId": "24e9cac5cc8d57a3", "scanner": "scanner-primary", "fingerprint": "2d0c7b7ab8f8aacf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "critical-flow", "generated-repo-pattern"]}}, {"ruleId": "scanner-b9088664ace7f748", "level": "warning", "message": {"text": "Composite production-readiness gap"}, "properties": {"repobilityId": "4f512fdd311be53e", "scanner": "scanner-primary", "fingerprint": "b9088664ace7f748", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["production-readiness", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-156ebac62c9f28b4", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/utils/generateFullChatHtml.js:150"}, "properties": {"repobilityId": "bd42f33608f2ca99", "scanner": "scanner-primary", "fingerprint": "156ebac62c9f28b4", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-1b5a76780c3df9aa", "level": "none", "message": {"text": "1 env vars used in code but missing from .env.example"}, "properties": {"repobilityId": "d04379b337b44a15", "scanner": "scanner-primary", "fingerprint": "1b5a76780c3df9aa", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "config-drift"]}}, {"ruleId": "scanner-bcedec6fd1f2dbfc", "level": "warning", "message": {"text": "Frontend route `/auth/google/success` has no Link/navigate to it \u2014 src/App.jsx"}, "properties": {"repobilityId": "8da8616be1cdc4f7", "scanner": "scanner-primary", "fingerprint": "bcedec6fd1f2dbfc", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "orphan-page", "wiring"]}}, {"ruleId": "scanner-db6f00a52c36d3de", "level": "warning", "message": {"text": "Frontend route `/verificar-email` has no Link/navigate to it \u2014 src/App.jsx"}, "properties": {"repobilityId": "9eab5f215badd103", "scanner": "scanner-primary", "fingerprint": "db6f00a52c36d3de", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "orphan-page", "wiring"]}}, {"ruleId": "scanner-0c145881cf107489", "level": "warning", "message": {"text": "Frontend route `/invitar` has no Link/navigate to it \u2014 src/App.jsx"}, "properties": {"repobilityId": "a82236a66def4e2e", "scanner": "scanner-primary", "fingerprint": "0c145881cf107489", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "orphan-page", "wiring"]}}, {"ruleId": "scanner-106ce0da0cab4419", "level": "warning", "message": {"text": "Frontend route `/mesa/:tableToken` has no Link/navigate to it \u2014 src/App.jsx"}, "properties": {"repobilityId": "bf4dbc4ff2c0a929", "scanner": "scanner-primary", "fingerprint": "106ce0da0cab4419", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "orphan-page", "wiring"]}}, {"ruleId": "scanner-03351e8415b0577b", "level": "warning", "message": {"text": "Frontend route `/chat/:embedKey` has no Link/navigate to it \u2014 src/App.jsx"}, "properties": {"repobilityId": "a30eb692e394f179", "scanner": "scanner-primary", "fingerprint": "03351e8415b0577b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "orphan-page", "wiring"]}}, {"ruleId": "scanner-5b8da95310dab68a", "level": "warning", "message": {"text": "Frontend route `/widget` has no Link/navigate to it \u2014 src/App.jsx"}, "properties": {"repobilityId": "db861cb5f38caf9a", "scanner": "scanner-primary", "fingerprint": "5b8da95310dab68a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "orphan-page", "wiring"]}}, {"ruleId": "scanner-c4c69f24314d98c3", "level": "warning", "message": {"text": "Frontend route `/cotizacion/:id` has no Link/navigate to it \u2014 src/App.jsx"}, "properties": {"repobilityId": "8d7e89c36a4cc9d7", "scanner": "scanner-primary", "fingerprint": "c4c69f24314d98c3", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "orphan-page", "wiring"]}}, {"ruleId": "scanner-7fac04d0b18c2cd8", "level": "warning", "message": {"text": "Frontend route `/cotizacion-publica` has no Link/navigate to it \u2014 src/App.jsx"}, "properties": {"repobilityId": "e339f40289ccadab", "scanner": "scanner-primary", "fingerprint": "7fac04d0b18c2cd8", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "orphan-page", "wiring"]}}, {"ruleId": "scanner-1e28fca0858db6df", "level": "warning", "message": {"text": "Frontend route `/chatbots/:id` has no Link/navigate to it \u2014 src/App.jsx"}, "properties": {"repobilityId": "6c6e900bea0733c3", "scanner": "scanner-primary", "fingerprint": "1e28fca0858db6df", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "orphan-page", "wiring"]}}, {"ruleId": "scanner-59aa1466bc24cfec", "level": "warning", "message": {"text": "Frontend route `/chatbots/:id/embed` has no Link/navigate to it \u2014 src/App.jsx"}, "properties": {"repobilityId": "d7102aec94bd3b7e", "scanner": "scanner-primary", "fingerprint": "59aa1466bc24cfec", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "orphan-page", "wiring"]}}, {"ruleId": "scanner-216f975a6137bb61", "level": "warning", "message": {"text": "Frontend route `/integraciones` has no Link/navigate to it \u2014 src/App.jsx"}, "properties": {"repobilityId": "48c8e4c036c7b833", "scanner": "scanner-primary", "fingerprint": "216f975a6137bb61", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "orphan-page", "wiring"]}}, {"ruleId": "scanner-13ce5bd44836c61e", "level": "warning", "message": {"text": "Frontend route `/conversaciones/:id` has no Link/navigate to it \u2014 src/App.jsx"}, "properties": {"repobilityId": "09dfe3b36fe276b3", "scanner": "scanner-primary", "fingerprint": "13ce5bd44836c61e", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "orphan-page", "wiring"]}}, {"ruleId": "scanner-5c5c23f223ed11f9", "level": "warning", "message": {"text": "Frontend route `/leads` has no Link/navigate to it \u2014 src/App.jsx"}, "properties": {"repobilityId": "75874ec1948abca1", "scanner": "scanner-primary", "fingerprint": "5c5c23f223ed11f9", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "orphan-page", "wiring"]}}, {"ruleId": "scanner-2798d4deaa2d318b", "level": "warning", "message": {"text": "Frontend route `/cotizaciones/:id` has no Link/navigate to it \u2014 src/App.jsx"}, "properties": {"repobilityId": "aa9132d240091a20", "scanner": "scanner-primary", "fingerprint": "2798d4deaa2d318b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "orphan-page", "wiring"]}}]}]}