{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "scanner-2864d456b9ffae2e", "name": "Stray `console.log` in TS/JS \u2014 patch-dist.js:46", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 patch-dist.js:46"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-40ad101f7eb52cf1", "name": "Stray `console.log` in TS/JS \u2014 functions/api/csp-report.js:30", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 functions/api/csp-report.js:30"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8e56716183817387", "name": "Stray `console.log` in TS/JS \u2014 functions/api/cal-webhook.js:32", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 functions/api/cal-webhook.js:32"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a2c61527e72e6382", "name": "TODO/FIXME marker in shipping code \u2014 functions/audit/[[path]].js:55", "shortDescription": {"text": "TODO/FIXME marker in shipping code \u2014 functions/audit/[[path]].js:55"}, "fullDescription": {"text": "Track in /reviews or /issues, not as a code comment that rots.\n\nWhy: Drift control \u2014 shouldn't be the same as Quality TODO scanner.\nRule id: fq.todo-marker"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b57a193f6b257d1b", "name": "Stray `console.log` in TS/JS \u2014 tests/visual/remodel-audit.spec.ts:168", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 tests/visual/remodel-audit.spec.ts:168"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-df96b9689db8acfc", "name": "Stray `console.log` in TS/JS \u2014 00-Briefs/qa-runner/audit-once.js:36", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 00-Briefs/qa-runner/audit-once.js:36"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9060704d8a57e2d0", "name": "Stray `console.log` in TS/JS \u2014 00-Briefs/qa-runner/audit-smoke.js:35", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 00-Briefs/qa-runner/audit-smoke.js:35"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-14473a74d67e47ab", "name": "Stray `console.log` in TS/JS \u2014 00-Briefs/qa-runner/audit-merge.js:80", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 00-Briefs/qa-runner/audit-merge.js:80"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d5223f027d4f7fbd", "name": "Stray `console.log` in TS/JS \u2014 00-Briefs/qa-runner/audit-perf.js:38", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 00-Briefs/qa-runner/audit-perf.js:38"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d22ff337f7b4747f", "name": "Stray `console.log` in TS/JS \u2014 00-Briefs/qa-runner/audit-route.js:45", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 00-Briefs/qa-runner/audit-route.js:45"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e5599c483021bc12", "name": "Stray `console.log` in TS/JS \u2014 00-Briefs/qa-runner/audit.js:34", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 00-Briefs/qa-runner/audit.js:34"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-43e1b14beb360423", "name": "Stray `console.log` in TS/JS \u2014 scripts/generate-og.js:173", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/generate-og.js:173"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-75ff5336cef2e81b", "name": "Privileged port 2 in use", "shortDescription": {"text": "Privileged port 2 in use"}, "fullDescription": {"text": "Port 2 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-dfff39ce3ba6d00c", "name": "Insecure pattern 'document_write' in _audit/raw/lh/inline-_case-studies_cg-oncology_-3.json:3544", "shortDescription": {"text": "Insecure pattern 'document_write' in _audit/raw/lh/inline-_case-studies_cg-oncology_-3.json:3544"}, "fullDescription": {"text": "Found a known-risky pattern (document_write). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d081ae05ecac5699", "name": "Insecure pattern 'document_write' in _audit/raw/lh/autofinal-_case-studies_cg-oncology_-1.json:3643", "shortDescription": {"text": "Insecure pattern 'document_write' in _audit/raw/lh/autofinal-_case-studies_cg-oncology_-1.json:3643"}, "fullDescription": {"text": "Found a known-risky pattern (document_write). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-34e59f3ac1cd4e63", "name": "Insecure pattern 'document_write' in _audit/raw/lh/inline-_instrument_-1.json:3777", "shortDescription": {"text": "Insecure pattern 'document_write' in _audit/raw/lh/inline-_instrument_-1.json:3777"}, "fullDescription": {"text": "Found a known-risky pattern (document_write). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9c92e14263328bf3", "name": "Insecure pattern 'document_write' in _audit/raw/lh/post2-_case-studies_cg-oncology_-2.json:3626", "shortDescription": {"text": "Insecure pattern 'document_write' in _audit/raw/lh/post2-_case-studies_cg-oncology_-2.json:3626"}, "fullDescription": {"text": "Found a known-risky pattern (document_write). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-bb20bd4e670052b0", "name": "Insecure pattern 'document_write' in _audit/raw/lh/dedup-_case-studies_cg-oncology_-1.json:3628", "shortDescription": {"text": "Insecure pattern 'document_write' in _audit/raw/lh/dedup-_case-studies_cg-oncology_-1.json:3628"}, "fullDescription": {"text": "Found a known-risky pattern (document_write). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-21b1e284640b25fa", "name": "Insecure pattern 'document_write' in _audit/raw/lh/post-_instrument_-1.json:4122", "shortDescription": {"text": "Insecure pattern 'document_write' in _audit/raw/lh/post-_instrument_-1.json:4122"}, "fullDescription": {"text": "Found a known-risky pattern (document_write). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-870f0c3373d3d252", "name": "Insecure pattern 'document_write' in _audit/raw/lh/baseline-_case-studies_cg-oncology_-1.json:3732", "shortDescription": {"text": "Insecure pattern 'document_write' in _audit/raw/lh/baseline-_case-studies_cg-oncology_-1.json:3732"}, "fullDescription": {"text": "Found a known-risky pattern (document_write). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f330aaef691b849e", "name": "Insecure pattern 'document_write' in _audit/raw/lh/autofinal-_case-studies_cg-oncology_-2.json:3647", "shortDescription": {"text": "Insecure pattern 'document_write' in _audit/raw/lh/autofinal-_case-studies_cg-oncology_-2.json:3647"}, "fullDescription": {"text": "Found a known-risky pattern (document_write). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3a6a8e45cc6a4830", "name": "Insecure pattern 'document_write' in _audit/raw/lh/post-_case-studies_cg-oncology_-3.json:3622", "shortDescription": {"text": "Insecure pattern 'document_write' in _audit/raw/lh/post-_case-studies_cg-oncology_-3.json:3622"}, "fullDescription": {"text": "Found a known-risky pattern (document_write). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ebb3a13fe0e11af4", "name": "Insecure pattern 'document_write' in _audit/raw/lh/inline-_case-studies_cg-oncology_-2.json:3563", "shortDescription": {"text": "Insecure pattern 'document_write' in _audit/raw/lh/inline-_case-studies_cg-oncology_-2.json:3563"}, "fullDescription": {"text": "Found a known-risky pattern (document_write). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6334029af7655a45", "name": "Insecure pattern 'document_write' in _audit/raw/lh/post-_instrument_-3.json:4120", "shortDescription": {"text": "Insecure pattern 'document_write' in _audit/raw/lh/post-_instrument_-3.json:4120"}, "fullDescription": {"text": "Found a known-risky pattern (document_write). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-85e1997be50e83c7", "name": "Insecure pattern 'document_write' in _audit/raw/lh/autofinal-_instrument_-1.json:4362", "shortDescription": {"text": "Insecure pattern 'document_write' in _audit/raw/lh/autofinal-_instrument_-1.json:4362"}, "fullDescription": {"text": "Found a known-risky pattern (document_write). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4f1ef3ee5c95ab12", "name": "Insecure pattern 'document_write' in _audit/raw/lh/post-_case-studies_cg-oncology_-1.json:3632", "shortDescription": {"text": "Insecure pattern 'document_write' in _audit/raw/lh/post-_case-studies_cg-oncology_-1.json:3632"}, "fullDescription": {"text": "Found a known-risky pattern (document_write). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-41edc2ee0b6203e4", "name": "Insecure pattern 'document_write' in _audit/raw/lh/inline-_-2.json:5028", "shortDescription": {"text": "Insecure pattern 'document_write' in _audit/raw/lh/inline-_-2.json:5028"}, "fullDescription": {"text": "Found a known-risky pattern (document_write). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-910a9deae38b2da7", "name": "Insecure pattern 'document_write' in _audit/raw/lh/dedup-_instrument_-1.json:3937", "shortDescription": {"text": "Insecure pattern 'document_write' in _audit/raw/lh/dedup-_instrument_-1.json:3937"}, "fullDescription": {"text": "Found a known-risky pattern (document_write). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7b387c77b6cd5c42", "name": "Insecure pattern 'document_write' in _audit/raw/lh/post2-_case-studies_cg-oncology_-1.json:3643", "shortDescription": {"text": "Insecure pattern 'document_write' in _audit/raw/lh/post2-_case-studies_cg-oncology_-1.json:3643"}, "fullDescription": {"text": "Found a known-risky pattern (document_write). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b908ca70d1c8ce90", "name": "Insecure pattern 'document_write' in _audit/raw/lh/dedup-_case-studies_cg-oncology_-2.json:3618", "shortDescription": {"text": "Insecure pattern 'document_write' in _audit/raw/lh/dedup-_case-studies_cg-oncology_-2.json:3618"}, "fullDescription": {"text": "Found a known-risky pattern (document_write). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a99ea21edff994c5", "name": "Insecure pattern 'document_write' in _audit/raw/lh/baseline-_-1.json:5646", "shortDescription": {"text": "Insecure pattern 'document_write' in _audit/raw/lh/baseline-_-1.json:5646"}, "fullDescription": {"text": "Found a known-risky pattern (document_write). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-36920d150e6ddfde", "name": "Insecure pattern 'document_write' in _audit/raw/lh/post-_case-studies_cg-oncology_-2.json:3618", "shortDescription": {"text": "Insecure pattern 'document_write' in _audit/raw/lh/post-_case-studies_cg-oncology_-2.json:3618"}, "fullDescription": {"text": "Found a known-risky pattern (document_write). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-446b860544c92d7c", "name": "Insecure pattern 'document_write' in _audit/raw/lh/post-_instrument_-2.json:4120", "shortDescription": {"text": "Insecure pattern 'document_write' in _audit/raw/lh/post-_instrument_-2.json:4120"}, "fullDescription": {"text": "Found a known-risky pattern (document_write). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-56ba5646ca0f75cb", "name": "Insecure pattern 'document_write' in _audit/raw/lh/post2-_instrument_-3.json:4122", "shortDescription": {"text": "Insecure pattern 'document_write' in _audit/raw/lh/post2-_instrument_-3.json:4122"}, "fullDescription": {"text": "Found a known-risky pattern (document_write). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-588e279a825a4e6b", "name": "Insecure pattern 'document_write' in _audit/raw/lh/baseline-_-2.json:5553", "shortDescription": {"text": "Insecure pattern 'document_write' in _audit/raw/lh/baseline-_-2.json:5553"}, "fullDescription": {"text": "Found a known-risky pattern (document_write). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-741916d284187c0f", "name": "Insecure pattern 'document_write' in _audit/raw/lh/baseline-_case-studies_cg-oncology_-3.json:3744", "shortDescription": {"text": "Insecure pattern 'document_write' in _audit/raw/lh/baseline-_case-studies_cg-oncology_-3.json:3744"}, "fullDescription": {"text": "Found a known-risky pattern (document_write). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-bce7d07b368e6595", "name": "Insecure pattern 'document_write' in _audit/raw/lh/baseline-_instrument_-1.json:4038", "shortDescription": {"text": "Insecure pattern 'document_write' in _audit/raw/lh/baseline-_instrument_-1.json:4038"}, "fullDescription": {"text": "Found a known-risky pattern (document_write). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-553528ab971d8c7f", "name": "Insecure pattern 'document_write' in _audit/raw/lh/baseline-_-3.json:5653", "shortDescription": {"text": "Insecure pattern 'document_write' in _audit/raw/lh/baseline-_-3.json:5653"}, "fullDescription": {"text": "Found a known-risky pattern (document_write). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d146dbe7a1de114b", "name": "Insecure pattern 'document_write' in _audit/raw/lh/post2-_instrument_-1.json:4122", "shortDescription": {"text": "Insecure pattern 'document_write' in _audit/raw/lh/post2-_instrument_-1.json:4122"}, "fullDescription": {"text": "Found a known-risky pattern (document_write). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-44c430a4b9f4076b", "name": "Insecure pattern 'document_write' in _audit/raw/lh/dedup-_instrument_-2.json:4350", "shortDescription": {"text": "Insecure pattern 'document_write' in _audit/raw/lh/dedup-_instrument_-2.json:4350"}, "fullDescription": {"text": "Found a known-risky pattern (document_write). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-bba9c84e31a14feb", "name": "Insecure pattern 'document_write' in _audit/raw/lh/autofinal-_case-studies_cg-oncology_-3.json:3622", "shortDescription": {"text": "Insecure pattern 'document_write' in _audit/raw/lh/autofinal-_case-studies_cg-oncology_-3.json:3622"}, "fullDescription": {"text": "Found a known-risky pattern (document_write). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-66a017714338a6fc", "name": "Insecure pattern 'document_write' in _audit/raw/lh/baseline-_case-studies_cg-oncology_-2.json:3780", "shortDescription": {"text": "Insecure pattern 'document_write' in _audit/raw/lh/baseline-_case-studies_cg-oncology_-2.json:3780"}, "fullDescription": {"text": "Found a known-risky pattern (document_write). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-20d6dbc10ecedfb9", "name": "Insecure pattern 'document_write' in _audit/raw/lh/dedup-_case-studies_cg-oncology_-3.json:3636", "shortDescription": {"text": "Insecure pattern 'document_write' in _audit/raw/lh/dedup-_case-studies_cg-oncology_-3.json:3636"}, "fullDescription": {"text": "Found a known-risky pattern (document_write). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2834ba752fd7ef87", "name": "Insecure pattern 'document_write' in _audit/raw/lh/post2-_case-studies_cg-oncology_-3.json:3622", "shortDescription": {"text": "Insecure pattern 'document_write' in _audit/raw/lh/post2-_case-studies_cg-oncology_-3.json:3622"}, "fullDescription": {"text": "Found a known-risky pattern (document_write). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0d27a0a98ddcf314", "name": "Insecure pattern 'document_write' in _audit/raw/lh/autofinal-_instrument_-2.json:4365", "shortDescription": {"text": "Insecure pattern 'document_write' in _audit/raw/lh/autofinal-_instrument_-2.json:4365"}, "fullDescription": {"text": "Found a known-risky pattern (document_write). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3951d608e6b953da", "name": "Insecure pattern 'document_write' in _audit/raw/lh/inline-_case-studies_cg-oncology_-1.json:3555", "shortDescription": {"text": "Insecure pattern 'document_write' in _audit/raw/lh/inline-_case-studies_cg-oncology_-1.json:3555"}, "fullDescription": {"text": "Found a known-risky pattern (document_write). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a7e958a9d4b2fbc3", "name": "Insecure pattern 'document_write' in _audit/raw/lh/dedup-_instrument_-3.json:3933", "shortDescription": {"text": "Insecure pattern 'document_write' in _audit/raw/lh/dedup-_instrument_-3.json:3933"}, "fullDescription": {"text": "Found a known-risky pattern (document_write). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-63f6cdd8b6dabbdc", "name": "Insecure pattern 'document_write' in _audit/raw/lh/inline-_instrument_-3.json:3777", "shortDescription": {"text": "Insecure pattern 'document_write' in _audit/raw/lh/inline-_instrument_-3.json:3777"}, "fullDescription": {"text": "Found a known-risky pattern (document_write). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-64b8a1adbbf6c1bc", "name": "Insecure pattern 'document_write' in _audit/raw/lh/autofinal-_instrument_-3.json:4350", "shortDescription": {"text": "Insecure pattern 'document_write' in _audit/raw/lh/autofinal-_instrument_-3.json:4350"}, "fullDescription": {"text": "Found a known-risky pattern (document_write). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8bcbafd98145c32b", "name": "Insecure pattern 'document_write' in _audit/raw/lh/post2-_instrument_-2.json:4104", "shortDescription": {"text": "Insecure pattern 'document_write' in _audit/raw/lh/post2-_instrument_-2.json:4104"}, "fullDescription": {"text": "Found a known-risky pattern (document_write). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-107a58e5ab29885a", "name": "Insecure pattern 'document_write' in _audit/raw/lh/inline-_instrument_-2.json:3777", "shortDescription": {"text": "Insecure pattern 'document_write' in _audit/raw/lh/inline-_instrument_-2.json:3777"}, "fullDescription": {"text": "Found a known-risky pattern (document_write). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-91929f3aca662978", "name": "Insecure pattern 'document_write' in _audit/raw/lh/autofinal-_-3.json:5405", "shortDescription": {"text": "Insecure pattern 'document_write' in _audit/raw/lh/autofinal-_-3.json:5405"}, "fullDescription": {"text": "Found a known-risky pattern (document_write). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b2db1e0c12786f4c", "name": "Insecure pattern 'document_write' in _audit/raw/lh/inline-_-3.json:5023", "shortDescription": {"text": "Insecure pattern 'document_write' in _audit/raw/lh/inline-_-3.json:5023"}, "fullDescription": {"text": "Found a known-risky pattern (document_write). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-195c26e11f5f9a85", "name": "Insecure pattern 'document_write' in _audit/raw/lh/baseline-_instrument_-3.json:3970", "shortDescription": {"text": "Insecure pattern 'document_write' in _audit/raw/lh/baseline-_instrument_-3.json:3970"}, "fullDescription": {"text": "Found a known-risky pattern (document_write). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9f5d5f1e232ba6f7", "name": "Insecure pattern 'document_write' in _audit/raw/lh/inline-_-1.json:5046", "shortDescription": {"text": "Insecure pattern 'document_write' in _audit/raw/lh/inline-_-1.json:5046"}, "fullDescription": {"text": "Found a known-risky pattern (document_write). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6315806921c32bf7", "name": "Insecure pattern 'document_write' in _audit/raw/lh/baseline-_instrument_-2.json:3970", "shortDescription": {"text": "Insecure pattern 'document_write' in _audit/raw/lh/baseline-_instrument_-2.json:3970"}, "fullDescription": {"text": "Found a known-risky pattern (document_write). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a043769bd216d2ec", "name": "Insecure pattern 'node_child_process' in _audit/tools/lighthouse-baseline.mjs:4", "shortDescription": {"text": "Insecure pattern 'node_child_process' in _audit/tools/lighthouse-baseline.mjs:4"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-87d26d0c04dcd38b", "name": "Insecure pattern 'cors_wildcard' in functions/api/audit-request.js:13", "shortDescription": {"text": "Insecure pattern 'cors_wildcard' in functions/api/audit-request.js:13"}, "fullDescription": {"text": "Found a known-risky pattern (cors_wildcard). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2e1cf16e81a6a685", "name": "Insecure pattern 'cors_wildcard' in functions/api/erase.js:197", "shortDescription": {"text": "Insecure pattern 'cors_wildcard' in functions/api/erase.js:197"}, "fullDescription": {"text": "Found a known-risky pattern (cors_wildcard). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b68a764458001c9a", "name": "Insecure pattern 'cors_wildcard' in functions/api/dsar.js:122", "shortDescription": {"text": "Insecure pattern 'cors_wildcard' in functions/api/dsar.js:122"}, "fullDescription": {"text": "Found a known-risky pattern (cors_wildcard). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c0d08dfb7bd985b2", "name": "Insecure pattern 'cors_wildcard' in functions/api/list-unsubscribe.js:130", "shortDescription": {"text": "Insecure pattern 'cors_wildcard' in functions/api/list-unsubscribe.js:130"}, "fullDescription": {"text": "Found a known-risky pattern (cors_wildcard). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7ab1d976ab18e7a4", "name": "Insecure pattern 'cors_wildcard' in functions/api/audit.js:1400", "shortDescription": {"text": "Insecure pattern 'cors_wildcard' in functions/api/audit.js:1400"}, "fullDescription": {"text": "Found a known-risky pattern (cors_wildcard). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-911017010802a2b0", "name": "Insecure pattern 'cors_wildcard' in functions/api/portability.js:88", "shortDescription": {"text": "Insecure pattern 'cors_wildcard' in functions/api/portability.js:88"}, "fullDescription": {"text": "Found a known-risky pattern (cors_wildcard). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6f2dd2ab94dcbea8", "name": "Insecure pattern 'cors_wildcard' in functions/api/intent.js:70", "shortDescription": {"text": "Insecure pattern 'cors_wildcard' in functions/api/intent.js:70"}, "fullDescription": {"text": "Found a known-risky pattern (cors_wildcard). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a16583c5666100bd", "name": "Insecure pattern 'cors_wildcard' in functions/api/stripe/checkout.js:20", "shortDescription": {"text": "Insecure pattern 'cors_wildcard' in functions/api/stripe/checkout.js:20"}, "fullDescription": {"text": "Found a known-risky pattern (cors_wildcard). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6d4ec9d4e401a09b", "name": "Insecure pattern 'direct_innerhtml_assignment' in admin-v2-src/boot.jsx:341", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in admin-v2-src/boot.jsx:341"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-14ec277920e97e26", "name": "Insecure pattern 'direct_innerhtml_assignment' in public/audit/audit-app.js:813", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in public/audit/audit-app.js:813"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cfb0aa7a2c1b0f3d", "name": "Insecure pattern 'direct_outerhtml_assignment' in public/audit/audit-app.js:300", "shortDescription": {"text": "Insecure pattern 'direct_outerhtml_assignment' in public/audit/audit-app.js:300"}, "fullDescription": {"text": "Found a known-risky pattern (direct_outerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-10654bf285094bea", "name": "Insecure pattern 'direct_innerhtml_assignment' in public/admin/cockpit-v2/app.js:1", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in public/admin/cockpit-v2/app.js:1"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b083f1e8bb93fa40", "name": "Insecure pattern 'direct_innerhtml_assignment' in public/admin/legacy/cockpit/app.js:72", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in public/admin/legacy/cockpit/app.js:72"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-222d35e449c14e98", "name": "Insecure pattern 'direct_innerhtml_assignment' in public/portal/index.html:8", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in public/portal/index.html:8"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4374e7963afacfc9", "name": "Insecure pattern 'direct_innerhtml_assignment' in 04-Preview-Builds/tamazia-hero-preview.html:1338", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in 04-Preview-Builds/tamazia-hero-preview.html:1338"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-fbc0a5c434739f07", "name": "Insecure pattern 'direct_innerhtml_assignment' in 04-Preview-Builds/astro-v1/index.html:1", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in 04-Preview-Builds/astro-v1/index.html:1"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-65aa740cba4a4a73", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-93b5dc94140a9b18", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/upload-artifact@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-092572756540f5e9", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "peter-evans/create-pull-request@v6 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d2b775d67ccced7c", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-73e16efc79dd8366", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "softprops/action-gh-release@v2 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d144ddac2e069f74", "name": "Very large file: patch-dist.js (1678 lines)", "shortDescription": {"text": "Very large file: patch-dist.js (1678 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b15004f58d244a2f", "name": "Very large file: functions/api/audit.js (2001 lines)", "shortDescription": {"text": "Very large file: functions/api/audit.js (2001 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-48fbad3bf98a2f33", "name": "Very large file: functions/audit/_adapter.js (1664 lines)", "shortDescription": {"text": "Very large file: functions/audit/_adapter.js (1664 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a651d5d1cb822862", "name": "Very large file: public/audit/audit-app.js (1391 lines)", "shortDescription": {"text": "Very large file: public/audit/audit-app.js (1391 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6893a6c8b0861585", "name": "Very low test-to-source ratio", "shortDescription": {"text": "Very low test-to-source ratio"}, "fullDescription": {"text": "4 test file(s) for 145 source file(s) (ratio 0.03). Consider adding integration or unit tests for critical paths."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3ab5d313dda8e5f9", "name": "Debug logging residue appears in source files", "shortDescription": {"text": "Debug logging residue appears in source files"}, "fullDescription": {"text": "Found 231 console/debugger/print-style debug statements in non-test source. This is a common fast-generation residue before production cleanup."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-72b2a6250083a784", "name": "Placeholder or mock-heavy implementation detected", "shortDescription": {"text": "Placeholder or mock-heavy implementation detected"}, "fullDescription": {"text": "Found 61 placeholder/mock markers across 14 source files. This often means the repo looks complete while core flows still use generated scaffolding or fake data."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2d0c7b7ab8f8aacf", "name": "Critical user flow still appears backed by mock or placeholder data", "shortDescription": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "fullDescription": {"text": "A payment/auth/admin/order/billing-style flow contains mock, fake, TODO, dummy, or placeholder markers in runtime source. In the Fable corpus this is a high-leverage completeness smell: the app can look finished while the money, identity, or tenant flow is still scaffolded."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ea8f3013f588db25", "name": "Shallow git history limits provenance confidence", "shortDescription": {"text": "Shallow git history limits provenance confidence"}, "fullDescription": {"text": "The repository is a shallow clone. Origin/evolution analysis cannot distinguish fresh generation, imported legacy code, or long-lived human code with high confidence."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8424db9c75e04ba4", "name": "Very short observed git history", "shortDescription": {"text": "Very short observed git history"}, "fullDescription": {"text": "The repo has multiple source files but two or fewer visible commits. This is not a failure by itself, but it lowers confidence in evolution-based diagnosis."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-a16e5d200003af28", "name": "Commented-code block (8 lines) in astro.config.mjs:8", "shortDescription": {"text": "Commented-code block (8 lines) in astro.config.mjs:8"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-92a122b19e51c75c", "name": "Commented-code block (5 lines) in functions/_middleware.js:33", "shortDescription": {"text": "Commented-code block (5 lines) in functions/_middleware.js:33"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-8512c30a5ddfc76d", "name": "Commented-code block (5 lines) in functions/api/audit-request.js:1", "shortDescription": {"text": "Commented-code block (5 lines) in functions/api/audit-request.js:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-66c03781297cf38f", "name": "`fetch()` without try/.catch or AbortSignal \u2014 functions/api/erase.js:27", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 functions/api/erase.js:27"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-96a08831be2c75ba", "name": "`fetch()` without try/.catch or AbortSignal \u2014 functions/api/contact.js:153", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 functions/api/contact.js:153"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-67cba9bf850c9e59", "name": "`fetch()` without try/.catch or AbortSignal \u2014 functions/api/dsar.js:33", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 functions/api/dsar.js:33"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-314fea318866b9ed", "name": "Commented-code block (5 lines) in functions/api/list-unsubscribe.js:1", "shortDescription": {"text": "Commented-code block (5 lines) in functions/api/list-unsubscribe.js:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-c545c767848bd41e", "name": "Commented-code block (9 lines) in functions/api/cal-webhook.js:8", "shortDescription": {"text": "Commented-code block (9 lines) in functions/api/cal-webhook.js:8"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-238694b54d1e59c5", "name": "`fetch()` without try/.catch or AbortSignal \u2014 functions/api/cal-webhook.js:226", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 functions/api/cal-webhook.js:226"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a99b4b41dab53301", "name": "Commented-code block (6 lines) in functions/api/audit.js:6", "shortDescription": {"text": "Commented-code block (6 lines) in functions/api/audit.js:6"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-bc12e3233286d6d7", "name": "`fetch()` without try/.catch or AbortSignal \u2014 functions/api/audit.js:754", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 functions/api/audit.js:754"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-aa60b99f75b6cff6", "name": "`fetch()` without try/.catch or AbortSignal \u2014 functions/api/indexnow.js:43", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 functions/api/indexnow.js:43"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-45764d512b21b8a5", "name": "`fetch()` without try/.catch or AbortSignal \u2014 functions/api/portability.js:27", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 functions/api/portability.js:27"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e40422d8ade2a765", "name": "Commented-code block (10 lines) in functions/api/intent.js:1", "shortDescription": {"text": "Commented-code block (10 lines) in functions/api/intent.js:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-98119acfd7270ba2", "name": "`fetch()` without try/.catch or AbortSignal \u2014 functions/api/intent.js:276", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 functions/api/intent.js:276"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f3ecd29e988a9cf5", "name": "`fetch()` without try/.catch or AbortSignal \u2014 functions/api/briefings.js:131", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 functions/api/briefings.js:131"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a8b83c8ed6901ff6", "name": "`fetch()` without try/.catch or AbortSignal \u2014 functions/api/admin/leads.js:13", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 functions/api/admin/leads.js:13"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-502f7082f24cf76a", "name": "Commented-code block (5 lines) in functions/api/admin/notify-deploy.js:1", "shortDescription": {"text": "Commented-code block (5 lines) in functions/api/admin/notify-deploy.js:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-a1aff4b7ea661196", "name": "Commented-code block (7 lines) in functions/api/admin/_middleware.js:6", "shortDescription": {"text": "Commented-code block (7 lines) in functions/api/admin/_middleware.js:6"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-a28aa44e9cd8d72b", "name": "`fetch()` without try/.catch or AbortSignal \u2014 functions/api/admin/_github.js:7", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 functions/api/admin/_github.js:7"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f42bb1f48f4d7c5c", "name": "`fetch()` without try/.catch or AbortSignal \u2014 functions/api/admin/outbox.js:8", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 functions/api/admin/outbox.js:8"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a1cd0e6d46072432", "name": "Commented-code block (5 lines) in functions/api/admin/_access.js:1", "shortDescription": {"text": "Commented-code block (5 lines) in functions/api/admin/_access.js:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-af649b546324497f", "name": "`fetch()` without try/.catch or AbortSignal \u2014 functions/api/admin/inbox.js:11", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 functions/api/admin/inbox.js:11"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3905d968a5d65d00", "name": "Commented-code block (9 lines) in functions/api/admin/leads/add-manual.js:6", "shortDescription": {"text": "Commented-code block (9 lines) in functions/api/admin/leads/add-manual.js:6"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-41639a9ed54a35b9", "name": "`fetch()` without try/.catch or AbortSignal \u2014 functions/api/admin/leads/pending.js:21", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 functions/api/admin/leads/pending.js:21"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-56df4fc884cab833", "name": "Commented-code block (6 lines) in functions/api/admin/audits/mint.js:2", "shortDescription": {"text": "Commented-code block (6 lines) in functions/api/admin/audits/mint.js:2"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-99a6bf4093676313", "name": "`fetch()` without try/.catch or AbortSignal \u2014 functions/api/admin/audits/rerun.js:10", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 functions/api/admin/audits/rerun.js:10"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a0c0355cce4f3d31", "name": "`fetch()` without try/.catch or AbortSignal \u2014 functions/api/admin/scrape/run.js:24", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 functions/api/admin/scrape/run.js:24"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7a4e026ddf60cc56", "name": "Commented-code block (5 lines) in functions/api/stripe/checkout.js:1", "shortDescription": {"text": "Commented-code block (5 lines) in functions/api/stripe/checkout.js:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-5553d3630f508b78", "name": "Commented-code block (16 lines) in functions/api/stripe/webhook.js:12", "shortDescription": {"text": "Commented-code block (16 lines) in functions/api/stripe/webhook.js:12"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-eeabe28633c39aa0", "name": "Commented-code block (5 lines) in functions/audit/_adapter.js:1", "shortDescription": {"text": "Commented-code block (5 lines) in functions/audit/_adapter.js:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-cc46658a32715101", "name": "Commented-code block (6 lines) in functions/audit/_commerce.js:1", "shortDescription": {"text": "Commented-code block (6 lines) in functions/audit/_commerce.js:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-d1b03a64980fa296", "name": "Commented-code block (6 lines) in functions/audit/_shell.js:17", "shortDescription": {"text": "Commented-code block (6 lines) in functions/audit/_shell.js:17"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-88368806cef5ace3", "name": "Commented-code block (7 lines) in functions/audit/[[path]].js:51", "shortDescription": {"text": "Commented-code block (7 lines) in functions/audit/[[path]].js:51"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-c12de00a1c685c3a", "name": "Commented-code block (5 lines) in functions/admin/session.js:1", "shortDescription": {"text": "Commented-code block (5 lines) in functions/admin/session.js:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-80f0a77addf27655", "name": "Commented-code block (5 lines) in functions/_lib/neon-sync.js:24", "shortDescription": {"text": "Commented-code block (5 lines) in functions/_lib/neon-sync.js:24"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-1dc8973fc1d63e9f", "name": "`fetch()` without try/.catch or AbortSignal \u2014 functions/_lib/neon-sync.js:58", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 functions/_lib/neon-sync.js:58"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-89018b03b567a991", "name": "Commented-code block (7 lines) in functions/_lib/notify.js:1", "shortDescription": {"text": "Commented-code block (7 lines) in functions/_lib/notify.js:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-786b990c29d42e74", "name": "Commented-code block (5 lines) in tests/visual/overflow.spec.ts:23", "shortDescription": {"text": "Commented-code block (5 lines) in tests/visual/overflow.spec.ts:23"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2b5855fb22627c81", "name": "Commented-code block (5 lines) in scripts/gen-state-digest.mjs:78", "shortDescription": {"text": "Commented-code block (5 lines) in scripts/gen-state-digest.mjs:78"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-e0c3ec477ef4c14e", "name": "Commented-code block (6 lines) in scripts/build-cockpit.mjs:4", "shortDescription": {"text": "Commented-code block (6 lines) in scripts/build-cockpit.mjs:4"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-a7b9a25f8afc8ba6", "name": "Commented-code block (6 lines) in scripts/stripe-setup.mjs:9", "shortDescription": {"text": "Commented-code block (6 lines) in scripts/stripe-setup.mjs:9"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-0f46414bd48efad2", "name": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/stripe-setup.mjs:37", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/stripe-setup.mjs:37"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8b07257c1407a60a", "name": "Commented-code block (5 lines) in scripts/cf-set-commerce-env.mjs:1", "shortDescription": {"text": "Commented-code block (5 lines) in scripts/cf-set-commerce-env.mjs:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2663ec25a2445615", "name": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/cf-set-commerce-env.mjs:55", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/cf-set-commerce-env.mjs:55"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cabe37989dccef37", "name": "Commented-code block (5 lines) in admin-v2-src/boot.jsx:1", "shortDescription": {"text": "Commented-code block (5 lines) in admin-v2-src/boot.jsx:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-42eb2b8086ed8af5", "name": "Commented-code block (5 lines) in _qa/qa_render.mjs:3", "shortDescription": {"text": "Commented-code block (5 lines) in _qa/qa_render.mjs:3"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-019a34de21840836", "name": "Commented-code block (9 lines) in _qa/backtest.mjs:10", "shortDescription": {"text": "Commented-code block (9 lines) in _qa/backtest.mjs:10"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-743aed72b9152361", "name": "Commented-code block (5 lines) in public/audit/audit-app.js:54", "shortDescription": {"text": "Commented-code block (5 lines) in public/audit/audit-app.js:54"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-6a77f0e4eae01f9a", "name": "Commented-code block (6 lines) in public/audit/audit-charts.js:7", "shortDescription": {"text": "Commented-code block (6 lines) in public/audit/audit-charts.js:7"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-a0ebf892486aa30e", "name": "Commented-code block (5 lines) in public/admin/cockpit/app.js:1", "shortDescription": {"text": "Commented-code block (5 lines) in public/admin/cockpit/app.js:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-7378c8a0da7ec881", "name": "Commented-code block (5 lines) in src/content/caseStudies.ts:1", "shortDescription": {"text": "Commented-code block (5 lines) in src/content/caseStudies.ts:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-9a67f028e99424a6", "name": "Commented-code block (5 lines) in src/content/pricing.ts:239", "shortDescription": {"text": "Commented-code block (5 lines) in src/content/pricing.ts:239"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-7075f09ead284647", "name": "Commented-code block (6 lines) in src/content/hero.ts:17", "shortDescription": {"text": "Commented-code block (6 lines) in src/content/hero.ts:17"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/20803"}, "properties": {"repository": "Tamaziaa/tamazia-website", "repoUrl": "https://github.com/Tamaziaa/tamazia-website", "branch": "main"}, "results": [{"ruleId": "scanner-2864d456b9ffae2e", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 patch-dist.js:46"}, "properties": {"repobilityId": "67ae4bc1a1304ba8", "scanner": "scanner-primary", "fingerprint": "2864d456b9ffae2e", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-40ad101f7eb52cf1", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 functions/api/csp-report.js:30"}, "properties": {"repobilityId": "c7c2328437a078b8", "scanner": "scanner-primary", "fingerprint": "40ad101f7eb52cf1", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-8e56716183817387", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 functions/api/cal-webhook.js:32"}, "properties": {"repobilityId": "37871419d58ee2cb", "scanner": "scanner-primary", "fingerprint": "8e56716183817387", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-a2c61527e72e6382", "level": "none", "message": {"text": "TODO/FIXME marker in shipping code \u2014 functions/audit/[[path]].js:55"}, "properties": {"repobilityId": "397f110425198aba", "scanner": "scanner-primary", "fingerprint": "a2c61527e72e6382", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.todo-marker"]}}, {"ruleId": "scanner-b57a193f6b257d1b", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 tests/visual/remodel-audit.spec.ts:168"}, "properties": {"repobilityId": "ff36fc1478d657f6", "scanner": "scanner-primary", "fingerprint": "b57a193f6b257d1b", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-df96b9689db8acfc", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 00-Briefs/qa-runner/audit-once.js:36"}, "properties": {"repobilityId": "3a46a1ab065d7f22", "scanner": "scanner-primary", "fingerprint": "df96b9689db8acfc", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-9060704d8a57e2d0", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 00-Briefs/qa-runner/audit-smoke.js:35"}, "properties": {"repobilityId": "41ff0d4dd3880463", "scanner": "scanner-primary", "fingerprint": "9060704d8a57e2d0", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-14473a74d67e47ab", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 00-Briefs/qa-runner/audit-merge.js:80"}, "properties": {"repobilityId": "07ee42167b7e5944", "scanner": "scanner-primary", "fingerprint": "14473a74d67e47ab", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-d5223f027d4f7fbd", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 00-Briefs/qa-runner/audit-perf.js:38"}, "properties": {"repobilityId": "9bb64439becd1a22", "scanner": "scanner-primary", "fingerprint": "d5223f027d4f7fbd", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-d22ff337f7b4747f", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 00-Briefs/qa-runner/audit-route.js:45"}, "properties": {"repobilityId": "9f900742712b0d13", "scanner": "scanner-primary", "fingerprint": "d22ff337f7b4747f", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-e5599c483021bc12", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 00-Briefs/qa-runner/audit.js:34"}, "properties": {"repobilityId": "b517d67a7d4d9e7c", "scanner": "scanner-primary", "fingerprint": "e5599c483021bc12", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-43e1b14beb360423", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/generate-og.js:173"}, "properties": {"repobilityId": "a2286ac70e9df2e4", "scanner": "scanner-primary", "fingerprint": "43e1b14beb360423", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-75ff5336cef2e81b", "level": "warning", "message": {"text": "Privileged port 2 in use"}, "properties": {"repobilityId": "755b04866010e843", "scanner": "scanner-primary", "fingerprint": "75ff5336cef2e81b", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "references/pending-workflows/weekly-backup.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-dfff39ce3ba6d00c", "level": "note", "message": {"text": "Insecure pattern 'document_write' in _audit/raw/lh/inline-_case-studies_cg-oncology_-3.json:3544"}, "properties": {"repobilityId": "96ce8a49df00cd73", "scanner": "scanner-primary", "fingerprint": "dfff39ce3ba6d00c", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["owasp", "document_write"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "_audit/raw/lh/inline-_case-studies_cg-oncology_-3.json"}, "region": {"startLine": 3544}}}]}, {"ruleId": "scanner-d081ae05ecac5699", "level": "note", "message": {"text": "Insecure pattern 'document_write' in _audit/raw/lh/autofinal-_case-studies_cg-oncology_-1.json:3643"}, "properties": {"repobilityId": "d9bf1162bdd1bb47", "scanner": "scanner-primary", "fingerprint": "d081ae05ecac5699", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["owasp", "document_write"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "_audit/raw/lh/autofinal-_case-studies_cg-oncology_-1.json"}, "region": {"startLine": 3643}}}]}, {"ruleId": "scanner-34e59f3ac1cd4e63", "level": "note", "message": {"text": "Insecure pattern 'document_write' in _audit/raw/lh/inline-_instrument_-1.json:3777"}, "properties": {"repobilityId": "765cf276962a58a3", "scanner": "scanner-primary", "fingerprint": "34e59f3ac1cd4e63", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["owasp", "document_write"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "_audit/raw/lh/inline-_instrument_-1.json"}, "region": {"startLine": 3777}}}]}, {"ruleId": "scanner-9c92e14263328bf3", "level": "note", "message": {"text": "Insecure pattern 'document_write' in _audit/raw/lh/post2-_case-studies_cg-oncology_-2.json:3626"}, "properties": {"repobilityId": "2ddbe7aa242c0965", "scanner": "scanner-primary", "fingerprint": "9c92e14263328bf3", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["owasp", "document_write"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "_audit/raw/lh/post2-_case-studies_cg-oncology_-2.json"}, "region": {"startLine": 3626}}}]}, {"ruleId": "scanner-bb20bd4e670052b0", "level": "note", "message": {"text": "Insecure pattern 'document_write' in _audit/raw/lh/dedup-_case-studies_cg-oncology_-1.json:3628"}, "properties": {"repobilityId": "2edac77b927ba3fd", "scanner": "scanner-primary", "fingerprint": "bb20bd4e670052b0", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["owasp", "document_write"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "_audit/raw/lh/dedup-_case-studies_cg-oncology_-1.json"}, "region": {"startLine": 3628}}}]}, {"ruleId": "scanner-21b1e284640b25fa", "level": "note", "message": {"text": "Insecure pattern 'document_write' in _audit/raw/lh/post-_instrument_-1.json:4122"}, "properties": {"repobilityId": "00b9176f68dddd73", "scanner": "scanner-primary", "fingerprint": "21b1e284640b25fa", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["owasp", "document_write"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "_audit/raw/lh/post-_instrument_-1.json"}, "region": {"startLine": 4122}}}]}, {"ruleId": "scanner-870f0c3373d3d252", "level": "note", "message": {"text": "Insecure pattern 'document_write' in _audit/raw/lh/baseline-_case-studies_cg-oncology_-1.json:3732"}, "properties": {"repobilityId": "c5e9171ea54ba3eb", "scanner": "scanner-primary", "fingerprint": "870f0c3373d3d252", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["owasp", "document_write"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "_audit/raw/lh/baseline-_case-studies_cg-oncology_-1.json"}, "region": {"startLine": 3732}}}]}, {"ruleId": "scanner-f330aaef691b849e", "level": "note", "message": {"text": "Insecure pattern 'document_write' in _audit/raw/lh/autofinal-_case-studies_cg-oncology_-2.json:3647"}, "properties": {"repobilityId": "2ebafc57c0f52816", "scanner": "scanner-primary", "fingerprint": "f330aaef691b849e", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["owasp", "document_write"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "_audit/raw/lh/autofinal-_case-studies_cg-oncology_-2.json"}, "region": {"startLine": 3647}}}]}, {"ruleId": "scanner-3a6a8e45cc6a4830", "level": "note", "message": {"text": "Insecure pattern 'document_write' in _audit/raw/lh/post-_case-studies_cg-oncology_-3.json:3622"}, "properties": {"repobilityId": "cb75a8cf824fce0d", "scanner": "scanner-primary", "fingerprint": "3a6a8e45cc6a4830", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["owasp", "document_write"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "_audit/raw/lh/post-_case-studies_cg-oncology_-3.json"}, "region": {"startLine": 3622}}}]}, {"ruleId": "scanner-ebb3a13fe0e11af4", "level": "note", "message": {"text": "Insecure pattern 'document_write' in _audit/raw/lh/inline-_case-studies_cg-oncology_-2.json:3563"}, "properties": {"repobilityId": "329fafea838a9b11", "scanner": "scanner-primary", "fingerprint": "ebb3a13fe0e11af4", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["owasp", "document_write"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "_audit/raw/lh/inline-_case-studies_cg-oncology_-2.json"}, "region": {"startLine": 3563}}}]}, {"ruleId": "scanner-6334029af7655a45", "level": "note", "message": {"text": "Insecure pattern 'document_write' in _audit/raw/lh/post-_instrument_-3.json:4120"}, "properties": {"repobilityId": "72269d8a4746edc5", "scanner": "scanner-primary", "fingerprint": "6334029af7655a45", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["owasp", "document_write"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "_audit/raw/lh/post-_instrument_-3.json"}, "region": {"startLine": 4120}}}]}, {"ruleId": "scanner-85e1997be50e83c7", "level": "note", "message": {"text": "Insecure pattern 'document_write' in _audit/raw/lh/autofinal-_instrument_-1.json:4362"}, "properties": {"repobilityId": "ba916abb7e4c30a1", "scanner": "scanner-primary", "fingerprint": "85e1997be50e83c7", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["owasp", "document_write"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "_audit/raw/lh/autofinal-_instrument_-1.json"}, "region": {"startLine": 4362}}}]}, {"ruleId": "scanner-4f1ef3ee5c95ab12", "level": "note", "message": {"text": "Insecure pattern 'document_write' in _audit/raw/lh/post-_case-studies_cg-oncology_-1.json:3632"}, "properties": {"repobilityId": "c0f684a8c5d609d7", "scanner": "scanner-primary", "fingerprint": "4f1ef3ee5c95ab12", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["owasp", "document_write"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "_audit/raw/lh/post-_case-studies_cg-oncology_-1.json"}, "region": {"startLine": 3632}}}]}, {"ruleId": "scanner-41edc2ee0b6203e4", "level": "note", "message": {"text": "Insecure pattern 'document_write' in _audit/raw/lh/inline-_-2.json:5028"}, "properties": {"repobilityId": "14d9c73c1bab4f3f", "scanner": "scanner-primary", "fingerprint": "41edc2ee0b6203e4", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["owasp", "document_write"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "_audit/raw/lh/inline-_-2.json"}, "region": {"startLine": 5028}}}]}, {"ruleId": "scanner-910a9deae38b2da7", "level": "note", "message": {"text": "Insecure pattern 'document_write' in _audit/raw/lh/dedup-_instrument_-1.json:3937"}, "properties": {"repobilityId": "fd8c86c50034780b", "scanner": "scanner-primary", "fingerprint": "910a9deae38b2da7", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["owasp", "document_write"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "_audit/raw/lh/dedup-_instrument_-1.json"}, "region": {"startLine": 3937}}}]}, {"ruleId": "scanner-7b387c77b6cd5c42", "level": "note", "message": {"text": "Insecure pattern 'document_write' in _audit/raw/lh/post2-_case-studies_cg-oncology_-1.json:3643"}, "properties": {"repobilityId": "1ea0bd5b38634c73", "scanner": "scanner-primary", "fingerprint": "7b387c77b6cd5c42", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["owasp", "document_write"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "_audit/raw/lh/post2-_case-studies_cg-oncology_-1.json"}, "region": {"startLine": 3643}}}]}, {"ruleId": "scanner-b908ca70d1c8ce90", "level": "note", "message": {"text": "Insecure pattern 'document_write' in _audit/raw/lh/dedup-_case-studies_cg-oncology_-2.json:3618"}, "properties": {"repobilityId": "59dd6f9e2de39dee", "scanner": "scanner-primary", "fingerprint": "b908ca70d1c8ce90", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["owasp", "document_write"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "_audit/raw/lh/dedup-_case-studies_cg-oncology_-2.json"}, "region": {"startLine": 3618}}}]}, {"ruleId": "scanner-a99ea21edff994c5", "level": "note", "message": {"text": "Insecure pattern 'document_write' in _audit/raw/lh/baseline-_-1.json:5646"}, "properties": {"repobilityId": "c6344f9a8b539c4b", "scanner": "scanner-primary", "fingerprint": "a99ea21edff994c5", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["owasp", "document_write"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "_audit/raw/lh/baseline-_-1.json"}, "region": {"startLine": 5646}}}]}, {"ruleId": "scanner-36920d150e6ddfde", "level": "note", "message": {"text": "Insecure pattern 'document_write' in _audit/raw/lh/post-_case-studies_cg-oncology_-2.json:3618"}, "properties": {"repobilityId": "8a1b97b9b9af956c", "scanner": "scanner-primary", "fingerprint": "36920d150e6ddfde", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["owasp", "document_write"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "_audit/raw/lh/post-_case-studies_cg-oncology_-2.json"}, "region": {"startLine": 3618}}}]}, {"ruleId": "scanner-446b860544c92d7c", "level": "note", "message": {"text": "Insecure pattern 'document_write' in _audit/raw/lh/post-_instrument_-2.json:4120"}, "properties": {"repobilityId": "ad6a0f453794851b", "scanner": "scanner-primary", "fingerprint": "446b860544c92d7c", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["owasp", "document_write"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "_audit/raw/lh/post-_instrument_-2.json"}, "region": {"startLine": 4120}}}]}, {"ruleId": "scanner-56ba5646ca0f75cb", "level": "note", "message": {"text": "Insecure pattern 'document_write' in _audit/raw/lh/post2-_instrument_-3.json:4122"}, "properties": {"repobilityId": "73c555e942cfef8f", "scanner": "scanner-primary", "fingerprint": "56ba5646ca0f75cb", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["owasp", "document_write"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "_audit/raw/lh/post2-_instrument_-3.json"}, "region": {"startLine": 4122}}}]}, {"ruleId": "scanner-588e279a825a4e6b", "level": "note", "message": {"text": "Insecure pattern 'document_write' in _audit/raw/lh/baseline-_-2.json:5553"}, "properties": {"repobilityId": "77688135a052ea6c", "scanner": "scanner-primary", "fingerprint": "588e279a825a4e6b", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["owasp", "document_write"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "_audit/raw/lh/baseline-_-2.json"}, "region": {"startLine": 5553}}}]}, {"ruleId": "scanner-741916d284187c0f", "level": "note", "message": {"text": "Insecure pattern 'document_write' in _audit/raw/lh/baseline-_case-studies_cg-oncology_-3.json:3744"}, "properties": {"repobilityId": "9e38f4eb84aa25cc", "scanner": "scanner-primary", "fingerprint": "741916d284187c0f", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["owasp", "document_write"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "_audit/raw/lh/baseline-_case-studies_cg-oncology_-3.json"}, "region": {"startLine": 3744}}}]}, {"ruleId": "scanner-bce7d07b368e6595", "level": "note", "message": {"text": "Insecure pattern 'document_write' in _audit/raw/lh/baseline-_instrument_-1.json:4038"}, "properties": {"repobilityId": "cb144fb5cf6d694e", "scanner": "scanner-primary", "fingerprint": "bce7d07b368e6595", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["owasp", "document_write"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "_audit/raw/lh/baseline-_instrument_-1.json"}, "region": {"startLine": 4038}}}]}, {"ruleId": "scanner-553528ab971d8c7f", "level": "note", "message": {"text": "Insecure pattern 'document_write' in _audit/raw/lh/baseline-_-3.json:5653"}, "properties": {"repobilityId": "9c4c12e4f4af925f", "scanner": "scanner-primary", "fingerprint": "553528ab971d8c7f", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["owasp", "document_write"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "_audit/raw/lh/baseline-_-3.json"}, "region": {"startLine": 5653}}}]}, {"ruleId": "scanner-d146dbe7a1de114b", "level": "note", "message": {"text": "Insecure pattern 'document_write' in _audit/raw/lh/post2-_instrument_-1.json:4122"}, "properties": {"repobilityId": "e3068d496762f148", "scanner": "scanner-primary", "fingerprint": "d146dbe7a1de114b", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["owasp", "document_write"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "_audit/raw/lh/post2-_instrument_-1.json"}, "region": {"startLine": 4122}}}]}, {"ruleId": "scanner-44c430a4b9f4076b", "level": "note", "message": {"text": "Insecure pattern 'document_write' in _audit/raw/lh/dedup-_instrument_-2.json:4350"}, "properties": {"repobilityId": "3a8fa2e19ae5d1f3", "scanner": "scanner-primary", "fingerprint": "44c430a4b9f4076b", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["owasp", "document_write"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "_audit/raw/lh/dedup-_instrument_-2.json"}, "region": {"startLine": 4350}}}]}, {"ruleId": "scanner-bba9c84e31a14feb", "level": "note", "message": {"text": "Insecure pattern 'document_write' in _audit/raw/lh/autofinal-_case-studies_cg-oncology_-3.json:3622"}, "properties": {"repobilityId": "4a8bf47640714e68", "scanner": "scanner-primary", "fingerprint": "bba9c84e31a14feb", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["owasp", "document_write"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "_audit/raw/lh/autofinal-_case-studies_cg-oncology_-3.json"}, "region": {"startLine": 3622}}}]}, {"ruleId": "scanner-66a017714338a6fc", "level": "note", "message": {"text": "Insecure pattern 'document_write' in _audit/raw/lh/baseline-_case-studies_cg-oncology_-2.json:3780"}, "properties": {"repobilityId": "9b3ab1f976781430", "scanner": "scanner-primary", "fingerprint": "66a017714338a6fc", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["owasp", "document_write"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "_audit/raw/lh/baseline-_case-studies_cg-oncology_-2.json"}, "region": {"startLine": 3780}}}]}, {"ruleId": "scanner-20d6dbc10ecedfb9", "level": "note", "message": {"text": "Insecure pattern 'document_write' in _audit/raw/lh/dedup-_case-studies_cg-oncology_-3.json:3636"}, "properties": {"repobilityId": "c90990bb100fb2eb", "scanner": "scanner-primary", "fingerprint": "20d6dbc10ecedfb9", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["owasp", "document_write"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "_audit/raw/lh/dedup-_case-studies_cg-oncology_-3.json"}, "region": {"startLine": 3636}}}]}, {"ruleId": "scanner-2834ba752fd7ef87", "level": "note", "message": {"text": "Insecure pattern 'document_write' in _audit/raw/lh/post2-_case-studies_cg-oncology_-3.json:3622"}, "properties": {"repobilityId": "9d770ab77af66a75", "scanner": "scanner-primary", "fingerprint": "2834ba752fd7ef87", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["owasp", "document_write"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "_audit/raw/lh/post2-_case-studies_cg-oncology_-3.json"}, "region": {"startLine": 3622}}}]}, {"ruleId": "scanner-0d27a0a98ddcf314", "level": "note", "message": {"text": "Insecure pattern 'document_write' in _audit/raw/lh/autofinal-_instrument_-2.json:4365"}, "properties": {"repobilityId": "2fd00c52fadc8a5d", "scanner": "scanner-primary", "fingerprint": "0d27a0a98ddcf314", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["owasp", "document_write"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "_audit/raw/lh/autofinal-_instrument_-2.json"}, "region": {"startLine": 4365}}}]}, {"ruleId": "scanner-3951d608e6b953da", "level": "note", "message": {"text": "Insecure pattern 'document_write' in _audit/raw/lh/inline-_case-studies_cg-oncology_-1.json:3555"}, "properties": {"repobilityId": "da0358cb149e28bb", "scanner": "scanner-primary", "fingerprint": "3951d608e6b953da", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["owasp", "document_write"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "_audit/raw/lh/inline-_case-studies_cg-oncology_-1.json"}, "region": {"startLine": 3555}}}]}, {"ruleId": "scanner-a7e958a9d4b2fbc3", "level": "note", "message": {"text": "Insecure pattern 'document_write' in _audit/raw/lh/dedup-_instrument_-3.json:3933"}, "properties": {"repobilityId": "91f96675d83ee83a", "scanner": "scanner-primary", "fingerprint": "a7e958a9d4b2fbc3", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["owasp", "document_write"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "_audit/raw/lh/dedup-_instrument_-3.json"}, "region": {"startLine": 3933}}}]}, {"ruleId": "scanner-63f6cdd8b6dabbdc", "level": "note", "message": {"text": "Insecure pattern 'document_write' in _audit/raw/lh/inline-_instrument_-3.json:3777"}, "properties": {"repobilityId": "1773d5d1c55db8ff", "scanner": "scanner-primary", "fingerprint": "63f6cdd8b6dabbdc", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["owasp", "document_write"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "_audit/raw/lh/inline-_instrument_-3.json"}, "region": {"startLine": 3777}}}]}, {"ruleId": "scanner-64b8a1adbbf6c1bc", "level": "note", "message": {"text": "Insecure pattern 'document_write' in _audit/raw/lh/autofinal-_instrument_-3.json:4350"}, "properties": {"repobilityId": "77649d41ce9d5b78", "scanner": "scanner-primary", "fingerprint": "64b8a1adbbf6c1bc", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["owasp", "document_write"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "_audit/raw/lh/autofinal-_instrument_-3.json"}, "region": {"startLine": 4350}}}]}, {"ruleId": "scanner-8bcbafd98145c32b", "level": "note", "message": {"text": "Insecure pattern 'document_write' in _audit/raw/lh/post2-_instrument_-2.json:4104"}, "properties": {"repobilityId": "a77b64883d4dac54", "scanner": "scanner-primary", "fingerprint": "8bcbafd98145c32b", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["owasp", "document_write"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "_audit/raw/lh/post2-_instrument_-2.json"}, "region": {"startLine": 4104}}}]}, {"ruleId": "scanner-107a58e5ab29885a", "level": "note", "message": {"text": "Insecure pattern 'document_write' in _audit/raw/lh/inline-_instrument_-2.json:3777"}, "properties": {"repobilityId": "3c47a9b51ac7f131", "scanner": "scanner-primary", "fingerprint": "107a58e5ab29885a", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["owasp", "document_write"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "_audit/raw/lh/inline-_instrument_-2.json"}, "region": {"startLine": 3777}}}]}, {"ruleId": "scanner-91929f3aca662978", "level": "note", "message": {"text": "Insecure pattern 'document_write' in _audit/raw/lh/autofinal-_-3.json:5405"}, "properties": {"repobilityId": "ed1188391637b72f", "scanner": "scanner-primary", "fingerprint": "91929f3aca662978", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["owasp", "document_write"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "_audit/raw/lh/autofinal-_-3.json"}, "region": {"startLine": 5405}}}]}, {"ruleId": "scanner-b2db1e0c12786f4c", "level": "note", "message": {"text": "Insecure pattern 'document_write' in _audit/raw/lh/inline-_-3.json:5023"}, "properties": {"repobilityId": "5b91bc9be86d22d4", "scanner": "scanner-primary", "fingerprint": "b2db1e0c12786f4c", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["owasp", "document_write"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "_audit/raw/lh/inline-_-3.json"}, "region": {"startLine": 5023}}}]}, {"ruleId": "scanner-195c26e11f5f9a85", "level": "note", "message": {"text": "Insecure pattern 'document_write' in _audit/raw/lh/baseline-_instrument_-3.json:3970"}, "properties": {"repobilityId": "76f34a7fbda27655", "scanner": "scanner-primary", "fingerprint": "195c26e11f5f9a85", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["owasp", "document_write"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "_audit/raw/lh/baseline-_instrument_-3.json"}, "region": {"startLine": 3970}}}]}, {"ruleId": "scanner-9f5d5f1e232ba6f7", "level": "note", "message": {"text": "Insecure pattern 'document_write' in _audit/raw/lh/inline-_-1.json:5046"}, "properties": {"repobilityId": "f38c8fa5cc0e18aa", "scanner": "scanner-primary", "fingerprint": "9f5d5f1e232ba6f7", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["owasp", "document_write"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "_audit/raw/lh/inline-_-1.json"}, "region": {"startLine": 5046}}}]}, {"ruleId": "scanner-6315806921c32bf7", "level": "note", "message": {"text": "Insecure pattern 'document_write' in _audit/raw/lh/baseline-_instrument_-2.json:3970"}, "properties": {"repobilityId": "908189e8dc01646c", "scanner": "scanner-primary", "fingerprint": "6315806921c32bf7", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["owasp", "document_write"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "_audit/raw/lh/baseline-_instrument_-2.json"}, "region": {"startLine": 3970}}}]}, {"ruleId": "scanner-a043769bd216d2ec", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in _audit/tools/lighthouse-baseline.mjs:4"}, "properties": {"repobilityId": "1b2967b42be107fa", "scanner": "scanner-primary", "fingerprint": "a043769bd216d2ec", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "_audit/tools/lighthouse-baseline.mjs"}, "region": {"startLine": 4}}}]}, {"ruleId": "scanner-87d26d0c04dcd38b", "level": "warning", "message": {"text": "Insecure pattern 'cors_wildcard' in functions/api/audit-request.js:13"}, "properties": {"repobilityId": "de492686fb02334b", "scanner": "scanner-primary", "fingerprint": "87d26d0c04dcd38b", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "cors_wildcard"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "functions/api/audit-request.js"}, "region": {"startLine": 13}}}]}, {"ruleId": "scanner-2e1cf16e81a6a685", "level": "warning", "message": {"text": "Insecure pattern 'cors_wildcard' in functions/api/erase.js:197"}, "properties": {"repobilityId": "073b9c51578aa5c2", "scanner": "scanner-primary", "fingerprint": "2e1cf16e81a6a685", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "cors_wildcard"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "functions/api/erase.js"}, "region": {"startLine": 197}}}]}, {"ruleId": "scanner-b68a764458001c9a", "level": "warning", "message": {"text": "Insecure pattern 'cors_wildcard' in functions/api/dsar.js:122"}, "properties": {"repobilityId": "f3e90dcdc957703a", "scanner": "scanner-primary", "fingerprint": "b68a764458001c9a", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "cors_wildcard"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "functions/api/dsar.js"}, "region": {"startLine": 122}}}]}, {"ruleId": "scanner-c0d08dfb7bd985b2", "level": "warning", "message": {"text": "Insecure pattern 'cors_wildcard' in functions/api/list-unsubscribe.js:130"}, "properties": {"repobilityId": "724e45ddd6c7d565", "scanner": "scanner-primary", "fingerprint": "c0d08dfb7bd985b2", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "cors_wildcard"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "functions/api/list-unsubscribe.js"}, "region": {"startLine": 130}}}]}, {"ruleId": "scanner-7ab1d976ab18e7a4", "level": "warning", "message": {"text": "Insecure pattern 'cors_wildcard' in functions/api/audit.js:1400"}, "properties": {"repobilityId": "23dcf4d8d857225f", "scanner": "scanner-primary", "fingerprint": "7ab1d976ab18e7a4", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "cors_wildcard"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "functions/api/audit.js"}, "region": {"startLine": 1400}}}]}, {"ruleId": "scanner-911017010802a2b0", "level": "warning", "message": {"text": "Insecure pattern 'cors_wildcard' in functions/api/portability.js:88"}, "properties": {"repobilityId": "5c026bc61244fa2e", "scanner": "scanner-primary", "fingerprint": "911017010802a2b0", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "cors_wildcard"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "functions/api/portability.js"}, "region": {"startLine": 88}}}]}, {"ruleId": "scanner-6f2dd2ab94dcbea8", "level": "warning", "message": {"text": "Insecure pattern 'cors_wildcard' in functions/api/intent.js:70"}, "properties": {"repobilityId": "780cd0e97f134f39", "scanner": "scanner-primary", "fingerprint": "6f2dd2ab94dcbea8", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "cors_wildcard"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "functions/api/intent.js"}, "region": {"startLine": 70}}}]}, {"ruleId": "scanner-a16583c5666100bd", "level": "warning", "message": {"text": "Insecure pattern 'cors_wildcard' in functions/api/stripe/checkout.js:20"}, "properties": {"repobilityId": "3da23a4027a998b7", "scanner": "scanner-primary", "fingerprint": "a16583c5666100bd", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "cors_wildcard"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "functions/api/stripe/checkout.js"}, "region": {"startLine": 20}}}]}, {"ruleId": "scanner-6d4ec9d4e401a09b", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in admin-v2-src/boot.jsx:341"}, "properties": {"repobilityId": "278fb6b3468eccee", "scanner": "scanner-primary", "fingerprint": "6d4ec9d4e401a09b", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "admin-v2-src/boot.jsx"}, "region": {"startLine": 341}}}]}, {"ruleId": "scanner-14ec277920e97e26", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in public/audit/audit-app.js:813"}, "properties": {"repobilityId": "08059dbb1790bcef", "scanner": "scanner-primary", "fingerprint": "14ec277920e97e26", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "public/audit/audit-app.js"}, "region": {"startLine": 813}}}]}, {"ruleId": "scanner-cfb0aa7a2c1b0f3d", "level": "warning", "message": {"text": "Insecure pattern 'direct_outerhtml_assignment' in public/audit/audit-app.js:300"}, "properties": {"repobilityId": "3f3190398fb0371d", "scanner": "scanner-primary", "fingerprint": "cfb0aa7a2c1b0f3d", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_outerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "public/audit/audit-app.js"}, "region": {"startLine": 300}}}]}, {"ruleId": "scanner-10654bf285094bea", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in public/admin/cockpit-v2/app.js:1"}, "properties": {"repobilityId": "e134108b70fce822", "scanner": "scanner-primary", "fingerprint": "10654bf285094bea", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "public/admin/cockpit-v2/app.js"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b083f1e8bb93fa40", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in public/admin/legacy/cockpit/app.js:72"}, "properties": {"repobilityId": "4f92ccdc87edeaa5", "scanner": "scanner-primary", "fingerprint": "b083f1e8bb93fa40", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "public/admin/legacy/cockpit/app.js"}, "region": {"startLine": 72}}}]}, {"ruleId": "scanner-222d35e449c14e98", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in public/portal/index.html:8"}, "properties": {"repobilityId": "17a22d266219e77f", "scanner": "scanner-primary", "fingerprint": "222d35e449c14e98", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "public/portal/index.html"}, "region": {"startLine": 8}}}]}, {"ruleId": "scanner-4374e7963afacfc9", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in 04-Preview-Builds/tamazia-hero-preview.html:1338"}, "properties": {"repobilityId": "caf36b9034baffa8", "scanner": "scanner-primary", "fingerprint": "4374e7963afacfc9", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "04-Preview-Builds/tamazia-hero-preview.html"}, "region": {"startLine": 1338}}}]}, {"ruleId": "scanner-fbc0a5c434739f07", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in 04-Preview-Builds/astro-v1/index.html:1"}, "properties": {"repobilityId": "36521ad04c69a0e2", "scanner": "scanner-primary", "fingerprint": "fbc0a5c434739f07", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "04-Preview-Builds/astro-v1/index.html"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-65aa740cba4a4a73", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "8860eac61a1ebe26", "scanner": "scanner-primary", "fingerprint": "65aa740cba4a4a73", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/codeql.yml"}, "region": {"startLine": 34}}}]}, {"ruleId": "scanner-65aa740cba4a4a73", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "549a2de1ac0c3fa9", "scanner": "scanner-primary", "fingerprint": "65aa740cba4a4a73", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/codeql.yml"}, "region": {"startLine": 37}}}]}, {"ruleId": "scanner-65aa740cba4a4a73", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "a5721e15e3a54aa2", "scanner": "scanner-primary", "fingerprint": "65aa740cba4a4a73", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/codeql.yml"}, "region": {"startLine": 43}}}]}, {"ruleId": "scanner-93b5dc94140a9b18", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "aa59201970110832", "scanner": "scanner-primary", "fingerprint": "93b5dc94140a9b18", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/visual-regression.yml"}, "region": {"startLine": 28}}}]}, {"ruleId": "scanner-092572756540f5e9", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "82cdac13cffaf0b0", "scanner": "scanner-primary", "fingerprint": "092572756540f5e9", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/state-digest.yml"}, "region": {"startLine": 58}}}]}, {"ruleId": "scanner-d2b775d67ccced7c", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "2e4e24a948cc2108", "scanner": "scanner-primary", "fingerprint": "d2b775d67ccced7c", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/state-digest.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-73e16efc79dd8366", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "747a9e088ce80efc", "scanner": "scanner-primary", "fingerprint": "73e16efc79dd8366", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/weekly-backup.yml"}, "region": {"startLine": 20}}}]}, {"ruleId": "scanner-d144ddac2e069f74", "level": "note", "message": {"text": "Very large file: patch-dist.js (1678 lines)"}, "properties": {"repobilityId": "6dc497e7c097820b", "scanner": "scanner-primary", "fingerprint": "d144ddac2e069f74", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-b15004f58d244a2f", "level": "note", "message": {"text": "Very large file: functions/api/audit.js (2001 lines)"}, "properties": {"repobilityId": "c5ead6166e4aaa12", "scanner": "scanner-primary", "fingerprint": "b15004f58d244a2f", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-48fbad3bf98a2f33", "level": "note", "message": {"text": "Very large file: functions/audit/_adapter.js (1664 lines)"}, "properties": {"repobilityId": "dad5a1b575b87982", "scanner": "scanner-primary", "fingerprint": "48fbad3bf98a2f33", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-a651d5d1cb822862", "level": "note", "message": {"text": "Very large file: public/audit/audit-app.js (1391 lines)"}, "properties": {"repobilityId": "6bddb7565bad4ae3", "scanner": "scanner-primary", "fingerprint": "a651d5d1cb822862", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-6893a6c8b0861585", "level": "warning", "message": {"text": "Very low test-to-source ratio"}, "properties": {"repobilityId": "54a7de3f06314bf0", "scanner": "scanner-primary", "fingerprint": "6893a6c8b0861585", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["tests", "coverage"]}}, {"ruleId": "scanner-3ab5d313dda8e5f9", "level": "note", "message": {"text": "Debug logging residue appears in source files"}, "properties": {"repobilityId": "57184fb0e4d64c40", "scanner": "scanner-primary", "fingerprint": "3ab5d313dda8e5f9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["debug", "cleanup", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-72b2a6250083a784", "level": "warning", "message": {"text": "Placeholder or mock-heavy implementation detected"}, "properties": {"repobilityId": "67ca9fa124161ec8", "scanner": "scanner-primary", "fingerprint": "72b2a6250083a784", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "incomplete", "generated-repo-pattern"]}}, {"ruleId": "scanner-2d0c7b7ab8f8aacf", "level": "warning", "message": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "properties": {"repobilityId": "81a81c87f86bfc41", "scanner": "scanner-primary", "fingerprint": "2d0c7b7ab8f8aacf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "critical-flow", "generated-repo-pattern"]}}, {"ruleId": "scanner-ea8f3013f588db25", "level": "note", "message": {"text": "Shallow git history limits provenance confidence"}, "properties": {"repobilityId": "4b51c431a5a5fcb9", "scanner": "scanner-primary", "fingerprint": "ea8f3013f588db25", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-8424db9c75e04ba4", "level": "none", "message": {"text": "Very short observed git history"}, "properties": {"repobilityId": "075a6b3b867a31b5", "scanner": "scanner-primary", "fingerprint": "8424db9c75e04ba4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-a16e5d200003af28", "level": "none", "message": {"text": "Commented-code block (8 lines) in astro.config.mjs:8"}, "properties": {"repobilityId": "eddb1024171b8d33", "scanner": "scanner-primary", "fingerprint": "a16e5d200003af28", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-92a122b19e51c75c", "level": "none", "message": {"text": "Commented-code block (5 lines) in functions/_middleware.js:33"}, "properties": {"repobilityId": "91d422a044b4238a", "scanner": "scanner-primary", "fingerprint": "92a122b19e51c75c", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-8512c30a5ddfc76d", "level": "none", "message": {"text": "Commented-code block (5 lines) in functions/api/audit-request.js:1"}, "properties": {"repobilityId": "075e7bf8ae447380", "scanner": "scanner-primary", "fingerprint": "8512c30a5ddfc76d", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-66c03781297cf38f", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 functions/api/erase.js:27"}, "properties": {"repobilityId": "912e392816c6ff2a", "scanner": "scanner-primary", "fingerprint": "66c03781297cf38f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-96a08831be2c75ba", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 functions/api/contact.js:153"}, "properties": {"repobilityId": "507f672a84d888d3", "scanner": "scanner-primary", "fingerprint": "96a08831be2c75ba", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-67cba9bf850c9e59", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 functions/api/dsar.js:33"}, "properties": {"repobilityId": "83ef879cea6fbde8", "scanner": "scanner-primary", "fingerprint": "67cba9bf850c9e59", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-314fea318866b9ed", "level": "none", "message": {"text": "Commented-code block (5 lines) in functions/api/list-unsubscribe.js:1"}, "properties": {"repobilityId": "7701441f88bc9f01", "scanner": "scanner-primary", "fingerprint": "314fea318866b9ed", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-c545c767848bd41e", "level": "none", "message": {"text": "Commented-code block (9 lines) in functions/api/cal-webhook.js:8"}, "properties": {"repobilityId": "38b359ba6773dc4b", "scanner": "scanner-primary", "fingerprint": "c545c767848bd41e", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-238694b54d1e59c5", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 functions/api/cal-webhook.js:226"}, "properties": {"repobilityId": "0a95cc98c5affe86", "scanner": "scanner-primary", "fingerprint": "238694b54d1e59c5", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-a99b4b41dab53301", "level": "none", "message": {"text": "Commented-code block (6 lines) in functions/api/audit.js:6"}, "properties": {"repobilityId": "9ca1cd751fee71e6", "scanner": "scanner-primary", "fingerprint": "a99b4b41dab53301", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-bc12e3233286d6d7", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 functions/api/audit.js:754"}, "properties": {"repobilityId": "8ac18010345b3a38", "scanner": "scanner-primary", "fingerprint": "bc12e3233286d6d7", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-aa60b99f75b6cff6", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 functions/api/indexnow.js:43"}, "properties": {"repobilityId": "5dcda0663b22f8a4", "scanner": "scanner-primary", "fingerprint": "aa60b99f75b6cff6", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-45764d512b21b8a5", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 functions/api/portability.js:27"}, "properties": {"repobilityId": "718948b5aa0a31cd", "scanner": "scanner-primary", "fingerprint": "45764d512b21b8a5", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-e40422d8ade2a765", "level": "none", "message": {"text": "Commented-code block (10 lines) in functions/api/intent.js:1"}, "properties": {"repobilityId": "84f887e83eb0490e", "scanner": "scanner-primary", "fingerprint": "e40422d8ade2a765", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-98119acfd7270ba2", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 functions/api/intent.js:276"}, "properties": {"repobilityId": "a8f93addbb164ebe", "scanner": "scanner-primary", "fingerprint": "98119acfd7270ba2", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-f3ecd29e988a9cf5", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 functions/api/briefings.js:131"}, "properties": {"repobilityId": "178246edeebba241", "scanner": "scanner-primary", "fingerprint": "f3ecd29e988a9cf5", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-a8b83c8ed6901ff6", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 functions/api/admin/leads.js:13"}, "properties": {"repobilityId": "9f7978f940b01eda", "scanner": "scanner-primary", "fingerprint": "a8b83c8ed6901ff6", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-502f7082f24cf76a", "level": "none", "message": {"text": "Commented-code block (5 lines) in functions/api/admin/notify-deploy.js:1"}, "properties": {"repobilityId": "de8f1a54f62b97a9", "scanner": "scanner-primary", "fingerprint": "502f7082f24cf76a", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-a1aff4b7ea661196", "level": "none", "message": {"text": "Commented-code block (7 lines) in functions/api/admin/_middleware.js:6"}, "properties": {"repobilityId": "14cb8c45b20bb7f1", "scanner": "scanner-primary", "fingerprint": "a1aff4b7ea661196", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-a28aa44e9cd8d72b", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 functions/api/admin/_github.js:7"}, "properties": {"repobilityId": "076c0e89b12f50cc", "scanner": "scanner-primary", "fingerprint": "a28aa44e9cd8d72b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-f42bb1f48f4d7c5c", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 functions/api/admin/outbox.js:8"}, "properties": {"repobilityId": "9d7972942f11154b", "scanner": "scanner-primary", "fingerprint": "f42bb1f48f4d7c5c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-a1cd0e6d46072432", "level": "none", "message": {"text": "Commented-code block (5 lines) in functions/api/admin/_access.js:1"}, "properties": {"repobilityId": "6cbc2f2b40d302fb", "scanner": "scanner-primary", "fingerprint": "a1cd0e6d46072432", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-af649b546324497f", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 functions/api/admin/inbox.js:11"}, "properties": {"repobilityId": "2535a20ac866e063", "scanner": "scanner-primary", "fingerprint": "af649b546324497f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-3905d968a5d65d00", "level": "none", "message": {"text": "Commented-code block (9 lines) in functions/api/admin/leads/add-manual.js:6"}, "properties": {"repobilityId": "02960fc79551c337", "scanner": "scanner-primary", "fingerprint": "3905d968a5d65d00", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-41639a9ed54a35b9", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 functions/api/admin/leads/pending.js:21"}, "properties": {"repobilityId": "351536efbd3bdaaa", "scanner": "scanner-primary", "fingerprint": "41639a9ed54a35b9", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-56df4fc884cab833", "level": "none", "message": {"text": "Commented-code block (6 lines) in functions/api/admin/audits/mint.js:2"}, "properties": {"repobilityId": "6ecbd54cc32be5e6", "scanner": "scanner-primary", "fingerprint": "56df4fc884cab833", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-99a6bf4093676313", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 functions/api/admin/audits/rerun.js:10"}, "properties": {"repobilityId": "7bd142bda300cf3c", "scanner": "scanner-primary", "fingerprint": "99a6bf4093676313", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-a0c0355cce4f3d31", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 functions/api/admin/scrape/run.js:24"}, "properties": {"repobilityId": "c07ca99be63ce591", "scanner": "scanner-primary", "fingerprint": "a0c0355cce4f3d31", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-7a4e026ddf60cc56", "level": "none", "message": {"text": "Commented-code block (5 lines) in functions/api/stripe/checkout.js:1"}, "properties": {"repobilityId": "aad2cd1270815dbe", "scanner": "scanner-primary", "fingerprint": "7a4e026ddf60cc56", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-5553d3630f508b78", "level": "none", "message": {"text": "Commented-code block (16 lines) in functions/api/stripe/webhook.js:12"}, "properties": {"repobilityId": "1d7441fcd3b494b1", "scanner": "scanner-primary", "fingerprint": "5553d3630f508b78", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-eeabe28633c39aa0", "level": "none", "message": {"text": "Commented-code block (5 lines) in functions/audit/_adapter.js:1"}, "properties": {"repobilityId": "194be0595f318dc8", "scanner": "scanner-primary", "fingerprint": "eeabe28633c39aa0", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-cc46658a32715101", "level": "none", "message": {"text": "Commented-code block (6 lines) in functions/audit/_commerce.js:1"}, "properties": {"repobilityId": "cacb6a6dd23e7fa3", "scanner": "scanner-primary", "fingerprint": "cc46658a32715101", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-d1b03a64980fa296", "level": "none", "message": {"text": "Commented-code block (6 lines) in functions/audit/_shell.js:17"}, "properties": {"repobilityId": "35664c9ce3f71e7e", "scanner": "scanner-primary", "fingerprint": "d1b03a64980fa296", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-88368806cef5ace3", "level": "none", "message": {"text": "Commented-code block (7 lines) in functions/audit/[[path]].js:51"}, "properties": {"repobilityId": "83e27683a9255551", "scanner": "scanner-primary", "fingerprint": "88368806cef5ace3", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-c12de00a1c685c3a", "level": "none", "message": {"text": "Commented-code block (5 lines) in functions/admin/session.js:1"}, "properties": {"repobilityId": "b88cd7d019c99e59", "scanner": "scanner-primary", "fingerprint": "c12de00a1c685c3a", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-80f0a77addf27655", "level": "none", "message": {"text": "Commented-code block (5 lines) in functions/_lib/neon-sync.js:24"}, "properties": {"repobilityId": "3fea66c82f845bc4", "scanner": "scanner-primary", "fingerprint": "80f0a77addf27655", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-1dc8973fc1d63e9f", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 functions/_lib/neon-sync.js:58"}, "properties": {"repobilityId": "8ee0fd0dd1133440", "scanner": "scanner-primary", "fingerprint": "1dc8973fc1d63e9f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-89018b03b567a991", "level": "none", "message": {"text": "Commented-code block (7 lines) in functions/_lib/notify.js:1"}, "properties": {"repobilityId": "745cba30255beeaa", "scanner": "scanner-primary", "fingerprint": "89018b03b567a991", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-786b990c29d42e74", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/visual/overflow.spec.ts:23"}, "properties": {"repobilityId": "5ad7279975d4d7e7", "scanner": "scanner-primary", "fingerprint": "786b990c29d42e74", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-2b5855fb22627c81", "level": "none", "message": {"text": "Commented-code block (5 lines) in scripts/gen-state-digest.mjs:78"}, "properties": {"repobilityId": "154cc07e61cd12e5", "scanner": "scanner-primary", "fingerprint": "2b5855fb22627c81", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-e0c3ec477ef4c14e", "level": "none", "message": {"text": "Commented-code block (6 lines) in scripts/build-cockpit.mjs:4"}, "properties": {"repobilityId": "3bfc18c6a74a87cf", "scanner": "scanner-primary", "fingerprint": "e0c3ec477ef4c14e", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-a7b9a25f8afc8ba6", "level": "none", "message": {"text": "Commented-code block (6 lines) in scripts/stripe-setup.mjs:9"}, "properties": {"repobilityId": "52722e9703b5daf4", "scanner": "scanner-primary", "fingerprint": "a7b9a25f8afc8ba6", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-0f46414bd48efad2", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/stripe-setup.mjs:37"}, "properties": {"repobilityId": "8dedcfa016785a2d", "scanner": "scanner-primary", "fingerprint": "0f46414bd48efad2", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-8b07257c1407a60a", "level": "none", "message": {"text": "Commented-code block (5 lines) in scripts/cf-set-commerce-env.mjs:1"}, "properties": {"repobilityId": "fa24f666fb04d4a3", "scanner": "scanner-primary", "fingerprint": "8b07257c1407a60a", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-2663ec25a2445615", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/cf-set-commerce-env.mjs:55"}, "properties": {"repobilityId": "24e45b6da9c64aa1", "scanner": "scanner-primary", "fingerprint": "2663ec25a2445615", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-cabe37989dccef37", "level": "none", "message": {"text": "Commented-code block (5 lines) in admin-v2-src/boot.jsx:1"}, "properties": {"repobilityId": "c149c2136e5744cb", "scanner": "scanner-primary", "fingerprint": "cabe37989dccef37", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-42eb2b8086ed8af5", "level": "none", "message": {"text": "Commented-code block (5 lines) in _qa/qa_render.mjs:3"}, "properties": {"repobilityId": "ab8f8bf6b39e6e67", "scanner": "scanner-primary", "fingerprint": "42eb2b8086ed8af5", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-019a34de21840836", "level": "none", "message": {"text": "Commented-code block (9 lines) in _qa/backtest.mjs:10"}, "properties": {"repobilityId": "17941d07846eef52", "scanner": "scanner-primary", "fingerprint": "019a34de21840836", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-743aed72b9152361", "level": "none", "message": {"text": "Commented-code block (5 lines) in public/audit/audit-app.js:54"}, "properties": {"repobilityId": "f63a8103637d2a98", "scanner": "scanner-primary", "fingerprint": "743aed72b9152361", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-6a77f0e4eae01f9a", "level": "none", "message": {"text": "Commented-code block (6 lines) in public/audit/audit-charts.js:7"}, "properties": {"repobilityId": "c9241a66cbe0020d", "scanner": "scanner-primary", "fingerprint": "6a77f0e4eae01f9a", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-a0ebf892486aa30e", "level": "none", "message": {"text": "Commented-code block (5 lines) in public/admin/cockpit/app.js:1"}, "properties": {"repobilityId": "c23e3f20bf381e54", "scanner": "scanner-primary", "fingerprint": "a0ebf892486aa30e", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-7378c8a0da7ec881", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/content/caseStudies.ts:1"}, "properties": {"repobilityId": "feb4d0f6fef5d237", "scanner": "scanner-primary", "fingerprint": "7378c8a0da7ec881", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-9a67f028e99424a6", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/content/pricing.ts:239"}, "properties": {"repobilityId": "43c6877206cff521", "scanner": "scanner-primary", "fingerprint": "9a67f028e99424a6", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-7075f09ead284647", "level": "none", "message": {"text": "Commented-code block (6 lines) in src/content/hero.ts:17"}, "properties": {"repobilityId": "24488da772122aa3", "scanner": "scanner-primary", "fingerprint": "7075f09ead284647", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}]}]}