Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.
Sign up free Scan another repo

bryamlazo166/cmms-app

https://github.com/bryamlazo166/cmms-app · scanned 2026-06-17 01:43 UTC (1 month, 1 week ago)

421 raw signals (0 security + 421 graph)

File as issue Image
UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 1 month, 1 week ago · v2 · last Δ -6.4 (diff) · 409 actionable findings from 1 signal source. 12 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON
Combined
70.3
/100
Security checks
70
0 findings
System graph
70
100.0% cov · 409 findings
Critical
1
click to filter
Agents
10
0 votes
Crowd
0
reported
Severity distribution — click a segment to filter
Active filters: excluding tests × Reset all
Severity: Critical 1 High 234 Medium 42 Low 114 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 0 System graph 409 Crowd 0 Layer: Software 27 Frontend 3 Security 167 Cicd 1 Quality 68 Api 143
Corpus Intelligence Cross-corpus context (cohort percentile, top patterns, fix plan) is shown only on repositories you own. Sign up and connect your repo to view it.
Scan summary Repository scanned at 70.3/100 with 100.0% coverage. It contains 2325 nodes across 30 cross-layer flows, written primarily in mixed languages. Engine surfaced 421 findings — concentrated in security (167), api (143), quality (79). Risk profile is high: 1 critical, 234 high, 42 medium. Recommended next step: open the security layer findings first — that's where the highest-impact wins live.

Showing 382 of 409 actionable findings. 421 raw detector signals were grouped into reader-sized issues. Click TP / FP to vote on a finding's accuracy — votes adjust the confidence weighting and improve detection across the platform.

critical System graph security Secrets conf 1.00 Possible secret in scripts/debug/probe_pooler.py
Detected pattern matching password_literal. Rotate the credential and move to a secret manager.
scripts/debug/probe_pooler.py:5
high System graph api Wiring conf 1.00 Dangling fetch: DELETE /api/doc-links/${docId} (static/js/app.js:1113)
`static/js/app.js:1113` calls `DELETE /api/doc-links/${docId}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/doc-links/<p>` If this points at an external API, prefix it with `https://` so the matcher skips it.
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: DELETE /api/photos/${photoId} (static/js/notices.js:1070)
`static/js/notices.js:1070` calls `DELETE /api/photos/${photoId}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/photos/<p>` If this points at an external API, prefix it with `https://` so the matcher skips it.
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: DELETE /api/photos/${photoId} (static/js/work_orders.js:4314)
`static/js/work_orders.js:4314` calls `DELETE /api/photos/${photoId}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/photos/<p>` If this points at an external API, prefix it with `https://` so the matcher skips it.
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: DELETE /api/production/goals/${id} (static/js/produccion.js:477)
`static/js/produccion.js:477` calls `DELETE /api/production/goals/${id}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/production/goals/<p>` If this points at an external API, prefix it with `https://` so the match…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: DELETE /api/providers/${id} (static/js/work_orders.js:495)
`static/js/work_orders.js:495` calls `DELETE /api/providers/${id}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/providers/<p>` If this points at an external API, prefix it with `https://` so the matcher skips it.
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: DELETE /api/shutdowns/${_activeShutdown.id} (static/js/shutdowns.js:732)
`static/js/shutdowns.js:732` calls `DELETE /api/shutdowns/${_activeShutdown.id}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/shutdowns/<p>` If this points at an external API, prefix it with `https://` so the matc…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: DELETE /api/shutdowns/${_activeShutdown.id}/remove-ot/${otId} (static/js/shutdowns.js:704)
`static/js/shutdowns.js:704` calls `DELETE /api/shutdowns/${_activeShutdown.id}/remove-ot/${otId}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/shutdowns/<p>/remove-ot/<p>` If this points at an external API, prefi…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: DELETE /api/specs/${apiType}/${specId}/delete (static/js/app.js:806)
`static/js/app.js:806` calls `DELETE /api/specs/${apiType}/${specId}/delete` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/specs/<p>/<p>/delete` If this points at an external API, prefix it with `https://` so the m…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: DELETE /api/technicians/${id} (static/js/work_orders.js:2452)
`static/js/work_orders.js:2452` calls `DELETE /api/technicians/${id}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/technicians/<p>` If this points at an external API, prefix it with `https://` so the matcher skips…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: DELETE /api/thickness/inspections/${inspectionId} (static/js/thickness.js:509)
`static/js/thickness.js:509` calls `DELETE /api/thickness/inspections/${inspectionId}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/thickness/inspections/<p>` If this points at an external API, prefix it with `htt…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: DELETE /api/weekly-plans/${_state.plan.id} (static/js/programa_nocturno.js:463)
`static/js/programa_nocturno.js:463` calls `DELETE /api/weekly-plans/${_state.plan.id}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/weekly-plans/<p>` If this points at an external API, prefix it with `https://` s…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: DELETE /api/weekly-plans/${_state.plan.id}/items/${itemId} (static/js/programa_nocturno.js:490)
`static/js/programa_nocturno.js:490` calls `DELETE /api/weekly-plans/${_state.plan.id}/items/${itemId}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/weekly-plans/<p>/items/<p>` If this points at an external API, p…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: DELETE /api/work_orders/${activeExecutionOT.id}/conformity (static/js/work_orders.js:3049)
`static/js/work_orders.js:3049` calls `DELETE /api/work_orders/${activeExecutionOT.id}/conformity` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/work_orders/<p>/conformity` If this points at an external API, prefix…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: DELETE /api/work_orders/${activeExecutionOT.id}/log/${logId} (static/js/work_orders.js:2921)
`static/js/work_orders.js:2921` calls `DELETE /api/work_orders/${activeExecutionOT.id}/log/${logId}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/work_orders/<p>/log/<p>` If this points at an external API, prefix …
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: DELETE /api/work_orders/${otId}/materials/${id} (static/js/work_orders.js:3430)
`static/js/work_orders.js:3430` calls `DELETE /api/work_orders/${otId}/materials/${id}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/work_orders/<p>/materials/<p>` If this points at an external API, prefix it with…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: DELETE /api/work_orders/${otId}/materials/${id} (static/js/work_orders.js:3648)
`static/js/work_orders.js:3648` calls `DELETE /api/work_orders/${otId}/materials/${id}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/work_orders/<p>/materials/<p>` If this points at an external API, prefix it with…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET /api/doc-links/${apiT}/${id} (static/js/app.js:1074)
`static/js/app.js:1074` calls `GET /api/doc-links/${apiT}/${id}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/doc-links/<p>/<p>` If this points at an external API, prefix it with `https://` so the matcher skips it.
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET /api/indicators/area/${areaId}/equipments?${dateParams()} (static/js/indicators.js:66)
`static/js/indicators.js:66` calls `GET /api/indicators/area/${areaId}/equipments?${dateParams()}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/indicators/area/<p>/equipments` If this points at an external API, pr…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET /api/indicators/equipment/${equipId}/failures?${dateParams()} (static/js/indicators.js:78)
`static/js/indicators.js:78` calls `GET /api/indicators/equipment/${equipId}/failures?${dateParams()}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/indicators/equipment/<p>/failures` If this points at an external …
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET /api/notices/${id} (static/js/notices.js:524)
`static/js/notices.js:524` calls `GET /api/notices/${id}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/notices/<p>` If this points at an external API, prefix it with `https://` so the matcher skips it.
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET /api/notices/${noticeId} (static/js/notices.js:971)
`static/js/notices.js:971` calls `GET /api/notices/${noticeId}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/notices/<p>` If this points at an external API, prefix it with `https://` so the matcher skips it.
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET /api/notices/${noticeId} (static/js/work_orders.js:2703)
`static/js/work_orders.js:2703` calls `GET /api/notices/${noticeId}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/notices/<p>` If this points at an external API, prefix it with `https://` so the matcher skips it.
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET /api/photo-share/generate/notice/${noticeId} (static/js/notices.js:1086)
`static/js/notices.js:1086` calls `GET /api/photo-share/generate/notice/${noticeId}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/photo-share/generate/notice/<p>` If this points at an external API, prefix it with …
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET /api/photo-share/generate/work_order/${otId} (static/js/work_orders.js:2300)
`static/js/work_orders.js:2300` calls `GET /api/photo-share/generate/work_order/${otId}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/photo-share/generate/work_order/<p>` If this points at an external API, prefix …
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET /api/photos/notice/${id} (static/js/work_orders.js:2652)
`static/js/work_orders.js:2652` calls `GET /api/photos/notice/${id}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/photos/notice/<p>` If this points at an external API, prefix it with `https://` so the matcher skip…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET /api/photos/notice/${noticeId} (static/js/notices.js:1015)
`static/js/notices.js:1015` calls `GET /api/photos/notice/${noticeId}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/photos/notice/<p>` If this points at an external API, prefix it with `https://` so the matcher sk…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET /api/photos/notice/${noticeId} (static/js/work_orders.js:4331)
`static/js/work_orders.js:4331` calls `GET /api/photos/notice/${noticeId}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/photos/notice/<p>` If this points at an external API, prefix it with `https://` so the matche…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET /api/photos/work_order/${otId} (static/js/work_orders.js:4261)
`static/js/work_orders.js:4261` calls `GET /api/photos/work_order/${otId}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/photos/work_order/<p>` If this points at an external API, prefix it with `https://` so the ma…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET /api/shutdowns/${_activeShutdown.id}/suggestions (static/js/shutdowns.js:345)
`static/js/shutdowns.js:345` calls `GET /api/shutdowns/${_activeShutdown.id}/suggestions` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/shutdowns/<p>/suggestions` If this points at an external API, prefix it with `…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET /api/shutdowns/${shId}/preventive-sources?source_type=${type} (static/js/shutdowns.js:617)
`static/js/shutdowns.js:617` calls `GET /api/shutdowns/${shId}/preventive-sources?source_type=${type}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/shutdowns/<p>/preventive-sources` If this points at an external A…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET /api/shutdowns/${shutdownId} (static/js/shutdowns.js:95)
`static/js/shutdowns.js:95` calls `GET /api/shutdowns/${shutdownId}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/shutdowns/<p>` If this points at an external API, prefix it with `https://` so the matcher skips it.
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET /api/specs/${apiT}/${id} (static/js/app.js:1044)
`static/js/app.js:1044` calls `GET /api/specs/${apiT}/${id}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/specs/<p>/<p>` If this points at an external API, prefix it with `https://` so the matcher skips it.
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET /api/specs/${apiT}/${id} (static/js/app.js:746)
`static/js/app.js:746` calls `GET /api/specs/${apiT}/${id}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/specs/<p>/<p>` If this points at an external API, prefix it with `https://` so the matcher skips it.
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET /api/thickness/analysis/${equipmentId} (static/js/thickness.js:535)
`static/js/thickness.js:535` calls `GET /api/thickness/analysis/${equipmentId}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/thickness/analysis/<p>` If this points at an external API, prefix it with `https://` so …
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET /api/thickness/history/${pointId} (static/js/thickness.js:635)
`static/js/thickness.js:635` calls `GET /api/thickness/history/${pointId}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/thickness/history/<p>` If this points at an external API, prefix it with `https://` so the ma…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET /api/thickness/inspections/${_editingInspectionId} (static/js/thickness.js:137)
`static/js/thickness.js:137` calls `GET /api/thickness/inspections/${_editingInspectionId}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/thickness/inspections/<p>` If this points at an external API, prefix it with…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET /api/thickness/points/${equipmentId} (static/js/thickness.js:124)
`static/js/thickness.js:124` calls `GET /api/thickness/points/${equipmentId}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/thickness/points/<p>` If this points at an external API, prefix it with `https://` so the …
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET /api/thickness/points/${equipmentId} (static/js/thickness.js:533)
`static/js/thickness.js:533` calls `GET /api/thickness/points/${equipmentId}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/thickness/points/<p>` If this points at an external API, prefix it with `https://` so the …
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET /api/weekly-plans/${_state.plan.id}/matrix (static/js/programa_nocturno.js:333)
`static/js/programa_nocturno.js:333` calls `GET /api/weekly-plans/${_state.plan.id}/matrix` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/weekly-plans/<p>/matrix` If this points at an external API, prefix it with `…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET /api/weekly-plans/${id} (static/js/programa_nocturno.js:60)
`static/js/programa_nocturno.js:60` calls `GET /api/weekly-plans/${id}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/weekly-plans/<p>` If this points at an external API, prefix it with `https://` so the matcher sk…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET /api/work-orders/by-code/${encodeURIComponent(otCode)} (static/js/purchasing.js:377)
`static/js/purchasing.js:377` calls `GET /api/work-orders/by-code/${encodeURIComponent(otCode)}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/work-orders/by-code/<p>` If this points at an external API, prefix it w…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET /api/work_orders/${activeExecutionOT.id}/personnel (static/js/work_orders.js:1954)
`static/js/work_orders.js:1954` calls `GET /api/work_orders/${activeExecutionOT.id}/personnel` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/work_orders/<p>/personnel` If this points at an external API, prefix it w…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET /api/work_orders/${id}/personnel (static/js/work_orders.js:2273)
`static/js/work_orders.js:2273` calls `GET /api/work_orders/${id}/personnel` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/work_orders/<p>/personnel` If this points at an external API, prefix it with `https://` so …
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET /api/work_orders/${ot.id}/materials (static/js/work_orders.js:1419)
`static/js/work_orders.js:1419` calls `GET /api/work_orders/${ot.id}/materials` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/work_orders/<p>/materials` If this points at an external API, prefix it with `https://` …
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET /api/work_orders/${ot.id}/personnel (static/js/work_orders.js:1489)
`static/js/work_orders.js:1489` calls `GET /api/work_orders/${ot.id}/personnel` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/work_orders/<p>/personnel` If this points at an external API, prefix it with `https://` …
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET /api/work_orders/${otId}/log (static/js/work_orders.js:2858)
`static/js/work_orders.js:2858` calls `GET /api/work_orders/${otId}/log` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/work_orders/<p>/log` If this points at an external API, prefix it with `https://` so the matche…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET /api/work_orders/${otId}/materials (static/js/work_orders.js:3581)
`static/js/work_orders.js:3581` calls `GET /api/work_orders/${otId}/materials` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/work_orders/<p>/materials` If this points at an external API, prefix it with `https://` s…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET /api/work_orders/${otId}/personnel (static/js/work_orders.js:2783)
`static/js/work_orders.js:2783` calls `GET /api/work_orders/${otId}/personnel` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/work_orders/<p>/personnel` If this points at an external API, prefix it with `https://` s…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET /api/work_orders/${otId}/personnel (static/js/work_orders.js:3440)
`static/js/work_orders.js:3440` calls `GET /api/work_orders/${otId}/personnel` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/work_orders/<p>/personnel` If this points at an external API, prefix it with `https://` s…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET /api/work_orders/${otId}/personnel (static/js/work_orders.js:3658)
`static/js/work_orders.js:3658` calls `GET /api/work_orders/${otId}/personnel` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/work_orders/<p>/personnel` If this points at an external API, prefix it with `https://` s…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: PATCH /api/work-orders/${id}/hours (static/js/work_orders.js:2252)
`static/js/work_orders.js:2252` calls `PATCH /api/work-orders/${id}/hours` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/work-orders/<p>/hours` If this points at an external API, prefix it with `https://` so the ma…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST /api/doc-links/${_apiType(type)}/${id} (static/js/app.js:1101)
`static/js/app.js:1101` calls `POST /api/doc-links/${_apiType(type)}/${id}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/doc-links/<p>/<p>` If this points at an external API, prefix it with `https://` so the match…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST /api/lines/${sourceId}/merge-into/${targetId} (static/js/app.js:1193)
`static/js/app.js:1193` calls `POST /api/lines/${sourceId}/merge-into/${targetId}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/lines/<p>/merge-into/<p>` If this points at an external API, prefix it with `https://…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST /api/photos/notice/${noticeId} (static/js/notices.js:1048)
`static/js/notices.js:1048` calls `POST /api/photos/notice/${noticeId}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/photos/notice/<p>` If this points at an external API, prefix it with `https://` so the matcher s…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST /api/photos/work_order/${activeExecutionOT.id} (static/js/work_orders.js:4292)
`static/js/work_orders.js:4292` calls `POST /api/photos/work_order/${activeExecutionOT.id}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/photos/work_order/<p>` If this points at an external API, prefix it with `ht…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST /api/purchase-orders/${activeReceivePO.id}/receive (static/js/purchasing.js:332)
`static/js/purchasing.js:332` calls `POST /api/purchase-orders/${activeReceivePO.id}/receive` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/purchase-orders/<p>/receive` If this points at an external API, prefix it …
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST /api/requirements/${id}/convert (static/js/requirements.js:246)
`static/js/requirements.js:246` calls `POST /api/requirements/${id}/convert` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/requirements/<p>/convert` If this points at an external API, prefix it with `https://` so t…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST /api/shutdowns/${_activeShutdown.id}/add-ot (static/js/shutdowns.js:370)
`static/js/shutdowns.js:370` calls `POST /api/shutdowns/${_activeShutdown.id}/add-ot` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/shutdowns/<p>/add-ot` If this points at an external API, prefix it with `https://`…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST /api/shutdowns/${shId}/apply-template/${tplId} (static/js/shutdowns.js:781)
`static/js/shutdowns.js:781` calls `POST /api/shutdowns/${shId}/apply-template/${tplId}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/shutdowns/<p>/apply-template/<p>` If this points at an external API, prefix it …
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST /api/shutdowns/${shId}/apply-template/${tplId} (static/js/shutdowns.js:879)
`static/js/shutdowns.js:879` calls `POST /api/shutdowns/${shId}/apply-template/${tplId}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/shutdowns/<p>/apply-template/<p>` If this points at an external API, prefix it …
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST /api/shutdowns/${shId}/work-orders (static/js/shutdowns.js:552)
`static/js/shutdowns.js:552` calls `POST /api/shutdowns/${shId}/work-orders` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/shutdowns/<p>/work-orders` If this points at an external API, prefix it with `https://` so …
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST /api/specs/${_apiType(type)}/${id} (static/js/app.js:792)
`static/js/app.js:792` calls `POST /api/specs/${_apiType(type)}/${id}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/specs/<p>/<p>` If this points at an external API, prefix it with `https://` so the matcher skips …
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST /api/specs/${apiT}/${id} (static/js/app.js:1056)
`static/js/app.js:1056` calls `POST /api/specs/${apiT}/${id}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/specs/<p>/<p>` If this points at an external API, prefix it with `https://` so the matcher skips it.
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST /api/weekly-plans/${_state.plan.id}/auto-plan (static/js/programa_nocturno.js:250)
`static/js/programa_nocturno.js:250` calls `POST /api/weekly-plans/${_state.plan.id}/auto-plan` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/weekly-plans/<p>/auto-plan` If this points at an external API, prefix it…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST /api/weekly-plans/${_state.plan.id}/items (static/js/programa_nocturno.js:576)
`static/js/programa_nocturno.js:576` calls `POST /api/weekly-plans/${_state.plan.id}/items` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/weekly-plans/<p>/items` If this points at an external API, prefix it with `h…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST /api/weekly-plans/${_state.plan.id}/items/${it.id}/execute (static/js/programa_nocturno.js:445)
`static/js/programa_nocturno.js:445` calls `POST /api/weekly-plans/${_state.plan.id}/items/${it.id}/execute` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/weekly-plans/<p>/items/<p>/execute` If this points at an ex…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST /api/weekly-plans/${_state.plan.id}/items/${itemId}/execute (static/js/programa_nocturno.js:474)
`static/js/programa_nocturno.js:474` calls `POST /api/weekly-plans/${_state.plan.id}/items/${itemId}/execute` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/weekly-plans/<p>/items/<p>/execute` If this points at an e…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST /api/weekly-plans/${_state.plan.id}/publish (static/js/programa_nocturno.js:269)
`static/js/programa_nocturno.js:269` calls `POST /api/weekly-plans/${_state.plan.id}/publish` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/weekly-plans/<p>/publish` If this points at an external API, prefix it wit…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST /api/work_orders/${activeExecutionOT.id}/log (static/js/work_orders.js:2905)
`static/js/work_orders.js:2905` calls `POST /api/work_orders/${activeExecutionOT.id}/log` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/work_orders/<p>/log` If this points at an external API, prefix it with `https:…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST /api/work_orders/${id}/log (static/js/work_orders.js:1918)
`static/js/work_orders.js:1918` calls `POST /api/work_orders/${id}/log` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/work_orders/<p>/log` If this points at an external API, prefix it with `https://` so the matcher…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST /api/work_orders/${id}/log (static/js/work_orders.js:2197)
`static/js/work_orders.js:2197` calls `POST /api/work_orders/${id}/log` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/work_orders/<p>/log` If this points at an external API, prefix it with `https://` so the matcher…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST /api/work_orders/${id}/personnel (static/js/work_orders.js:2180)
`static/js/work_orders.js:2180` calls `POST /api/work_orders/${id}/personnel` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/work_orders/<p>/personnel` If this points at an external API, prefix it with `https://` so…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST /api/work_orders/${otId}/materials (static/js/work_orders.js:3409)
`static/js/work_orders.js:3409` calls `POST /api/work_orders/${otId}/materials` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/work_orders/<p>/materials` If this points at an external API, prefix it with `https://` …
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST /api/work_orders/${otId}/materials (static/js/work_orders.js:994)
`static/js/work_orders.js:994` calls `POST /api/work_orders/${otId}/materials` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/work_orders/<p>/materials` If this points at an external API, prefix it with `https://` s…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST /api/work_orders/${otId}/personnel (static/js/work_orders.js:3566)
`static/js/work_orders.js:3566` calls `POST /api/work_orders/${otId}/personnel` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/work_orders/<p>/personnel` If this points at an external API, prefix it with `https://` …
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST /api/work_orders/${otId}/personnel (static/js/work_orders.js:3847)
`static/js/work_orders.js:3847` calls `POST /api/work_orders/${otId}/personnel` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/work_orders/<p>/personnel` If this points at an external API, prefix it with `https://` …
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: PUT /api/notices/${activeExecutionOT.notice_id} (static/js/work_orders.js:1877)
`static/js/work_orders.js:1877` calls `PUT /api/notices/${activeExecutionOT.notice_id}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/notices/<p>` If this points at an external API, prefix it with `https://` so the…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: PUT /api/notices/${id} (static/js/notices.js:915)
`static/js/notices.js:915` calls `PUT /api/notices/${id}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/notices/<p>` If this points at an external API, prefix it with `https://` so the matcher skips it.
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: PUT /api/notices/${id} (static/js/notices.js:943)
`static/js/notices.js:943` calls `PUT /api/notices/${id}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/notices/<p>` If this points at an external API, prefix it with `https://` so the matcher skips it.
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: PUT /api/notices/${noticeId} (static/js/work_orders.js:1086)
`static/js/work_orders.js:1086` calls `PUT /api/notices/${noticeId}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/notices/<p>` If this points at an external API, prefix it with `https://` so the matcher skips it.
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: PUT /api/notices/${noticeId} (static/js/work_orders.js:2674)
`static/js/work_orders.js:2674` calls `PUT /api/notices/${noticeId}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/notices/<p>` If this points at an external API, prefix it with `https://` so the matcher skips it.
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: PUT /api/notices/${noticeId} (static/js/work_orders.js:2688)
`static/js/work_orders.js:2688` calls `PUT /api/notices/${noticeId}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/notices/<p>` If this points at an external API, prefix it with `https://` so the matcher skips it.
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: PUT /api/purchase-orders/${poId}/external-code (static/js/purchasing.js:198)
`static/js/purchasing.js:198` calls `PUT /api/purchase-orders/${poId}/external-code` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/purchase-orders/<p>/external-code` If this points at an external API, prefix it wit…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: PUT /api/specs/${_editingSpecId.apiType}/${_editingSpecId.specId}/update (static/js/app.js:785)
`static/js/app.js:785` calls `PUT /api/specs/${_editingSpecId.apiType}/${_editingSpecId.specId}/update` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/specs/<p>/<p>/update` If this points at an external API, prefix …
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: PUT /api/thickness/inspections/${inspectionId}/pdf (static/js/thickness.js:484)
`static/js/thickness.js:484` calls `PUT /api/thickness/inspections/${inspectionId}/pdf` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/thickness/inspections/<p>/pdf` If this points at an external API, prefix it with…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: PUT /api/weekly-plans/${_state.plan.id}/items/${itemId} (static/js/programa_nocturno.js:174)
`static/js/programa_nocturno.js:174` calls `PUT /api/weekly-plans/${_state.plan.id}/items/${itemId}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/weekly-plans/<p>/items/<p>` If this points at an external API, pref…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: PUT /api/work-orders/${activeExecutionOT.id} (static/js/work_orders.js:1867)
`static/js/work_orders.js:1867` calls `PUT /api/work-orders/${activeExecutionOT.id}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/work-orders/<p>` If this points at an external API, prefix it with `https://` so th…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: PUT /api/work-orders/${id} (static/js/work_orders.js:1220)
`static/js/work_orders.js:1220` calls `PUT /api/work-orders/${id}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/work-orders/<p>` If this points at an external API, prefix it with `https://` so the matcher skips it.
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: PUT /api/work-orders/${id} (static/js/work_orders.js:1341)
`static/js/work_orders.js:1341` calls `PUT /api/work-orders/${id}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/work-orders/<p>` If this points at an external API, prefix it with `https://` so the matcher skips it.
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: PUT /api/work-orders/${id} (static/js/work_orders.js:2162)
`static/js/work_orders.js:2162` calls `PUT /api/work-orders/${id}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/work-orders/<p>` If this points at an external API, prefix it with `https://` so the matcher skips it.
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: PUT /api/work_orders/${activeExecutionOT.id}/conformity (static/js/work_orders.js:3024)
`static/js/work_orders.js:3024` calls `PUT /api/work_orders/${activeExecutionOT.id}/conformity` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/work_orders/<p>/conformity` If this points at an external API, prefix it…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: PUT /api/work_orders/${activeExecutionOT.id}/report (static/js/work_orders.js:3078)
`static/js/work_orders.js:3078` calls `PUT /api/work_orders/${activeExecutionOT.id}/report` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/work_orders/<p>/report` If this points at an external API, prefix it with `h…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: PUT /api/work_orders/${id}/personnel/${p.id} (static/js/work_orders.js:2173)
`static/js/work_orders.js:2173` calls `PUT /api/work_orders/${id}/personnel/${p.id}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/work_orders/<p>/personnel/<p>` If this points at an external API, prefix it with `h…
Dangling fetchFetch
high System graph security auth conf 1.00 Flask mutation route `add_ot_to_shutdown` without `@login_required` — routes/shutdown_routes.py:364
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/shutdown_routes.py:364 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `add_template_item` without `@login_required` — routes/shutdown_routes.py:647
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/shutdown_routes.py:647 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `api_bypass_create` without `@login_required` — routes/plant_flow_routes.py:735
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/plant_flow_routes.py:735 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `api_bypass_delete` without `@login_required` — routes/plant_flow_routes.py:771
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/plant_flow_routes.py:771 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `api_plant_flow_bulk_update` without `@login_required` — routes/plant_flow_routes.py:428
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/plant_flow_routes.py:428 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `api_plant_flow_seed_from_pdf` without `@login_required` — routes/plant_flow_routes.py:627
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/plant_flow_routes.py:627 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `apply_optimization` without `@login_required` — routes/insights_routes.py:87
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/insights_routes.py:87 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `apply_template_to_shutdown` without `@login_required` — routes/shutdown_routes.py:781
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/shutdown_routes.py:781 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `bulk_paste_hierarchy` without `@login_required` — routes/data_import_routes.py:343
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/data_import_routes.py:343 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `bulk_paste` without `@login_required` — routes/data_import_routes.py:251
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/data_import_routes.py:251 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `bulk_set_equipment_responsibility` without `@login_required` — routes/master_data_routes.py:241
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/master_data_routes.py:241 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `calculate_inventory_params` without `@login_required` — routes/warehouse_routes.py:393
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/warehouse_routes.py:393 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `change_hammer_batch` without `@login_required` — routes/hammer_batches_routes.py:207
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/hammer_batches_routes.py:207 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `close_po` without `@login_required` — routes/purchasing_routes.py:172
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/purchasing_routes.py:172 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `convert_requirement` without `@login_required` — routes/requirements_routes.py:146
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/requirements_routes.py:146 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `create_failure_catalog` without `@login_required` — routes/core_routes.py:1121
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/core_routes.py:1121 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `create_ot_in_shutdown` without `@login_required` — routes/shutdown_routes.py:283
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/shutdown_routes.py:283 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `create_production_goal` without `@login_required` — routes/production_routes.py:327
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/production_routes.py:327 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `delete_asset_bom` without `@login_required` — routes/rotative_assets_routes.py:334
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/rotative_assets_routes.py:334 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `delete_doc_link` without `@login_required` — routes/core_routes.py:968
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/core_routes.py:968 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `delete_failure_catalog` without `@login_required` — routes/core_routes.py:1163
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/core_routes.py:1163 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `delete_lubrication_execution` without `@login_required` — routes/lubrication_routes.py:414
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/lubrication_routes.py:414 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `delete_ot_log` without `@login_required` — routes/work_orders_routes.py:240
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/work_orders_routes.py:240 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `delete_photo` without `@login_required` — routes/core_routes.py:767
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/core_routes.py:767 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `delete_production_goal` without `@login_required` — routes/production_routes.py:394
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/production_routes.py:394 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `delete_rotative_spec` without `@login_required` — routes/rotative_assets_routes.py:257
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/rotative_assets_routes.py:257 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `delete_spec` without `@login_required` — routes/core_routes.py:864
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/core_routes.py:864 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `discard_hammer_batch` without `@login_required` — routes/hammer_batches_routes.py:147
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/hammer_batches_routes.py:147 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `duplicate_shutdown_template` without `@login_required` — routes/shutdown_routes.py:585
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/shutdown_routes.py:585 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `edit_thickness_inspection` without `@login_required` — routes/thickness_routes.py:231
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/thickness_routes.py:231 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `generate_preventive_ots` without `@login_required` — routes/work_orders_routes.py:111
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/work_orders_routes.py:111 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `handle_activities` without `@login_required` — routes/activity_routes.py:8
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/activity_routes.py:8 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `handle_activity_id` without `@login_required` — routes/activity_routes.py:49
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/activity_routes.py:49 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `handle_area_id` without `@login_required` — routes/master_data_routes.py:117
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/master_data_routes.py:117 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `handle_areas` without `@login_required` — routes/master_data_routes.py:111
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/master_data_routes.py:111 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `handle_asset_bom` without `@login_required` — routes/rotative_assets_routes.py:273
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/rotative_assets_routes.py:273 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `handle_component_id` without `@login_required` — routes/master_data_routes.py:286
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/master_data_routes.py:286 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `handle_components` without `@login_required` — routes/master_data_routes.py:280
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/master_data_routes.py:280 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `handle_daily_round` without `@login_required` — routes/work_orders_routes.py:849
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/work_orders_routes.py:849 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `handle_doc_links` without `@login_required` — routes/core_routes.py:942
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/core_routes.py:942 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `handle_equipment_id` without `@login_required` — routes/master_data_routes.py:235
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/master_data_routes.py:235 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `handle_equipments` without `@login_required` — routes/master_data_routes.py:229
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/master_data_routes.py:229 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `handle_hammer_batch_id` without `@login_required` — routes/hammer_batches_routes.py:120
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/hammer_batches_routes.py:120 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `handle_hammer_batches` without `@login_required` — routes/hammer_batches_routes.py:71
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/hammer_batches_routes.py:71 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `handle_line_id` without `@login_required` — routes/master_data_routes.py:129
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/master_data_routes.py:129 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `handle_lines` without `@login_required` — routes/master_data_routes.py:123
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/master_data_routes.py:123 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `handle_lubrication_executions` without `@login_required` — routes/lubrication_routes.py:307
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/lubrication_routes.py:307 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `handle_lubrication_point_id` without `@login_required` — routes/lubrication_routes.py:261
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/lubrication_routes.py:261 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `handle_lubrication_points` without `@login_required` — routes/lubrication_routes.py:190
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/lubrication_routes.py:190 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `handle_milestone_id` without `@login_required` — routes/activity_routes.py:115
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/activity_routes.py:115 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `handle_milestones` without `@login_required` — routes/activity_routes.py:78
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/activity_routes.py:78 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `handle_monitoring_point_id` without `@login_required` — routes/monitoring_routes.py:112
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/monitoring_routes.py:112 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `handle_monitoring_points` without `@login_required` — routes/monitoring_routes.py:20
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/monitoring_routes.py:20 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `handle_monitoring_readings` without `@login_required` — routes/monitoring_routes.py:149
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/monitoring_routes.py:149 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `handle_notice_id` without `@login_required` — routes/notices_routes.py:235
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/notices_routes.py:235 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `handle_notices` without `@login_required` — routes/notices_routes.py:19
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/notices_routes.py:19 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `handle_orders` without `@login_required` — routes/purchasing_routes.py:52
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/purchasing_routes.py:52 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `handle_ot_log` without `@login_required` — routes/work_orders_routes.py:206
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/work_orders_routes.py:206 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `handle_ot_material_id` without `@login_required` — routes/work_orders_routes.py:672
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/work_orders_routes.py:672 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `handle_ot_materials` without `@login_required` — routes/work_orders_routes.py:576
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/work_orders_routes.py:576 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `handle_ot_personnel_id` without `@login_required` — routes/work_orders_routes.py:555
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/work_orders_routes.py:555 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `handle_ot_personnel` without `@login_required` — routes/work_orders_routes.py:456
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/work_orders_routes.py:456 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `handle_photos` without `@login_required` — routes/core_routes.py:702
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/core_routes.py:702 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `handle_provider_id` without `@login_required` — routes/master_data_routes.py:50
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/master_data_routes.py:50 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `handle_providers` without `@login_required` — routes/master_data_routes.py:39
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/master_data_routes.py:39 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `handle_requests` without `@login_required` — routes/purchasing_routes.py:14
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/purchasing_routes.py:14 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `handle_requirement` without `@login_required` — routes/requirements_routes.py:94
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/requirements_routes.py:94 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `handle_requirements` without `@login_required` — routes/requirements_routes.py:27
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/requirements_routes.py:27 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `handle_rotative_asset_id` without `@login_required` — routes/rotative_assets_routes.py:120
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/rotative_assets_routes.py:120 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `handle_rotative_assets` without `@login_required` — routes/rotative_assets_routes.py:59
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/rotative_assets_routes.py:59 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `handle_rotative_specs` without `@login_required` — routes/rotative_assets_routes.py:203
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/rotative_assets_routes.py:203 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `handle_shutdown_detail` without `@login_required` — routes/shutdown_routes.py:124
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/shutdown_routes.py:124 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `handle_shutdown_template_detail` without `@login_required` — routes/shutdown_routes.py:556
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/shutdown_routes.py:556 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `handle_shutdown_templates` without `@login_required` — routes/shutdown_routes.py:524
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/shutdown_routes.py:524 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `handle_shutdowns` without `@login_required` — routes/shutdown_routes.py:31
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/shutdown_routes.py:31 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `handle_spare_part_id` without `@login_required` — routes/master_data_routes.py:298
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/master_data_routes.py:298 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `handle_spare_parts` without `@login_required` — routes/master_data_routes.py:292
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/master_data_routes.py:292 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `handle_specs` without `@login_required` — routes/core_routes.py:823
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/core_routes.py:823 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `handle_system_id` without `@login_required` — routes/master_data_routes.py:274
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/master_data_routes.py:274 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `handle_systems` without `@login_required` — routes/master_data_routes.py:268
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/master_data_routes.py:268 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `handle_technician_id` without `@login_required` — routes/master_data_routes.py:88
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/master_data_routes.py:88 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `handle_technicians` without `@login_required` — routes/master_data_routes.py:73
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/master_data_routes.py:73 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `handle_template_item` without `@login_required` — routes/shutdown_routes.py:706
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/shutdown_routes.py:706 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `handle_thickness_inspection_detail` without `@login_required` — routes/thickness_routes.py:310
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/thickness_routes.py:310 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `handle_thickness_inspections` without `@login_required` — routes/thickness_routes.py:93
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/thickness_routes.py:93 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `handle_thickness_points` without `@login_required` — routes/thickness_routes.py:50
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/thickness_routes.py:50 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `handle_tool_id` without `@login_required` — routes/tools_routes.py:34
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/tools_routes.py:34 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `handle_tools` without `@login_required` — routes/tools_routes.py:9
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/tools_routes.py:9 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `handle_warehouse_movements` without `@login_required` — routes/warehouse_routes.py:516
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/warehouse_routes.py:516 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `handle_work_orders` without `@login_required` — routes/work_orders_routes.py:904
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/work_orders_routes.py:904 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `handle_wot_id` without `@login_required` — routes/work_orders_routes.py:1442
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/work_orders_routes.py:1442 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `import_tools_excel` without `@login_required` — routes/tools_routes.py:125
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/tools_routes.py:125 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `import_warehouse_excel` without `@login_required` — routes/warehouse_routes.py:245
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/warehouse_routes.py:245 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `increment_failure_catalog` without `@login_required` — routes/core_routes.py:1173
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/core_routes.py:1173 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `initialize_db` without `@login_required` — routes/admin_routes.py:10
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/admin_routes.py:10 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `insights_narrative` without `@login_required` — routes/insights_routes.py:389
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/insights_routes.py:389 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `install_rotative_asset` without `@login_required` — routes/rotative_assets_routes.py:156
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/rotative_assets_routes.py:156 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `login` without `@login_required` — routes/auth_routes.py:25
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/auth_routes.py:25 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `manage_motors` without `@login_required` — routes/motors_routes.py:334
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/motors_routes.py:334 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `mark_notifications_read` without `@login_required` — routes/core_routes.py:1479
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/core_routes.py:1479 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `merge_lines` without `@login_required` — routes/master_data_routes.py:135
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/master_data_routes.py:135 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `motor_config` without `@login_required` — routes/motors_routes.py:286
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/motors_routes.py:286 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `motor_tests` without `@login_required` — routes/motors_routes.py:156
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/motors_routes.py:156 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `patch_notice_reported_at` without `@login_required` — routes/notices_routes.py:285
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/notices_routes.py:285 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `patch_wot_hours` without `@login_required` — routes/work_orders_routes.py:1300
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/work_orders_routes.py:1300 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `production_ai_diagnosis` without `@login_required` — routes/production_routes.py:455
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/production_routes.py:455 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `receive_po_items` without `@login_required` — routes/purchasing_routes.py:157
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/purchasing_routes.py:157 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `receive_refilled_batch` without `@login_required` — routes/hammer_batches_routes.py:179
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/hammer_batches_routes.py:179 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `remove_ot_from_shutdown` without `@login_required` — routes/shutdown_routes.py:384
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/shutdown_routes.py:384 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `remove_rotative_asset` without `@login_required` — routes/rotative_assets_routes.py:177
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/rotative_assets_routes.py:177 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `reorder_template_items` without `@login_required` — routes/shutdown_routes.py:628
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/shutdown_routes.py:628 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `replicate_specs` without `@login_required` — routes/core_routes.py:875
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/core_routes.py:875 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `scan_notifications` without `@login_required` — routes/core_routes.py:1497
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/core_routes.py:1497 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `seed_failure_catalog` without `@login_required` — routes/core_routes.py:1183
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/core_routes.py:1183 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `swap_rotative_assets` without `@login_required` — routes/rotative_assets_routes.py:345
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/rotative_assets_routes.py:345 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `update_failure_catalog` without `@login_required` — routes/core_routes.py:1141
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/core_routes.py:1141 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `update_ot_conformity` without `@login_required` — routes/work_orders_routes.py:344
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/work_orders_routes.py:344 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `update_ot_report` without `@login_required` — routes/work_orders_routes.py:314
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/work_orders_routes.py:314 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `update_po_external_code` without `@login_required` — routes/purchasing_routes.py:185
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/purchasing_routes.py:185 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `update_production_goal` without `@login_required` — routes/production_routes.py:370
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/production_routes.py:370 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `update_spec` without `@login_required` — routes/core_routes.py:847
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/core_routes.py:847 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `update_thickness_pdf_url` without `@login_required` — routes/thickness_routes.py:216
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/thickness_routes.py:216 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `update_thickness_point` without `@login_required` — routes/thickness_routes.py:78
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/thickness_routes.py:78 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `upload_excel` without `@login_required` — routes/data_import_routes.py:207
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/data_import_routes.py:207 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `upload_thickness_template` without `@login_required` — routes/thickness_routes.py:668
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/thickness_routes.py:668 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `wp_auto_plan` without `@login_required` — routes/weekly_plan_routes.py:258
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/weekly_plan_routes.py:258 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `wp_create` without `@login_required` — routes/weekly_plan_routes.py:145
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/weekly_plan_routes.py:145 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `wp_delete` without `@login_required` — routes/weekly_plan_routes.py:222
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/weekly_plan_routes.py:222 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `wp_item_add` without `@login_required` — routes/weekly_plan_routes.py:481
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/weekly_plan_routes.py:481 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `wp_item_delete` without `@login_required` — routes/weekly_plan_routes.py:531
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/weekly_plan_routes.py:531 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `wp_item_execute` without `@login_required` — routes/weekly_plan_routes.py:640
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/weekly_plan_routes.py:640 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `wp_item_update` without `@login_required` — routes/weekly_plan_routes.py:508
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/weekly_plan_routes.py:508 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `wp_public_execute` without `@login_required` — routes/weekly_plan_routes.py:690
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/weekly_plan_routes.py:690 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `wp_publish` without `@login_required` — routes/weekly_plan_routes.py:234
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/weekly_plan_routes.py:234 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `wp_update` without `@login_required` — routes/weekly_plan_routes.py:201
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
routes/weekly_plan_routes.py:201 securityAuth flask unauth route
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — static/js/activities.js:6
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — static/js/app.js:187
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — static/js/cockpit.js:73
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — static/js/dashboard.js:203
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — static/js/inspections.js:6
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — static/js/lubrication.js:7
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — static/js/notices.js:95
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — static/js/produccion.js:457
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — static/js/programa_nocturno.js:532
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — static/js/reports.js:25
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — static/js/shutdowns.js:36
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — static/js/sidebar.js:1114
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — static/js/thickness.js:124
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — static/js/work_orders.js:495
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — static/sw.js:96
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Placeholder conf 1.00 Critical user flow still appears backed by mock or placeholder data
A payment/auth/admin/order/billing-style flow contains mock, fake, TODO, dummy, or placeholder markers in runtime source. In the Fable corpus this is a high-leverage completeness smell: the app can look finished while the money, identity, or tenant flow is still scaffolded.
Mock dataCritical flowGenerated repo pattern
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in scripts/fix_js.py:27
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
scripts/fix_js.py:27 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in static/js/activities.js:30
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
static/js/activities.js:30 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in static/js/app.js:257
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
static/js/app.js:257 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in static/js/cockpit.js:111
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
static/js/cockpit.js:111 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in static/js/dashboard.js:40
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
static/js/dashboard.js:40 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in static/js/indicators.js:101
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
static/js/indicators.js:101 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in static/js/lubrication.js:14
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
static/js/lubrication.js:14 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in static/js/monitoring.js:45
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
static/js/monitoring.js:45 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in static/js/notices.js:58
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
static/js/notices.js:58 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in static/js/produccion.js:57
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
static/js/produccion.js:57 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in static/js/programa_nocturno.js:34
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
static/js/programa_nocturno.js:34 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in static/js/purchasing.js:35
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
static/js/purchasing.js:35 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in static/js/reports.js:38
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
static/js/reports.js:38 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in static/js/requirements.js:42
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
static/js/requirements.js:42 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in static/js/rotative_assets.js:33
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
static/js/rotative_assets.js:33 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in static/js/shutdowns.js:54
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
static/js/shutdowns.js:54 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in static/js/sidebar.js:31
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
static/js/sidebar.js:31 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in static/js/thickness.js:66
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
static/js/thickness.js:66 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in static/js/work_orders.js:303
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
static/js/work_orders.js:303 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'insert_adjacent_html' in static/js/produccion.js:363
Found a known-risky pattern (insert_adjacent_html). Review and replace if possible.
static/js/produccion.js:363 Insert adjacent html
medium System graph security security conf 1.00 Insecure pattern 'insert_adjacent_html' in static/js/programa_nocturno.js:39
Found a known-risky pattern (insert_adjacent_html). Review and replace if possible.
static/js/programa_nocturno.js:39 Insert adjacent html
medium System graph security security conf 1.00 Insecure pattern 'insert_adjacent_html' in static/js/rotative_assets.js:472
Found a known-risky pattern (insert_adjacent_html). Review and replace if possible.
static/js/rotative_assets.js:472 Insert adjacent html
medium System graph security security conf 1.00 Insecure pattern 'insert_adjacent_html' in static/js/shutdowns.js:155
Found a known-risky pattern (insert_adjacent_html). Review and replace if possible.
static/js/shutdowns.js:155 Insert adjacent html
medium System graph quality Integrity conf 1.00 Network/subprocess call without timeout or try/except — utils/photo_helpers.py:66
`requests.post(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries.
runtime safetyRobustness
medium System graph quality Placeholder conf 1.00 Placeholder or mock-heavy implementation detected
Found 20 placeholder/mock markers across 9 source files. This often means the repo looks complete while core flows still use generated scaffolding or fake data.
Mock dataIncompleteGenerated repo pattern
low System graph quality Integrity conf 1.00 7 env vars used in code but missing from .env.example
Drift between code and config docs. The first few: `ALLOW_DB_RESET`, `CMMS_ADMIN_TOKEN`, `CMMS_AUTO_CREATE_TABLES`, `SQLITE_SOURCE_DB`, `SUPABASE_ANON_KEY`, `SUPABASE_SERVICE_KEY`, `SUPABASE_URL`. Add them (with a placeholder/comment) to .env.example so onboarding doesn't break.
config drift
low System graph quality Production readiness conf 1.00 Composite production-readiness gap
Multiple low-cost hardening controls are missing together: license, operator-readme. Opus verification showed these co-occurring gaps are a better readiness signal than reading each flag in isolation.
Repo hardeningGenerated repo pattern
low System graph quality Debug conf 1.00 Debug logging residue appears in source files
Found 505 console/debugger/print-style debug statements in non-test source. This is a common fast-generation residue before production cleanup.
CleanupRepo hardeningGenerated repo pattern
low System graph frontend Frontend quality conf 1.00 Icon-only button without accessible name — static/js/thickness.js:465
A `<button>` whose only child is a single glyph or symbol needs `title=` or `aria-label=` so screen readers (and tooltips on hover) work. Why: P3 in CHECKLIST.md — icon-only buttons skipped a title. Rule id: fq.button.no-label
Fq button no label
low System graph security security conf 1.00 Insecure pattern 'document_write' in static/js/reports.js:449
Found a known-risky pattern (document_write). Review and replace if possible.
static/js/reports.js:449 Document write
low System graph quality Tests conf 1.00 Low test-to-source ratio
26 tests / 136 src (ratio 0.19).
low System graph quality Integrity conf 1.00 11 occurrences Near-duplicate function bodies in 2 places
Functions with the same first-5-line body hash: scripts/migrations/migrate_role_permissions_add_ot_flags.py:migrate, scripts/migrations/migrate_role_permissions_8flags.py:migrate This is *the* AI-coder failure mode (4× more duplication in vibe-coded repos — see https://jw.hn/ai-code-hygiene). Cons…
11 occurrences
repo-level (11 hits)
duplicatesduplication
low System graph quality Integrity conf 1.00 2 occurrences Near-duplicate function bodies in 3 places
Functions with the same first-5-line body hash: scripts/migrations/migrate_warehouse.py:migrate_db, scripts/migrations/migrate_notice_annul.py:migrate_db, scripts/migrations/migrate_warehouse_mgmt.py:migrate_db This is *the* AI-coder failure mode (4× more duplication in vibe-coded repos — see http…
2 occurrences
repo-level (2 hits)
duplicatesduplication
low System graph quality Integrity conf 1.00 Near-duplicate function bodies in 58 places
Functions with the same first-5-line body hash: models.py:to_dict, models.py:to_dict, models.py:to_dict, models.py:to_dict This is *the* AI-coder failure mode (4× more duplication in vibe-coded repos — see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate.
duplicatesduplication
low System graph quality Integrity conf 1.00 Near-duplicate function bodies in 6 places
Functions with the same first-5-line body hash: scripts/_archive/models_backup.py:to_dict, scripts/_archive/models_backup.py:to_dict, scripts/_archive/models_backup.py:to_dict, scripts/_archive/models_backup.py:to_dict This is *the* AI-coder failure mode (4× more duplication in vibe-coded repos — …
duplicatesduplication
low System graph quality License conf 1.00 No license file detected
No LICENSE/COPYING/NOTICE file was found. Generated repositories often omit licensing, which blocks reuse and automated intake.
Repo hardeningGenerated repo pattern
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `cmms_v2` in app.py:159
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `cmms_v2` in scripts/debug/check_tables.py:5
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `cmms_v2` in scripts/debug/inspect_db.py:5
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `cmms_v2` in scripts/debug/quick_check.py:5
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `cmms_v2` in scripts/migrations/migrate_db.py:4
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `cmms_v2` in scripts/migrations/migrate_notice_annul.py:5
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `cmms_v2` in scripts/migrations/migrate_purchase_req.py:5
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `cmms_v2` in scripts/migrations/migrate_to_supabase.py:15
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `cmms_v2` in scripts/migrations/migrate_warehouse.py:5
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `cmms_v2` in scripts/migrations/migrate_warehouse_mgmt.py:5
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `powerbi_work_orders_v2` in routes/reports_routes.py:1183
Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.
old markerDead code
low System graph software Dead code conf 1.00 Possibly dead Python function: deco
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
app.py:708
low System graph software Dead code conf 1.00 Possibly dead Python function: decorator
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
utils/rate_limit.py:24
low System graph software Dead code conf 1.00 Possibly dead Python function: exempt
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
app.py:712
low System graph software Dead code conf 1.00 Possibly dead Python function: json_default
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
scripts/backup_db.py:36
low System graph software Dead code conf 1.00 Possibly dead Python function: ping
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
app.py:1397
low System graph software Dead code conf 1.00 Possibly dead Python function: query_activities
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
utils/powerbi_export.py:718
low System graph software Dead code conf 1.00 Possibly dead Python function: query_equipment_tree
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
utils/powerbi_export.py:696
low System graph software Dead code conf 1.00 Possibly dead Python function: query_equipos_flat
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
utils/powerbi_export.py:817

Showing first 300 of 382. Refine filters or use the findings page for deep search.

For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.
For AI agents + API integrations
Email me when this repo regresses
Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.
API access

This page is publicly accessible at: https://repobility.com/scan/51f922df-393e-48e5-9b04-357d185fbd13/

To check status programmatically (no auth required): 

curl -s https://repobility.com/api/v1/public/scan/51f922df-393e-48e5-9b04-357d185fbd13/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.