{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "scanner-ee32113c2dc7da35", "name": "Insecure pattern 'node_child_process' in test.mjs:9", "shortDescription": {"text": "Insecure pattern 'node_child_process' in test.mjs:9"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-558b7d53f99bd80e", "name": "Insecure pattern 'node_child_process' in install.mjs:10", "shortDescription": {"text": "Insecure pattern 'node_child_process' in install.mjs:10"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-214ba208bf8b086f", "name": "Insecure pattern 'node_child_process' in brain.mjs:9", "shortDescription": {"text": "Insecure pattern 'node_child_process' in brain.mjs:9"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-63d7698e1b256ef4", "name": "Insecure pattern 'node_child_process' in maintain.mjs:10", "shortDescription": {"text": "Insecure pattern 'node_child_process' in maintain.mjs:10"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-15c3a16f3d362523", "name": "Insecure pattern 'node_child_process' in restore.mjs:13", "shortDescription": {"text": "Insecure pattern 'node_child_process' in restore.mjs:13"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3f0587db3c49ee0f", "name": "Insecure pattern 'node_child_process' in consolidate.mjs:17", "shortDescription": {"text": "Insecure pattern 'node_child_process' in consolidate.mjs:17"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ea3b5e389d8c9c0f", "name": "Low test-to-source ratio", "shortDescription": {"text": "Low test-to-source ratio"}, "fullDescription": {"text": "1 tests / 8 src (ratio 0.12)."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3ab5d313dda8e5f9", "name": "Debug logging residue appears in source files", "shortDescription": {"text": "Debug logging residue appears in source files"}, "fullDescription": {"text": "Found 35 console/debugger/print-style debug statements in non-test source. This is a common fast-generation residue before production cleanup."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2d0c7b7ab8f8aacf", "name": "Critical user flow still appears backed by mock or placeholder data", "shortDescription": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "fullDescription": {"text": "A payment/auth/admin/order/billing-style flow contains mock, fake, TODO, dummy, or placeholder markers in runtime source. In the Fable corpus this is a high-leverage completeness smell: the app can look finished while the money, identity, or tenant flow is still scaffolded."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b9088664ace7f748", "name": "Composite production-readiness gap", "shortDescription": {"text": "Composite production-readiness gap"}, "fullDescription": {"text": "Multiple low-cost hardening controls are missing together: ci, tests. Opus verification showed these co-occurring gaps are a better readiness signal than reading each flag in isolation."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f376b33e73e8e85e", "name": "Commented-code block (5 lines) in test.mjs:2", "shortDescription": {"text": "Commented-code block (5 lines) in test.mjs:2"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-a48280a42af76c5b", "name": "Commented-code block (6 lines) in brain.config.mjs:48", "shortDescription": {"text": "Commented-code block (6 lines) in brain.config.mjs:48"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-7dc333337dbf8df1", "name": "Commented-code block (6 lines) in install.mjs:2", "shortDescription": {"text": "Commented-code block (6 lines) in install.mjs:2"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-c1a28c9512a2ffcd", "name": "Commented-code block (6 lines) in brain.mjs:305", "shortDescription": {"text": "Commented-code block (6 lines) in brain.mjs:305"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-caf311b0dc32a6db", "name": "Commented-code block (5 lines) in maintain.mjs:2", "shortDescription": {"text": "Commented-code block (5 lines) in maintain.mjs:2"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-3be3d88f479799c7", "name": "Commented-code block (9 lines) in restore.mjs:2", "shortDescription": {"text": "Commented-code block (9 lines) in restore.mjs:2"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-f064e411e7333805", "name": "Commented-code block (9 lines) in consolidate.mjs:5", "shortDescription": {"text": "Commented-code block (9 lines) in consolidate.mjs:5"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/28172"}, "properties": {"repository": "naxox001/claude-brain", "repoUrl": "https://github.com/naxox001/claude-brain", "branch": "main"}, "results": [{"ruleId": "scanner-ee32113c2dc7da35", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in test.mjs:9"}, "properties": {"repobilityId": "c4df48608fe8149c", "scanner": "scanner-primary", "fingerprint": "ee32113c2dc7da35", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "test.mjs"}, "region": {"startLine": 9}}}]}, {"ruleId": "scanner-558b7d53f99bd80e", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in install.mjs:10"}, "properties": {"repobilityId": "7b2c9d4ac1cf509c", "scanner": "scanner-primary", "fingerprint": "558b7d53f99bd80e", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "install.mjs"}, "region": {"startLine": 10}}}]}, {"ruleId": "scanner-214ba208bf8b086f", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in brain.mjs:9"}, "properties": {"repobilityId": "4c9fd20cdacb55e9", "scanner": "scanner-primary", "fingerprint": "214ba208bf8b086f", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "brain.mjs"}, "region": {"startLine": 9}}}]}, {"ruleId": "scanner-63d7698e1b256ef4", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in maintain.mjs:10"}, "properties": {"repobilityId": "d8186023ac15576b", "scanner": "scanner-primary", "fingerprint": "63d7698e1b256ef4", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "maintain.mjs"}, "region": {"startLine": 10}}}]}, {"ruleId": "scanner-15c3a16f3d362523", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in restore.mjs:13"}, "properties": {"repobilityId": "80c0b4a3cc9ac3d5", "scanner": "scanner-primary", "fingerprint": "15c3a16f3d362523", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "restore.mjs"}, "region": {"startLine": 13}}}]}, {"ruleId": "scanner-3f0587db3c49ee0f", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in consolidate.mjs:17"}, "properties": {"repobilityId": "eb04ca20a1675d76", "scanner": "scanner-primary", "fingerprint": "3f0587db3c49ee0f", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "consolidate.mjs"}, "region": {"startLine": 17}}}]}, {"ruleId": "scanner-ea3b5e389d8c9c0f", "level": "note", "message": {"text": "Low test-to-source ratio"}, "properties": {"repobilityId": "ef7b2552cc00a375", "scanner": "scanner-primary", "fingerprint": "ea3b5e389d8c9c0f", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["tests"]}}, {"ruleId": "scanner-3ab5d313dda8e5f9", "level": "note", "message": {"text": "Debug logging residue appears in source files"}, "properties": {"repobilityId": "1baea600a77a23e1", "scanner": "scanner-primary", "fingerprint": "3ab5d313dda8e5f9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["debug", "cleanup", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-2d0c7b7ab8f8aacf", "level": "warning", "message": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "properties": {"repobilityId": "01078bccfb99c82d", "scanner": "scanner-primary", "fingerprint": "2d0c7b7ab8f8aacf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "critical-flow", "generated-repo-pattern"]}}, {"ruleId": "scanner-b9088664ace7f748", "level": "note", "message": {"text": "Composite production-readiness gap"}, "properties": {"repobilityId": "f6032bedb1d50314", "scanner": "scanner-primary", "fingerprint": "b9088664ace7f748", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["production-readiness", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-f376b33e73e8e85e", "level": "none", "message": {"text": "Commented-code block (5 lines) in test.mjs:2"}, "properties": {"repobilityId": "f024c7584648c5a5", "scanner": "scanner-primary", "fingerprint": "f376b33e73e8e85e", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-a48280a42af76c5b", "level": "none", "message": {"text": "Commented-code block (6 lines) in brain.config.mjs:48"}, "properties": {"repobilityId": "d30fa51c784b1f55", "scanner": "scanner-primary", "fingerprint": "a48280a42af76c5b", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-7dc333337dbf8df1", "level": "none", "message": {"text": "Commented-code block (6 lines) in install.mjs:2"}, "properties": {"repobilityId": "930a6aaa7f0483f2", "scanner": "scanner-primary", "fingerprint": "7dc333337dbf8df1", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-c1a28c9512a2ffcd", "level": "none", "message": {"text": "Commented-code block (6 lines) in brain.mjs:305"}, "properties": {"repobilityId": "cd73a57bdccc16c2", "scanner": "scanner-primary", "fingerprint": "c1a28c9512a2ffcd", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-caf311b0dc32a6db", "level": "none", "message": {"text": "Commented-code block (5 lines) in maintain.mjs:2"}, "properties": {"repobilityId": "abdd55c511b9a090", "scanner": "scanner-primary", "fingerprint": "caf311b0dc32a6db", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-3be3d88f479799c7", "level": "none", "message": {"text": "Commented-code block (9 lines) in restore.mjs:2"}, "properties": {"repobilityId": "d54d7fcab587fa1d", "scanner": "scanner-primary", "fingerprint": "3be3d88f479799c7", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-f064e411e7333805", "level": "none", "message": {"text": "Commented-code block (9 lines) in consolidate.mjs:5"}, "properties": {"repobilityId": "c48ca09a49e14cb0", "scanner": "scanner-primary", "fingerprint": "f064e411e7333805", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}]}]}