{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "scanner-868dbad33a96a518", "name": "Possibly dead Python function: add", "shortDescription": {"text": "Possibly dead Python function: add"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-15a0ce4d478f7901", "name": "Insecure pattern 'node_child_process' in scripts/build-wallpaper.mjs:4", "shortDescription": {"text": "Insecure pattern 'node_child_process' in scripts/build-wallpaper.mjs:4"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2210b7fc9b47f326", "name": "Insecure pattern 'node_child_process' in scripts/dialogue-bridge.mjs:26", "shortDescription": {"text": "Insecure pattern 'node_child_process' in scripts/dialogue-bridge.mjs:26"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e8b892dec1ebbf10", "name": "Insecure pattern 'cors_wildcard' in scripts/dialogue-bridge.mjs:476", "shortDescription": {"text": "Insecure pattern 'cors_wildcard' in scripts/dialogue-bridge.mjs:476"}, "fullDescription": {"text": "Found a known-risky pattern (cors_wildcard). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4601e3ad3bb28677", "name": "No CI/CD pipelines detected", "shortDescription": {"text": "No CI/CD pipelines detected"}, "fullDescription": {"text": "No GitHub Actions, GitLab CI, or CircleCI configs found. Without CI you can't gate deploys on tests/lints."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-fe82373d9ccd26b8", "name": "Very large file: src/engines/dialogue/banks/generated.ts (4280 lines)", "shortDescription": {"text": "Very large file: src/engines/dialogue/banks/generated.ts (4280 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6893a6c8b0861585", "name": "Very low test-to-source ratio", "shortDescription": {"text": "Very low test-to-source ratio"}, "fullDescription": {"text": "8 test file(s) for 105 source file(s) (ratio 0.08). Consider adding integration or unit tests for critical paths."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3ab5d313dda8e5f9", "name": "Debug logging residue appears in source files", "shortDescription": {"text": "Debug logging residue appears in source files"}, "fullDescription": {"text": "Found 91 console/debugger/print-style debug statements in non-test source. This is a common fast-generation residue before production cleanup."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-72b2a6250083a784", "name": "Placeholder or mock-heavy implementation detected", "shortDescription": {"text": "Placeholder or mock-heavy implementation detected"}, "fullDescription": {"text": "Found 54 placeholder/mock markers across 19 source files. This often means the repo looks complete while core flows still use generated scaffolding or fake data."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2d0c7b7ab8f8aacf", "name": "Critical user flow still appears backed by mock or placeholder data", "shortDescription": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "fullDescription": {"text": "A payment/auth/admin/order/billing-style flow contains mock, fake, TODO, dummy, or placeholder markers in runtime source. In the Fable corpus this is a high-leverage completeness smell: the app can look finished while the money, identity, or tenant flow is still scaffolded."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ea8f3013f588db25", "name": "Shallow git history limits provenance confidence", "shortDescription": {"text": "Shallow git history limits provenance confidence"}, "fullDescription": {"text": "The repository is a shallow clone. Origin/evolution analysis cannot distinguish fresh generation, imported legacy code, or long-lived human code with high confidence."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8424db9c75e04ba4", "name": "Very short observed git history", "shortDescription": {"text": "Very short observed git history"}, "fullDescription": {"text": "The repo has multiple source files but two or fewer visible commits. This is not a failure by itself, but it lowers confidence in evolution-based diagnosis."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-36ad80271be2cbca", "name": "Legacy-named symbol `board_v2` in scripts/capture-v2.mjs:86", "shortDescription": {"text": "Legacy-named symbol `board_v2` in scripts/capture-v2.mjs:86"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-207ff6af56e83819", "name": "Legacy-named symbol `w_old` in scripts/dialogue-bridge.mjs:163", "shortDescription": {"text": "Legacy-named symbol `w_old` in scripts/dialogue-bridge.mjs:163"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e9fb018c95f9657f", "name": "Commented-code block (8 lines) in scripts/dialogue-bridge.mjs:7", "shortDescription": {"text": "Commented-code block (8 lines) in scripts/dialogue-bridge.mjs:7"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-6da5a7571398c9ea", "name": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/fetch-market-data.mjs:53", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/fetch-market-data.mjs:53"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-13538c3d064c6199", "name": "Network/subprocess call without timeout or try/except \u2014 scripts/video/render_video.py:404", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 scripts/video/render_video.py:404"}, "fullDescription": {"text": "`subprocess.Popen(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c02b17d6fc0f06d7", "name": "Legacy-named symbol `board_v2` in scripts/video/build_gifs_v2.py:37", "shortDescription": {"text": "Legacy-named symbol `board_v2` in scripts/video/build_gifs_v2.py:37"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1a42ddfa9aa6063e", "name": "Commented-code block (5 lines) in src/types.ts:364", "shortDescription": {"text": "Commented-code block (5 lines) in src/types.ts:364"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-333516d341c2269c", "name": "Commented-code block (6 lines) in src/engines/realBacktestEngine.ts:13", "shortDescription": {"text": "Commented-code block (6 lines) in src/engines/realBacktestEngine.ts:13"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-5f950c0cf4846ad5", "name": "Commented-code block (5 lines) in src/engines/poolAnalytics.ts:118", "shortDescription": {"text": "Commented-code block (5 lines) in src/engines/poolAnalytics.ts:118"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-335e418438c33f8b", "name": "Commented-code block (8 lines) in src/engines/strategyKnowledge.ts:9", "shortDescription": {"text": "Commented-code block (8 lines) in src/engines/strategyKnowledge.ts:9"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-030867e83a407685", "name": "Commented-code block (5 lines) in src/engines/banditEngine.ts:4", "shortDescription": {"text": "Commented-code block (5 lines) in src/engines/banditEngine.ts:4"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-9437bc8d93da330d", "name": "Legacy-named symbol `close_real_final_v2` in src/engines/dialogue/banks/generated.ts:4085", "shortDescription": {"text": "Legacy-named symbol `close_real_final_v2` in src/engines/dialogue/banks/generated.ts:4085"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e7acf32637ccdb36", "name": "Commented-code block (5 lines) in src/engines/dataset/csvParse.ts:4", "shortDescription": {"text": "Commented-code block (5 lines) in src/engines/dataset/csvParse.ts:4"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-68555b2c23ef19a3", "name": "`fetch()` without try/.catch or AbortSignal \u2014 src/store/AppStore.tsx:613", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/store/AppStore.tsx:613"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2c04133e54348533", "name": "Near-duplicate function bodies in 2 places", "shortDescription": {"text": "Near-duplicate function bodies in 2 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\nscripts/video/music_gen.py:midi, scripts/video/music_gen.py:m\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/19512"}, "properties": {"repository": "shoal-rat/quant-research-lab", "repoUrl": "https://github.com/shoal-rat/quant-research-lab", "branch": "main"}, "results": [{"ruleId": "scanner-868dbad33a96a518", "level": "note", "message": {"text": "Possibly dead Python function: add"}, "properties": {"repobilityId": "0efde41682734b04", "scanner": "scanner-primary", "fingerprint": "868dbad33a96a518", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/video/music_gen.py:109"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-15a0ce4d478f7901", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in scripts/build-wallpaper.mjs:4"}, "properties": {"repobilityId": "5a206fb5ff3344a2", "scanner": "scanner-primary", "fingerprint": "15a0ce4d478f7901", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/build-wallpaper.mjs"}, "region": {"startLine": 4}}}]}, {"ruleId": "scanner-2210b7fc9b47f326", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in scripts/dialogue-bridge.mjs:26"}, "properties": {"repobilityId": "9de9dabf73632d74", "scanner": "scanner-primary", "fingerprint": "2210b7fc9b47f326", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/dialogue-bridge.mjs"}, "region": {"startLine": 26}}}]}, {"ruleId": "scanner-e8b892dec1ebbf10", "level": "warning", "message": {"text": "Insecure pattern 'cors_wildcard' in scripts/dialogue-bridge.mjs:476"}, "properties": {"repobilityId": "0b39a16dda0cb98e", "scanner": "scanner-primary", "fingerprint": "e8b892dec1ebbf10", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "cors_wildcard"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/dialogue-bridge.mjs"}, "region": {"startLine": 476}}}]}, {"ruleId": "scanner-4601e3ad3bb28677", "level": "warning", "message": {"text": "No CI/CD pipelines detected"}, "properties": {"repobilityId": "c3ee439bce2bc51e", "scanner": "scanner-primary", "fingerprint": "4601e3ad3bb28677", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["coverage"]}}, {"ruleId": "scanner-fe82373d9ccd26b8", "level": "note", "message": {"text": "Very large file: src/engines/dialogue/banks/generated.ts (4280 lines)"}, "properties": {"repobilityId": "5f552b449ee4ec1e", "scanner": "scanner-primary", "fingerprint": "fe82373d9ccd26b8", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-6893a6c8b0861585", "level": "warning", "message": {"text": "Very low test-to-source ratio"}, "properties": {"repobilityId": "54a7de3f06314bf0", "scanner": "scanner-primary", "fingerprint": "6893a6c8b0861585", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["tests", "coverage"]}}, {"ruleId": "scanner-3ab5d313dda8e5f9", "level": "note", "message": {"text": "Debug logging residue appears in source files"}, "properties": {"repobilityId": "6a116f23abf7a21c", "scanner": "scanner-primary", "fingerprint": "3ab5d313dda8e5f9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["debug", "cleanup", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-72b2a6250083a784", "level": "warning", "message": {"text": "Placeholder or mock-heavy implementation detected"}, "properties": {"repobilityId": "3480d0635b807b2c", "scanner": "scanner-primary", "fingerprint": "72b2a6250083a784", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "incomplete", "generated-repo-pattern"]}}, {"ruleId": "scanner-2d0c7b7ab8f8aacf", "level": "warning", "message": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "properties": {"repobilityId": "1c68441f47e8c74e", "scanner": "scanner-primary", "fingerprint": "2d0c7b7ab8f8aacf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "critical-flow", "generated-repo-pattern"]}}, {"ruleId": "scanner-ea8f3013f588db25", "level": "note", "message": {"text": "Shallow git history limits provenance confidence"}, "properties": {"repobilityId": "9b35115ca105066a", "scanner": "scanner-primary", "fingerprint": "ea8f3013f588db25", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-8424db9c75e04ba4", "level": "none", "message": {"text": "Very short observed git history"}, "properties": {"repobilityId": "717bd6be55954888", "scanner": "scanner-primary", "fingerprint": "8424db9c75e04ba4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-36ad80271be2cbca", "level": "note", "message": {"text": "Legacy-named symbol `board_v2` in scripts/capture-v2.mjs:86"}, "properties": {"repobilityId": "e212a0ab1da6a76f", "scanner": "scanner-primary", "fingerprint": "36ad80271be2cbca", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-207ff6af56e83819", "level": "note", "message": {"text": "Legacy-named symbol `w_old` in scripts/dialogue-bridge.mjs:163"}, "properties": {"repobilityId": "578f254eb80cb0fe", "scanner": "scanner-primary", "fingerprint": "207ff6af56e83819", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-e9fb018c95f9657f", "level": "none", "message": {"text": "Commented-code block (8 lines) in scripts/dialogue-bridge.mjs:7"}, "properties": {"repobilityId": "2f8201d460b8b9a3", "scanner": "scanner-primary", "fingerprint": "e9fb018c95f9657f", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-6da5a7571398c9ea", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/fetch-market-data.mjs:53"}, "properties": {"repobilityId": "627551573027dcc6", "scanner": "scanner-primary", "fingerprint": "6da5a7571398c9ea", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-13538c3d064c6199", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 scripts/video/render_video.py:404"}, "properties": {"repobilityId": "97e436ebc6c5d15b", "scanner": "scanner-primary", "fingerprint": "13538c3d064c6199", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-c02b17d6fc0f06d7", "level": "note", "message": {"text": "Legacy-named symbol `board_v2` in scripts/video/build_gifs_v2.py:37"}, "properties": {"repobilityId": "27583733dba02f5f", "scanner": "scanner-primary", "fingerprint": "c02b17d6fc0f06d7", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-1a42ddfa9aa6063e", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/types.ts:364"}, "properties": {"repobilityId": "956a6a463be3edde", "scanner": "scanner-primary", "fingerprint": "1a42ddfa9aa6063e", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-333516d341c2269c", "level": "none", "message": {"text": "Commented-code block (6 lines) in src/engines/realBacktestEngine.ts:13"}, "properties": {"repobilityId": "802a86e14e67c4ea", "scanner": "scanner-primary", "fingerprint": "333516d341c2269c", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-5f950c0cf4846ad5", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/engines/poolAnalytics.ts:118"}, "properties": {"repobilityId": "7b01c8d2b30500b7", "scanner": "scanner-primary", "fingerprint": "5f950c0cf4846ad5", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-335e418438c33f8b", "level": "none", "message": {"text": "Commented-code block (8 lines) in src/engines/strategyKnowledge.ts:9"}, "properties": {"repobilityId": "ba8aecc497a4918b", "scanner": "scanner-primary", "fingerprint": "335e418438c33f8b", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-030867e83a407685", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/engines/banditEngine.ts:4"}, "properties": {"repobilityId": "f4d0caf81742030c", "scanner": "scanner-primary", "fingerprint": "030867e83a407685", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-9437bc8d93da330d", "level": "note", "message": {"text": "Legacy-named symbol `close_real_final_v2` in src/engines/dialogue/banks/generated.ts:4085"}, "properties": {"repobilityId": "12f503b7d9bed60a", "scanner": "scanner-primary", "fingerprint": "9437bc8d93da330d", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-e7acf32637ccdb36", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/engines/dataset/csvParse.ts:4"}, "properties": {"repobilityId": "61fc085df21b2e62", "scanner": "scanner-primary", "fingerprint": "e7acf32637ccdb36", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-68555b2c23ef19a3", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/store/AppStore.tsx:613"}, "properties": {"repobilityId": "d9a2ac42e1c61090", "scanner": "scanner-primary", "fingerprint": "68555b2c23ef19a3", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "881eea5583c2bc63", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}]}]}