{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "scanner-bead75b0f9233e05", "name": "No API endpoints detected", "shortDescription": {"text": "No API endpoints detected"}, "fullDescription": {"text": "The scanner did not find FastAPI/Flask/Express/NestJS/GraphQL/gRPC routes. If this repo exposes APIs, the framework may be unsupported."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "info", "confidence": 1.0}}, {"id": "scanner-00ed73a79e121f3a", "name": "Stray `console.log` in TS/JS \u2014 app/api/admin/daily-blog/route.ts:196", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 app/api/admin/daily-blog/route.ts:196"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7900bed741b5bf6d", "name": "`dangerouslySetInnerHTML` used in a React component \u2014 app/[locale]/layout.tsx:113", "shortDescription": {"text": "`dangerouslySetInnerHTML` used in a React component \u2014 app/[locale]/layout.tsx:113"}, "fullDescription": {"text": "Open XSS surface unless the input is provably trusted. Replace with explicit JSX or sanitize via a vetted library.\n\nWhy: OWASP basics. Already partially flagged by the security analyzer.\nRule id: fq.dangerous-html"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cfb7027d503e356f", "name": "`dangerouslySetInnerHTML` used in a React component \u2014 app/[locale]/about/page.tsx:67", "shortDescription": {"text": "`dangerouslySetInnerHTML` used in a React component \u2014 app/[locale]/about/page.tsx:67"}, "fullDescription": {"text": "Open XSS surface unless the input is provably trusted. Replace with explicit JSX or sanitize via a vetted library.\n\nWhy: OWASP basics. Already partially flagged by the security analyzer.\nRule id: fq.dangerous-html"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-12d4e4e8f6760431", "name": "`truncate` class without `title=` for hover reveal \u2014 app/[locale]/dashboard/page.tsx:99", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 app/[locale]/dashboard/page.tsx:99"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-9dabb7a682313615", "name": "`dangerouslySetInnerHTML` used in a React component \u2014 app/[locale]/community/[slug]/page.tsx:124", "shortDescription": {"text": "`dangerouslySetInnerHTML` used in a React component \u2014 app/[locale]/community/[slug]/page.tsx:124"}, "fullDescription": {"text": "Open XSS surface unless the input is provably trusted. Replace with explicit JSX or sanitize via a vetted library.\n\nWhy: OWASP basics. Already partially flagged by the security analyzer.\nRule id: fq.dangerous-html"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6eddcc5c25271b22", "name": "`dangerouslySetInnerHTML` used in a React component \u2014 app/[locale]/resources/studio-name-generator/page.tsx:512", "shortDescription": {"text": "`dangerouslySetInnerHTML` used in a React component \u2014 app/[locale]/resources/studio-name-generator/page.tsx:512"}, "fullDescription": {"text": "Open XSS surface unless the input is provably trusted. Replace with explicit JSX or sanitize via a vetted library.\n\nWhy: OWASP basics. Already partially flagged by the security analyzer.\nRule id: fq.dangerous-html"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c8f3cf40e0b71a49", "name": "`truncate` class without `title=` for hover reveal \u2014 app/[locale]/resources/email-generator/page.tsx:455", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 app/[locale]/resources/email-generator/page.tsx:455"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-246463fef3f7aaf3", "name": "`truncate` class without `title=` for hover reveal \u2014 app/[locale]/search/page.tsx:213", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 app/[locale]/search/page.tsx:213"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-72587b5faa539afd", "name": "Stray `console.log` in TS/JS \u2014 scripts/update-images.ts:166", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/update-images.ts:166"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-80524466193fd752", "name": "Stray `console.log` in TS/JS \u2014 scripts/seed-data.ts:42", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/seed-data.ts:42"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6f942b203ac028e7", "name": "Stray `console.log` in TS/JS \u2014 scripts/seed-international.ts:26", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/seed-international.ts:26"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7248f7b217f32902", "name": "`dangerouslySetInnerHTML` used in a React component \u2014 components/directory/CategoryJsonLd.tsx:73", "shortDescription": {"text": "`dangerouslySetInnerHTML` used in a React component \u2014 components/directory/CategoryJsonLd.tsx:73"}, "fullDescription": {"text": "Open XSS surface unless the input is provably trusted. Replace with explicit JSX or sanitize via a vetted library.\n\nWhy: OWASP basics. Already partially flagged by the security analyzer.\nRule id: fq.dangerous-html"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-770a7bf801752658", "name": "`truncate` class without `title=` for hover reveal \u2014 components/directory/ListingCard.tsx:80", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 components/directory/ListingCard.tsx:80"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-1bb36492b3e5983a", "name": "Insecure pattern 'dangerous_innerhtml' in app/[locale]/layout.tsx:113", "shortDescription": {"text": "Insecure pattern 'dangerous_innerhtml' in app/[locale]/layout.tsx:113"}, "fullDescription": {"text": "Found a known-risky pattern (dangerous_innerhtml). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a8fca3831ec596ba", "name": "Insecure pattern 'dangerous_innerhtml' in app/[locale]/about/page.tsx:67", "shortDescription": {"text": "Insecure pattern 'dangerous_innerhtml' in app/[locale]/about/page.tsx:67"}, "fullDescription": {"text": "Found a known-risky pattern (dangerous_innerhtml). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e633463e9d625530", "name": "Insecure pattern 'dangerous_innerhtml' in app/[locale]/community/[slug]/page.tsx:124", "shortDescription": {"text": "Insecure pattern 'dangerous_innerhtml' in app/[locale]/community/[slug]/page.tsx:124"}, "fullDescription": {"text": "Found a known-risky pattern (dangerous_innerhtml). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4959d5b1480aaf1d", "name": "Insecure pattern 'document_write' in app/[locale]/resources/retreat-checklist/page.tsx:603", "shortDescription": {"text": "Insecure pattern 'document_write' in app/[locale]/resources/retreat-checklist/page.tsx:603"}, "fullDescription": {"text": "Found a known-risky pattern (document_write). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-445b230bc0cd644a", "name": "Insecure pattern 'dangerous_innerhtml' in app/[locale]/resources/studio-name-generator/page.tsx:512", "shortDescription": {"text": "Insecure pattern 'dangerous_innerhtml' in app/[locale]/resources/studio-name-generator/page.tsx:512"}, "fullDescription": {"text": "Found a known-risky pattern (dangerous_innerhtml). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c38ef1aad5106ad8", "name": "Insecure pattern 'document_write' in app/[locale]/resources/email-generator/page.tsx:251", "shortDescription": {"text": "Insecure pattern 'document_write' in app/[locale]/resources/email-generator/page.tsx:251"}, "fullDescription": {"text": "Found a known-risky pattern (document_write). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f40ab3aaa80ce811", "name": "Insecure pattern 'dangerous_innerhtml' in components/directory/CategoryJsonLd.tsx:73", "shortDescription": {"text": "Insecure pattern 'dangerous_innerhtml' in components/directory/CategoryJsonLd.tsx:73"}, "fullDescription": {"text": "Found a known-risky pattern (dangerous_innerhtml). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8abc65f4c37c5ade", "name": "Very large file: app/[locale]/resources/retreat-checklist/page.tsx (1036 lines)", "shortDescription": {"text": "Very large file: app/[locale]/resources/retreat-checklist/page.tsx (1036 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-16544b9071212f86", "name": "Very large file: app/[locale]/resources/class-theme-generator/page.tsx (1323 lines)", "shortDescription": {"text": "Very large file: app/[locale]/resources/class-theme-generator/page.tsx (1323 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6893a6c8b0861585", "name": "Very low test-to-source ratio", "shortDescription": {"text": "Very low test-to-source ratio"}, "fullDescription": {"text": "0 test file(s) for 122 source file(s) (ratio 0.00). Consider adding integration or unit tests for critical paths."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-141b30a41e03817b", "name": "No license file detected", "shortDescription": {"text": "No license file detected"}, "fullDescription": {"text": "No LICENSE/COPYING/NOTICE file was found. Generated repositories often omit licensing, which blocks reuse and automated intake."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-faccb9061e9b52a0", "name": "No README detected", "shortDescription": {"text": "No README detected"}, "fullDescription": {"text": "No README file was found. Generated repos without README context are hard to operate, validate, or safely hand off."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3ab5d313dda8e5f9", "name": "Debug logging residue appears in source files", "shortDescription": {"text": "Debug logging residue appears in source files"}, "fullDescription": {"text": "Found 36 console/debugger/print-style debug statements in non-test source. This is a common fast-generation residue before production cleanup."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-72b2a6250083a784", "name": "Placeholder or mock-heavy implementation detected", "shortDescription": {"text": "Placeholder or mock-heavy implementation detected"}, "fullDescription": {"text": "Found 91 placeholder/mock markers across 27 source files. This often means the repo looks complete while core flows still use generated scaffolding or fake data."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2d0c7b7ab8f8aacf", "name": "Critical user flow still appears backed by mock or placeholder data", "shortDescription": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "fullDescription": {"text": "A payment/auth/admin/order/billing-style flow contains mock, fake, TODO, dummy, or placeholder markers in runtime source. In the Fable corpus this is a high-leverage completeness smell: the app can look finished while the money, identity, or tenant flow is still scaffolded."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b9088664ace7f748", "name": "Composite production-readiness gap", "shortDescription": {"text": "Composite production-readiness gap"}, "fullDescription": {"text": "Multiple low-cost hardening controls are missing together: license, ci, tests, operator-readme. Opus verification showed these co-occurring gaps are a better readiness signal than reading each flag in isolation."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-fabc4b6f0ab26e9d", "name": "Commented-code block (7 lines) in app/api/chat/route.ts:65", "shortDescription": {"text": "Commented-code block (7 lines) in app/api/chat/route.ts:65"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-e80712c8e4f33369", "name": "`fetch()` without try/.catch or AbortSignal \u2014 app/[locale]/admin/AdminClient.tsx:32", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 app/[locale]/admin/AdminClient.tsx:32"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/24047"}, "properties": {"repository": "alealearce/yoga-founders-network", "repoUrl": "https://github.com/alealearce/yoga-founders-network", "branch": "main"}, "results": [{"ruleId": "scanner-bead75b0f9233e05", "level": "none", "message": {"text": "No API endpoints detected"}, "properties": {"repobilityId": "0f8bb852027c38f8", "scanner": "scanner-primary", "fingerprint": "bead75b0f9233e05", "layer": "api", "severity": "info", "confidence": 1.0, "tags": ["coverage"]}}, {"ruleId": "scanner-00ed73a79e121f3a", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 app/api/admin/daily-blog/route.ts:196"}, "properties": {"repobilityId": "76855c362e5baf13", "scanner": "scanner-primary", "fingerprint": "00ed73a79e121f3a", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-7900bed741b5bf6d", "level": "warning", "message": {"text": "`dangerouslySetInnerHTML` used in a React component \u2014 app/[locale]/layout.tsx:113"}, "properties": {"repobilityId": "c4166e9f03dd0580", "scanner": "scanner-primary", "fingerprint": "7900bed741b5bf6d", "layer": "frontend", "severity": "medium", "confidence": 1.0, "tags": ["frontend-quality", "fq.dangerous-html"]}}, {"ruleId": "scanner-cfb7027d503e356f", "level": "warning", "message": {"text": "`dangerouslySetInnerHTML` used in a React component \u2014 app/[locale]/about/page.tsx:67"}, "properties": {"repobilityId": "e3d976748df1bd7f", "scanner": "scanner-primary", "fingerprint": "cfb7027d503e356f", "layer": "frontend", "severity": "medium", "confidence": 1.0, "tags": ["frontend-quality", "fq.dangerous-html"]}}, {"ruleId": "scanner-12d4e4e8f6760431", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 app/[locale]/dashboard/page.tsx:99"}, "properties": {"repobilityId": "d9bf5f54a3512f2d", "scanner": "scanner-primary", "fingerprint": "12d4e4e8f6760431", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-9dabb7a682313615", "level": "warning", "message": {"text": "`dangerouslySetInnerHTML` used in a React component \u2014 app/[locale]/community/[slug]/page.tsx:124"}, "properties": {"repobilityId": "5a1a5960fcda01e3", "scanner": "scanner-primary", "fingerprint": "9dabb7a682313615", "layer": "frontend", "severity": "medium", "confidence": 1.0, "tags": ["frontend-quality", "fq.dangerous-html"]}}, {"ruleId": "scanner-6eddcc5c25271b22", "level": "warning", "message": {"text": "`dangerouslySetInnerHTML` used in a React component \u2014 app/[locale]/resources/studio-name-generator/page.tsx:512"}, "properties": {"repobilityId": "b546b61724d7a627", "scanner": "scanner-primary", "fingerprint": "6eddcc5c25271b22", "layer": "frontend", "severity": "medium", "confidence": 1.0, "tags": ["frontend-quality", "fq.dangerous-html"]}}, {"ruleId": "scanner-c8f3cf40e0b71a49", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 app/[locale]/resources/email-generator/page.tsx:455"}, "properties": {"repobilityId": "befa2aeda10d878f", "scanner": "scanner-primary", "fingerprint": "c8f3cf40e0b71a49", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-246463fef3f7aaf3", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 app/[locale]/search/page.tsx:213"}, "properties": {"repobilityId": "1c311f1b708d63f5", "scanner": "scanner-primary", "fingerprint": "246463fef3f7aaf3", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-72587b5faa539afd", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/update-images.ts:166"}, "properties": {"repobilityId": "d658908ad209ad0b", "scanner": "scanner-primary", "fingerprint": "72587b5faa539afd", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-80524466193fd752", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/seed-data.ts:42"}, "properties": {"repobilityId": "3bf88ccbd152c3ee", "scanner": "scanner-primary", "fingerprint": "80524466193fd752", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-6f942b203ac028e7", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/seed-international.ts:26"}, "properties": {"repobilityId": "9830b668aaebbd42", "scanner": "scanner-primary", "fingerprint": "6f942b203ac028e7", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-7248f7b217f32902", "level": "warning", "message": {"text": "`dangerouslySetInnerHTML` used in a React component \u2014 components/directory/CategoryJsonLd.tsx:73"}, "properties": {"repobilityId": "710d1de7656b21ee", "scanner": "scanner-primary", "fingerprint": "7248f7b217f32902", "layer": "frontend", "severity": "medium", "confidence": 1.0, "tags": ["frontend-quality", "fq.dangerous-html"]}}, {"ruleId": "scanner-770a7bf801752658", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 components/directory/ListingCard.tsx:80"}, "properties": {"repobilityId": "714e0f061a331193", "scanner": "scanner-primary", "fingerprint": "770a7bf801752658", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-1bb36492b3e5983a", "level": "warning", "message": {"text": "Insecure pattern 'dangerous_innerhtml' in app/[locale]/layout.tsx:113"}, "properties": {"repobilityId": "5e5cba0de7adc723", "scanner": "scanner-primary", "fingerprint": "1bb36492b3e5983a", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "dangerous_innerhtml"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app/[locale]/layout.tsx"}, "region": {"startLine": 113}}}]}, {"ruleId": "scanner-a8fca3831ec596ba", "level": "warning", "message": {"text": "Insecure pattern 'dangerous_innerhtml' in app/[locale]/about/page.tsx:67"}, "properties": {"repobilityId": "94a25580e358b382", "scanner": "scanner-primary", "fingerprint": "a8fca3831ec596ba", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "dangerous_innerhtml"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app/[locale]/about/page.tsx"}, "region": {"startLine": 67}}}]}, {"ruleId": "scanner-e633463e9d625530", "level": "warning", "message": {"text": "Insecure pattern 'dangerous_innerhtml' in app/[locale]/community/[slug]/page.tsx:124"}, "properties": {"repobilityId": "c4875e287e2aabe4", "scanner": "scanner-primary", "fingerprint": "e633463e9d625530", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "dangerous_innerhtml"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app/[locale]/community/[slug]/page.tsx"}, "region": {"startLine": 124}}}]}, {"ruleId": "scanner-4959d5b1480aaf1d", "level": "note", "message": {"text": "Insecure pattern 'document_write' in app/[locale]/resources/retreat-checklist/page.tsx:603"}, "properties": {"repobilityId": "53ff04719d3f806d", "scanner": "scanner-primary", "fingerprint": "4959d5b1480aaf1d", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["owasp", "document_write"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app/[locale]/resources/retreat-checklist/page.tsx"}, "region": {"startLine": 603}}}]}, {"ruleId": "scanner-445b230bc0cd644a", "level": "warning", "message": {"text": "Insecure pattern 'dangerous_innerhtml' in app/[locale]/resources/studio-name-generator/page.tsx:512"}, "properties": {"repobilityId": "0f42f508c0431599", "scanner": "scanner-primary", "fingerprint": "445b230bc0cd644a", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "dangerous_innerhtml"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app/[locale]/resources/studio-name-generator/page.tsx"}, "region": {"startLine": 512}}}]}, {"ruleId": "scanner-c38ef1aad5106ad8", "level": "note", "message": {"text": "Insecure pattern 'document_write' in app/[locale]/resources/email-generator/page.tsx:251"}, "properties": {"repobilityId": "7b0ac0fffcd8b6fa", "scanner": "scanner-primary", "fingerprint": "c38ef1aad5106ad8", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["owasp", "document_write"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "app/[locale]/resources/email-generator/page.tsx"}, "region": {"startLine": 251}}}]}, {"ruleId": "scanner-f40ab3aaa80ce811", "level": "warning", "message": {"text": "Insecure pattern 'dangerous_innerhtml' in components/directory/CategoryJsonLd.tsx:73"}, "properties": {"repobilityId": "77331ac331e6e98a", "scanner": "scanner-primary", "fingerprint": "f40ab3aaa80ce811", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "dangerous_innerhtml"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "components/directory/CategoryJsonLd.tsx"}, "region": {"startLine": 73}}}]}, {"ruleId": "scanner-8abc65f4c37c5ade", "level": "note", "message": {"text": "Very large file: app/[locale]/resources/retreat-checklist/page.tsx (1036 lines)"}, "properties": {"repobilityId": "1e230a7d54af1128", "scanner": "scanner-primary", "fingerprint": "8abc65f4c37c5ade", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-16544b9071212f86", "level": "note", "message": {"text": "Very large file: app/[locale]/resources/class-theme-generator/page.tsx (1323 lines)"}, "properties": {"repobilityId": "42ec389bf1f3b6e0", "scanner": "scanner-primary", "fingerprint": "16544b9071212f86", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-6893a6c8b0861585", "level": "warning", "message": {"text": "Very low test-to-source ratio"}, "properties": {"repobilityId": "54a7de3f06314bf0", "scanner": "scanner-primary", "fingerprint": "6893a6c8b0861585", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["tests", "coverage"]}}, {"ruleId": "scanner-141b30a41e03817b", "level": "note", "message": {"text": "No license file detected"}, "properties": {"repobilityId": "165e5f520d2d72a1", "scanner": "scanner-primary", "fingerprint": "141b30a41e03817b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["license", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-faccb9061e9b52a0", "level": "note", "message": {"text": "No README detected"}, "properties": {"repobilityId": "3c57ed26c3146742", "scanner": "scanner-primary", "fingerprint": "faccb9061e9b52a0", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["docs", "readme", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-3ab5d313dda8e5f9", "level": "note", "message": {"text": "Debug logging residue appears in source files"}, "properties": {"repobilityId": "bbd06500f2091fc8", "scanner": "scanner-primary", "fingerprint": "3ab5d313dda8e5f9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["debug", "cleanup", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-72b2a6250083a784", "level": "warning", "message": {"text": "Placeholder or mock-heavy implementation detected"}, "properties": {"repobilityId": "3ab27143a47613c6", "scanner": "scanner-primary", "fingerprint": "72b2a6250083a784", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "incomplete", "generated-repo-pattern"]}}, {"ruleId": "scanner-2d0c7b7ab8f8aacf", "level": "warning", "message": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "properties": {"repobilityId": "73a15bf9ea80a2d7", "scanner": "scanner-primary", "fingerprint": "2d0c7b7ab8f8aacf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "critical-flow", "generated-repo-pattern"]}}, {"ruleId": "scanner-b9088664ace7f748", "level": "warning", "message": {"text": "Composite production-readiness gap"}, "properties": {"repobilityId": "724e116708307a6e", "scanner": "scanner-primary", "fingerprint": "b9088664ace7f748", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["production-readiness", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-fabc4b6f0ab26e9d", "level": "none", "message": {"text": "Commented-code block (7 lines) in app/api/chat/route.ts:65"}, "properties": {"repobilityId": "634245d5799d7f0e", "scanner": "scanner-primary", "fingerprint": "fabc4b6f0ab26e9d", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-e80712c8e4f33369", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 app/[locale]/admin/AdminClient.tsx:32"}, "properties": {"repobilityId": "0aab7c7a4ce1ee69", "scanner": "scanner-primary", "fingerprint": "e80712c8e4f33369", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}]}]}