{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "scanner-f3fe5e0778fa8b58", "name": "Possibly dead Python function: extract_num", "shortDescription": {"text": "Possibly dead Python function: extract_num"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-270e296efb75d14a", "name": "Possibly dead Python function: extract_num", "shortDescription": {"text": "Possibly dead Python function: extract_num"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-72f3898ec986a16c", "name": "Possibly dead Python function: nms", "shortDescription": {"text": "Possibly dead Python function: nms"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-51302cb44ae0cb8f", "name": "Possibly dead Python function: nms", "shortDescription": {"text": "Possibly dead Python function: nms"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-286a94594b60db5e", "name": "Possibly dead Python function: nms", "shortDescription": {"text": "Possibly dead Python function: nms"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-cef8ab33be413fed", "name": "Possibly dead Python function: nms", "shortDescription": {"text": "Possibly dead Python function: nms"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-977cb082ed4321d0", "name": "Possibly dead Python function: nms", "shortDescription": {"text": "Possibly dead Python function: nms"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-be73c4cde349258e", "name": "Possibly dead Python function: nms", "shortDescription": {"text": "Possibly dead Python function: nms"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4925d16f029272e7", "name": "Possibly dead Python function: nms", "shortDescription": {"text": "Possibly dead Python function: nms"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-66b91187c7d0598e", "name": "Possibly dead Python function: replacer_masked", "shortDescription": {"text": "Possibly dead Python function: replacer_masked"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-447df044709479c2", "name": "Possibly dead Python function: nms", "shortDescription": {"text": "Possibly dead Python function: nms"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c6ef8cbfb502cbd0", "name": "Possibly dead Python function: nms", "shortDescription": {"text": "Possibly dead Python function: nms"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6e4e84458cebe23a", "name": "Possibly dead Python function: plot_batch_comparison", "shortDescription": {"text": "Possibly dead Python function: plot_batch_comparison"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ff59c07a34d066ea", "name": "Possibly dead Python function: nms", "shortDescription": {"text": "Possibly dead Python function: nms"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-bfb6442b9604c65c", "name": "Possibly dead Python function: crop_window", "shortDescription": {"text": "Possibly dead Python function: crop_window"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b4f420da914d2d71", "name": "Possibly dead Python function: extract_identifier_from_tokens", "shortDescription": {"text": "Possibly dead Python function: extract_identifier_from_tokens"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6ddbb6209720c444", "name": "Possibly dead Python function: nms", "shortDescription": {"text": "Possibly dead Python function: nms"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e624855c32db53b3", "name": "Possibly dead Python function: nms", "shortDescription": {"text": "Possibly dead Python function: nms"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1fe2d623cb93b716", "name": "Possibly dead Python function: nms", "shortDescription": {"text": "Possibly dead Python function: nms"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3269795e301266a5", "name": "Possibly dead Python function: nms", "shortDescription": {"text": "Possibly dead Python function: nms"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9e59233bbc58b185", "name": "Possibly dead Python function: nms", "shortDescription": {"text": "Possibly dead Python function: nms"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7e428763d6d60373", "name": "Possibly dead Python function: nms", "shortDescription": {"text": "Possibly dead Python function: nms"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-be503411675565c3", "name": "Possibly dead Python function: nms", "shortDescription": {"text": "Possibly dead Python function: nms"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fc0902ac7d63b1fc", "name": "Possibly dead Python function: nms", "shortDescription": {"text": "Possibly dead Python function: nms"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a81234604191a79f", "name": "Possibly dead Python function: run_batch_deobfuscation_experiment", "shortDescription": {"text": "Possibly dead Python function: run_batch_deobfuscation_experiment"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4d5ee051185a79b1", "name": "Possibly dead Python function: nms", "shortDescription": {"text": "Possibly dead Python function: nms"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-74380db8d52811da", "name": "Possibly dead Python function: nms", "shortDescription": {"text": "Possibly dead Python function: nms"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-79cd452feec62663", "name": "Possibly dead Python function: nms", "shortDescription": {"text": "Possibly dead Python function: nms"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-cd3afc001c8bf416", "name": "Possibly dead Python function: nms", "shortDescription": {"text": "Possibly dead Python function: nms"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-83bbc07c178b31de", "name": "Possibly dead Python function: nms", "shortDescription": {"text": "Possibly dead Python function: nms"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5608d6b237d25e81", "name": "File has no detected symbols: analyze_results_temp.py", "shortDescription": {"text": "File has no detected symbols: analyze_results_temp.py"}, "fullDescription": {"text": "Source file with no class/function declarations \u2014 possible config, dead code, or scratch file."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-96a844e1311a4e93", "name": "Privileged port 8 in use", "shortDescription": {"text": "Privileged port 8 in use"}, "fullDescription": {"text": "Port 8 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7baa716261c84c98", "name": "Privileged port 6 in use", "shortDescription": {"text": "Privileged port 6 in use"}, "fullDescription": {"text": "Port 6 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a910c00d12b63638", "name": "Privileged port 16 in use", "shortDescription": {"text": "Privileged port 16 in use"}, "fullDescription": {"text": "Port 16 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ce2e5a8b78b3019d", "name": "Privileged port 18 in use", "shortDescription": {"text": "Privileged port 18 in use"}, "fullDescription": {"text": "Port 18 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-54c5f48ec36b1f54", "name": "Privileged port 12 in use", "shortDescription": {"text": "Privileged port 12 in use"}, "fullDescription": {"text": "Port 12 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5972a821837b2240", "name": "Privileged port 30 in use", "shortDescription": {"text": "Privileged port 30 in use"}, "fullDescription": {"text": "Port 30 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-43c670643b7d8c4a", "name": "Privileged port 4 in use", "shortDescription": {"text": "Privileged port 4 in use"}, "fullDescription": {"text": "Port 4 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a414847c42157839", "name": "Privileged port 20 in use", "shortDescription": {"text": "Privileged port 20 in use"}, "fullDescription": {"text": "Port 20 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d8bda3d8fca7b3e8", "name": "Insecure pattern 'debug_true' in experiments/benchmark_dreamon.py:438", "shortDescription": {"text": "Insecure pattern 'debug_true' in experiments/benchmark_dreamon.py:438"}, "fullDescription": {"text": "Found a known-risky pattern (debug_true). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-512ae11519d5d0bb", "name": "Insecure pattern 'debug_true' in experiments/benchmark_dreamon_java_identifiers.py:482", "shortDescription": {"text": "Insecure pattern 'debug_true' in experiments/benchmark_dreamon_java_identifiers.py:482"}, "fullDescription": {"text": "Found a known-risky pattern (debug_true). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ebebf5a8c9dc8283", "name": "Insecure pattern 'debug_true' in experiments/benchmark_dreamon_java_quickstart.py:202", "shortDescription": {"text": "Insecure pattern 'debug_true' in experiments/benchmark_dreamon_java_quickstart.py:202"}, "fullDescription": {"text": "Found a known-risky pattern (debug_true). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-daafee25a9b3a261", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/figures/defense_opening.html:669", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/figures/defense_opening.html:669"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cc77f79c20a301c2", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/logo/index.html:248", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/logo/index.html:248"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6372cebde0220094", "name": "No auth library detected", "shortDescription": {"text": "No auth library detected"}, "fullDescription": {"text": "The scanner did not find any standard auth library (JWT, OAuth, NextAuth, Auth0, etc.). The repo has auth/admin/session surface indicators, so auth may live in custom code, in a separate service, or be missing."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6893a6c8b0861585", "name": "Very low test-to-source ratio", "shortDescription": {"text": "Very low test-to-source ratio"}, "fullDescription": {"text": "7 test file(s) for 124 source file(s) (ratio 0.06). Consider adding integration or unit tests for critical paths."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3ab5d313dda8e5f9", "name": "Debug logging residue appears in source files", "shortDescription": {"text": "Debug logging residue appears in source files"}, "fullDescription": {"text": "Found 1995 console/debugger/print-style debug statements in non-test source. This is a common fast-generation residue before production cleanup."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-72b2a6250083a784", "name": "Placeholder or mock-heavy implementation detected", "shortDescription": {"text": "Placeholder or mock-heavy implementation detected"}, "fullDescription": {"text": "Found 51 placeholder/mock markers across 15 source files. This often means the repo looks complete while core flows still use generated scaffolding or fake data."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2d0c7b7ab8f8aacf", "name": "Critical user flow still appears backed by mock or placeholder data", "shortDescription": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "fullDescription": {"text": "A payment/auth/admin/order/billing-style flow contains mock, fake, TODO, dummy, or placeholder markers in runtime source. In the Fable corpus this is a high-leverage completeness smell: the app can look finished while the money, identity, or tenant flow is still scaffolded."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-749d4bc1bd66df5f", "name": "Agent instructions exist but release-hardening basics are missing", "shortDescription": {"text": "Agent instructions exist but release-hardening basics are missing"}, "fullDescription": {"text": "AI-coder instruction files were found, but the repo is missing ci. Treat this as a contract gap: the agent is guided, but the generated output is not yet guarded by the controls that make it repeatable."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ecb0d2c55ed6875d", "name": "Agent authority lacks a verifier contract: .claude/settings.local.json", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/settings.local.json"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-756fdb08c87b94ae", "name": "Commented-code block (5 lines) in experiments/compare_math_vs_smell_noise.py:441", "shortDescription": {"text": "Commented-code block (5 lines) in experiments/compare_math_vs_smell_noise.py:441"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-4e7d38a02103a367", "name": "Commented-code block (13 lines) in experiments/benchmark_codet5p_16b.py:330", "shortDescription": {"text": "Commented-code block (13 lines) in experiments/benchmark_codet5p_16b.py:330"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-76991ed625356a6b", "name": "Commented-code block (8 lines) in experiments/experiment_deobfuscation.py:490", "shortDescription": {"text": "Commented-code block (8 lines) in experiments/experiment_deobfuscation.py:490"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-c6081e8b46dbc17d", "name": "Legacy-named symbol `run_constrained_diffusion_v2` in experiments/experiment_constrained_v2.py:94", "shortDescription": {"text": "Legacy-named symbol `run_constrained_diffusion_v2` in experiments/experiment_constrained_v2.py:94"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ee9d74cd8c61326e", "name": "Legacy-named symbol `convert_old` in experiments/prepare_dreamon_for_judge.py:59", "shortDescription": {"text": "Legacy-named symbol `convert_old` in experiments/prepare_dreamon_for_judge.py:59"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e3d6858f21ab959b", "name": "Commented-code block (7 lines) in experiments/experiment_denoise_sbs.py:157", "shortDescription": {"text": "Commented-code block (7 lines) in experiments/experiment_denoise_sbs.py:157"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-8cb42041db4aaabc", "name": "Commented-code block (7 lines) in experiments/smell_as_noise_refactoring/run_experiment.py:150", "shortDescription": {"text": "Commented-code block (7 lines) in experiments/smell_as_noise_refactoring/run_experiment.py:150"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-26ec684b0da6566b", "name": "Network/subprocess call without timeout or try/except \u2014 notebooks/colab_partial_masking.py:14", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 notebooks/colab_partial_masking.py:14"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-24fdf402317f0cc9", "name": "Commented-code block (11 lines) in analysis/plot_overconfidence.py:122", "shortDescription": {"text": "Commented-code block (11 lines) in analysis/plot_overconfidence.py:122"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-8a4cf03e2a657c90", "name": "Legacy-named symbol `_publication_plot_v2` in analysis/visualize_experiment.py:114", "shortDescription": {"text": "Legacy-named symbol `_publication_plot_v2` in analysis/visualize_experiment.py:114"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b4f90c588ff45766", "name": "Commented-code block (7 lines) in analysis/paper_figures.py:110", "shortDescription": {"text": "Commented-code block (7 lines) in analysis/paper_figures.py:110"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-637d1e3e3774f342", "name": "Commented-code block (5 lines) in analysis/check_code_integrity.py:14", "shortDescription": {"text": "Commented-code block (5 lines) in analysis/check_code_integrity.py:14"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-1feb31231e436773", "name": "Legacy-named symbol `dream_old` in analysis/dreamon_results/compute_strict_all_baselines.py:242", "shortDescription": {"text": "Legacy-named symbol `dream_old` in analysis/dreamon_results/compute_strict_all_baselines.py:242"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1e85db5eee5dede8", "name": "Legacy-named symbol `compute_smell_score_v2` in detector/compare_detectors.py:580", "shortDescription": {"text": "Legacy-named symbol `compute_smell_score_v2` in detector/compare_detectors.py:580"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-76a2f6818267a9a8", "name": "Near-duplicate function bodies in 8 places", "shortDescription": {"text": "Near-duplicate function bodies in 8 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\nunified_framework.py:load, unified_framework.py:load, unified_framework.py:load, unified_framework.py:load\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2c04133e54348533", "name": "Near-duplicate function bodies in 2 places", "shortDescription": {"text": "Near-duplicate function bodies in 2 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\nexperiments/check_multi_token_noise.py:nms, experiments/dreamcoder_step_by_step.py:nms\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-33a6b62e30ce7ab4", "name": "Near-duplicate function bodies in 6 places", "shortDescription": {"text": "Near-duplicate function bodies in 6 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\nexperiments/check_multi_token_noise.py:get_num_transfer_tokens, experiments/experiment_a_internal_rep.py:get_num_transfer_tokens, experiments/dreamcoder_step_by_step.py:get_num_transfer_tokens, experiments/experiment_b_unmasking_order.py:get_num_transfer_tokens\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-be46ea126aa5d8dc", "name": "Near-duplicate function bodies in 3 places", "shortDescription": {"text": "Near-duplicate function bodies in 3 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\nexperiments/check_multi_token_noise.py:add_gumbel_noise, experiments/dreamcoder_step_by_step.py:add_gumbel_noise, experiments/experiment_denoise_sbs.py:add_gumbel_noise\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-49c98f7cedd9c977", "name": "Near-duplicate function bodies in 4 places", "shortDescription": {"text": "Near-duplicate function bodies in 4 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\nexperiments/run_refine_id_diffucoder.py:nms, experiments/run_refine_id_dreamcoder_no_prompt.py:nms, experiments/run_refine_id_diffucoder_no_prompt.py:nms, experiments/run_refine_id_dreamcoder.py:nms\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-02525d39071dd2c7", "name": "Near-duplicate function bodies in 5 places", "shortDescription": {"text": "Near-duplicate function bodies in 5 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\nexperiments/run_refine_id_diffucoder.py:run_experiment, experiments/run_refine_id_ar.py:run_experiment, experiments/run_refine_id_dreamcoder_no_prompt.py:run_experiment, experiments/run_refine_id_diffucoder_no_prompt.py:run_experiment\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/25178"}, "properties": {"repository": "D4vidHuang/CoRefusion", "repoUrl": "https://github.com/D4vidHuang/CoRefusion", "branch": "main"}, "results": [{"ruleId": "scanner-f3fe5e0778fa8b58", "level": "note", "message": {"text": "Possibly dead Python function: extract_num"}, "properties": {"repobilityId": "9ca74fc943fffe24", "scanner": "scanner-primary", "fingerprint": "f3fe5e0778fa8b58", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "analyze_full_edit_signal.py:10"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-270e296efb75d14a", "level": "note", "message": {"text": "Possibly dead Python function: extract_num"}, "properties": {"repobilityId": "9ca74fc943fffe24", "scanner": "scanner-primary", "fingerprint": "270e296efb75d14a", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "generate_edit_signal_plots.py:26"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-72f3898ec986a16c", "level": "note", "message": {"text": "Possibly dead Python function: nms"}, "properties": {"repobilityId": "4875fdd006371e5a", "scanner": "scanner-primary", "fingerprint": "72f3898ec986a16c", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "experiments/check_multi_token_noise.py:23"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-51302cb44ae0cb8f", "level": "note", "message": {"text": "Possibly dead Python function: nms"}, "properties": {"repobilityId": "4875fdd006371e5a", "scanner": "scanner-primary", "fingerprint": "51302cb44ae0cb8f", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "experiments/run_refine_id_diffucoder.py:20"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-286a94594b60db5e", "level": "note", "message": {"text": "Possibly dead Python function: nms"}, "properties": {"repobilityId": "4875fdd006371e5a", "scanner": "scanner-primary", "fingerprint": "286a94594b60db5e", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "experiments/inspect_diffucoder_history.py:16"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-cef8ab33be413fed", "level": "note", "message": {"text": "Possibly dead Python function: nms"}, "properties": {"repobilityId": "4875fdd006371e5a", "scanner": "scanner-primary", "fingerprint": "cef8ab33be413fed", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "experiments/scaled_naming_flip_step.py:22"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-977cb082ed4321d0", "level": "note", "message": {"text": "Possibly dead Python function: nms"}, "properties": {"repobilityId": "4875fdd006371e5a", "scanner": "scanner-primary", "fingerprint": "977cb082ed4321d0", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "experiments/experiment_a_internal_rep.py:27"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-be73c4cde349258e", "level": "note", "message": {"text": "Possibly dead Python function: nms"}, "properties": {"repobilityId": "4875fdd006371e5a", "scanner": "scanner-primary", "fingerprint": "be73c4cde349258e", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "experiments/benchmark_diffusion_models.py:57"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4925d16f029272e7", "level": "note", "message": {"text": "Possibly dead Python function: nms"}, "properties": {"repobilityId": "4875fdd006371e5a", "scanner": "scanner-primary", "fingerprint": "4925d16f029272e7", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "experiments/experiment_deobfuscation_refineID.py:61"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-66b91187c7d0598e", "level": "note", "message": {"text": "Possibly dead Python function: replacer_masked"}, "properties": {"repobilityId": "b3ff83684eed0e6d", "scanner": "scanner-primary", "fingerprint": "66b91187c7d0598e", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "experiments/experiment_deobfuscation_refineID.py:251"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-447df044709479c2", "level": "note", "message": {"text": "Possibly dead Python function: nms"}, "properties": {"repobilityId": "4875fdd006371e5a", "scanner": "scanner-primary", "fingerprint": "447df044709479c2", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "experiments/dreamcoder_naming_flip_step.py:22"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c6ef8cbfb502cbd0", "level": "note", "message": {"text": "Possibly dead Python function: nms"}, "properties": {"repobilityId": "4875fdd006371e5a", "scanner": "scanner-primary", "fingerprint": "c6ef8cbfb502cbd0", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "experiments/dreamcoder_step_by_step.py:23"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6e4e84458cebe23a", "level": "note", "message": {"text": "Possibly dead Python function: plot_batch_comparison"}, "properties": {"repobilityId": "de1eee13a69a9a18", "scanner": "scanner-primary", "fingerprint": "6e4e84458cebe23a", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "experiments/analyze_deobfuscation.py:157"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ff59c07a34d066ea", "level": "note", "message": {"text": "Possibly dead Python function: nms"}, "properties": {"repobilityId": "4875fdd006371e5a", "scanner": "scanner-primary", "fingerprint": "ff59c07a34d066ea", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "experiments/benchmark_dreamon.py:70"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-bfb6442b9604c65c", "level": "note", "message": {"text": "Possibly dead Python function: crop_window"}, "properties": {"repobilityId": "6e2e1554d83179b8", "scanner": "scanner-primary", "fingerprint": "bfb6442b9604c65c", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "experiments/benchmark_dreamon.py:114"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b4f420da914d2d71", "level": "note", "message": {"text": "Possibly dead Python function: extract_identifier_from_tokens"}, "properties": {"repobilityId": "584ce4ecc1387316", "scanner": "scanner-primary", "fingerprint": "b4f420da914d2d71", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "experiments/benchmark_dreamon.py:273"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6ddbb6209720c444", "level": "note", "message": {"text": "Possibly dead Python function: nms"}, "properties": {"repobilityId": "4875fdd006371e5a", "scanner": "scanner-primary", "fingerprint": "6ddbb6209720c444", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "experiments/naming_flip_step.py:18"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e624855c32db53b3", "level": "note", "message": {"text": "Possibly dead Python function: nms"}, "properties": {"repobilityId": "4875fdd006371e5a", "scanner": "scanner-primary", "fingerprint": "e624855c32db53b3", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "experiments/dreamcoder_refactor_showcase.py:21"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1fe2d623cb93b716", "level": "note", "message": {"text": "Possibly dead Python function: nms"}, "properties": {"repobilityId": "4875fdd006371e5a", "scanner": "scanner-primary", "fingerprint": "1fe2d623cb93b716", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "experiments/compare_math_vs_smell_noise.py:83"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3269795e301266a5", "level": "note", "message": {"text": "Possibly dead Python function: nms"}, "properties": {"repobilityId": "4875fdd006371e5a", "scanner": "scanner-primary", "fingerprint": "3269795e301266a5", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "experiments/run_refine_id_dreamcoder_no_prompt.py:20"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9e59233bbc58b185", "level": "note", "message": {"text": "Possibly dead Python function: nms"}, "properties": {"repobilityId": "4875fdd006371e5a", "scanner": "scanner-primary", "fingerprint": "9e59233bbc58b185", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "experiments/exp_diffusion_steps_benchmark.py:110"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7e428763d6d60373", "level": "note", "message": {"text": "Possibly dead Python function: nms"}, "properties": {"repobilityId": "4875fdd006371e5a", "scanner": "scanner-primary", "fingerprint": "7e428763d6d60373", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "experiments/run_diffucoder_noise_exp.py:20"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-be503411675565c3", "level": "note", "message": {"text": "Possibly dead Python function: nms"}, "properties": {"repobilityId": "4875fdd006371e5a", "scanner": "scanner-primary", "fingerprint": "be503411675565c3", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "experiments/experiment_b_unmasking_order.py:27"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-fc0902ac7d63b1fc", "level": "note", "message": {"text": "Possibly dead Python function: nms"}, "properties": {"repobilityId": "4875fdd006371e5a", "scanner": "scanner-primary", "fingerprint": "fc0902ac7d63b1fc", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "experiments/experiment_deobfuscation.py:37"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a81234604191a79f", "level": "note", "message": {"text": "Possibly dead Python function: run_batch_deobfuscation_experiment"}, "properties": {"repobilityId": "988f1d48a202759c", "scanner": "scanner-primary", "fingerprint": "a81234604191a79f", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "experiments/experiment_deobfuscation.py:328"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4d5ee051185a79b1", "level": "note", "message": {"text": "Possibly dead Python function: nms"}, "properties": {"repobilityId": "4875fdd006371e5a", "scanner": "scanner-primary", "fingerprint": "4d5ee051185a79b1", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "experiments/run_refine_id_diffucoder_no_prompt.py:20"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-74380db8d52811da", "level": "note", "message": {"text": "Possibly dead Python function: nms"}, "properties": {"repobilityId": "4875fdd006371e5a", "scanner": "scanner-primary", "fingerprint": "74380db8d52811da", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "experiments/benchmark_dreamon_java_identifiers.py:123"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-79cd452feec62663", "level": "note", "message": {"text": "Possibly dead Python function: nms"}, "properties": {"repobilityId": "4875fdd006371e5a", "scanner": "scanner-primary", "fingerprint": "79cd452feec62663", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "experiments/experiment_constrained_v2.py:22"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-cd3afc001c8bf416", "level": "note", "message": {"text": "Possibly dead Python function: nms"}, "properties": {"repobilityId": "4875fdd006371e5a", "scanner": "scanner-primary", "fingerprint": "cd3afc001c8bf416", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "experiments/experiment_c_token_ranking.py:28"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-83bbc07c178b31de", "level": "note", "message": {"text": "Possibly dead Python function: nms"}, "properties": {"repobilityId": "4875fdd006371e5a", "scanner": "scanner-primary", "fingerprint": "83bbc07c178b31de", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "experiments/experiment_deobfuscation_advanced.py:36"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5608d6b237d25e81", "level": "note", "message": {"text": "File has no detected symbols: analyze_results_temp.py"}, "properties": {"repobilityId": "3887413510a1b93e", "scanner": "scanner-primary", "fingerprint": "5608d6b237d25e81", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code-candidate"]}}, {"ruleId": "scanner-96a844e1311a4e93", "level": "warning", "message": {"text": "Privileged port 8 in use"}, "properties": {"repobilityId": "8e03f5632e703751", "scanner": "scanner-primary", "fingerprint": "96a844e1311a4e93", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "experiments/run_llm_judge_dreamon_java.sh"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7baa716261c84c98", "level": "warning", "message": {"text": "Privileged port 6 in use"}, "properties": {"repobilityId": "888a3c205ea7334c", "scanner": "scanner-primary", "fingerprint": "7baa716261c84c98", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "experiments/run_llm_judge_dreamon.sh"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a910c00d12b63638", "level": "warning", "message": {"text": "Privileged port 16 in use"}, "properties": {"repobilityId": "d31009168c502ace", "scanner": "scanner-primary", "fingerprint": "a910c00d12b63638", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "server/gen_model_jobs.sh"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ce2e5a8b78b3019d", "level": "warning", "message": {"text": "Privileged port 18 in use"}, "properties": {"repobilityId": "2d7b5e7d9c158e43", "scanner": "scanner-primary", "fingerprint": "ce2e5a8b78b3019d", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "server/gen_model_jobs.sh"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-54c5f48ec36b1f54", "level": "warning", "message": {"text": "Privileged port 12 in use"}, "properties": {"repobilityId": "65e7eefa33f2def4", "scanner": "scanner-primary", "fingerprint": "54c5f48ec36b1f54", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "server/gen_model_jobs.sh"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5972a821837b2240", "level": "warning", "message": {"text": "Privileged port 30 in use"}, "properties": {"repobilityId": "54f172e7d16fc662", "scanner": "scanner-primary", "fingerprint": "5972a821837b2240", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "server/gen_model_jobs.sh"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-43c670643b7d8c4a", "level": "warning", "message": {"text": "Privileged port 4 in use"}, "properties": {"repobilityId": "1594bfeff919296e", "scanner": "scanner-primary", "fingerprint": "43c670643b7d8c4a", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "server/gen_model_jobs.sh"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a414847c42157839", "level": "warning", "message": {"text": "Privileged port 20 in use"}, "properties": {"repobilityId": "a59f3e53d617e0f8", "scanner": "scanner-primary", "fingerprint": "a414847c42157839", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "server/jobs/fill_lj.sh"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d8bda3d8fca7b3e8", "level": "note", "message": {"text": "Insecure pattern 'debug_true' in experiments/benchmark_dreamon.py:438"}, "properties": {"repobilityId": "929a3f9c52a6d036", "scanner": "scanner-primary", "fingerprint": "d8bda3d8fca7b3e8", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["owasp", "debug_true"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "experiments/benchmark_dreamon.py"}, "region": {"startLine": 438}}}]}, {"ruleId": "scanner-512ae11519d5d0bb", "level": "note", "message": {"text": "Insecure pattern 'debug_true' in experiments/benchmark_dreamon_java_identifiers.py:482"}, "properties": {"repobilityId": "9fb2daa01d7806c5", "scanner": "scanner-primary", "fingerprint": "512ae11519d5d0bb", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["owasp", "debug_true"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "experiments/benchmark_dreamon_java_identifiers.py"}, "region": {"startLine": 482}}}]}, {"ruleId": "scanner-ebebf5a8c9dc8283", "level": "note", "message": {"text": "Insecure pattern 'debug_true' in experiments/benchmark_dreamon_java_quickstart.py:202"}, "properties": {"repobilityId": "c8fafbc18d53676a", "scanner": "scanner-primary", "fingerprint": "ebebf5a8c9dc8283", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["owasp", "debug_true"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "experiments/benchmark_dreamon_java_quickstart.py"}, "region": {"startLine": 202}}}]}, {"ruleId": "scanner-daafee25a9b3a261", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/figures/defense_opening.html:669"}, "properties": {"repobilityId": "a3f74617a2aab59a", "scanner": "scanner-primary", "fingerprint": "daafee25a9b3a261", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/figures/defense_opening.html"}, "region": {"startLine": 669}}}]}, {"ruleId": "scanner-cc77f79c20a301c2", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/logo/index.html:248"}, "properties": {"repobilityId": "1d73c90416474b9e", "scanner": "scanner-primary", "fingerprint": "cc77f79c20a301c2", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/logo/index.html"}, "region": {"startLine": 248}}}]}, {"ruleId": "scanner-6372cebde0220094", "level": "warning", "message": {"text": "No auth library detected"}, "properties": {"repobilityId": "a5b6035a5bbf8054", "scanner": "scanner-primary", "fingerprint": "6372cebde0220094", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["coverage", "auth"]}}, {"ruleId": "scanner-6893a6c8b0861585", "level": "warning", "message": {"text": "Very low test-to-source ratio"}, "properties": {"repobilityId": "54a7de3f06314bf0", "scanner": "scanner-primary", "fingerprint": "6893a6c8b0861585", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["tests", "coverage"]}}, {"ruleId": "scanner-3ab5d313dda8e5f9", "level": "note", "message": {"text": "Debug logging residue appears in source files"}, "properties": {"repobilityId": "e48ac29826d7a106", "scanner": "scanner-primary", "fingerprint": "3ab5d313dda8e5f9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["debug", "cleanup", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-72b2a6250083a784", "level": "warning", "message": {"text": "Placeholder or mock-heavy implementation detected"}, "properties": {"repobilityId": "5234768474fdcaa7", "scanner": "scanner-primary", "fingerprint": "72b2a6250083a784", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "incomplete", "generated-repo-pattern"]}}, {"ruleId": "scanner-2d0c7b7ab8f8aacf", "level": "warning", "message": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "properties": {"repobilityId": "dfe530272fc39e8d", "scanner": "scanner-primary", "fingerprint": "2d0c7b7ab8f8aacf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "critical-flow", "generated-repo-pattern"]}}, {"ruleId": "scanner-749d4bc1bd66df5f", "level": "warning", "message": {"text": "Agent instructions exist but release-hardening basics are missing"}, "properties": {"repobilityId": "11692654fa4883fe", "scanner": "scanner-primary", "fingerprint": "749d4bc1bd66df5f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-ecb0d2c55ed6875d", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/settings.local.json"}, "properties": {"repobilityId": "d8bae33a6d517bf0", "scanner": "scanner-primary", "fingerprint": "ecb0d2c55ed6875d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/settings.local.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-756fdb08c87b94ae", "level": "none", "message": {"text": "Commented-code block (5 lines) in experiments/compare_math_vs_smell_noise.py:441"}, "properties": {"repobilityId": "ca7de9f428961af3", "scanner": "scanner-primary", "fingerprint": "756fdb08c87b94ae", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-4e7d38a02103a367", "level": "none", "message": {"text": "Commented-code block (13 lines) in experiments/benchmark_codet5p_16b.py:330"}, "properties": {"repobilityId": "ea1fb4ae97a400d2", "scanner": "scanner-primary", "fingerprint": "4e7d38a02103a367", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-76991ed625356a6b", "level": "none", "message": {"text": "Commented-code block (8 lines) in experiments/experiment_deobfuscation.py:490"}, "properties": {"repobilityId": "e3557d481dd63269", "scanner": "scanner-primary", "fingerprint": "76991ed625356a6b", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-c6081e8b46dbc17d", "level": "note", "message": {"text": "Legacy-named symbol `run_constrained_diffusion_v2` in experiments/experiment_constrained_v2.py:94"}, "properties": {"repobilityId": "90d9b61dc5df3a0b", "scanner": "scanner-primary", "fingerprint": "c6081e8b46dbc17d", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-ee9d74cd8c61326e", "level": "note", "message": {"text": "Legacy-named symbol `convert_old` in experiments/prepare_dreamon_for_judge.py:59"}, "properties": {"repobilityId": "21d3e87d1a6c8e58", "scanner": "scanner-primary", "fingerprint": "ee9d74cd8c61326e", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-e3d6858f21ab959b", "level": "none", "message": {"text": "Commented-code block (7 lines) in experiments/experiment_denoise_sbs.py:157"}, "properties": {"repobilityId": "4014520368876346", "scanner": "scanner-primary", "fingerprint": "e3d6858f21ab959b", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-8cb42041db4aaabc", "level": "none", "message": {"text": "Commented-code block (7 lines) in experiments/smell_as_noise_refactoring/run_experiment.py:150"}, "properties": {"repobilityId": "1ee067a5ab2f07a8", "scanner": "scanner-primary", "fingerprint": "8cb42041db4aaabc", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-26ec684b0da6566b", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 notebooks/colab_partial_masking.py:14"}, "properties": {"repobilityId": "a1d94107f95bfe14", "scanner": "scanner-primary", "fingerprint": "26ec684b0da6566b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-24fdf402317f0cc9", "level": "none", "message": {"text": "Commented-code block (11 lines) in analysis/plot_overconfidence.py:122"}, "properties": {"repobilityId": "d4b376dae9e39524", "scanner": "scanner-primary", "fingerprint": "24fdf402317f0cc9", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-8a4cf03e2a657c90", "level": "note", "message": {"text": "Legacy-named symbol `_publication_plot_v2` in analysis/visualize_experiment.py:114"}, "properties": {"repobilityId": "4162f1955bc0e26c", "scanner": "scanner-primary", "fingerprint": "8a4cf03e2a657c90", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-b4f90c588ff45766", "level": "none", "message": {"text": "Commented-code block (7 lines) in analysis/paper_figures.py:110"}, "properties": {"repobilityId": "b09ce0a955e4fa25", "scanner": "scanner-primary", "fingerprint": "b4f90c588ff45766", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-637d1e3e3774f342", "level": "none", "message": {"text": "Commented-code block (5 lines) in analysis/check_code_integrity.py:14"}, "properties": {"repobilityId": "7e62908620aa87c6", "scanner": "scanner-primary", "fingerprint": "637d1e3e3774f342", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-1feb31231e436773", "level": "note", "message": {"text": "Legacy-named symbol `dream_old` in analysis/dreamon_results/compute_strict_all_baselines.py:242"}, "properties": {"repobilityId": "e0aeb12aa5601165", "scanner": "scanner-primary", "fingerprint": "1feb31231e436773", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-1e85db5eee5dede8", "level": "note", "message": {"text": "Legacy-named symbol `compute_smell_score_v2` in detector/compare_detectors.py:580"}, "properties": {"repobilityId": "a91c7ebd1fc76bf9", "scanner": "scanner-primary", "fingerprint": "1e85db5eee5dede8", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-76a2f6818267a9a8", "level": "note", "message": {"text": "Near-duplicate function bodies in 8 places"}, "properties": {"repobilityId": "84f77c67d9429db4", "scanner": "scanner-primary", "fingerprint": "76a2f6818267a9a8", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-76a2f6818267a9a8", "level": "note", "message": {"text": "Near-duplicate function bodies in 8 places"}, "properties": {"repobilityId": "5650229cd0b05450", "scanner": "scanner-primary", "fingerprint": "76a2f6818267a9a8", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "46b9fb36b9af42a3", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-33a6b62e30ce7ab4", "level": "note", "message": {"text": "Near-duplicate function bodies in 6 places"}, "properties": {"repobilityId": "9c564aa38c375609", "scanner": "scanner-primary", "fingerprint": "33a6b62e30ce7ab4", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-be46ea126aa5d8dc", "level": "note", "message": {"text": "Near-duplicate function bodies in 3 places"}, "properties": {"repobilityId": "0af69e305b66f4bd", "scanner": "scanner-primary", "fingerprint": "be46ea126aa5d8dc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "6f2106eb297a5ed6", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-49c98f7cedd9c977", "level": "note", "message": {"text": "Near-duplicate function bodies in 4 places"}, "properties": {"repobilityId": "b52ff6caf6b4d33e", "scanner": "scanner-primary", "fingerprint": "49c98f7cedd9c977", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-02525d39071dd2c7", "level": "note", "message": {"text": "Near-duplicate function bodies in 5 places"}, "properties": {"repobilityId": "d37df18ff37fa9be", "scanner": "scanner-primary", "fingerprint": "02525d39071dd2c7", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "7ab57106b572f8cd", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "d31d51ad3fb20705", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-02525d39071dd2c7", "level": "note", "message": {"text": "Near-duplicate function bodies in 5 places"}, "properties": {"repobilityId": "9208675b49521a0c", "scanner": "scanner-primary", "fingerprint": "02525d39071dd2c7", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "bf4b09d349990061", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "4ee55057f8a4f328", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-be46ea126aa5d8dc", "level": "note", "message": {"text": "Near-duplicate function bodies in 3 places"}, "properties": {"repobilityId": "6983063662be8364", "scanner": "scanner-primary", "fingerprint": "be46ea126aa5d8dc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-49c98f7cedd9c977", "level": "note", "message": {"text": "Near-duplicate function bodies in 4 places"}, "properties": {"repobilityId": "0a99d72a183f67ec", "scanner": "scanner-primary", "fingerprint": "49c98f7cedd9c977", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-02525d39071dd2c7", "level": "note", "message": {"text": "Near-duplicate function bodies in 5 places"}, "properties": {"repobilityId": "15d29f5b1fe1eee3", "scanner": "scanner-primary", "fingerprint": "02525d39071dd2c7", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-be46ea126aa5d8dc", "level": "note", "message": {"text": "Near-duplicate function bodies in 3 places"}, "properties": {"repobilityId": "e5e88cc9e2277789", "scanner": "scanner-primary", "fingerprint": "be46ea126aa5d8dc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-be46ea126aa5d8dc", "level": "note", "message": {"text": "Near-duplicate function bodies in 3 places"}, "properties": {"repobilityId": "770d7bf68b83514c", "scanner": "scanner-primary", "fingerprint": "be46ea126aa5d8dc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-be46ea126aa5d8dc", "level": "note", "message": {"text": "Near-duplicate function bodies in 3 places"}, "properties": {"repobilityId": "2d1ce74fa5a4743f", "scanner": "scanner-primary", "fingerprint": "be46ea126aa5d8dc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "847afecf4cb74c0d", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}]}]}