{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "scanner-490ddb5ffbbf47e7", "name": "Stray `console.log` in TS/JS \u2014 playground/packages/app/src/index.ts:3", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 playground/packages/app/src/index.ts:3"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f397f66c85329568", "name": "Stray `console.log` in TS/JS \u2014 crates/vite_task_bin/tests/e2e_snapshots/fixtures/vite_task_smoke/main.js:1", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 crates/vite_task_bin/tests/e2e_snapshots/fixtures/vite_task_smoke/main.js:1"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1cf77500f32358ad", "name": "Stray `console.log` in TS/JS \u2014 crates/vite_task_bin/tests/e2e_snapshots/fixtures/vite_build_cache/src/main.js:3", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 crates/vite_task_bin/tests/e2e_snapshots/fixtures/vite_build_cache/src/main.js:3"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9710c8d059e53154", "name": "No frontend routes/components detected", "shortDescription": {"text": "No frontend routes/components detected"}, "fullDescription": {"text": "No React/Vue/Next routes were found. This is fine for backend-only repos."}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-8806b2444e2dd957", "name": "Insecure pattern 'node_child_process' in crates/vite_shell/src/lib.rs:291", "shortDescription": {"text": "Insecure pattern 'node_child_process' in crates/vite_shell/src/lib.rs:291"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6372cebde0220094", "name": "No auth library detected", "shortDescription": {"text": "No auth library detected"}, "fullDescription": {"text": "The scanner did not find any standard auth library (JWT, OAuth, NextAuth, Auth0, etc.). The repo has auth/admin/session surface indicators, so auth may live in custom code, in a separate service, or be missing."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-66d3c34d90d021d2", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cb639d9a10a47b23", "name": "package.json defines install-time lifecycle scripts", "shortDescription": {"text": "package.json defines install-time lifecycle scripts"}, "fullDescription": {"text": "preinstall/install/postinstall/prepare scripts execute during dependency installation. Review them carefully for network calls, obfuscation, shell execution, or credential access."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-54d318687e5c3016", "name": "Very large file: crates/vite_workspace/src/lib.rs (1338 lines)", "shortDescription": {"text": "Very large file: crates/vite_workspace/src/lib.rs (1338 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fcbdf79abce563f1", "name": "Very large file: crates/vite_workspace/src/package_filter.rs (1460 lines)", "shortDescription": {"text": "Very large file: crates/vite_workspace/src/package_filter.rs (1460 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e91c8be3543b5479", "name": "Node manifest has dependencies but no lockfile: playground/packages/app/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: playground/packages/app/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-33c0fff03664e99a", "name": "Node manifest has dependencies but no lockfile: playground/packages/lib/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: playground/packages/lib/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4d0272e8990a5de4", "name": "Node manifest has dependencies but no lockfile: crates/vite_task_bin/tests/e2e_snapshots/fixtures/exit_codes/packages/pk", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_bin/tests/e2e_snapshots/fixtures/exit_codes/packages/pkg-b/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ae4ad0a464db4f1f", "name": "Node manifest has dependencies but no lockfile: crates/vite_task_bin/tests/e2e_snapshots/fixtures/input_read_write_not_c", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_bin/tests/e2e_snapshots/fixtures/input_read_write_not_cached/packages/rw-pkg/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-49fb4f519d195e5c", "name": "Node manifest has dependencies but no lockfile: crates/vite_task_bin/tests/e2e_snapshots/fixtures/input_read_write_not_c", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_bin/tests/e2e_snapshots/fixtures/input_read_write_not_cached/packages/touch-pkg/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7f66890fc1281fe3", "name": "Node manifest has dependencies but no lockfile: crates/vite_task_bin/tests/e2e_snapshots/fixtures/parallel_execution/pac", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_bin/tests/e2e_snapshots/fixtures/parallel_execution/packages/b/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-12dfac4992619fa7", "name": "Node manifest has dependencies but no lockfile: crates/vite_task_bin/tests/e2e_snapshots/fixtures/task_select/packages/a", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_bin/tests/e2e_snapshots/fixtures/task_select/packages/app/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-cc6582c930665276", "name": "Node manifest has dependencies but no lockfile: crates/vite_task_bin/tests/e2e_snapshots/fixtures/labeled_stdio/package.", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_bin/tests/e2e_snapshots/fixtures/labeled_stdio/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7115c0105334a556", "name": "Node manifest has dependencies but no lockfile: crates/vite_task_bin/tests/e2e_snapshots/fixtures/ctrl_c/packages/b/pack", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_bin/tests/e2e_snapshots/fixtures/ctrl_c/packages/b/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e275252eaaeb41d0", "name": "Node manifest has dependencies but no lockfile: crates/vite_task_bin/tests/e2e_snapshots/fixtures/workspace_root_self_re", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_bin/tests/e2e_snapshots/fixtures/workspace_root_self_reference/packages/b/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-eb9a4554729d7a06", "name": "Node manifest has dependencies but no lockfile: crates/vite_task_bin/tests/e2e_snapshots/fixtures/summary_output/package", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_bin/tests/e2e_snapshots/fixtures/summary_output/packages/b/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0b5560e3f2f2cea9", "name": "Node manifest has dependencies but no lockfile: crates/vite_task_bin/tests/e2e_snapshots/fixtures/grouped_stdio/package.", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_bin/tests/e2e_snapshots/fixtures/grouped_stdio/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-be84d4146a6e4aca", "name": "Node manifest has dependencies but no lockfile: crates/vite_task_bin/tests/e2e_snapshots/fixtures/topological_execution_", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_bin/tests/e2e_snapshots/fixtures/topological_execution_order/packages/app/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2e7d4a1b61c3c085", "name": "Node manifest has dependencies but no lockfile: crates/vite_task_bin/tests/e2e_snapshots/fixtures/topological_execution_", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_bin/tests/e2e_snapshots/fixtures/topological_execution_order/packages/lib/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c4f02d1e50dd6d70", "name": "Node manifest has dependencies but no lockfile: crates/vite_task_bin/tests/e2e_snapshots/fixtures/filter_unmatched/packa", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_bin/tests/e2e_snapshots/fixtures/filter_unmatched/packages/app/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-27041381ffc1238b", "name": "Node manifest has dependencies but no lockfile: crates/vite_task_bin/tests/e2e_snapshots/fixtures/task_list/packages/app", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_bin/tests/e2e_snapshots/fixtures/task_list/packages/app/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-896d555caf5e6a0c", "name": "Node manifest has dependencies but no lockfile: crates/vite_task_bin/tests/e2e_snapshots/fixtures/interleaved_stdio/pack", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_bin/tests/e2e_snapshots/fixtures/interleaved_stdio/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1c01c8ade7f897f7", "name": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/transitive_skip_inte", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/transitive_skip_intermediate/packages/middle/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-516136d79b61558d", "name": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/transitive_skip_inte", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/transitive_skip_intermediate/packages/top/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e3dac26349209596", "name": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/recursive_topologica", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/recursive_topological_workspace/apps/web/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-84f52815f0b02066", "name": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/recursive_topologica", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/recursive_topological_workspace/packages/utils/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-26bd1558b2bd6a20", "name": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/recursive_topologica", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/recursive_topological_workspace/packages/app/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8e8bcd640bfe6f53", "name": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/parallel_and_concurr", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/parallel_and_concurrency/packages/b/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-acbe7f4d3d590353", "name": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/parallel_and_concurr", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/parallel_and_concurrency/packages/a/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fa847feb6ae3ea0e", "name": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/package_self_depende", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/package_self_dependency/packages/self-dep/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2b1b8e96763daed7", "name": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/comprehensive_task_g", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/comprehensive_task_graph/packages/api/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-80f89b17f246cef7", "name": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/comprehensive_task_g", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/comprehensive_task_graph/packages/ui/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-51838cf2ac29f20c", "name": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/comprehensive_task_g", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/comprehensive_task_graph/packages/app/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-184a13b8e2849f47", "name": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/comprehensive_task_g", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/comprehensive_task_graph/packages/tools/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3c8be3c66338de97", "name": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/comprehensive_task_g", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/comprehensive_task_graph/packages/pkg#special/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-61f03e1122bf8a58", "name": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/depends_on_package_d", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/depends_on_package_dependencies/packages/nearest-order-app/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2fa96289e34b91bb", "name": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/depends_on_package_d", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/depends_on_package_dependencies/packages/nearest-order-skip/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2537c29ed8a6948a", "name": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/depends_on_package_d", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/depends_on_package_dependencies/packages/nearest-through-foo/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-94091635e879d279", "name": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/depends_on_package_d", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/depends_on_package_dependencies/packages/nearest-stop-app/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f2277d48c42552c0", "name": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/depends_on_package_d", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/depends_on_package_dependencies/packages/dev-a/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-640f22991ec276ca", "name": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/depends_on_package_d", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/depends_on_package_dependencies/packages/app/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ed010c87bff7c7b1", "name": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/depends_on_package_d", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/depends_on_package_dependencies/packages/prod-a/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f8511c650a9f48fd", "name": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/depends_on_package_d", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/depends_on_package_dependencies/packages/nearest-order-direct/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-da49672d483e394e", "name": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/depends_on_package_d", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/depends_on_package_dependencies/packages/nearest-through-app/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a9ad9b55a4731c05", "name": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/depends_on_package_d", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/depends_on_package_dependencies/packages/nearest-stop-foo/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d221fda61ba882b4", "name": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/workspace_root_self_", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/workspace_root_self_reference/packages/b/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8c7e112ebd2da7ee", "name": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/dependency_both_topo", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/dependency_both_topo_and_explicit/packages/a/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6b1d5c8091c5c1b4", "name": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/filter_workspace/pac", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/filter_workspace/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7fccb249fe06a1f5", "name": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/filter_workspace/pac", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/filter_workspace/packages/cli/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1efcc4a96d7f6403", "name": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/filter_workspace/pac", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/filter_workspace/packages/app/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-57bbb09225a22c7a", "name": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/filter_workspace/pac", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/filter_workspace/packages/lib/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-afdc66bdf55d7547", "name": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/explicit_deps_worksp", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/explicit_deps_workspace/packages/utils/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-47bfdcf37da9a5bd", "name": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/explicit_deps_worksp", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/explicit_deps_workspace/packages/app/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9114bf75f5de727f", "name": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/empty_package_test/p", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/empty_package_test/packages/another-empty/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b45b624f1b2e1cec", "name": "Node manifest has dependencies but no lockfile: packages/tools/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: packages/tools/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3ab5d313dda8e5f9", "name": "Debug logging residue appears in source files", "shortDescription": {"text": "Debug logging residue appears in source files"}, "fullDescription": {"text": "Found 16 console/debugger/print-style debug statements in non-test source. This is a common fast-generation residue before production cleanup."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2d0c7b7ab8f8aacf", "name": "Critical user flow still appears backed by mock or placeholder data", "shortDescription": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "fullDescription": {"text": "A payment/auth/admin/order/billing-style flow contains mock, fake, TODO, dummy, or placeholder markers in runtime source. In the Fable corpus this is a high-leverage completeness smell: the app can look finished while the money, identity, or tenant flow is still scaffolded."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-749d4bc1bd66df5f", "name": "Agent instructions exist but release-hardening basics are missing", "shortDescription": {"text": "Agent instructions exist but release-hardening basics are missing"}, "fullDescription": {"text": "AI-coder instruction files were found, but the repo is missing lockfile. Treat this as a contract gap: the agent is guided, but the generated output is not yet guarded by the controls that make it repeatable."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ea8f3013f588db25", "name": "Shallow git history limits provenance confidence", "shortDescription": {"text": "Shallow git history limits provenance confidence"}, "fullDescription": {"text": "The repository is a shallow clone. Origin/evolution analysis cannot distinguish fresh generation, imported legacy code, or long-lived human code with high confidence."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8424db9c75e04ba4", "name": "Very short observed git history", "shortDescription": {"text": "Very short observed git history"}, "fullDescription": {"text": "The repo has multiple source files but two or fewer visible commits. This is not a failure by itself, but it lowers confidence in evolution-based diagnosis."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-3097d846d2618bf3", "name": "Commented-code block (5 lines) in crates/vite_task_bin/tests/e2e_snapshots/fixtures/node_compile_cache_outside_workspace", "shortDescription": {"text": "Commented-code block (5 lines) in crates/vite_task_bin/tests/e2e_snapshots/fixtures/node_compile_cache_outside_workspace/run.mjs:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-5121b327a97a9f82", "name": "Commented-code block (6 lines) in crates/vite_task_bin/tests/e2e_snapshots/fixtures/vite_dev_disable_cache/dev.mjs:1", "shortDescription": {"text": "Commented-code block (6 lines) in crates/vite_task_bin/tests/e2e_snapshots/fixtures/vite_dev_disable_cache/dev.mjs:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-3f5f41962b129d97", "name": "Commented-code block (6 lines) in packages/vite-task-client/src/index.js:29", "shortDescription": {"text": "Commented-code block (6 lines) in packages/vite-task-client/src/index.js:29"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/22433"}, "properties": {"repository": "voidzero-dev/vite-task", "repoUrl": "https://github.com/voidzero-dev/vite-task", "branch": "main"}, "results": [{"ruleId": "scanner-490ddb5ffbbf47e7", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 playground/packages/app/src/index.ts:3"}, "properties": {"repobilityId": "203a2b304427d332", "scanner": "scanner-primary", "fingerprint": "490ddb5ffbbf47e7", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-f397f66c85329568", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 crates/vite_task_bin/tests/e2e_snapshots/fixtures/vite_task_smoke/main.js:1"}, "properties": {"repobilityId": "1cbb4416f2b3e48e", "scanner": "scanner-primary", "fingerprint": "f397f66c85329568", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-1cf77500f32358ad", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 crates/vite_task_bin/tests/e2e_snapshots/fixtures/vite_build_cache/src/main.js:3"}, "properties": {"repobilityId": "0e83428396354273", "scanner": "scanner-primary", "fingerprint": "1cf77500f32358ad", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-9710c8d059e53154", "level": "none", "message": {"text": "No frontend routes/components detected"}, "properties": {"repobilityId": "44ca61485762e494", "scanner": "scanner-primary", "fingerprint": "9710c8d059e53154", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["coverage"]}}, {"ruleId": "scanner-8806b2444e2dd957", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in crates/vite_shell/src/lib.rs:291"}, "properties": {"repobilityId": "1031234c69d7d43e", "scanner": "scanner-primary", "fingerprint": "8806b2444e2dd957", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "crates/vite_shell/src/lib.rs"}, "region": {"startLine": 291}}}]}, {"ruleId": "scanner-6372cebde0220094", "level": "warning", "message": {"text": "No auth library detected"}, "properties": {"repobilityId": "a5b6035a5bbf8054", "scanner": "scanner-primary", "fingerprint": "6372cebde0220094", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["coverage", "auth"]}}, {"ruleId": "scanner-66d3c34d90d021d2", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "c4d7b11880da1dc6", "scanner": "scanner-primary", "fingerprint": "66d3c34d90d021d2", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release-vite-task-client.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-cb639d9a10a47b23", "level": "note", "message": {"text": "package.json defines install-time lifecycle scripts"}, "properties": {"repobilityId": "b86179956da3a4a8", "scanner": "scanner-primary", "fingerprint": "cb639d9a10a47b23", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "npm", "install-scripts"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-54d318687e5c3016", "level": "note", "message": {"text": "Very large file: crates/vite_workspace/src/lib.rs (1338 lines)"}, "properties": {"repobilityId": "6a81e6e0c7f9c726", "scanner": "scanner-primary", "fingerprint": "54d318687e5c3016", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-fcbdf79abce563f1", "level": "note", "message": {"text": "Very large file: crates/vite_workspace/src/package_filter.rs (1460 lines)"}, "properties": {"repobilityId": "4ab3e2e96f256cee", "scanner": "scanner-primary", "fingerprint": "fcbdf79abce563f1", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-e91c8be3543b5479", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: playground/packages/app/package.json"}, "properties": {"repobilityId": "a648b4338b329f95", "scanner": "scanner-primary", "fingerprint": "e91c8be3543b5479", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "playground/packages/app/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-33c0fff03664e99a", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: playground/packages/lib/package.json"}, "properties": {"repobilityId": "7d8901575e7ebfc5", "scanner": "scanner-primary", "fingerprint": "33c0fff03664e99a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "playground/packages/lib/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4d0272e8990a5de4", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_bin/tests/e2e_snapshots/fixtures/exit_codes/packages/pkg-b/package.json"}, "properties": {"repobilityId": "33aee85a3378b71c", "scanner": "scanner-primary", "fingerprint": "4d0272e8990a5de4", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "crates/vite_task_bin/tests/e2e_snapshots/fixtures/exit_codes/packages/pkg-b/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ae4ad0a464db4f1f", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_bin/tests/e2e_snapshots/fixtures/input_read_write_not_cached/packages/rw-pkg/package.json"}, "properties": {"repobilityId": "c906d793ebdf17eb", "scanner": "scanner-primary", "fingerprint": "ae4ad0a464db4f1f", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "crates/vite_task_bin/tests/e2e_snapshots/fixtures/input_read_write_not_cached/packages/rw-pkg/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-49fb4f519d195e5c", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_bin/tests/e2e_snapshots/fixtures/input_read_write_not_cached/packages/touch-pkg/package.json"}, "properties": {"repobilityId": "dc7a4c62846dae0a", "scanner": "scanner-primary", "fingerprint": "49fb4f519d195e5c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "crates/vite_task_bin/tests/e2e_snapshots/fixtures/input_read_write_not_cached/packages/touch-pkg/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7f66890fc1281fe3", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_bin/tests/e2e_snapshots/fixtures/parallel_execution/packages/b/package.json"}, "properties": {"repobilityId": "ed02813b5e699c1d", "scanner": "scanner-primary", "fingerprint": "7f66890fc1281fe3", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "crates/vite_task_bin/tests/e2e_snapshots/fixtures/parallel_execution/packages/b/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-12dfac4992619fa7", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_bin/tests/e2e_snapshots/fixtures/task_select/packages/app/package.json"}, "properties": {"repobilityId": "1124e01be38705ae", "scanner": "scanner-primary", "fingerprint": "12dfac4992619fa7", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "crates/vite_task_bin/tests/e2e_snapshots/fixtures/task_select/packages/app/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-cc6582c930665276", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_bin/tests/e2e_snapshots/fixtures/labeled_stdio/package.json"}, "properties": {"repobilityId": "8f97144d7ab42d5e", "scanner": "scanner-primary", "fingerprint": "cc6582c930665276", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "crates/vite_task_bin/tests/e2e_snapshots/fixtures/labeled_stdio/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7115c0105334a556", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_bin/tests/e2e_snapshots/fixtures/ctrl_c/packages/b/package.json"}, "properties": {"repobilityId": "774c5207c93ac5aa", "scanner": "scanner-primary", "fingerprint": "7115c0105334a556", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "crates/vite_task_bin/tests/e2e_snapshots/fixtures/ctrl_c/packages/b/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e275252eaaeb41d0", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_bin/tests/e2e_snapshots/fixtures/workspace_root_self_reference/packages/b/package.json"}, "properties": {"repobilityId": "f1b6239cf0d4dd79", "scanner": "scanner-primary", "fingerprint": "e275252eaaeb41d0", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "crates/vite_task_bin/tests/e2e_snapshots/fixtures/workspace_root_self_reference/packages/b/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-eb9a4554729d7a06", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_bin/tests/e2e_snapshots/fixtures/summary_output/packages/b/package.json"}, "properties": {"repobilityId": "d32e409dd7da262f", "scanner": "scanner-primary", "fingerprint": "eb9a4554729d7a06", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "crates/vite_task_bin/tests/e2e_snapshots/fixtures/summary_output/packages/b/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0b5560e3f2f2cea9", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_bin/tests/e2e_snapshots/fixtures/grouped_stdio/package.json"}, "properties": {"repobilityId": "a2ac9eb36e722a9a", "scanner": "scanner-primary", "fingerprint": "0b5560e3f2f2cea9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "crates/vite_task_bin/tests/e2e_snapshots/fixtures/grouped_stdio/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-be84d4146a6e4aca", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_bin/tests/e2e_snapshots/fixtures/topological_execution_order/packages/app/package.json"}, "properties": {"repobilityId": "092a915acbfb0293", "scanner": "scanner-primary", "fingerprint": "be84d4146a6e4aca", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "crates/vite_task_bin/tests/e2e_snapshots/fixtures/topological_execution_order/packages/app/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2e7d4a1b61c3c085", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_bin/tests/e2e_snapshots/fixtures/topological_execution_order/packages/lib/package.json"}, "properties": {"repobilityId": "2a91421299d7bce2", "scanner": "scanner-primary", "fingerprint": "2e7d4a1b61c3c085", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "crates/vite_task_bin/tests/e2e_snapshots/fixtures/topological_execution_order/packages/lib/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c4f02d1e50dd6d70", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_bin/tests/e2e_snapshots/fixtures/filter_unmatched/packages/app/package.json"}, "properties": {"repobilityId": "3f15053f3007389d", "scanner": "scanner-primary", "fingerprint": "c4f02d1e50dd6d70", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "crates/vite_task_bin/tests/e2e_snapshots/fixtures/filter_unmatched/packages/app/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-27041381ffc1238b", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_bin/tests/e2e_snapshots/fixtures/task_list/packages/app/package.json"}, "properties": {"repobilityId": "3f459a259fece38a", "scanner": "scanner-primary", "fingerprint": "27041381ffc1238b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "crates/vite_task_bin/tests/e2e_snapshots/fixtures/task_list/packages/app/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-896d555caf5e6a0c", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_bin/tests/e2e_snapshots/fixtures/interleaved_stdio/package.json"}, "properties": {"repobilityId": "43f74cae233b90a9", "scanner": "scanner-primary", "fingerprint": "896d555caf5e6a0c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "crates/vite_task_bin/tests/e2e_snapshots/fixtures/interleaved_stdio/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1c01c8ade7f897f7", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/transitive_skip_intermediate/packages/middle/package.json"}, "properties": {"repobilityId": "584643d24071d079", "scanner": "scanner-primary", "fingerprint": "1c01c8ade7f897f7", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "crates/vite_task_plan/tests/plan_snapshots/fixtures/transitive_skip_intermediate/packages/middle/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-516136d79b61558d", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/transitive_skip_intermediate/packages/top/package.json"}, "properties": {"repobilityId": "adc5f808690d61db", "scanner": "scanner-primary", "fingerprint": "516136d79b61558d", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "crates/vite_task_plan/tests/plan_snapshots/fixtures/transitive_skip_intermediate/packages/top/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e3dac26349209596", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/recursive_topological_workspace/apps/web/package.json"}, "properties": {"repobilityId": "5c8bcd9da4704975", "scanner": "scanner-primary", "fingerprint": "e3dac26349209596", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "crates/vite_task_plan/tests/plan_snapshots/fixtures/recursive_topological_workspace/apps/web/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-84f52815f0b02066", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/recursive_topological_workspace/packages/utils/package.json"}, "properties": {"repobilityId": "d96c4fe22c31fd1a", "scanner": "scanner-primary", "fingerprint": "84f52815f0b02066", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "crates/vite_task_plan/tests/plan_snapshots/fixtures/recursive_topological_workspace/packages/utils/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-26bd1558b2bd6a20", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/recursive_topological_workspace/packages/app/package.json"}, "properties": {"repobilityId": "ee27b98526dc0c80", "scanner": "scanner-primary", "fingerprint": "26bd1558b2bd6a20", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "crates/vite_task_plan/tests/plan_snapshots/fixtures/recursive_topological_workspace/packages/app/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8e8bcd640bfe6f53", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/parallel_and_concurrency/packages/b/package.json"}, "properties": {"repobilityId": "2ffa595ec03bb148", "scanner": "scanner-primary", "fingerprint": "8e8bcd640bfe6f53", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "crates/vite_task_plan/tests/plan_snapshots/fixtures/parallel_and_concurrency/packages/b/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-acbe7f4d3d590353", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/parallel_and_concurrency/packages/a/package.json"}, "properties": {"repobilityId": "bdb5ccd5bdebd90f", "scanner": "scanner-primary", "fingerprint": "acbe7f4d3d590353", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "crates/vite_task_plan/tests/plan_snapshots/fixtures/parallel_and_concurrency/packages/a/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-fa847feb6ae3ea0e", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/package_self_dependency/packages/self-dep/package.json"}, "properties": {"repobilityId": "52675068c9a24437", "scanner": "scanner-primary", "fingerprint": "fa847feb6ae3ea0e", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "crates/vite_task_plan/tests/plan_snapshots/fixtures/package_self_dependency/packages/self-dep/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2b1b8e96763daed7", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/comprehensive_task_graph/packages/api/package.json"}, "properties": {"repobilityId": "230fcc83ddcdae92", "scanner": "scanner-primary", "fingerprint": "2b1b8e96763daed7", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "crates/vite_task_plan/tests/plan_snapshots/fixtures/comprehensive_task_graph/packages/api/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-80f89b17f246cef7", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/comprehensive_task_graph/packages/ui/package.json"}, "properties": {"repobilityId": "42eac588b6f81207", "scanner": "scanner-primary", "fingerprint": "80f89b17f246cef7", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "crates/vite_task_plan/tests/plan_snapshots/fixtures/comprehensive_task_graph/packages/ui/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-51838cf2ac29f20c", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/comprehensive_task_graph/packages/app/package.json"}, "properties": {"repobilityId": "8839b5aabe68d5f8", "scanner": "scanner-primary", "fingerprint": "51838cf2ac29f20c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "crates/vite_task_plan/tests/plan_snapshots/fixtures/comprehensive_task_graph/packages/app/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-184a13b8e2849f47", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/comprehensive_task_graph/packages/tools/package.json"}, "properties": {"repobilityId": "db425a2ba1f3d255", "scanner": "scanner-primary", "fingerprint": "184a13b8e2849f47", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "crates/vite_task_plan/tests/plan_snapshots/fixtures/comprehensive_task_graph/packages/tools/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3c8be3c66338de97", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/comprehensive_task_graph/packages/pkg#special/package.json"}, "properties": {"repobilityId": "b068ffbe8ed3d707", "scanner": "scanner-primary", "fingerprint": "3c8be3c66338de97", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "crates/vite_task_plan/tests/plan_snapshots/fixtures/comprehensive_task_graph/packages/pkg#special/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-61f03e1122bf8a58", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/depends_on_package_dependencies/packages/nearest-order-app/package.json"}, "properties": {"repobilityId": "e026aae0f7f3606e", "scanner": "scanner-primary", "fingerprint": "61f03e1122bf8a58", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "crates/vite_task_plan/tests/plan_snapshots/fixtures/depends_on_package_dependencies/packages/nearest-order-app/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2fa96289e34b91bb", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/depends_on_package_dependencies/packages/nearest-order-skip/package.json"}, "properties": {"repobilityId": "7f7fad058679b75b", "scanner": "scanner-primary", "fingerprint": "2fa96289e34b91bb", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "crates/vite_task_plan/tests/plan_snapshots/fixtures/depends_on_package_dependencies/packages/nearest-order-skip/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2537c29ed8a6948a", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/depends_on_package_dependencies/packages/nearest-through-foo/package.json"}, "properties": {"repobilityId": "64bababc8bd68ff4", "scanner": "scanner-primary", "fingerprint": "2537c29ed8a6948a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "crates/vite_task_plan/tests/plan_snapshots/fixtures/depends_on_package_dependencies/packages/nearest-through-foo/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-94091635e879d279", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/depends_on_package_dependencies/packages/nearest-stop-app/package.json"}, "properties": {"repobilityId": "6e406da75e2a1aac", "scanner": "scanner-primary", "fingerprint": "94091635e879d279", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "crates/vite_task_plan/tests/plan_snapshots/fixtures/depends_on_package_dependencies/packages/nearest-stop-app/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f2277d48c42552c0", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/depends_on_package_dependencies/packages/dev-a/package.json"}, "properties": {"repobilityId": "38bbf22ff4ff9196", "scanner": "scanner-primary", "fingerprint": "f2277d48c42552c0", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "crates/vite_task_plan/tests/plan_snapshots/fixtures/depends_on_package_dependencies/packages/dev-a/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-640f22991ec276ca", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/depends_on_package_dependencies/packages/app/package.json"}, "properties": {"repobilityId": "bc4707f1bcd094a8", "scanner": "scanner-primary", "fingerprint": "640f22991ec276ca", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "crates/vite_task_plan/tests/plan_snapshots/fixtures/depends_on_package_dependencies/packages/app/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ed010c87bff7c7b1", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/depends_on_package_dependencies/packages/prod-a/package.json"}, "properties": {"repobilityId": "af2f2830ca1942db", "scanner": "scanner-primary", "fingerprint": "ed010c87bff7c7b1", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "crates/vite_task_plan/tests/plan_snapshots/fixtures/depends_on_package_dependencies/packages/prod-a/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f8511c650a9f48fd", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/depends_on_package_dependencies/packages/nearest-order-direct/package.json"}, "properties": {"repobilityId": "4d3ccf3be4ac22bc", "scanner": "scanner-primary", "fingerprint": "f8511c650a9f48fd", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "crates/vite_task_plan/tests/plan_snapshots/fixtures/depends_on_package_dependencies/packages/nearest-order-direct/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-da49672d483e394e", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/depends_on_package_dependencies/packages/nearest-through-app/package.json"}, "properties": {"repobilityId": "24e04b83e6634151", "scanner": "scanner-primary", "fingerprint": "da49672d483e394e", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "crates/vite_task_plan/tests/plan_snapshots/fixtures/depends_on_package_dependencies/packages/nearest-through-app/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a9ad9b55a4731c05", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/depends_on_package_dependencies/packages/nearest-stop-foo/package.json"}, "properties": {"repobilityId": "e30bef5763a32fd0", "scanner": "scanner-primary", "fingerprint": "a9ad9b55a4731c05", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "crates/vite_task_plan/tests/plan_snapshots/fixtures/depends_on_package_dependencies/packages/nearest-stop-foo/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d221fda61ba882b4", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/workspace_root_self_reference/packages/b/package.json"}, "properties": {"repobilityId": "af593e05097e3ca7", "scanner": "scanner-primary", "fingerprint": "d221fda61ba882b4", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "crates/vite_task_plan/tests/plan_snapshots/fixtures/workspace_root_self_reference/packages/b/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8c7e112ebd2da7ee", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/dependency_both_topo_and_explicit/packages/a/package.json"}, "properties": {"repobilityId": "f311fcd8fb060f19", "scanner": "scanner-primary", "fingerprint": "8c7e112ebd2da7ee", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "crates/vite_task_plan/tests/plan_snapshots/fixtures/dependency_both_topo_and_explicit/packages/a/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6b1d5c8091c5c1b4", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/filter_workspace/package.json"}, "properties": {"repobilityId": "d430a6a7f1f85b54", "scanner": "scanner-primary", "fingerprint": "6b1d5c8091c5c1b4", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "crates/vite_task_plan/tests/plan_snapshots/fixtures/filter_workspace/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7fccb249fe06a1f5", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/filter_workspace/packages/cli/package.json"}, "properties": {"repobilityId": "0e78f0f1062f860a", "scanner": "scanner-primary", "fingerprint": "7fccb249fe06a1f5", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "crates/vite_task_plan/tests/plan_snapshots/fixtures/filter_workspace/packages/cli/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1efcc4a96d7f6403", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/filter_workspace/packages/app/package.json"}, "properties": {"repobilityId": "b8eb69695deffc07", "scanner": "scanner-primary", "fingerprint": "1efcc4a96d7f6403", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "crates/vite_task_plan/tests/plan_snapshots/fixtures/filter_workspace/packages/app/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-57bbb09225a22c7a", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/filter_workspace/packages/lib/package.json"}, "properties": {"repobilityId": "ab5c16220ae513a7", "scanner": "scanner-primary", "fingerprint": "57bbb09225a22c7a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "crates/vite_task_plan/tests/plan_snapshots/fixtures/filter_workspace/packages/lib/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-afdc66bdf55d7547", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/explicit_deps_workspace/packages/utils/package.json"}, "properties": {"repobilityId": "61b786bcaa213569", "scanner": "scanner-primary", "fingerprint": "afdc66bdf55d7547", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "crates/vite_task_plan/tests/plan_snapshots/fixtures/explicit_deps_workspace/packages/utils/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-47bfdcf37da9a5bd", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/explicit_deps_workspace/packages/app/package.json"}, "properties": {"repobilityId": "af64423631eceb34", "scanner": "scanner-primary", "fingerprint": "47bfdcf37da9a5bd", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "crates/vite_task_plan/tests/plan_snapshots/fixtures/explicit_deps_workspace/packages/app/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9114bf75f5de727f", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: crates/vite_task_plan/tests/plan_snapshots/fixtures/empty_package_test/packages/another-empty/package.json"}, "properties": {"repobilityId": "67492b9ff5341781", "scanner": "scanner-primary", "fingerprint": "9114bf75f5de727f", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "crates/vite_task_plan/tests/plan_snapshots/fixtures/empty_package_test/packages/another-empty/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b45b624f1b2e1cec", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: packages/tools/package.json"}, "properties": {"repobilityId": "767491b0490d1f83", "scanner": "scanner-primary", "fingerprint": "b45b624f1b2e1cec", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/tools/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3ab5d313dda8e5f9", "level": "note", "message": {"text": "Debug logging residue appears in source files"}, "properties": {"repobilityId": "a929e10b65937a6a", "scanner": "scanner-primary", "fingerprint": "3ab5d313dda8e5f9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["debug", "cleanup", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-2d0c7b7ab8f8aacf", "level": "warning", "message": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "properties": {"repobilityId": "9f4bb0b03ff5f3d0", "scanner": "scanner-primary", "fingerprint": "2d0c7b7ab8f8aacf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "critical-flow", "generated-repo-pattern"]}}, {"ruleId": "scanner-749d4bc1bd66df5f", "level": "warning", "message": {"text": "Agent instructions exist but release-hardening basics are missing"}, "properties": {"repobilityId": "77c1b31d70fb654b", "scanner": "scanner-primary", "fingerprint": "749d4bc1bd66df5f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-ea8f3013f588db25", "level": "note", "message": {"text": "Shallow git history limits provenance confidence"}, "properties": {"repobilityId": "f0bd1e27e24bfc03", "scanner": "scanner-primary", "fingerprint": "ea8f3013f588db25", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-8424db9c75e04ba4", "level": "none", "message": {"text": "Very short observed git history"}, "properties": {"repobilityId": "569528ae3f8bbeb1", "scanner": "scanner-primary", "fingerprint": "8424db9c75e04ba4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-3097d846d2618bf3", "level": "none", "message": {"text": "Commented-code block (5 lines) in crates/vite_task_bin/tests/e2e_snapshots/fixtures/node_compile_cache_outside_workspace/run.mjs:1"}, "properties": {"repobilityId": "b9992b4916d7eb0f", "scanner": "scanner-primary", "fingerprint": "3097d846d2618bf3", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-5121b327a97a9f82", "level": "none", "message": {"text": "Commented-code block (6 lines) in crates/vite_task_bin/tests/e2e_snapshots/fixtures/vite_dev_disable_cache/dev.mjs:1"}, "properties": {"repobilityId": "c19cd2fb60883b31", "scanner": "scanner-primary", "fingerprint": "5121b327a97a9f82", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-3f5f41962b129d97", "level": "none", "message": {"text": "Commented-code block (6 lines) in packages/vite-task-client/src/index.js:29"}, "properties": {"repobilityId": "b69c74e54a5bd486", "scanner": "scanner-primary", "fingerprint": "3f5f41962b129d97", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}]}]}