{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "scanner-ba926c2b6892fc44", "name": "Possibly dead Python function: profiler", "shortDescription": {"text": "Possibly dead Python function: profiler"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-65e78b8fe0a66de4", "name": "Stray `console.log` in TS/JS \u2014 server.js:17", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 server.js:17"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a469e20453f46bd4", "name": "Stray `console.log` in TS/JS \u2014 test.js:24", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 test.js:24"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3e83c4f7ebe5e68e", "name": "Stray `console.log` in TS/JS \u2014 scripts/perf-test.js:154", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/perf-test.js:154"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1a7216d1be74488a", "name": "Stray `console.log` in TS/JS \u2014 scripts/license-check.js:99", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/license-check.js:99"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-96791bad22638d1b", "name": "Stray `console.log` in TS/JS \u2014 scripts/copy-vendor.js:22", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/copy-vendor.js:22"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5ff5bf560466dcf8", "name": "Stray `console.log` in TS/JS \u2014 public/plugin-host.js:216", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 public/plugin-host.js:216"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6e1d84d4ab230459", "name": "Icon-only button without accessible name \u2014 public/app.js:4534", "shortDescription": {"text": "Icon-only button without accessible name \u2014 public/app.js:4534"}, "fullDescription": {"text": "A `<button>` whose only child is a single glyph or symbol needs `title=` or `aria-label=` so screen readers (and tooltips on hover) work.\n\nWhy: P3 in CHECKLIST.md \u2014 icon-only buttons skipped a title.\nRule id: fq.button.no-label"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-40edc96427136844", "name": "Stray `console.log` in TS/JS \u2014 public/app.js:32", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 public/app.js:32"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-683646ae6057d8c1", "name": "Insecure pattern 'eval_used' in AGENTS.md:283", "shortDescription": {"text": "Insecure pattern 'eval_used' in AGENTS.md:283"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-c1b8c434a6ab6832", "name": "Insecure pattern 'node_child_process' in electron/main.cjs:23", "shortDescription": {"text": "Insecure pattern 'node_child_process' in electron/main.cjs:23"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-18f62fb789f8f210", "name": "Insecure pattern 'cors_wildcard' in electron/main.cjs:1299", "shortDescription": {"text": "Insecure pattern 'cors_wildcard' in electron/main.cjs:1299"}, "fullDescription": {"text": "Found a known-risky pattern (cors_wildcard). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-898d72da47cd010f", "name": "Insecure pattern 'exec_used' in docs/inspections/2026-06-12-insp-004/confirmed.json:19", "shortDescription": {"text": "Insecure pattern 'exec_used' in docs/inspections/2026-06-12-insp-004/confirmed.json:19"}, "fullDescription": {"text": "Found a known-risky pattern (exec_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-3160efdf9dcafceb", "name": "Insecure pattern 'node_child_process' in scripts/_recall_oracle.mjs:11", "shortDescription": {"text": "Insecure pattern 'node_child_process' in scripts/_recall_oracle.mjs:11"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-bb8ba9aeab4226ef", "name": "Insecure pattern 'node_child_process' in scripts/_measure_iso.mjs:7", "shortDescription": {"text": "Insecure pattern 'node_child_process' in scripts/_measure_iso.mjs:7"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e318e63d9e7c75a2", "name": "Insecure pattern 'node_child_process' in scripts/_recall_stdlib.mjs:9", "shortDescription": {"text": "Insecure pattern 'node_child_process' in scripts/_recall_stdlib.mjs:9"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9e0f46391d884178", "name": "Insecure pattern 'node_child_process' in scripts/fetch-corpus.mjs:14", "shortDescription": {"text": "Insecure pattern 'node_child_process' in scripts/fetch-corpus.mjs:14"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-df74761661411d38", "name": "Insecure pattern 'node_child_process' in packages/core/lib/control-server.cjs:20", "shortDescription": {"text": "Insecure pattern 'node_child_process' in packages/core/lib/control-server.cjs:20"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b9e67e5d688d8ecb", "name": "Insecure pattern 'node_child_process' in packages/core/lib/symbol-graph.cjs:893", "shortDescription": {"text": "Insecure pattern 'node_child_process' in packages/core/lib/symbol-graph.cjs:893"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c290ae2f9f42d024", "name": "Insecure pattern 'node_child_process' in packages/core/lib/subengine-cs.cjs:12", "shortDescription": {"text": "Insecure pattern 'node_child_process' in packages/core/lib/subengine-cs.cjs:12"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-790f2f073d752277", "name": "Insecure pattern 'node_child_process' in packages/core/lib/subengine-java.cjs:13", "shortDescription": {"text": "Insecure pattern 'node_child_process' in packages/core/lib/subengine-java.cjs:13"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2f7f13838f8f361b", "name": "Insecure pattern 'node_child_process' in packages/core/lib/subengine-python.cjs:14", "shortDescription": {"text": "Insecure pattern 'node_child_process' in packages/core/lib/subengine-python.cjs:14"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-69c355bc07c9a299", "name": "Insecure pattern 'direct_innerhtml_assignment' in public/app.js:655", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in public/app.js:655"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6372cebde0220094", "name": "No auth library detected", "shortDescription": {"text": "No auth library detected"}, "fullDescription": {"text": "The scanner did not find any standard auth library (JWT, OAuth, NextAuth, Auth0, etc.). The repo has auth/admin/session surface indicators, so auth may live in custom code, in a separate service, or be missing."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-27924aa79fa4a517", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/setup-node@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-420770c48b8d4613", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6ba9bfab5f283202", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b769174c9fcf8ea8", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cb639d9a10a47b23", "name": "package.json defines install-time lifecycle scripts", "shortDescription": {"text": "package.json defines install-time lifecycle scripts"}, "fullDescription": {"text": "preinstall/install/postinstall/prepare scripts execute during dependency installation. Review them carefully for network calls, obfuscation, shell execution, or credential access."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3edb6bf13bb3fdc1", "name": "Very large file: electron/main.cjs (3002 lines)", "shortDescription": {"text": "Very large file: electron/main.cjs (3002 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4cac250894116de7", "name": "Very large file: packages/core/parser.js (2529 lines)", "shortDescription": {"text": "Very large file: packages/core/parser.js (2529 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-bb48c046abab0bfb", "name": "Very large file: packages/core/lib/symbol-parser-js.cjs (1087 lines)", "shortDescription": {"text": "Very large file: packages/core/lib/symbol-parser-js.cjs (1087 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f4dd6ef7d876ee79", "name": "Very large file: packages/core/lib/control-server.cjs (2346 lines)", "shortDescription": {"text": "Very large file: packages/core/lib/control-server.cjs (2346 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-40e58f5a859cba23", "name": "Very large file: packages/core/lib/symbol-parser-treesitter.cjs (1533 lines)", "shortDescription": {"text": "Very large file: packages/core/lib/symbol-parser-treesitter.cjs (1533 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4a7b99aca969d707", "name": "Very large file: packages/core/lib/symbol-graph.cjs (1354 lines)", "shortDescription": {"text": "Very large file: packages/core/lib/symbol-graph.cjs (1354 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-00c489dd68479c1c", "name": "Very large file: public/app.js (7410 lines)", "shortDescription": {"text": "Very large file: public/app.js (7410 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3ab5d313dda8e5f9", "name": "Debug logging residue appears in source files", "shortDescription": {"text": "Debug logging residue appears in source files"}, "fullDescription": {"text": "Found 106 console/debugger/print-style debug statements in non-test source. This is a common fast-generation residue before production cleanup."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-72b2a6250083a784", "name": "Placeholder or mock-heavy implementation detected", "shortDescription": {"text": "Placeholder or mock-heavy implementation detected"}, "fullDescription": {"text": "Found 14 placeholder/mock markers across 4 source files. This often means the repo looks complete while core flows still use generated scaffolding or fake data."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2d0c7b7ab8f8aacf", "name": "Critical user flow still appears backed by mock or placeholder data", "shortDescription": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "fullDescription": {"text": "A payment/auth/admin/order/billing-style flow contains mock, fake, TODO, dummy, or placeholder markers in runtime source. In the Fable corpus this is a high-leverage completeness smell: the app can look finished while the money, identity, or tenant flow is still scaffolded."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ea8f3013f588db25", "name": "Shallow git history limits provenance confidence", "shortDescription": {"text": "Shallow git history limits provenance confidence"}, "fullDescription": {"text": "The repository is a shallow clone. Origin/evolution analysis cannot distinguish fresh generation, imported legacy code, or long-lived human code with high confidence."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8424db9c75e04ba4", "name": "Very short observed git history", "shortDescription": {"text": "Very short observed git history"}, "fullDescription": {"text": "The repo has multiple source files but two or fewer visible commits. This is not a failure by itself, but it lowers confidence in evolution-based diagnosis."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-bea357a6497a2d5d", "name": "Agent authority lacks a verifier contract: CLAUDE.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: CLAUDE.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e725d2ab884fbd49", "name": "Multiple root agent instruction files without precedence", "shortDescription": {"text": "Multiple root agent instruction files without precedence"}, "fullDescription": {"text": "The repo has multiple top-level AI-coder instruction files. Without precedence rules, different agents may follow different policies."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-69e200ba2f2c4bfe", "name": "Commented-code block (16 lines) in server.js:59", "shortDescription": {"text": "Commented-code block (16 lines) in server.js:59"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-62294b501d298dc4", "name": "`fetch()` without try/.catch or AbortSignal \u2014 server.js:62", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 server.js:62"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-bcbcf07bce6c239b", "name": "Commented-code block (6 lines) in electron/plugin-loader.cjs:4", "shortDescription": {"text": "Commented-code block (6 lines) in electron/plugin-loader.cjs:4"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-a8501ffdd5153099", "name": "Legacy-named symbol `auditLegacy` in electron/main.cjs:217", "shortDescription": {"text": "Legacy-named symbol `auditLegacy` in electron/main.cjs:217"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-06dfb8759482327a", "name": "Commented-code block (6 lines) in electron/main.cjs:4", "shortDescription": {"text": "Commented-code block (6 lines) in electron/main.cjs:4"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-f1586fe30292ea90", "name": "`fetch()` without try/.catch or AbortSignal \u2014 electron/main.cjs:802", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 electron/main.cjs:802"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-38f6bbddbd4b587d", "name": "Legacy-named symbol `getLegacy` in electron/preload.cjs:199", "shortDescription": {"text": "Legacy-named symbol `getLegacy` in electron/preload.cjs:199"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-912a6388ba30b94e", "name": "Commented-code block (7 lines) in electron/preload.cjs:6", "shortDescription": {"text": "Commented-code block (7 lines) in electron/preload.cjs:6"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-cca8090de030ba7f", "name": "Commented-code block (6 lines) in tests/coverage-langs.test.js:13", "shortDescription": {"text": "Commented-code block (6 lines) in tests/coverage-langs.test.js:13"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-a681a91c33b100d6", "name": "Commented-code block (5 lines) in tests/cli-symbol.test.js:11", "shortDescription": {"text": "Commented-code block (5 lines) in tests/cli-symbol.test.js:11"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-61ca3c441523a6ef", "name": "Legacy-named symbol `auditLegacy` in tests/accuracy-edges.test.js:4", "shortDescription": {"text": "Legacy-named symbol `auditLegacy` in tests/accuracy-edges.test.js:4"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3419735fdfc7ca22", "name": "Commented-code block (6 lines) in tests/accuracy-edges.test.js:91", "shortDescription": {"text": "Commented-code block (6 lines) in tests/accuracy-edges.test.js:91"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-d78cf26e2b675287", "name": "Commented-code block (6 lines) in tests/viewer-client.test.js:1", "shortDescription": {"text": "Commented-code block (6 lines) in tests/viewer-client.test.js:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-19ff197c0b744bea", "name": "Commented-code block (5 lines) in tests/lang-completeness/js.test.js:4", "shortDescription": {"text": "Commented-code block (5 lines) in tests/lang-completeness/js.test.js:4"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-1c3394b14cb5ca4f", "name": "Commented-code block (5 lines) in tests/lang-completeness/go.test.js:4", "shortDescription": {"text": "Commented-code block (5 lines) in tests/lang-completeness/go.test.js:4"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-adc385109b74c1ba", "name": "Commented-code block (6 lines) in tests/lang-completeness/flow-honest.test.js:6", "shortDescription": {"text": "Commented-code block (6 lines) in tests/lang-completeness/flow-honest.test.js:6"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-ab021e8eb3ccfbcb", "name": "Commented-code block (8 lines) in tests/lang-completeness/cjs-require-callers.test.js:6", "shortDescription": {"text": "Commented-code block (8 lines) in tests/lang-completeness/cjs-require-callers.test.js:6"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-d01b9731a0bdf1ca", "name": "Commented-code block (8 lines) in tests/lang-completeness/install-layout.test.js:8", "shortDescription": {"text": "Commented-code block (8 lines) in tests/lang-completeness/install-layout.test.js:8"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-861176a726e18453", "name": "Commented-code block (6 lines) in tests/lang-completeness/realrepo.test.js:7", "shortDescription": {"text": "Commented-code block (6 lines) in tests/lang-completeness/realrepo.test.js:7"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-e46e3904ea075167", "name": "Commented-code block (7 lines) in tests/lang-completeness/pytracer.test.js:8", "shortDescription": {"text": "Commented-code block (7 lines) in tests/lang-completeness/pytracer.test.js:8"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-864e44c0acd1278c", "name": "Commented-code block (5 lines) in tests/lang-completeness/flow-multilang.test.js:6", "shortDescription": {"text": "Commented-code block (5 lines) in tests/lang-completeness/flow-multilang.test.js:6"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-a4e9cdff1e7b34d0", "name": "Commented-code block (8 lines) in tests/lang-completeness/misc-langs.test.js:28", "shortDescription": {"text": "Commented-code block (8 lines) in tests/lang-completeness/misc-langs.test.js:28"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b41a60e4cafed7e1", "name": "Commented-code block (5 lines) in tests/lang-completeness/resolve-honest.test.js:4", "shortDescription": {"text": "Commented-code block (5 lines) in tests/lang-completeness/resolve-honest.test.js:4"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-97a4493bed91ec77", "name": "Commented-code block (6 lines) in tests/lang-completeness/rust.test.js:4", "shortDescription": {"text": "Commented-code block (6 lines) in tests/lang-completeness/rust.test.js:4"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-e6f6dc0d13281ea5", "name": "Commented-code block (5 lines) in tests/lang-completeness/flow-e1.test.js:6", "shortDescription": {"text": "Commented-code block (5 lines) in tests/lang-completeness/flow-e1.test.js:6"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-42e48c7cd894f786", "name": "Commented-code block (5 lines) in tests/lang-completeness/lua.test.js:4", "shortDescription": {"text": "Commented-code block (5 lines) in tests/lang-completeness/lua.test.js:4"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-1712947750118d7d", "name": "Commented-code block (5 lines) in tests/lang-completeness/flow-e2.test.js:7", "shortDescription": {"text": "Commented-code block (5 lines) in tests/lang-completeness/flow-e2.test.js:7"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-8316fd6af6a57188", "name": "Commented-code block (5 lines) in plugin-api/examples/rust-parser/main.js:8", "shortDescription": {"text": "Commented-code block (5 lines) in plugin-api/examples/rust-parser/main.js:8"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-c6cf73086d70d062", "name": "Commented-code block (7 lines) in scripts/_precision_pos.mjs:1", "shortDescription": {"text": "Commented-code block (7 lines) in scripts/_precision_pos.mjs:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-f66ad0f8ffacb5fd", "name": "Commented-code block (8 lines) in scripts/_recall_oracle.mjs:1", "shortDescription": {"text": "Commented-code block (8 lines) in scripts/_recall_oracle.mjs:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-fe50324bd9f47518", "name": "Commented-code block (5 lines) in scripts/install-claude-commands.cjs:8", "shortDescription": {"text": "Commented-code block (5 lines) in scripts/install-claude-commands.cjs:8"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-a8d383d32708d7a5", "name": "Commented-code block (5 lines) in scripts/_measure.mjs:1", "shortDescription": {"text": "Commented-code block (5 lines) in scripts/_measure.mjs:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-666fc27b578f694d", "name": "Commented-code block (6 lines) in scripts/_measure_iso.mjs:1", "shortDescription": {"text": "Commented-code block (6 lines) in scripts/_measure_iso.mjs:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-9cd0a77e56d6c0f5", "name": "Commented-code block (6 lines) in scripts/_recall_stdlib.mjs:1", "shortDescription": {"text": "Commented-code block (6 lines) in scripts/_recall_stdlib.mjs:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-14ce29ab7468a089", "name": "Commented-code block (14 lines) in scripts/benchmark.mjs:5", "shortDescription": {"text": "Commented-code block (14 lines) in scripts/benchmark.mjs:5"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-224a2d9035a52ec5", "name": "Commented-code block (8 lines) in scripts/competitor-watch.mjs:6", "shortDescription": {"text": "Commented-code block (8 lines) in scripts/competitor-watch.mjs:6"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-a6c58936152c916e", "name": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/competitor-watch.mjs:79", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/competitor-watch.mjs:79"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-47926c1795a5003f", "name": "Commented-code block (9 lines) in scripts/download-bundled-node.cjs:10", "shortDescription": {"text": "Commented-code block (9 lines) in scripts/download-bundled-node.cjs:10"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-a00a29e975e934af", "name": "Commented-code block (7 lines) in scripts/_precision_oracle.mjs:1", "shortDescription": {"text": "Commented-code block (7 lines) in scripts/_precision_oracle.mjs:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-87cff4e8e8927d30", "name": "Commented-code block (5 lines) in scripts/ci-install-smoke.mjs:1", "shortDescription": {"text": "Commented-code block (5 lines) in scripts/ci-install-smoke.mjs:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-8f241a7fba15d12c", "name": "Legacy-named symbol `vN_old` in packages/core/legacy.js:33", "shortDescription": {"text": "Legacy-named symbol `vN_old` in packages/core/legacy.js:33"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6eaa0a60e72ad769", "name": "Commented-code block (5 lines) in packages/core/legacy.js:9", "shortDescription": {"text": "Commented-code block (5 lines) in packages/core/legacy.js:9"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b1dff97eff8f3c00", "name": "Commented-code block (11 lines) in packages/core/monorepo.js:6", "shortDescription": {"text": "Commented-code block (11 lines) in packages/core/monorepo.js:6"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-75d037d934ba5611", "name": "Commented-code block (7 lines) in packages/core/parser.js:7", "shortDescription": {"text": "Commented-code block (7 lines) in packages/core/parser.js:7"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-05c92a120118bec6", "name": "`fetch()` without try/.catch or AbortSignal \u2014 packages/core/parser.js:1082", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/core/parser.js:1082"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ae07bfdc7490f926", "name": "Commented-code block (5 lines) in packages/core/scanner.js:209", "shortDescription": {"text": "Commented-code block (5 lines) in packages/core/scanner.js:209"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-dcab85e96ba71709", "name": "Commented-code block (5 lines) in packages/core/lib/symbol-parse-worker.cjs:2", "shortDescription": {"text": "Commented-code block (5 lines) in packages/core/lib/symbol-parse-worker.cjs:2"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b8ca3f1080974bb3", "name": "Commented-code block (5 lines) in packages/core/lib/symbol-flow-ts.cjs:2", "shortDescription": {"text": "Commented-code block (5 lines) in packages/core/lib/symbol-flow-ts.cjs:2"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-8d1fa63ff06227d6", "name": "Commented-code block (5 lines) in packages/core/lib/symbol-parser-js.cjs:7", "shortDescription": {"text": "Commented-code block (5 lines) in packages/core/lib/symbol-parser-js.cjs:7"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-a22086a26521a149", "name": "Commented-code block (6 lines) in packages/core/lib/subengine-ts.cjs:2", "shortDescription": {"text": "Commented-code block (6 lines) in packages/core/lib/subengine-ts.cjs:2"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-410d8fb93bd62f11", "name": "Legacy-named symbol `env_unused` in packages/core/lib/control-server.cjs:83", "shortDescription": {"text": "Legacy-named symbol `env_unused` in packages/core/lib/control-server.cjs:83"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1f954e07f2fa0d20", "name": "Commented-code block (9 lines) in packages/core/lib/control-server.cjs:185", "shortDescription": {"text": "Commented-code block (9 lines) in packages/core/lib/control-server.cjs:185"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-e46be5ca85ccb724", "name": "Commented-code block (7 lines) in packages/core/lib/symbol-parsers.cjs:6", "shortDescription": {"text": "Commented-code block (7 lines) in packages/core/lib/symbol-parsers.cjs:6"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-1112437cd8178f50", "name": "Commented-code block (5 lines) in packages/core/lib/symbol-parser-tsc.cjs:8", "shortDescription": {"text": "Commented-code block (5 lines) in packages/core/lib/symbol-parser-tsc.cjs:8"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-51da05df7b1f6a99", "name": "Commented-code block (8 lines) in packages/core/lib/symbol-parser-treesitter.cjs:33", "shortDescription": {"text": "Commented-code block (8 lines) in packages/core/lib/symbol-parser-treesitter.cjs:33"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-a777bc5ba58f465c", "name": "Commented-code block (11 lines) in packages/core/lib/symbol-flow.cjs:2", "shortDescription": {"text": "Commented-code block (11 lines) in packages/core/lib/symbol-flow.cjs:2"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-d2afab57fac9bc1a", "name": "Commented-code block (6 lines) in packages/core/lib/changes-views.cjs:2", "shortDescription": {"text": "Commented-code block (6 lines) in packages/core/lib/changes-views.cjs:2"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-fee2e2b1064de1e1", "name": "Commented-code block (5 lines) in packages/core/lib/trace-store.cjs:2", "shortDescription": {"text": "Commented-code block (5 lines) in packages/core/lib/trace-store.cjs:2"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-ec1ed2f5bcc80c0d", "name": "Commented-code block (5 lines) in packages/core/lib/registry.cjs:9", "shortDescription": {"text": "Commented-code block (5 lines) in packages/core/lib/registry.cjs:9"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-c6896525ea14d06b", "name": "Commented-code block (5 lines) in packages/core/lib/symbol-parser-py.cjs:22", "shortDescription": {"text": "Commented-code block (5 lines) in packages/core/lib/symbol-parser-py.cjs:22"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-a732cf56841dd512", "name": "Legacy-named symbol `fileHasDeprecated` in packages/core/lib/symbol-graph.cjs:982", "shortDescription": {"text": "Legacy-named symbol `fileHasDeprecated` in packages/core/lib/symbol-graph.cjs:982"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5ba7ee511dea4e85", "name": "Commented-code block (5 lines) in packages/core/lib/symbol-graph.cjs:12", "shortDescription": {"text": "Commented-code block (5 lines) in packages/core/lib/symbol-graph.cjs:12"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-3106a7ff3cde6b75", "name": "Commented-code block (5 lines) in packages/core/lib/search-worker.cjs:66", "shortDescription": {"text": "Commented-code block (5 lines) in packages/core/lib/search-worker.cjs:66"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-7150e86bdd650994", "name": "Commented-code block (9 lines) in packages/core/lib/embedding.cjs:5", "shortDescription": {"text": "Commented-code block (9 lines) in packages/core/lib/embedding.cjs:5"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-415672f5b39ec483", "name": "Commented-code block (5 lines) in packages/core/lib/subengines.cjs:2", "shortDescription": {"text": "Commented-code block (5 lines) in packages/core/lib/subengines.cjs:2"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-01371d1cd90fa68a", "name": "Commented-code block (5 lines) in packages/core/lib/symbol-views.cjs:31", "shortDescription": {"text": "Commented-code block (5 lines) in packages/core/lib/symbol-views.cjs:31"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-6735103775012c6f", "name": "Commented-code block (5 lines) in packages/core/lib/subengine-java.cjs:2", "shortDescription": {"text": "Commented-code block (5 lines) in packages/core/lib/subengine-java.cjs:2"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-a59e04fd8c5d4e75", "name": "Commented-code block (5 lines) in packages/core/lib/symbol-explore.cjs:2", "shortDescription": {"text": "Commented-code block (5 lines) in packages/core/lib/symbol-explore.cjs:2"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-90c31b3d167d1f71", "name": "Commented-code block (5 lines) in packages/core/lib/pytracer.py:3", "shortDescription": {"text": "Commented-code block (5 lines) in packages/core/lib/pytracer.py:3"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-142bed34a61045be", "name": "Commented-code block (6 lines) in packages/core/lib/logger.cjs:8", "shortDescription": {"text": "Commented-code block (6 lines) in packages/core/lib/logger.cjs:8"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-1625ff34900007c3", "name": "Commented-code block (7 lines) in packages/core/lib/viewer-client.cjs:4", "shortDescription": {"text": "Commented-code block (7 lines) in packages/core/lib/viewer-client.cjs:4"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-4cf0ae627388272a", "name": "`fetch()` without try/.catch or AbortSignal \u2014 packages/core/lib/viewer-client.cjs:148", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/core/lib/viewer-client.cjs:148"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d77740805cb1aac2", "name": "Commented-code block (6 lines) in packages/core/lib/subengine-python.cjs:7", "shortDescription": {"text": "Commented-code block (6 lines) in packages/core/lib/subengine-python.cjs:7"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-c9577007237b9617", "name": "Commented-code block (5 lines) in public/plugin-host.js:9", "shortDescription": {"text": "Commented-code block (5 lines) in public/plugin-host.js:9"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-25ca509d42825263", "name": "Legacy-named symbol `openLegacy` in public/app.js:5448", "shortDescription": {"text": "Legacy-named symbol `openLegacy` in public/app.js:5448"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-36f740140c7426f5", "name": "Commented-code block (6 lines) in public/app.js:43", "shortDescription": {"text": "Commented-code block (6 lines) in public/app.js:43"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-006b02d5547a6184", "name": "Commented-code block (6 lines) in public/backend.js:4", "shortDescription": {"text": "Commented-code block (6 lines) in public/backend.js:4"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-091e22839b309415", "name": "Dangling fetch: GET /api/items (tests/parser.test.js:212)", "shortDescription": {"text": "Dangling fetch: GET /api/items (tests/parser.test.js:212)"}, "fullDescription": {"text": "`tests/parser.test.js:212` calls `GET /api/items` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/items`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-f98388c7b4d6cc80", "name": "Dangling fetch: GET /api/${x} (packages/core/parser.js:1230)", "shortDescription": {"text": "Dangling fetch: GET /api/${x} (packages/core/parser.js:1230)"}, "fullDescription": {"text": "`packages/core/parser.js:1230` calls `GET /api/${x}` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/<p>`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-d682e1d215955e6a", "name": "Unused endpoint: GET /list", "shortDescription": {"text": "Unused endpoint: GET /list"}, "fullDescription": {"text": "`packages/core/parser.js` declares `GET /list` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4ff40cb10f7c8519", "name": "Unused endpoint: USE /api/users", "shortDescription": {"text": "Unused endpoint: USE /api/users"}, "fullDescription": {"text": "`packages/core/parser.js` declares `USE /api/users` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-cd54b135c0eaafa4", "name": "Unused endpoint: GET /u", "shortDescription": {"text": "Unused endpoint: GET /u"}, "fullDescription": {"text": "`packages/core/parser.js` declares `GET /u` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8b7b339316ea7f51", "name": "Unused endpoint: USE /p", "shortDescription": {"text": "Unused endpoint: USE /p"}, "fullDescription": {"text": "`packages/core/parser.js` declares `USE /p` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f2b1a71e2fe879fb", "name": "Unused endpoint: POST /u", "shortDescription": {"text": "Unused endpoint: POST /u"}, "fullDescription": {"text": "`packages/core/parser.js` declares `POST /u` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/22775"}, "properties": {"repository": "wing1008/codesynapt", "repoUrl": "https://github.com/wing1008/codesynapt", "branch": "main"}, "results": [{"ruleId": "scanner-ba926c2b6892fc44", "level": "note", "message": {"text": "Possibly dead Python function: profiler"}, "properties": {"repobilityId": "cacb173d87312f85", "scanner": "scanner-primary", "fingerprint": "ba926c2b6892fc44", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/core/lib/pytracer.py:98"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-65e78b8fe0a66de4", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 server.js:17"}, "properties": {"repobilityId": "a9deebb5fdc93edc", "scanner": "scanner-primary", "fingerprint": "65e78b8fe0a66de4", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-a469e20453f46bd4", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 test.js:24"}, "properties": {"repobilityId": "35311906c4a900ee", "scanner": "scanner-primary", "fingerprint": "a469e20453f46bd4", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-3e83c4f7ebe5e68e", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/perf-test.js:154"}, "properties": {"repobilityId": "82bb4875ed748399", "scanner": "scanner-primary", "fingerprint": "3e83c4f7ebe5e68e", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-1a7216d1be74488a", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/license-check.js:99"}, "properties": {"repobilityId": "ccb1b01e6ee62796", "scanner": "scanner-primary", "fingerprint": "1a7216d1be74488a", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-96791bad22638d1b", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/copy-vendor.js:22"}, "properties": {"repobilityId": "bc8994ac746f4060", "scanner": "scanner-primary", "fingerprint": "96791bad22638d1b", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-5ff5bf560466dcf8", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 public/plugin-host.js:216"}, "properties": {"repobilityId": "51b89afb34d235cf", "scanner": "scanner-primary", "fingerprint": "5ff5bf560466dcf8", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-6e1d84d4ab230459", "level": "note", "message": {"text": "Icon-only button without accessible name \u2014 public/app.js:4534"}, "properties": {"repobilityId": "da7e9841f48bb512", "scanner": "scanner-primary", "fingerprint": "6e1d84d4ab230459", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.button.no-label"]}}, {"ruleId": "scanner-40edc96427136844", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 public/app.js:32"}, "properties": {"repobilityId": "700f424ad5e3784b", "scanner": "scanner-primary", "fingerprint": "40edc96427136844", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-683646ae6057d8c1", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in AGENTS.md:283"}, "properties": {"repobilityId": "cc9099b2635c2d20", "scanner": "scanner-primary", "fingerprint": "683646ae6057d8c1", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "AGENTS.md"}, "region": {"startLine": 283}}}]}, {"ruleId": "scanner-c1b8c434a6ab6832", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in electron/main.cjs:23"}, "properties": {"repobilityId": "90bba56f09ab67e7", "scanner": "scanner-primary", "fingerprint": "c1b8c434a6ab6832", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "electron/main.cjs"}, "region": {"startLine": 23}}}]}, {"ruleId": "scanner-18f62fb789f8f210", "level": "warning", "message": {"text": "Insecure pattern 'cors_wildcard' in electron/main.cjs:1299"}, "properties": {"repobilityId": "96a23c96d983a2f4", "scanner": "scanner-primary", "fingerprint": "18f62fb789f8f210", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "cors_wildcard"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "electron/main.cjs"}, "region": {"startLine": 1299}}}]}, {"ruleId": "scanner-898d72da47cd010f", "level": "error", "message": {"text": "Insecure pattern 'exec_used' in docs/inspections/2026-06-12-insp-004/confirmed.json:19"}, "properties": {"repobilityId": "fb437126758cc518", "scanner": "scanner-primary", "fingerprint": "898d72da47cd010f", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "exec_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/inspections/2026-06-12-insp-004/confirmed.json"}, "region": {"startLine": 19}}}]}, {"ruleId": "scanner-3160efdf9dcafceb", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in scripts/_recall_oracle.mjs:11"}, "properties": {"repobilityId": "cc43dafb27f1021e", "scanner": "scanner-primary", "fingerprint": "3160efdf9dcafceb", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/_recall_oracle.mjs"}, "region": {"startLine": 11}}}]}, {"ruleId": "scanner-bb8ba9aeab4226ef", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in scripts/_measure_iso.mjs:7"}, "properties": {"repobilityId": "b2321e6d4c446a74", "scanner": "scanner-primary", "fingerprint": "bb8ba9aeab4226ef", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/_measure_iso.mjs"}, "region": {"startLine": 7}}}]}, {"ruleId": "scanner-e318e63d9e7c75a2", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in scripts/_recall_stdlib.mjs:9"}, "properties": {"repobilityId": "30b3e6b416edcdf2", "scanner": "scanner-primary", "fingerprint": "e318e63d9e7c75a2", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/_recall_stdlib.mjs"}, "region": {"startLine": 9}}}]}, {"ruleId": "scanner-9e0f46391d884178", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in scripts/fetch-corpus.mjs:14"}, "properties": {"repobilityId": "776a47ec34c603ba", "scanner": "scanner-primary", "fingerprint": "9e0f46391d884178", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/fetch-corpus.mjs"}, "region": {"startLine": 14}}}]}, {"ruleId": "scanner-df74761661411d38", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in packages/core/lib/control-server.cjs:20"}, "properties": {"repobilityId": "20431a5a5467453f", "scanner": "scanner-primary", "fingerprint": "df74761661411d38", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/core/lib/control-server.cjs"}, "region": {"startLine": 20}}}]}, {"ruleId": "scanner-b9e67e5d688d8ecb", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in packages/core/lib/symbol-graph.cjs:893"}, "properties": {"repobilityId": "fe3f8fe110abbdac", "scanner": "scanner-primary", "fingerprint": "b9e67e5d688d8ecb", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/core/lib/symbol-graph.cjs"}, "region": {"startLine": 893}}}]}, {"ruleId": "scanner-c290ae2f9f42d024", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in packages/core/lib/subengine-cs.cjs:12"}, "properties": {"repobilityId": "936c1ed6c7931e6d", "scanner": "scanner-primary", "fingerprint": "c290ae2f9f42d024", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/core/lib/subengine-cs.cjs"}, "region": {"startLine": 12}}}]}, {"ruleId": "scanner-790f2f073d752277", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in packages/core/lib/subengine-java.cjs:13"}, "properties": {"repobilityId": "5fbca3dc55030444", "scanner": "scanner-primary", "fingerprint": "790f2f073d752277", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/core/lib/subengine-java.cjs"}, "region": {"startLine": 13}}}]}, {"ruleId": "scanner-2f7f13838f8f361b", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in packages/core/lib/subengine-python.cjs:14"}, "properties": {"repobilityId": "4974d51a3eb74c2e", "scanner": "scanner-primary", "fingerprint": "2f7f13838f8f361b", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/core/lib/subengine-python.cjs"}, "region": {"startLine": 14}}}]}, {"ruleId": "scanner-69c355bc07c9a299", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in public/app.js:655"}, "properties": {"repobilityId": "5192b9054ebe3f07", "scanner": "scanner-primary", "fingerprint": "69c355bc07c9a299", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "public/app.js"}, "region": {"startLine": 655}}}]}, {"ruleId": "scanner-6372cebde0220094", "level": "warning", "message": {"text": "No auth library detected"}, "properties": {"repobilityId": "a5b6035a5bbf8054", "scanner": "scanner-primary", "fingerprint": "6372cebde0220094", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["coverage", "auth"]}}, {"ruleId": "scanner-27924aa79fa4a517", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "989a74409a402368", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 28}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "989a74409a402368", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 74}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "989a74409a402368", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 110}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "989a74409a402368", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 173}}}]}, {"ruleId": "scanner-420770c48b8d4613", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "a9e3f39ec43b203d", "scanner": "scanner-primary", "fingerprint": "420770c48b8d4613", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release-drafter.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6ba9bfab5f283202", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "1bf0fd1430c42e23", "scanner": "scanner-primary", "fingerprint": "6ba9bfab5f283202", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/build.yml"}, "region": {"startLine": 24}}}]}, {"ruleId": "scanner-6ba9bfab5f283202", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "467d52ae1d8548b6", "scanner": "scanner-primary", "fingerprint": "6ba9bfab5f283202", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/build.yml"}, "region": {"startLine": 27}}}]}, {"ruleId": "scanner-6ba9bfab5f283202", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "5a380bb21c7e59ac", "scanner": "scanner-primary", "fingerprint": "6ba9bfab5f283202", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/build.yml"}, "region": {"startLine": 70}}}]}, {"ruleId": "scanner-6ba9bfab5f283202", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "6ac4ae69c5a42541", "scanner": "scanner-primary", "fingerprint": "6ba9bfab5f283202", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/build.yml"}, "region": {"startLine": 110}}}]}, {"ruleId": "scanner-b769174c9fcf8ea8", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "e34b6cb9b56931d2", "scanner": "scanner-primary", "fingerprint": "b769174c9fcf8ea8", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/build.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-cb639d9a10a47b23", "level": "note", "message": {"text": "package.json defines install-time lifecycle scripts"}, "properties": {"repobilityId": "edeab51902066991", "scanner": "scanner-primary", "fingerprint": "cb639d9a10a47b23", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "npm", "install-scripts"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3edb6bf13bb3fdc1", "level": "note", "message": {"text": "Very large file: electron/main.cjs (3002 lines)"}, "properties": {"repobilityId": "b0bf34c2af38fcab", "scanner": "scanner-primary", "fingerprint": "3edb6bf13bb3fdc1", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-4cac250894116de7", "level": "note", "message": {"text": "Very large file: packages/core/parser.js (2529 lines)"}, "properties": {"repobilityId": "132c12c058da902a", "scanner": "scanner-primary", "fingerprint": "4cac250894116de7", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-bb48c046abab0bfb", "level": "note", "message": {"text": "Very large file: packages/core/lib/symbol-parser-js.cjs (1087 lines)"}, "properties": {"repobilityId": "2460f5dd364e855a", "scanner": "scanner-primary", "fingerprint": "bb48c046abab0bfb", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-f4dd6ef7d876ee79", "level": "note", "message": {"text": "Very large file: packages/core/lib/control-server.cjs (2346 lines)"}, "properties": {"repobilityId": "5a62c913372cb9cb", "scanner": "scanner-primary", "fingerprint": "f4dd6ef7d876ee79", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-40e58f5a859cba23", "level": "note", "message": {"text": "Very large file: packages/core/lib/symbol-parser-treesitter.cjs (1533 lines)"}, "properties": {"repobilityId": "fbb260c46a6e0af9", "scanner": "scanner-primary", "fingerprint": "40e58f5a859cba23", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-4a7b99aca969d707", "level": "note", "message": {"text": "Very large file: packages/core/lib/symbol-graph.cjs (1354 lines)"}, "properties": {"repobilityId": "1b58a920454de11e", "scanner": "scanner-primary", "fingerprint": "4a7b99aca969d707", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-00c489dd68479c1c", "level": "note", "message": {"text": "Very large file: public/app.js (7410 lines)"}, "properties": {"repobilityId": "ce805b07178bda03", "scanner": "scanner-primary", "fingerprint": "00c489dd68479c1c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-3ab5d313dda8e5f9", "level": "note", "message": {"text": "Debug logging residue appears in source files"}, "properties": {"repobilityId": "36097a8fca304e8e", "scanner": "scanner-primary", "fingerprint": "3ab5d313dda8e5f9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["debug", "cleanup", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-72b2a6250083a784", "level": "warning", "message": {"text": "Placeholder or mock-heavy implementation detected"}, "properties": {"repobilityId": "ff8edd8e9b4264d7", "scanner": "scanner-primary", "fingerprint": "72b2a6250083a784", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "incomplete", "generated-repo-pattern"]}}, {"ruleId": "scanner-2d0c7b7ab8f8aacf", "level": "warning", "message": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "properties": {"repobilityId": "abc5c6075d4028b9", "scanner": "scanner-primary", "fingerprint": "2d0c7b7ab8f8aacf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "critical-flow", "generated-repo-pattern"]}}, {"ruleId": "scanner-ea8f3013f588db25", "level": "note", "message": {"text": "Shallow git history limits provenance confidence"}, "properties": {"repobilityId": "edfd259c3b1cdd79", "scanner": "scanner-primary", "fingerprint": "ea8f3013f588db25", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-8424db9c75e04ba4", "level": "none", "message": {"text": "Very short observed git history"}, "properties": {"repobilityId": "6023e0eddd89b533", "scanner": "scanner-primary", "fingerprint": "8424db9c75e04ba4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-bea357a6497a2d5d", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: CLAUDE.md"}, "properties": {"repobilityId": "aae72df3934829ac", "scanner": "scanner-primary", "fingerprint": "bea357a6497a2d5d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "CLAUDE.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e725d2ab884fbd49", "level": "note", "message": {"text": "Multiple root agent instruction files without precedence"}, "properties": {"repobilityId": "1953db6c89508d22", "scanner": "scanner-primary", "fingerprint": "e725d2ab884fbd49", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["agent-instructions", "governance"]}}, {"ruleId": "scanner-69e200ba2f2c4bfe", "level": "none", "message": {"text": "Commented-code block (16 lines) in server.js:59"}, "properties": {"repobilityId": "a77057d56ebd1f27", "scanner": "scanner-primary", "fingerprint": "69e200ba2f2c4bfe", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-62294b501d298dc4", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 server.js:62"}, "properties": {"repobilityId": "dcb6f499085826e7", "scanner": "scanner-primary", "fingerprint": "62294b501d298dc4", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-bcbcf07bce6c239b", "level": "none", "message": {"text": "Commented-code block (6 lines) in electron/plugin-loader.cjs:4"}, "properties": {"repobilityId": "43c95e16d580f4ae", "scanner": "scanner-primary", "fingerprint": "bcbcf07bce6c239b", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-a8501ffdd5153099", "level": "note", "message": {"text": "Legacy-named symbol `auditLegacy` in electron/main.cjs:217"}, "properties": {"repobilityId": "c08645eb597759bc", "scanner": "scanner-primary", "fingerprint": "a8501ffdd5153099", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-06dfb8759482327a", "level": "none", "message": {"text": "Commented-code block (6 lines) in electron/main.cjs:4"}, "properties": {"repobilityId": "f14e1c76f8a054af", "scanner": "scanner-primary", "fingerprint": "06dfb8759482327a", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-f1586fe30292ea90", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 electron/main.cjs:802"}, "properties": {"repobilityId": "4cfbf539a293d0a3", "scanner": "scanner-primary", "fingerprint": "f1586fe30292ea90", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-38f6bbddbd4b587d", "level": "note", "message": {"text": "Legacy-named symbol `getLegacy` in electron/preload.cjs:199"}, "properties": {"repobilityId": "ae9b492523aba020", "scanner": "scanner-primary", "fingerprint": "38f6bbddbd4b587d", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-912a6388ba30b94e", "level": "none", "message": {"text": "Commented-code block (7 lines) in electron/preload.cjs:6"}, "properties": {"repobilityId": "28be9f485782eb46", "scanner": "scanner-primary", "fingerprint": "912a6388ba30b94e", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-cca8090de030ba7f", "level": "none", "message": {"text": "Commented-code block (6 lines) in tests/coverage-langs.test.js:13"}, "properties": {"repobilityId": "53bc9a62eb6e8c8e", "scanner": "scanner-primary", "fingerprint": "cca8090de030ba7f", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-a681a91c33b100d6", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/cli-symbol.test.js:11"}, "properties": {"repobilityId": "261c5369ff5bd5f5", "scanner": "scanner-primary", "fingerprint": "a681a91c33b100d6", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-61ca3c441523a6ef", "level": "note", "message": {"text": "Legacy-named symbol `auditLegacy` in tests/accuracy-edges.test.js:4"}, "properties": {"repobilityId": "d4c4614d16d58a1a", "scanner": "scanner-primary", "fingerprint": "61ca3c441523a6ef", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-3419735fdfc7ca22", "level": "none", "message": {"text": "Commented-code block (6 lines) in tests/accuracy-edges.test.js:91"}, "properties": {"repobilityId": "533556b357ef2299", "scanner": "scanner-primary", "fingerprint": "3419735fdfc7ca22", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-d78cf26e2b675287", "level": "none", "message": {"text": "Commented-code block (6 lines) in tests/viewer-client.test.js:1"}, "properties": {"repobilityId": "95f6403b368a831c", "scanner": "scanner-primary", "fingerprint": "d78cf26e2b675287", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-19ff197c0b744bea", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/lang-completeness/js.test.js:4"}, "properties": {"repobilityId": "7df704c983070909", "scanner": "scanner-primary", "fingerprint": "19ff197c0b744bea", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-1c3394b14cb5ca4f", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/lang-completeness/go.test.js:4"}, "properties": {"repobilityId": "969dd6ab762fdbdf", "scanner": "scanner-primary", "fingerprint": "1c3394b14cb5ca4f", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-adc385109b74c1ba", "level": "none", "message": {"text": "Commented-code block (6 lines) in tests/lang-completeness/flow-honest.test.js:6"}, "properties": {"repobilityId": "ba4c3b2fc2905406", "scanner": "scanner-primary", "fingerprint": "adc385109b74c1ba", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-ab021e8eb3ccfbcb", "level": "none", "message": {"text": "Commented-code block (8 lines) in tests/lang-completeness/cjs-require-callers.test.js:6"}, "properties": {"repobilityId": "3de2a6e585fdc2b7", "scanner": "scanner-primary", "fingerprint": "ab021e8eb3ccfbcb", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-d01b9731a0bdf1ca", "level": "none", "message": {"text": "Commented-code block (8 lines) in tests/lang-completeness/install-layout.test.js:8"}, "properties": {"repobilityId": "fa892ddbff4ef4e2", "scanner": "scanner-primary", "fingerprint": "d01b9731a0bdf1ca", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-861176a726e18453", "level": "none", "message": {"text": "Commented-code block (6 lines) in tests/lang-completeness/realrepo.test.js:7"}, "properties": {"repobilityId": "967b2312ac8c6eaf", "scanner": "scanner-primary", "fingerprint": "861176a726e18453", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-e46e3904ea075167", "level": "none", "message": {"text": "Commented-code block (7 lines) in tests/lang-completeness/pytracer.test.js:8"}, "properties": {"repobilityId": "f15040fdc556c48d", "scanner": "scanner-primary", "fingerprint": "e46e3904ea075167", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-864e44c0acd1278c", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/lang-completeness/flow-multilang.test.js:6"}, "properties": {"repobilityId": "124271132f2e90bf", "scanner": "scanner-primary", "fingerprint": "864e44c0acd1278c", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-a4e9cdff1e7b34d0", "level": "none", "message": {"text": "Commented-code block (8 lines) in tests/lang-completeness/misc-langs.test.js:28"}, "properties": {"repobilityId": "9b3c108d873cea27", "scanner": "scanner-primary", "fingerprint": "a4e9cdff1e7b34d0", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-b41a60e4cafed7e1", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/lang-completeness/resolve-honest.test.js:4"}, "properties": {"repobilityId": "d1aebf56f0418cab", "scanner": "scanner-primary", "fingerprint": "b41a60e4cafed7e1", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-97a4493bed91ec77", "level": "none", "message": {"text": "Commented-code block (6 lines) in tests/lang-completeness/rust.test.js:4"}, "properties": {"repobilityId": "14f308b541fc5be4", "scanner": "scanner-primary", "fingerprint": "97a4493bed91ec77", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-e6f6dc0d13281ea5", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/lang-completeness/flow-e1.test.js:6"}, "properties": {"repobilityId": "e88097b6504a8ef0", "scanner": "scanner-primary", "fingerprint": "e6f6dc0d13281ea5", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-42e48c7cd894f786", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/lang-completeness/lua.test.js:4"}, "properties": {"repobilityId": "1350be80eb75da1a", "scanner": "scanner-primary", "fingerprint": "42e48c7cd894f786", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-1712947750118d7d", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/lang-completeness/flow-e2.test.js:7"}, "properties": {"repobilityId": "e9432cc460031bb3", "scanner": "scanner-primary", "fingerprint": "1712947750118d7d", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-8316fd6af6a57188", "level": "none", "message": {"text": "Commented-code block (5 lines) in plugin-api/examples/rust-parser/main.js:8"}, "properties": {"repobilityId": "828f47a385e57cc7", "scanner": "scanner-primary", "fingerprint": "8316fd6af6a57188", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-c6cf73086d70d062", "level": "none", "message": {"text": "Commented-code block (7 lines) in scripts/_precision_pos.mjs:1"}, "properties": {"repobilityId": "4ac29fc152f99edf", "scanner": "scanner-primary", "fingerprint": "c6cf73086d70d062", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-f66ad0f8ffacb5fd", "level": "none", "message": {"text": "Commented-code block (8 lines) in scripts/_recall_oracle.mjs:1"}, "properties": {"repobilityId": "d83f874d44cc0fe3", "scanner": "scanner-primary", "fingerprint": "f66ad0f8ffacb5fd", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-fe50324bd9f47518", "level": "none", "message": {"text": "Commented-code block (5 lines) in scripts/install-claude-commands.cjs:8"}, "properties": {"repobilityId": "36cce78558eb1c55", "scanner": "scanner-primary", "fingerprint": "fe50324bd9f47518", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-a8d383d32708d7a5", "level": "none", "message": {"text": "Commented-code block (5 lines) in scripts/_measure.mjs:1"}, "properties": {"repobilityId": "200f62ae4cc32439", "scanner": "scanner-primary", "fingerprint": "a8d383d32708d7a5", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-666fc27b578f694d", "level": "none", "message": {"text": "Commented-code block (6 lines) in scripts/_measure_iso.mjs:1"}, "properties": {"repobilityId": "849a5dbbb6d97da8", "scanner": "scanner-primary", "fingerprint": "666fc27b578f694d", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-9cd0a77e56d6c0f5", "level": "none", "message": {"text": "Commented-code block (6 lines) in scripts/_recall_stdlib.mjs:1"}, "properties": {"repobilityId": "9b60cb999a2ddb5c", "scanner": "scanner-primary", "fingerprint": "9cd0a77e56d6c0f5", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-14ce29ab7468a089", "level": "none", "message": {"text": "Commented-code block (14 lines) in scripts/benchmark.mjs:5"}, "properties": {"repobilityId": "bc0670798d2cbd07", "scanner": "scanner-primary", "fingerprint": "14ce29ab7468a089", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-224a2d9035a52ec5", "level": "none", "message": {"text": "Commented-code block (8 lines) in scripts/competitor-watch.mjs:6"}, "properties": {"repobilityId": "eb5dbc5ff4f24322", "scanner": "scanner-primary", "fingerprint": "224a2d9035a52ec5", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-a6c58936152c916e", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/competitor-watch.mjs:79"}, "properties": {"repobilityId": "41be9610c7bbca3b", "scanner": "scanner-primary", "fingerprint": "a6c58936152c916e", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-47926c1795a5003f", "level": "none", "message": {"text": "Commented-code block (9 lines) in scripts/download-bundled-node.cjs:10"}, "properties": {"repobilityId": "916d76d4795e44bb", "scanner": "scanner-primary", "fingerprint": "47926c1795a5003f", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-a00a29e975e934af", "level": "none", "message": {"text": "Commented-code block (7 lines) in scripts/_precision_oracle.mjs:1"}, "properties": {"repobilityId": "2282f251934b76b8", "scanner": "scanner-primary", "fingerprint": "a00a29e975e934af", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-87cff4e8e8927d30", "level": "none", "message": {"text": "Commented-code block (5 lines) in scripts/ci-install-smoke.mjs:1"}, "properties": {"repobilityId": "984e39547de4083a", "scanner": "scanner-primary", "fingerprint": "87cff4e8e8927d30", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-8f241a7fba15d12c", "level": "note", "message": {"text": "Legacy-named symbol `vN_old` in packages/core/legacy.js:33"}, "properties": {"repobilityId": "369cacdc9f84d1d0", "scanner": "scanner-primary", "fingerprint": "8f241a7fba15d12c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-6eaa0a60e72ad769", "level": "none", "message": {"text": "Commented-code block (5 lines) in packages/core/legacy.js:9"}, "properties": {"repobilityId": "f205de7d029cdbf8", "scanner": "scanner-primary", "fingerprint": "6eaa0a60e72ad769", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-b1dff97eff8f3c00", "level": "none", "message": {"text": "Commented-code block (11 lines) in packages/core/monorepo.js:6"}, "properties": {"repobilityId": "bf942d825a3fc75b", "scanner": "scanner-primary", "fingerprint": "b1dff97eff8f3c00", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-75d037d934ba5611", "level": "none", "message": {"text": "Commented-code block (7 lines) in packages/core/parser.js:7"}, "properties": {"repobilityId": "f4ee59afab3f9038", "scanner": "scanner-primary", "fingerprint": "75d037d934ba5611", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-05c92a120118bec6", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/core/parser.js:1082"}, "properties": {"repobilityId": "bad20463d56e9365", "scanner": "scanner-primary", "fingerprint": "05c92a120118bec6", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-ae07bfdc7490f926", "level": "none", "message": {"text": "Commented-code block (5 lines) in packages/core/scanner.js:209"}, "properties": {"repobilityId": "7fbef24d83c013d5", "scanner": "scanner-primary", "fingerprint": "ae07bfdc7490f926", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-dcab85e96ba71709", "level": "none", "message": {"text": "Commented-code block (5 lines) in packages/core/lib/symbol-parse-worker.cjs:2"}, "properties": {"repobilityId": "2cf7199de0f5d91a", "scanner": "scanner-primary", "fingerprint": "dcab85e96ba71709", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-b8ca3f1080974bb3", "level": "none", "message": {"text": "Commented-code block (5 lines) in packages/core/lib/symbol-flow-ts.cjs:2"}, "properties": {"repobilityId": "9e557aa408313acb", "scanner": "scanner-primary", "fingerprint": "b8ca3f1080974bb3", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-8d1fa63ff06227d6", "level": "none", "message": {"text": "Commented-code block (5 lines) in packages/core/lib/symbol-parser-js.cjs:7"}, "properties": {"repobilityId": "e3c026fe67761640", "scanner": "scanner-primary", "fingerprint": "8d1fa63ff06227d6", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-a22086a26521a149", "level": "none", "message": {"text": "Commented-code block (6 lines) in packages/core/lib/subengine-ts.cjs:2"}, "properties": {"repobilityId": "5bd20aee400fb70e", "scanner": "scanner-primary", "fingerprint": "a22086a26521a149", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-410d8fb93bd62f11", "level": "note", "message": {"text": "Legacy-named symbol `env_unused` in packages/core/lib/control-server.cjs:83"}, "properties": {"repobilityId": "9d5181b08e3b832a", "scanner": "scanner-primary", "fingerprint": "410d8fb93bd62f11", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-1f954e07f2fa0d20", "level": "none", "message": {"text": "Commented-code block (9 lines) in packages/core/lib/control-server.cjs:185"}, "properties": {"repobilityId": "0f7e434d4d429a4e", "scanner": "scanner-primary", "fingerprint": "1f954e07f2fa0d20", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-e46be5ca85ccb724", "level": "none", "message": {"text": "Commented-code block (7 lines) in packages/core/lib/symbol-parsers.cjs:6"}, "properties": {"repobilityId": "4f26388dd0228ca8", "scanner": "scanner-primary", "fingerprint": "e46be5ca85ccb724", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-1112437cd8178f50", "level": "none", "message": {"text": "Commented-code block (5 lines) in packages/core/lib/symbol-parser-tsc.cjs:8"}, "properties": {"repobilityId": "7ea6b585deb0899c", "scanner": "scanner-primary", "fingerprint": "1112437cd8178f50", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-51da05df7b1f6a99", "level": "none", "message": {"text": "Commented-code block (8 lines) in packages/core/lib/symbol-parser-treesitter.cjs:33"}, "properties": {"repobilityId": "eb4afb5b444eaa54", "scanner": "scanner-primary", "fingerprint": "51da05df7b1f6a99", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-a777bc5ba58f465c", "level": "none", "message": {"text": "Commented-code block (11 lines) in packages/core/lib/symbol-flow.cjs:2"}, "properties": {"repobilityId": "606ebcf656a98593", "scanner": "scanner-primary", "fingerprint": "a777bc5ba58f465c", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-d2afab57fac9bc1a", "level": "none", "message": {"text": "Commented-code block (6 lines) in packages/core/lib/changes-views.cjs:2"}, "properties": {"repobilityId": "f1f228adf73d65f6", "scanner": "scanner-primary", "fingerprint": "d2afab57fac9bc1a", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-fee2e2b1064de1e1", "level": "none", "message": {"text": "Commented-code block (5 lines) in packages/core/lib/trace-store.cjs:2"}, "properties": {"repobilityId": "c4ba791489673856", "scanner": "scanner-primary", "fingerprint": "fee2e2b1064de1e1", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-ec1ed2f5bcc80c0d", "level": "none", "message": {"text": "Commented-code block (5 lines) in packages/core/lib/registry.cjs:9"}, "properties": {"repobilityId": "270835dd8cc5d56a", "scanner": "scanner-primary", "fingerprint": "ec1ed2f5bcc80c0d", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-c6896525ea14d06b", "level": "none", "message": {"text": "Commented-code block (5 lines) in packages/core/lib/symbol-parser-py.cjs:22"}, "properties": {"repobilityId": "1cb19444a80c9781", "scanner": "scanner-primary", "fingerprint": "c6896525ea14d06b", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-a732cf56841dd512", "level": "note", "message": {"text": "Legacy-named symbol `fileHasDeprecated` in packages/core/lib/symbol-graph.cjs:982"}, "properties": {"repobilityId": "832a61ae3dd4b06f", "scanner": "scanner-primary", "fingerprint": "a732cf56841dd512", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-5ba7ee511dea4e85", "level": "none", "message": {"text": "Commented-code block (5 lines) in packages/core/lib/symbol-graph.cjs:12"}, "properties": {"repobilityId": "228e1ac535a8426f", "scanner": "scanner-primary", "fingerprint": "5ba7ee511dea4e85", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-3106a7ff3cde6b75", "level": "none", "message": {"text": "Commented-code block (5 lines) in packages/core/lib/search-worker.cjs:66"}, "properties": {"repobilityId": "2b258bf16e4de451", "scanner": "scanner-primary", "fingerprint": "3106a7ff3cde6b75", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-7150e86bdd650994", "level": "none", "message": {"text": "Commented-code block (9 lines) in packages/core/lib/embedding.cjs:5"}, "properties": {"repobilityId": "c811890bbcdb40d2", "scanner": "scanner-primary", "fingerprint": "7150e86bdd650994", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-415672f5b39ec483", "level": "none", "message": {"text": "Commented-code block (5 lines) in packages/core/lib/subengines.cjs:2"}, "properties": {"repobilityId": "ad81d4fb5ec801bf", "scanner": "scanner-primary", "fingerprint": "415672f5b39ec483", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-01371d1cd90fa68a", "level": "none", "message": {"text": "Commented-code block (5 lines) in packages/core/lib/symbol-views.cjs:31"}, "properties": {"repobilityId": "e83017ed32ab1c2b", "scanner": "scanner-primary", "fingerprint": "01371d1cd90fa68a", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-6735103775012c6f", "level": "none", "message": {"text": "Commented-code block (5 lines) in packages/core/lib/subengine-java.cjs:2"}, "properties": {"repobilityId": "56ec48ddc219aa9d", "scanner": "scanner-primary", "fingerprint": "6735103775012c6f", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-a59e04fd8c5d4e75", "level": "none", "message": {"text": "Commented-code block (5 lines) in packages/core/lib/symbol-explore.cjs:2"}, "properties": {"repobilityId": "a9df765961cf3e69", "scanner": "scanner-primary", "fingerprint": "a59e04fd8c5d4e75", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-90c31b3d167d1f71", "level": "none", "message": {"text": "Commented-code block (5 lines) in packages/core/lib/pytracer.py:3"}, "properties": {"repobilityId": "94adde5c6387e14b", "scanner": "scanner-primary", "fingerprint": "90c31b3d167d1f71", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-142bed34a61045be", "level": "none", "message": {"text": "Commented-code block (6 lines) in packages/core/lib/logger.cjs:8"}, "properties": {"repobilityId": "606ecba4b361d6fc", "scanner": "scanner-primary", "fingerprint": "142bed34a61045be", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-1625ff34900007c3", "level": "none", "message": {"text": "Commented-code block (7 lines) in packages/core/lib/viewer-client.cjs:4"}, "properties": {"repobilityId": "3d9e1fc6950c62ea", "scanner": "scanner-primary", "fingerprint": "1625ff34900007c3", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-4cf0ae627388272a", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/core/lib/viewer-client.cjs:148"}, "properties": {"repobilityId": "62efab855df37e75", "scanner": "scanner-primary", "fingerprint": "4cf0ae627388272a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-d77740805cb1aac2", "level": "none", "message": {"text": "Commented-code block (6 lines) in packages/core/lib/subengine-python.cjs:7"}, "properties": {"repobilityId": "ee64c4d7d8f452cc", "scanner": "scanner-primary", "fingerprint": "d77740805cb1aac2", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-c9577007237b9617", "level": "none", "message": {"text": "Commented-code block (5 lines) in public/plugin-host.js:9"}, "properties": {"repobilityId": "5e4d141039591a96", "scanner": "scanner-primary", "fingerprint": "c9577007237b9617", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-25ca509d42825263", "level": "note", "message": {"text": "Legacy-named symbol `openLegacy` in public/app.js:5448"}, "properties": {"repobilityId": "81ee22f28df8bef6", "scanner": "scanner-primary", "fingerprint": "25ca509d42825263", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-36f740140c7426f5", "level": "none", "message": {"text": "Commented-code block (6 lines) in public/app.js:43"}, "properties": {"repobilityId": "84c9ce8866bed278", "scanner": "scanner-primary", "fingerprint": "36f740140c7426f5", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-006b02d5547a6184", "level": "none", "message": {"text": "Commented-code block (6 lines) in public/backend.js:4"}, "properties": {"repobilityId": "d6f8d4e8c6ff1f88", "scanner": "scanner-primary", "fingerprint": "006b02d5547a6184", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-091e22839b309415", "level": "error", "message": {"text": "Dangling fetch: GET /api/items (tests/parser.test.js:212)"}, "properties": {"repobilityId": "8a42ebc915c32c41", "scanner": "scanner-primary", "fingerprint": "091e22839b309415", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-f98388c7b4d6cc80", "level": "error", "message": {"text": "Dangling fetch: GET /api/${x} (packages/core/parser.js:1230)"}, "properties": {"repobilityId": "de359a9a8e1b0709", "scanner": "scanner-primary", "fingerprint": "f98388c7b4d6cc80", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-d682e1d215955e6a", "level": "note", "message": {"text": "Unused endpoint: GET /list"}, "properties": {"repobilityId": "5c79e532c8f9ebd1", "scanner": "scanner-primary", "fingerprint": "d682e1d215955e6a", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-4ff40cb10f7c8519", "level": "note", "message": {"text": "Unused endpoint: USE /api/users"}, "properties": {"repobilityId": "04ea2e33887cca20", "scanner": "scanner-primary", "fingerprint": "4ff40cb10f7c8519", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-cd54b135c0eaafa4", "level": "note", "message": {"text": "Unused endpoint: GET /u"}, "properties": {"repobilityId": "222ed33ce7e831f2", "scanner": "scanner-primary", "fingerprint": "cd54b135c0eaafa4", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-8b7b339316ea7f51", "level": "note", "message": {"text": "Unused endpoint: USE /p"}, "properties": {"repobilityId": "3c00349d11dc4e9d", "scanner": "scanner-primary", "fingerprint": "8b7b339316ea7f51", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-f2b1a71e2fe879fb", "level": "note", "message": {"text": "Unused endpoint: POST /u"}, "properties": {"repobilityId": "97293be448e64fbb", "scanner": "scanner-primary", "fingerprint": "f2b1a71e2fe879fb", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}]}]}