{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "scanner-cf16d9a722a5fcd1", "name": "Possibly dead Python function: neg_sharpe", "shortDescription": {"text": "Possibly dead Python function: neg_sharpe"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-28b0784e5fe06ea5", "name": "Possibly dead Python function: fetch_prices_from_node", "shortDescription": {"text": "Possibly dead Python function: fetch_prices_from_node"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f58ce79d1de89c5e", "name": "Possibly dead Python function: fetch_finnhub_quote", "shortDescription": {"text": "Possibly dead Python function: fetch_finnhub_quote"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b86fd86946916164", "name": "Possibly dead Python function: fetch_training_data", "shortDescription": {"text": "Possibly dead Python function: fetch_training_data"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c84a17517ad7bc1a", "name": "Stray `console.log` in TS/JS \u2014 frontend-server.js:57", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 frontend-server.js:57"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f1041b8b50d7de06", "name": "Stray `console.log` in TS/JS \u2014 jse-scraper.js:42", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 jse-scraper.js:42"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d49b9368abdeb456", "name": "Stray `console.log` in TS/JS \u2014 news-scraper.js:275", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 news-scraper.js:275"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e6e5ae8c91c12ddf", "name": "Stray `console.log` in TS/JS \u2014 scripts/migrate-json-to-pg.js:21", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/migrate-json-to-pg.js:21"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1dcd7d57b9e1b853", "name": "Stray `console.log` in TS/JS \u2014 scripts/seed-admin.js:34", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/seed-admin.js:34"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9e55a5d880fd91df", "name": "Stray `console.log` in TS/JS \u2014 scripts/seed-users.js:52", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/seed-users.js:52"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2e034cf24d890aab", "name": "Icon-only button without accessible name \u2014 frontend/src/components/ui/AppTour.tsx:234", "shortDescription": {"text": "Icon-only button without accessible name \u2014 frontend/src/components/ui/AppTour.tsx:234"}, "fullDescription": {"text": "A `<button>` whose only child is a single glyph or symbol needs `title=` or `aria-label=` so screen readers (and tooltips on hover) work.\n\nWhy: P3 in CHECKLIST.md \u2014 icon-only buttons skipped a title.\nRule id: fq.button.no-label"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9191697afd3ed9f6", "name": "Icon-only button without accessible name \u2014 frontend/src/features/admin/Admin.tsx:205", "shortDescription": {"text": "Icon-only button without accessible name \u2014 frontend/src/features/admin/Admin.tsx:205"}, "fullDescription": {"text": "A `<button>` whose only child is a single glyph or symbol needs `title=` or `aria-label=` so screen readers (and tooltips on hover) work.\n\nWhy: P3 in CHECKLIST.md \u2014 icon-only buttons skipped a title.\nRule id: fq.button.no-label"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e9762af472f97c31", "name": "Stray `console.log` in TS/JS \u2014 src/server.js:23", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 src/server.js:23"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-bd74faffff3e0d63", "name": "Stray `console.log` in TS/JS \u2014 src/middleware/rateLimit.js:17", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 src/middleware/rateLimit.js:17"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-87902277fede235d", "name": "Stray `console.log` in TS/JS \u2014 src/services/market.service.js:26", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 src/services/market.service.js:26"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-207e61c5e0e8c544", "name": "Stray `console.log` in TS/JS \u2014 src/services/email.service.js:23", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 src/services/email.service.js:23"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5480c7f7d6788b7a", "name": "Stray `console.log` in TS/JS \u2014 src/config/database.js:31", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 src/config/database.js:31"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c6b6eadabadcb2b6", "name": "`dangerouslySetInnerHTML` used in a React component \u2014 public-react/assets/index-DEXxlYPP.js:10", "shortDescription": {"text": "`dangerouslySetInnerHTML` used in a React component \u2014 public-react/assets/index-DEXxlYPP.js:10"}, "fullDescription": {"text": "Open XSS surface unless the input is provably trusted. Replace with explicit JSX or sanitize via a vetted library.\n\nWhy: OWASP basics. Already partially flagged by the security analyzer.\nRule id: fq.dangerous-html"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ad466e0974ca3def", "name": "Privileged port 587 in use", "shortDescription": {"text": "Privileged port 587 in use"}, "fullDescription": {"text": "Port 587 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d63da3583b14afc0", "name": "Dockerfile runs as root: Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a35c6a00f751880f", "name": "Docker base image is tag-pinned but not digest-pinned: node:20-slim", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: node:20-slim"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f6d98aea9b30273e", "name": "Possible secret in scripts/seed-admin.js", "shortDescription": {"text": "Possible secret in scripts/seed-admin.js"}, "fullDescription": {"text": "Detected pattern matching password_literal. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-3fcf750b8d838aff", "name": "Possible secret in scripts/seed-users.js", "shortDescription": {"text": "Possible secret in scripts/seed-users.js"}, "fullDescription": {"text": "Detected pattern matching password_literal. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-61cdd95ceefeef2f", "name": "Insecure pattern 'local_storage_auth_token' in frontend/src/stores/auth.ts:52", "shortDescription": {"text": "Insecure pattern 'local_storage_auth_token' in frontend/src/stores/auth.ts:52"}, "fullDescription": {"text": "Found a known-risky pattern (local_storage_auth_token). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f18957e2b21f1782", "name": "Insecure pattern 'local_storage_auth_token' in frontend/src/components/modals/AuthModal.tsx:431", "shortDescription": {"text": "Insecure pattern 'local_storage_auth_token' in frontend/src/components/modals/AuthModal.tsx:431"}, "fullDescription": {"text": "Found a known-risky pattern (local_storage_auth_token). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-87e99da97bcfee1a", "name": "Insecure pattern 'dangerous_innerhtml' in public-react/assets/index-DEXxlYPP.js:10", "shortDescription": {"text": "Insecure pattern 'dangerous_innerhtml' in public-react/assets/index-DEXxlYPP.js:10"}, "fullDescription": {"text": "Found a known-risky pattern (dangerous_innerhtml). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0a1ada62693131dd", "name": "Insecure pattern 'direct_innerhtml_assignment' in public-react/assets/index-DEXxlYPP.js:9", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in public-react/assets/index-DEXxlYPP.js:9"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-db012ec959f927da", "name": "Insecure pattern 'local_storage_auth_token' in client/src/api/client.ts:53", "shortDescription": {"text": "Insecure pattern 'local_storage_auth_token' in client/src/api/client.ts:53"}, "fullDescription": {"text": "Found a known-risky pattern (local_storage_auth_token). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-10b984e6634ab921", "name": "Insecure pattern 'local_storage_auth_token' in client/src/context/AuthContext.tsx:100", "shortDescription": {"text": "Insecure pattern 'local_storage_auth_token' in client/src/context/AuthContext.tsx:100"}, "fullDescription": {"text": "Found a known-risky pattern (local_storage_auth_token). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a20ee6028b4d9d5a", "name": "Insecure pattern 'direct_innerhtml_assignment' in public/app.js:51", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in public/app.js:51"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ec0e887139e8120a", "name": "Insecure pattern 'local_storage_auth_token' in public/app.js:403", "shortDescription": {"text": "Insecure pattern 'local_storage_auth_token' in public/app.js:403"}, "fullDescription": {"text": "Found a known-risky pattern (local_storage_auth_token). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e354e77aff3dff94", "name": "Insecure pattern 'direct_innerhtml_assignment' in public/admin.html:210", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in public/admin.html:210"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4601e3ad3bb28677", "name": "No CI/CD pipelines detected", "shortDescription": {"text": "No CI/CD pipelines detected"}, "fullDescription": {"text": "No GitHub Actions, GitLab CI, or CircleCI configs found. Without CI you can't gate deploys on tests/lints."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-fe1ae1ceec2882a1", "name": "Very large file: frontend/src/features/dashboard/Dashboard.tsx (1438 lines)", "shortDescription": {"text": "Very large file: frontend/src/features/dashboard/Dashboard.tsx (1438 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2eda370417d4e140", "name": "Very large file: frontend/src/features/admin/Admin.tsx (948 lines)", "shortDescription": {"text": "Very large file: frontend/src/features/admin/Admin.tsx (948 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-cc31ca7fa0dfc602", "name": "Very large file: frontend/src/features/learn/Learn.tsx (1706 lines)", "shortDescription": {"text": "Very large file: frontend/src/features/learn/Learn.tsx (1706 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f71f8ce247920a9a", "name": "Very large file: src/routes/market.routes.js (1510 lines)", "shortDescription": {"text": "Very large file: src/routes/market.routes.js (1510 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8c31335b69837a7b", "name": "Very large file: src/routes/auth.routes.js (1895 lines)", "shortDescription": {"text": "Very large file: src/routes/auth.routes.js (1895 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-cc26446bb08ab8bc", "name": "Very large file: client/src/pages/TechnicalAnalysis.tsx (949 lines)", "shortDescription": {"text": "Very large file: client/src/pages/TechnicalAnalysis.tsx (949 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-55b541f80ea3ce39", "name": "Very large file: public/app.js (6637 lines)", "shortDescription": {"text": "Very large file: public/app.js (6637 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6893a6c8b0861585", "name": "Very low test-to-source ratio", "shortDescription": {"text": "Very low test-to-source ratio"}, "fullDescription": {"text": "0 test file(s) for 203 source file(s) (ratio 0.00). Consider adding integration or unit tests for critical paths."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-141b30a41e03817b", "name": "No license file detected", "shortDescription": {"text": "No license file detected"}, "fullDescription": {"text": "No LICENSE/COPYING/NOTICE file was found. Generated repositories often omit licensing, which blocks reuse and automated intake."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b3ed68815bca2f8c", "name": "Node manifest has dependencies but no lockfile: package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0e8a76eb13fd3249", "name": "Node manifest has dependencies but no lockfile: frontend/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: frontend/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1a6aeb84f8544549", "name": "Node manifest has dependencies but no lockfile: client/package.json", "shortDescription": {"text": "Node manifest has dependencies but no lockfile: client/package.json"}, "fullDescription": {"text": "`package.json` declares dependencies, but no same-directory npm/pnpm/yarn/bun lockfile was found. Generated projects without lockfiles are less reproducible and harder to secure-scan precisely."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3ab5d313dda8e5f9", "name": "Debug logging residue appears in source files", "shortDescription": {"text": "Debug logging residue appears in source files"}, "fullDescription": {"text": "Found 69 console/debugger/print-style debug statements in non-test source. This is a common fast-generation residue before production cleanup."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-72b2a6250083a784", "name": "Placeholder or mock-heavy implementation detected", "shortDescription": {"text": "Placeholder or mock-heavy implementation detected"}, "fullDescription": {"text": "Found 165 placeholder/mock markers across 55 source files. This often means the repo looks complete while core flows still use generated scaffolding or fake data."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2d0c7b7ab8f8aacf", "name": "Critical user flow still appears backed by mock or placeholder data", "shortDescription": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "fullDescription": {"text": "A payment/auth/admin/order/billing-style flow contains mock, fake, TODO, dummy, or placeholder markers in runtime source. In the Fable corpus this is a high-leverage completeness smell: the app can look finished while the money, identity, or tenant flow is still scaffolded."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b9088664ace7f748", "name": "Composite production-readiness gap", "shortDescription": {"text": "Composite production-readiness gap"}, "fullDescription": {"text": "Multiple low-cost hardening controls are missing together: license, ci, tests, lockfile. Opus verification showed these co-occurring gaps are a better readiness signal than reading each flag in isolation."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-749d4bc1bd66df5f", "name": "Agent instructions exist but release-hardening basics are missing", "shortDescription": {"text": "Agent instructions exist but release-hardening basics are missing"}, "fullDescription": {"text": "AI-coder instruction files were found, but the repo is missing license, ci, tests, lockfile. Treat this as a contract gap: the agent is guided, but the generated output is not yet guarded by the controls that make it repeatable."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-bea357a6497a2d5d", "name": "Agent authority lacks a verifier contract: CLAUDE.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: CLAUDE.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-fa9cd20b9a7123dd", "name": "Legacy-named symbol `gf_tour_v1` in scripts/shot.mjs:44", "shortDescription": {"text": "Legacy-named symbol `gf_tour_v1` in scripts/shot.mjs:44"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5234f96b9b74c82e", "name": "Legacy-named symbol `gf_compliance_v1` in frontend/src/components/modals/ComplianceModal.tsx:5", "shortDescription": {"text": "Legacy-named symbol `gf_compliance_v1` in frontend/src/components/modals/ComplianceModal.tsx:5"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1c58078f0e9af85c", "name": "Legacy-named symbol `gf_tour_v1` in frontend/src/components/ui/FeatureGuide.tsx:7", "shortDescription": {"text": "Legacy-named symbol `gf_tour_v1` in frontend/src/components/ui/FeatureGuide.tsx:7"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7d08371957a63b98", "name": "Legacy-named symbol `gf_tour_v1` in frontend/src/components/ui/AppTour.tsx:5", "shortDescription": {"text": "Legacy-named symbol `gf_tour_v1` in frontend/src/components/ui/AppTour.tsx:5"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6db4605ceec5e591", "name": "Legacy-named symbol `gotham_heatmap_v2` in frontend/src/features/dashboard/Heatmap.tsx:41", "shortDescription": {"text": "Legacy-named symbol `gotham_heatmap_v2` in frontend/src/features/dashboard/Heatmap.tsx:41"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4422852fc355f37f", "name": "Legacy-named symbol `gotham_learn_progress_v2` in frontend/src/features/learn/Learn.tsx:790", "shortDescription": {"text": "Legacy-named symbol `gotham_learn_progress_v2` in frontend/src/features/learn/Learn.tsx:790"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6ef2b2a9d3c16860", "name": "`fetch()` without try/.catch or AbortSignal \u2014 frontend/src/features/learn/Learn.tsx:956", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 frontend/src/features/learn/Learn.tsx:956"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c9846bec348904da", "name": "Commented-code block (6 lines) in src/services/market.service.js:153", "shortDescription": {"text": "Commented-code block (6 lines) in src/services/market.service.js:153"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-bf20aa1d1ef14839", "name": "Commented-code block (5 lines) in src/routes/payment.routes.js:50", "shortDescription": {"text": "Commented-code block (5 lines) in src/routes/payment.routes.js:50"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b7e10b0d43250789", "name": "`fetch()` without try/.catch or AbortSignal \u2014 src/routes/auth.routes.js:1721", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/routes/auth.routes.js:1721"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7ea41f7b0a651b51", "name": "Legacy-named symbol `eleven_multilingual_v2` in src/routes/ai.routes.js:638", "shortDescription": {"text": "Legacy-named symbol `eleven_multilingual_v2` in src/routes/ai.routes.js:638"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f702ea2bba904ae7", "name": "`fetch()` without try/.catch or AbortSignal \u2014 public-react/assets/api-HAxN0Coo.js:1", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 public-react/assets/api-HAxN0Coo.js:1"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0c81eb51a416f2d2", "name": "Legacy-named symbol `unstable_legacy` in public-react/assets/index-DEXxlYPP.js:9", "shortDescription": {"text": "Legacy-named symbol `unstable_legacy` in public-react/assets/index-DEXxlYPP.js:9"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7570a28d5a0f6cb7", "name": "`fetch()` without try/.catch or AbortSignal \u2014 public-react/assets/index-DEXxlYPP.js:2", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 public-react/assets/index-DEXxlYPP.js:2"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-943a3816c3537f16", "name": "Legacy-named symbol `gotham_heatmap_v2` in public-react/assets/Dashboard-Q4PaOzUF.js:1", "shortDescription": {"text": "Legacy-named symbol `gotham_heatmap_v2` in public-react/assets/Dashboard-Q4PaOzUF.js:1"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-27b85871a3ab64d9", "name": "`fetch()` without try/.catch or AbortSignal \u2014 public/sw.js:112", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 public/sw.js:112"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-51dbf90b6ad9e4e9", "name": "28 env vars used in code but missing from .env.example", "shortDescription": {"text": "28 env vars used in code but missing from .env.example"}, "fullDescription": {"text": "Drift between code and config docs. The first few: `AI_MODEL_HAIKU`, `AI_MODEL_OPUS`, `AI_MODEL_SONNET`, `ANALYTICS_PORT`, `CLERK_SECRET_KEY`, `CORS_ORIGIN`, `CORS_ORIGINS`, `DEV` + 20 more. Add them (with a placeholder/comment) to .env.example so onboarding doesn't break."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-cce368be899feb10", "name": "Frontend route `${e}` has no Link/navigate to it \u2014 public-react/assets/index-DEXxlYPP.js", "shortDescription": {"text": "Frontend route `${e}` has no Link/navigate to it \u2014 public-react/assets/index-DEXxlYPP.js"}, "fullDescription": {"text": "The route is registered but no `<Link to=\u2026>` or `navigate(\u2026)` in the codebase navigates here. Either it's reachable only via direct URL (intentional), it's dead, or the link broke during a refactor."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-fdfc594c0f28c121", "name": "Frontend route `${e===`/`?`*`:`${e}/*`}` has no Link/navigate to it \u2014 public-react/assets/index-DEXxlYPP.js", "shortDescription": {"text": "Frontend route `${e===`/`?`*`:`${e}/*`}` has no Link/navigate to it \u2014 public-react/assets/index-DEXxlYPP.js"}, "fullDescription": {"text": "The route is registered but no `<Link to=\u2026>` or `navigate(\u2026)` in the codebase navigates here. Either it's reachable only via direct URL (intentional), it's dead, or the link broke during a refactor."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3fc0ade15ffcc69e", "name": "Frontend route `onboarding` has no Link/navigate to it \u2014 frontend/src/App.tsx", "shortDescription": {"text": "Frontend route `onboarding` has no Link/navigate to it \u2014 frontend/src/App.tsx"}, "fullDescription": {"text": "The route is registered but no `<Link to=\u2026>` or `navigate(\u2026)` in the codebase navigates here. Either it's reachable only via direct URL (intentional), it's dead, or the link broke during a refactor."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1233cb19f6ac0f08", "name": "Frontend route `verify-email` has no Link/navigate to it \u2014 frontend/src/App.tsx", "shortDescription": {"text": "Frontend route `verify-email` has no Link/navigate to it \u2014 frontend/src/App.tsx"}, "fullDescription": {"text": "The route is registered but no `<Link to=\u2026>` or `navigate(\u2026)` in the codebase navigates here. Either it's reachable only via direct URL (intentional), it's dead, or the link broke during a refactor."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b93e469cd0b0c9e3", "name": "Frontend route `subscription` has no Link/navigate to it \u2014 client/src/App.tsx", "shortDescription": {"text": "Frontend route `subscription` has no Link/navigate to it \u2014 client/src/App.tsx"}, "fullDescription": {"text": "The route is registered but no `<Link to=\u2026>` or `navigate(\u2026)` in the codebase navigates here. Either it's reachable only via direct URL (intentional), it's dead, or the link broke during a refactor."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a35093e136ddab0d", "name": "Frontend route `settings` has no Link/navigate to it \u2014 client/src/App.tsx", "shortDescription": {"text": "Frontend route `settings` has no Link/navigate to it \u2014 client/src/App.tsx"}, "fullDescription": {"text": "The route is registered but no `<Link to=\u2026>` or `navigate(\u2026)` in the codebase navigates here. Either it's reachable only via direct URL (intentional), it's dead, or the link broke during a refactor."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1cb0ec79e6f5e69c", "name": "Frontend route `news` has no Link/navigate to it \u2014 client/src/App.tsx", "shortDescription": {"text": "Frontend route `news` has no Link/navigate to it \u2014 client/src/App.tsx"}, "fullDescription": {"text": "The route is registered but no `<Link to=\u2026>` or `navigate(\u2026)` in the codebase navigates here. Either it's reachable only via direct URL (intentional), it's dead, or the link broke during a refactor."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d1be5babf76bc479", "name": "Frontend route `watchlists` has no Link/navigate to it \u2014 client/src/App.tsx", "shortDescription": {"text": "Frontend route `watchlists` has no Link/navigate to it \u2014 client/src/App.tsx"}, "fullDescription": {"text": "The route is registered but no `<Link to=\u2026>` or `navigate(\u2026)` in the codebase navigates here. Either it's reachable only via direct URL (intentional), it's dead, or the link broke during a refactor."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d6c661fc5f8fdbfb", "name": "Frontend route `portfolio` has no Link/navigate to it \u2014 client/src/App.tsx", "shortDescription": {"text": "Frontend route `portfolio` has no Link/navigate to it \u2014 client/src/App.tsx"}, "fullDescription": {"text": "The route is registered but no `<Link to=\u2026>` or `navigate(\u2026)` in the codebase navigates here. Either it's reachable only via direct URL (intentional), it's dead, or the link broke during a refactor."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7d374ef81bea5900", "name": "Frontend route `orders` has no Link/navigate to it \u2014 client/src/App.tsx", "shortDescription": {"text": "Frontend route `orders` has no Link/navigate to it \u2014 client/src/App.tsx"}, "fullDescription": {"text": "The route is registered but no `<Link to=\u2026>` or `navigate(\u2026)` in the codebase navigates here. Either it's reachable only via direct URL (intentional), it's dead, or the link broke during a refactor."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-185976fd90819aa2", "name": "Frontend route `alerts` has no Link/navigate to it \u2014 client/src/App.tsx", "shortDescription": {"text": "Frontend route `alerts` has no Link/navigate to it \u2014 client/src/App.tsx"}, "fullDescription": {"text": "The route is registered but no `<Link to=\u2026>` or `navigate(\u2026)` in the codebase navigates here. Either it's reachable only via direct URL (intentional), it's dead, or the link broke during a refactor."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-74dbf23f23530aa7", "name": "Frontend route `learn` has no Link/navigate to it \u2014 frontend/src/App.tsx", "shortDescription": {"text": "Frontend route `learn` has no Link/navigate to it \u2014 frontend/src/App.tsx"}, "fullDescription": {"text": "The route is registered but no `<Link to=\u2026>` or `navigate(\u2026)` in the codebase navigates here. Either it's reachable only via direct URL (intentional), it's dead, or the link broke during a refactor."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c406d47be7c0e390", "name": "Frontend route `technicals` has no Link/navigate to it \u2014 client/src/App.tsx", "shortDescription": {"text": "Frontend route `technicals` has no Link/navigate to it \u2014 client/src/App.tsx"}, "fullDescription": {"text": "The route is registered but no `<Link to=\u2026>` or `navigate(\u2026)` in the codebase navigates here. Either it's reachable only via direct URL (intentional), it's dead, or the link broke during a refactor."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-efafadaf74059045", "name": "Frontend route `technicals/:symbol` has no Link/navigate to it \u2014 frontend/src/App.tsx", "shortDescription": {"text": "Frontend route `technicals/:symbol` has no Link/navigate to it \u2014 frontend/src/App.tsx"}, "fullDescription": {"text": "The route is registered but no `<Link to=\u2026>` or `navigate(\u2026)` in the codebase navigates here. Either it's reachable only via direct URL (intentional), it's dead, or the link broke during a refactor."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-737506890ea18327", "name": "Frontend route `us-stocks` has no Link/navigate to it \u2014 client/src/App.tsx", "shortDescription": {"text": "Frontend route `us-stocks` has no Link/navigate to it \u2014 client/src/App.tsx"}, "fullDescription": {"text": "The route is registered but no `<Link to=\u2026>` or `navigate(\u2026)` in the codebase navigates here. Either it's reachable only via direct URL (intentional), it's dead, or the link broke during a refactor."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-418b82b22ba672ff", "name": "Frontend route `chat` has no Link/navigate to it \u2014 frontend/src/App.tsx", "shortDescription": {"text": "Frontend route `chat` has no Link/navigate to it \u2014 frontend/src/App.tsx"}, "fullDescription": {"text": "The route is registered but no `<Link to=\u2026>` or `navigate(\u2026)` in the codebase navigates here. Either it's reachable only via direct URL (intentional), it's dead, or the link broke during a refactor."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e7ed4afa8345a751", "name": "Frontend route `analysis` has no Link/navigate to it \u2014 frontend/src/App.tsx", "shortDescription": {"text": "Frontend route `analysis` has no Link/navigate to it \u2014 frontend/src/App.tsx"}, "fullDescription": {"text": "The route is registered but no `<Link to=\u2026>` or `navigate(\u2026)` in the codebase navigates here. Either it's reachable only via direct URL (intentional), it's dead, or the link broke during a refactor."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a6e8496ad6eacb32", "name": "Frontend route `screener` has no Link/navigate to it \u2014 client/src/App.tsx", "shortDescription": {"text": "Frontend route `screener` has no Link/navigate to it \u2014 client/src/App.tsx"}, "fullDescription": {"text": "The route is registered but no `<Link to=\u2026>` or `navigate(\u2026)` in the codebase navigates here. Either it's reachable only via direct URL (intentional), it's dead, or the link broke during a refactor."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d49fcc58073b94b7", "name": "Frontend route `admin` has no Link/navigate to it \u2014 client/src/App.tsx", "shortDescription": {"text": "Frontend route `admin` has no Link/navigate to it \u2014 client/src/App.tsx"}, "fullDescription": {"text": "The route is registered but no `<Link to=\u2026>` or `navigate(\u2026)` in the codebase navigates here. Either it's reachable only via direct URL (intentional), it's dead, or the link broke during a refactor."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-08aa46a7934e7f79", "name": "Frontend route `sectors` has no Link/navigate to it \u2014 client/src/App.tsx", "shortDescription": {"text": "Frontend route `sectors` has no Link/navigate to it \u2014 client/src/App.tsx"}, "fullDescription": {"text": "The route is registered but no `<Link to=\u2026>` or `navigate(\u2026)` in the codebase navigates here. Either it's reachable only via direct URL (intentional), it's dead, or the link broke during a refactor."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2bfac91f01336dc5", "name": "Frontend route `leaderboard` has no Link/navigate to it \u2014 client/src/App.tsx", "shortDescription": {"text": "Frontend route `leaderboard` has no Link/navigate to it \u2014 client/src/App.tsx"}, "fullDescription": {"text": "The route is registered but no `<Link to=\u2026>` or `navigate(\u2026)` in the codebase navigates here. Either it's reachable only via direct URL (intentional), it's dead, or the link broke during a refactor."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-02c28729ca77d6f0", "name": "Frontend route `dividends` has no Link/navigate to it \u2014 client/src/App.tsx", "shortDescription": {"text": "Frontend route `dividends` has no Link/navigate to it \u2014 client/src/App.tsx"}, "fullDescription": {"text": "The route is registered but no `<Link to=\u2026>` or `navigate(\u2026)` in the codebase navigates here. Either it's reachable only via direct URL (intentional), it's dead, or the link broke during a refactor."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2ffb5a3aa8c2af86", "name": "Frontend route `currency-impact` has no Link/navigate to it \u2014 client/src/App.tsx", "shortDescription": {"text": "Frontend route `currency-impact` has no Link/navigate to it \u2014 client/src/App.tsx"}, "fullDescription": {"text": "The route is registered but no `<Link to=\u2026>` or `navigate(\u2026)` in the codebase navigates here. Either it's reachable only via direct URL (intentional), it's dead, or the link broke during a refactor."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-749cbc0ddb95423a", "name": "Frontend route `privacy` has no Link/navigate to it \u2014 client/src/App.tsx", "shortDescription": {"text": "Frontend route `privacy` has no Link/navigate to it \u2014 client/src/App.tsx"}, "fullDescription": {"text": "The route is registered but no `<Link to=\u2026>` or `navigate(\u2026)` in the codebase navigates here. Either it's reachable only via direct URL (intentional), it's dead, or the link broke during a refactor."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-367d8b37d66bcb9e", "name": "Frontend route `terms` has no Link/navigate to it \u2014 client/src/App.tsx", "shortDescription": {"text": "Frontend route `terms` has no Link/navigate to it \u2014 client/src/App.tsx"}, "fullDescription": {"text": "The route is registered but no `<Link to=\u2026>` or `navigate(\u2026)` in the codebase navigates here. Either it's reachable only via direct URL (intentional), it's dead, or the link broke during a refactor."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a5cf92e4be779104", "name": "Frontend route `analytics` has no Link/navigate to it \u2014 client/src/App.tsx", "shortDescription": {"text": "Frontend route `analytics` has no Link/navigate to it \u2014 client/src/App.tsx"}, "fullDescription": {"text": "The route is registered but no `<Link to=\u2026>` or `navigate(\u2026)` in the codebase navigates here. Either it's reachable only via direct URL (intentional), it's dead, or the link broke during a refactor."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-efe47923ac93fbc5", "name": "Frontend route `ai-chat` has no Link/navigate to it \u2014 client/src/App.tsx", "shortDescription": {"text": "Frontend route `ai-chat` has no Link/navigate to it \u2014 client/src/App.tsx"}, "fullDescription": {"text": "The route is registered but no `<Link to=\u2026>` or `navigate(\u2026)` in the codebase navigates here. Either it's reachable only via direct URL (intentional), it's dead, or the link broke during a refactor."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e6da630c62f4fab9", "name": "FastAPI POST `optimize_portfolio` without auth dependency \u2014 python-analytics/routers/portfolio.py:110", "shortDescription": {"text": "FastAPI POST `optimize_portfolio` without auth dependency \u2014 python-analytics/routers/portfolio.py:110"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-30709fc8c88a9397", "name": "FastAPI POST `risk_metrics` without auth dependency \u2014 python-analytics/routers/portfolio.py:208", "shortDescription": {"text": "FastAPI POST `risk_metrics` without auth dependency \u2014 python-analytics/routers/portfolio.py:208"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-2bf92fa3eb4595c9", "name": "FastAPI POST `advanced_screen` without auth dependency \u2014 python-analytics/routers/screener.py:39", "shortDescription": {"text": "FastAPI POST `advanced_screen` without auth dependency \u2014 python-analytics/routers/screener.py:39"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b4b1c730684395d2", "name": "FastAPI POST `predict` without auth dependency \u2014 python-analytics/routers/prediction.py:97", "shortDescription": {"text": "FastAPI POST `predict` without auth dependency \u2014 python-analytics/routers/prediction.py:97"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-c75b29c6ee8f2e5f", "name": "FastAPI POST `backtest` without auth dependency \u2014 python-analytics/routers/prediction.py:369", "shortDescription": {"text": "FastAPI POST `backtest` without auth dependency \u2014 python-analytics/routers/prediction.py:369"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-7e4ef9b70ed8fd27", "name": "FastAPI POST `technical_analysis` without auth dependency \u2014 python-analytics/routers/technical.py:66", "shortDescription": {"text": "FastAPI POST `technical_analysis` without auth dependency \u2014 python-analytics/routers/technical.py:66"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-f516d788b1e8f6e2", "name": "FastAPI POST `support_resistance` without auth dependency \u2014 python-analytics/routers/technical.py:302", "shortDescription": {"text": "FastAPI POST `support_resistance` without auth dependency \u2014 python-analytics/routers/technical.py:302"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-f72c1dcf183e66aa", "name": "FastAPI POST `pattern_detection` without auth dependency \u2014 python-analytics/routers/technical.py:385", "shortDescription": {"text": "FastAPI POST `pattern_detection` without auth dependency \u2014 python-analytics/routers/technical.py:385"}, "fullDescription": {"text": "`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-85701369b05e1157", "name": "JS PUT `/api/admin/users/${id}` admin endpoint without auth \u2014 client/src/api/admin.ts:15", "shortDescription": {"text": "JS PUT `/api/admin/users/${id}` admin endpoint without auth \u2014 client/src/api/admin.ts:15"}, "fullDescription": {"text": "Admin-scoped JS route with no recognizable auth: no middleware-position guard, no router-level guard above it in this file, and no inline permission call within the first 15 lines of the handler. If auth is applied where this router is mounted, dismiss with reason `by_design` or tag the route `// public-by-design`."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-1c7c0ff9c044df6e", "name": "JS POST `/api/admin/kyc/${userId}/approve` admin endpoint without auth \u2014 client/src/api/admin.ts:25", "shortDescription": {"text": "JS POST `/api/admin/kyc/${userId}/approve` admin endpoint without auth \u2014 client/src/api/admin.ts:25"}, "fullDescription": {"text": "Admin-scoped JS route with no recognizable auth: no middleware-position guard, no router-level guard above it in this file, and no inline permission call within the first 15 lines of the handler. If auth is applied where this router is mounted, dismiss with reason `by_design` or tag the route `// public-by-design`."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-71071e2e68c75728", "name": "JS POST `/api/admin/kyc/${userId}/reject` admin endpoint without auth \u2014 client/src/api/admin.ts:30", "shortDescription": {"text": "JS POST `/api/admin/kyc/${userId}/reject` admin endpoint without auth \u2014 client/src/api/admin.ts:30"}, "fullDescription": {"text": "Admin-scoped JS route with no recognizable auth: no middleware-position guard, no router-level guard above it in this file, and no inline permission call within the first 15 lines of the handler. If auth is applied where this router is mounted, dismiss with reason `by_design` or tag the route `// public-by-design`."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-1037e935050c7c66", "name": "Dangling fetch: GET https://www.jseinvestor.com/ (jse-scraper.js:156)", "shortDescription": {"text": "Dangling fetch: GET https://www.jseinvestor.com/ (jse-scraper.js:156)"}, "fullDescription": {"text": "`jse-scraper.js:156` calls `GET https://www.jseinvestor.com/` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: axios\nNormalized path used for matching: `/https:/www.jseinvestor.com`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-83dd19f32a1e067b", "name": "Dangling fetch: GET https://www.jamstockex.com/trading/trade-summary/ (jse-scraper.js:216)", "shortDescription": {"text": "Dangling fetch: GET https://www.jamstockex.com/trading/trade-summary/ (jse-scraper.js:216)"}, "fullDescription": {"text": "`jse-scraper.js:216` calls `GET https://www.jamstockex.com/trading/trade-summary/` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: axios\nNormalized path used for matching: `/https:/www.jamstockex.com/trading/trade-summary`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a09e887187eba3e4", "name": "Dangling fetch: GET https://jamaica.loopnews.com/category/business (news-scraper.js:148)", "shortDescription": {"text": "Dangling fetch: GET https://jamaica.loopnews.com/category/business (news-scraper.js:148)"}, "fullDescription": {"text": "`news-scraper.js:148` calls `GET https://jamaica.loopnews.com/category/business` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: axios\nNormalized path used for matching: `/https:/jamaica.loopnews.com/category/business`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-30b6d5e561c6d27e", "name": "Dangling fetch: GET https://radiojamaicanewsonline.com/business (news-scraper.js:165)", "shortDescription": {"text": "Dangling fetch: GET https://radiojamaicanewsonline.com/business (news-scraper.js:165)"}, "fullDescription": {"text": "`news-scraper.js:165` calls `GET https://radiojamaicanewsonline.com/business` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: axios\nNormalized path used for matching: `/https:/radiojamaicanewsonline.com/business`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-8fa4ad2dc0705353", "name": "Dangling fetch: GET https://news.google.com/rss/search?q=${encodeURIComponent(query)}&hl=${hl}&gl=${gl}&ceid=${ceid} (ne", "shortDescription": {"text": "Dangling fetch: GET https://news.google.com/rss/search?q=${encodeURIComponent(query)}&hl=${hl}&gl=${gl}&ceid=${ceid} (news-scraper.js:186)"}, "fullDescription": {"text": "`news-scraper.js:186` calls `GET https://news.google.com/rss/search?q=${encodeURIComponent(query)}&hl=${hl}&gl=${gl}&ceid=${ceid}` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: axios\nNormalized path used for matching: `/https:/news.google.com/rss/search`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b521ca827f4ff8b1", "name": "Dangling fetch: POST https://api.elevenlabs.io/v1/text-to-speech/${VOICE_ID} (src/routes/ai.routes.js:627)", "shortDescription": {"text": "Dangling fetch: POST https://api.elevenlabs.io/v1/text-to-speech/${VOICE_ID} (src/routes/ai.routes.js:627)"}, "fullDescription": {"text": "`src/routes/ai.routes.js:627` calls `POST https://api.elevenlabs.io/v1/text-to-speech/${VOICE_ID}` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/https:/api.elevenlabs.io/v1/text-to-speech/<p>`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-fe87af949fef1eda", "name": "Dangling fetch: POST https://api.elevenlabs.io/v1/text-to-speech/${VOICE_ID} (src/routes/ai.routes.js:766)", "shortDescription": {"text": "Dangling fetch: POST https://api.elevenlabs.io/v1/text-to-speech/${VOICE_ID} (src/routes/ai.routes.js:766)"}, "fullDescription": {"text": "`src/routes/ai.routes.js:766` calls `POST https://api.elevenlabs.io/v1/text-to-speech/${VOICE_ID}` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/https:/api.elevenlabs.io/v1/text-to-speech/<p>`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-0a5a53bac5cb7db6", "name": "Unused endpoint: POST /optimize", "shortDescription": {"text": "Unused endpoint: POST /optimize"}, "fullDescription": {"text": "`python-analytics/routers/portfolio.py` declares `POST /optimize` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-61552fd77f1d7aef", "name": "Unused endpoint: POST /risk-metrics", "shortDescription": {"text": "Unused endpoint: POST /risk-metrics"}, "fullDescription": {"text": "`python-analytics/routers/portfolio.py` declares `POST /risk-metrics` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-dad12f1ed2073904", "name": "Unused endpoint: POST /advanced-screen", "shortDescription": {"text": "Unused endpoint: POST /advanced-screen"}, "fullDescription": {"text": "`python-analytics/routers/screener.py` declares `POST /advanced-screen` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-25d3af48cd83c9e6", "name": "Unused endpoint: POST /predict", "shortDescription": {"text": "Unused endpoint: POST /predict"}, "fullDescription": {"text": "`python-analytics/routers/prediction.py` declares `POST /predict` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7563b119d2657acd", "name": "Unused endpoint: POST /backtest", "shortDescription": {"text": "Unused endpoint: POST /backtest"}, "fullDescription": {"text": "`python-analytics/routers/prediction.py` declares `POST /backtest` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-bf2e68ef184d54f0", "name": "Unused endpoint: POST /technical-analysis", "shortDescription": {"text": "Unused endpoint: POST /technical-analysis"}, "fullDescription": {"text": "`python-analytics/routers/technical.py` declares `POST /technical-analysis` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f9d1182225fbcd35", "name": "Unused endpoint: POST /support-resistance", "shortDescription": {"text": "Unused endpoint: POST /support-resistance"}, "fullDescription": {"text": "`python-analytics/routers/technical.py` declares `POST /support-resistance` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0cd0a6538a6a6fa1", "name": "Unused endpoint: POST /pattern-detection", "shortDescription": {"text": "Unused endpoint: POST /pattern-detection"}, "fullDescription": {"text": "`python-analytics/routers/technical.py` declares `POST /pattern-detection` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-dde3adb27bf7eebe", "name": "Unused endpoint: USE /api", "shortDescription": {"text": "Unused endpoint: USE /api"}, "fullDescription": {"text": "`frontend-server.js` declares `USE /api` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1e0fe289f591eb69", "name": "Unused endpoint: USE /analyze", "shortDescription": {"text": "Unused endpoint: USE /analyze"}, "fullDescription": {"text": "`frontend-server.js` declares `USE /analyze` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6eb452fbfb454d20", "name": "Unused endpoint: USE /api/auth", "shortDescription": {"text": "Unused endpoint: USE /api/auth"}, "fullDescription": {"text": "`src/app.js` declares `USE /api/auth` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d93a530ce10d47d9", "name": "Unused endpoint: USE /api/admin", "shortDescription": {"text": "Unused endpoint: USE /api/admin"}, "fullDescription": {"text": "`src/app.js` declares `USE /api/admin` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d803e7e5650befd4", "name": "Unused endpoint: USE /api/analytics", "shortDescription": {"text": "Unused endpoint: USE /api/analytics"}, "fullDescription": {"text": "`src/app.js` declares `USE /api/analytics` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f1d9be6a3dc8deaf", "name": "Unused endpoint: USE /api/us", "shortDescription": {"text": "Unused endpoint: USE /api/us"}, "fullDescription": {"text": "`src/app.js` declares `USE /api/us` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9d2517f9eafc5297", "name": "Unused endpoint: POST /api/chat", "shortDescription": {"text": "Unused endpoint: POST /api/chat"}, "fullDescription": {"text": "`src/middleware/aiGuard.js` declares `POST /api/chat` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-991a80734e903c93", "name": "Unused endpoint: GET /api/docs/openapi.json", "shortDescription": {"text": "Unused endpoint: GET /api/docs/openapi.json"}, "fullDescription": {"text": "`src/routes/docs.routes.js` declares `GET /api/docs/openapi.json` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a6c75407e0e70886", "name": "Unused endpoint: GET /api/docs", "shortDescription": {"text": "Unused endpoint: GET /api/docs"}, "fullDescription": {"text": "`src/routes/docs.routes.js` declares `GET /api/docs` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-139e947b4742b94d", "name": "Unused endpoint: GET /api/stocks/:symbol", "shortDescription": {"text": "Unused endpoint: GET /api/stocks/:symbol"}, "fullDescription": {"text": "`src/routes/market.routes.js` declares `GET /api/stocks/:symbol` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-70f71b7160e9b7db", "name": "Unused endpoint: GET /api/market-overview", "shortDescription": {"text": "Unused endpoint: GET /api/market-overview"}, "fullDescription": {"text": "`src/routes/market.routes.js` declares `GET /api/market-overview` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b1bcd3fa7164eea4", "name": "Unused endpoint: GET /api/history/:symbol", "shortDescription": {"text": "Unused endpoint: GET /api/history/:symbol"}, "fullDescription": {"text": "`src/routes/market.routes.js` declares `GET /api/history/:symbol` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-829adf31f7d73752", "name": "Unused endpoint: GET /api/stocks/:symbol/history", "shortDescription": {"text": "Unused endpoint: GET /api/stocks/:symbol/history"}, "fullDescription": {"text": "`src/routes/market.routes.js` declares `GET /api/stocks/:symbol/history` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2e355a963f84bfbf", "name": "Unused endpoint: GET /api/stocks/:symbol/profile", "shortDescription": {"text": "Unused endpoint: GET /api/stocks/:symbol/profile"}, "fullDescription": {"text": "`src/routes/market.routes.js` declares `GET /api/stocks/:symbol/profile` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2205760646975fb8", "name": "Unused endpoint: GET /api/search", "shortDescription": {"text": "Unused endpoint: GET /api/search"}, "fullDescription": {"text": "`src/routes/market.routes.js` declares `GET /api/search` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d34459896d46813f", "name": "Unused endpoint: GET /api/stream/prices", "shortDescription": {"text": "Unused endpoint: GET /api/stream/prices"}, "fullDescription": {"text": "`src/routes/market.routes.js` declares `GET /api/stream/prices` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e2103dbc81e9235c", "name": "Unused endpoint: GET /api/sectors", "shortDescription": {"text": "Unused endpoint: GET /api/sectors"}, "fullDescription": {"text": "`src/routes/market.routes.js` declares `GET /api/sectors` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9191bf29981fd17d", "name": "Unused endpoint: POST /api/screener", "shortDescription": {"text": "Unused endpoint: POST /api/screener"}, "fullDescription": {"text": "`src/routes/market.routes.js` declares `POST /api/screener` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c4221670861e52f0", "name": "Unused endpoint: POST /api/compare", "shortDescription": {"text": "Unused endpoint: POST /api/compare"}, "fullDescription": {"text": "`src/routes/market.routes.js` declares `POST /api/compare` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-71b5dce4fdc0b9ee", "name": "Unused endpoint: GET /api/research/:symbol", "shortDescription": {"text": "Unused endpoint: GET /api/research/:symbol"}, "fullDescription": {"text": "`src/routes/market.routes.js` declares `GET /api/research/:symbol` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e3e3d5aeae152b1a", "name": "Unused endpoint: GET /api/forex", "shortDescription": {"text": "Unused endpoint: GET /api/forex"}, "fullDescription": {"text": "`src/routes/market.routes.js` declares `GET /api/forex` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-62e284e16649ef51", "name": "Unused endpoint: GET /api/global-markets", "shortDescription": {"text": "Unused endpoint: GET /api/global-markets"}, "fullDescription": {"text": "`src/routes/market.routes.js` declares `GET /api/global-markets` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-778f45a124dbd2e7", "name": "Unused endpoint: GET /api/news", "shortDescription": {"text": "Unused endpoint: GET /api/news"}, "fullDescription": {"text": "`src/routes/market.routes.js` declares `GET /api/news` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4057ed8815158225", "name": "Unused endpoint: GET /api/currency-impact", "shortDescription": {"text": "Unused endpoint: GET /api/currency-impact"}, "fullDescription": {"text": "`src/routes/market.routes.js` declares `GET /api/currency-impact` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e5435f50028f9246", "name": "Unused endpoint: GET /api/dividends", "shortDescription": {"text": "Unused endpoint: GET /api/dividends"}, "fullDescription": {"text": "`src/routes/market.routes.js` declares `GET /api/dividends` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a369f71214e9ef56", "name": "Unused endpoint: GET /api/leaderboard", "shortDescription": {"text": "Unused endpoint: GET /api/leaderboard"}, "fullDescription": {"text": "`src/routes/market.routes.js` declares `GET /api/leaderboard` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9855e703086209ba", "name": "Unused endpoint: GET /api/technicals/:symbol", "shortDescription": {"text": "Unused endpoint: GET /api/technicals/:symbol"}, "fullDescription": {"text": "`src/routes/market.routes.js` declares `GET /api/technicals/:symbol` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-33a002a8601b0d71", "name": "Unused endpoint: GET /technical/:symbol", "shortDescription": {"text": "Unused endpoint: GET /technical/:symbol"}, "fullDescription": {"text": "`src/routes/analytics.routes.js` declares `GET /technical/:symbol` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-cd6a84c29b031d6e", "name": "Unused endpoint: GET /technical/:symbol/advanced", "shortDescription": {"text": "Unused endpoint: GET /technical/:symbol/advanced"}, "fullDescription": {"text": "`src/routes/analytics.routes.js` declares `GET /technical/:symbol/advanced` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b49be01833e72e05", "name": "Unused endpoint: POST /indicator", "shortDescription": {"text": "Unused endpoint: POST /indicator"}, "fullDescription": {"text": "`src/routes/analytics.routes.js` declares `POST /indicator` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5141210e39f74a05", "name": "Unused endpoint: POST /portfolio", "shortDescription": {"text": "Unused endpoint: POST /portfolio"}, "fullDescription": {"text": "`src/routes/analytics.routes.js` declares `POST /portfolio` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6601964148753c83", "name": "Unused endpoint: POST /portfolio/optimize", "shortDescription": {"text": "Unused endpoint: POST /portfolio/optimize"}, "fullDescription": {"text": "`src/routes/analytics.routes.js` declares `POST /portfolio/optimize` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-cd6345ae88bb30d2", "name": "Unused endpoint: POST /portfolio/risk", "shortDescription": {"text": "Unused endpoint: POST /portfolio/risk"}, "fullDescription": {"text": "`src/routes/analytics.routes.js` declares `POST /portfolio/risk` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ae5e1ff189dc07e2", "name": "Unused endpoint: GET /predict/:symbol", "shortDescription": {"text": "Unused endpoint: GET /predict/:symbol"}, "fullDescription": {"text": "`src/routes/analytics.routes.js` declares `GET /predict/:symbol` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-dbe559e9b33f0b69", "name": "Unused endpoint: POST /screener", "shortDescription": {"text": "Unused endpoint: POST /screener"}, "fullDescription": {"text": "`src/routes/analytics.routes.js` declares `POST /screener` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6edf5109ba168e44", "name": "Unused endpoint: POST /compound-growth", "shortDescription": {"text": "Unused endpoint: POST /compound-growth"}, "fullDescription": {"text": "`src/routes/analytics.routes.js` declares `POST /compound-growth` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c6742e232cbc195d", "name": "Unused endpoint: POST /retirement", "shortDescription": {"text": "Unused endpoint: POST /retirement"}, "fullDescription": {"text": "`src/routes/analytics.routes.js` declares `POST /retirement` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e272c3d08239da22", "name": "Unused endpoint: POST /loan", "shortDescription": {"text": "Unused endpoint: POST /loan"}, "fullDescription": {"text": "`src/routes/analytics.routes.js` declares `POST /loan` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-34c5e1a3dd987b00", "name": "Unused endpoint: POST /irr", "shortDescription": {"text": "Unused endpoint: POST /irr"}, "fullDescription": {"text": "`src/routes/analytics.routes.js` declares `POST /irr` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1ee0dcc6a3f24d70", "name": "Unused endpoint: POST /api/payments/create-order", "shortDescription": {"text": "Unused endpoint: POST /api/payments/create-order"}, "fullDescription": {"text": "`src/routes/payment.routes.js` declares `POST /api/payments/create-order` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-eeb0815f32f05891", "name": "Unused endpoint: POST /api/payments/capture-order", "shortDescription": {"text": "Unused endpoint: POST /api/payments/capture-order"}, "fullDescription": {"text": "`src/routes/payment.routes.js` declares `POST /api/payments/capture-order` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8c6f674e3f6d4b50", "name": "Unused endpoint: POST /api/payments/create-withdrawal", "shortDescription": {"text": "Unused endpoint: POST /api/payments/create-withdrawal"}, "fullDescription": {"text": "`src/routes/payment.routes.js` declares `POST /api/payments/create-withdrawal` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/25198"}, "properties": {"repository": "damarleypowell/jamaica-financial-advisor-v2", "repoUrl": "https://github.com/damarleypowell/jamaica-financial-advisor-v2", "branch": "main"}, "results": [{"ruleId": "scanner-cf16d9a722a5fcd1", "level": "note", "message": {"text": "Possibly dead Python function: neg_sharpe"}, "properties": {"repobilityId": "028a3eeaf28e946e", "scanner": "scanner-primary", "fingerprint": "cf16d9a722a5fcd1", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "python-analytics/routers/portfolio.py:142"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-28b0784e5fe06ea5", "level": "note", "message": {"text": "Possibly dead Python function: fetch_prices_from_node"}, "properties": {"repobilityId": "2080d6992f81b63e", "scanner": "scanner-primary", "fingerprint": "28b0784e5fe06ea5", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "python-analytics/services/data_service.py:125"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f58ce79d1de89c5e", "level": "note", "message": {"text": "Possibly dead Python function: fetch_finnhub_quote"}, "properties": {"repobilityId": "3ee15ea7850cc2e1", "scanner": "scanner-primary", "fingerprint": "f58ce79d1de89c5e", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "python-analytics/services/data_service.py:223"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b86fd86946916164", "level": "note", "message": {"text": "Possibly dead Python function: fetch_training_data"}, "properties": {"repobilityId": "6cfcc9ff24614601", "scanner": "scanner-primary", "fingerprint": "b86fd86946916164", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "python-analytics/services/data_service.py:242"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c84a17517ad7bc1a", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 frontend-server.js:57"}, "properties": {"repobilityId": "73672839f3c9c998", "scanner": "scanner-primary", "fingerprint": "c84a17517ad7bc1a", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-f1041b8b50d7de06", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 jse-scraper.js:42"}, "properties": {"repobilityId": "9e79166e942adb7b", "scanner": "scanner-primary", "fingerprint": "f1041b8b50d7de06", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-d49b9368abdeb456", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 news-scraper.js:275"}, "properties": {"repobilityId": "4eec2d818c4e6b5d", "scanner": "scanner-primary", "fingerprint": "d49b9368abdeb456", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-e6e5ae8c91c12ddf", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/migrate-json-to-pg.js:21"}, "properties": {"repobilityId": "52ad9906e6ef9722", "scanner": "scanner-primary", "fingerprint": "e6e5ae8c91c12ddf", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-1dcd7d57b9e1b853", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/seed-admin.js:34"}, "properties": {"repobilityId": "0638d52e096ddb02", "scanner": "scanner-primary", "fingerprint": "1dcd7d57b9e1b853", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-9e55a5d880fd91df", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/seed-users.js:52"}, "properties": {"repobilityId": "c36b9cc2d81e21da", "scanner": "scanner-primary", "fingerprint": "9e55a5d880fd91df", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-2e034cf24d890aab", "level": "note", "message": {"text": "Icon-only button without accessible name \u2014 frontend/src/components/ui/AppTour.tsx:234"}, "properties": {"repobilityId": "8fea04f439cdeba1", "scanner": "scanner-primary", "fingerprint": "2e034cf24d890aab", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.button.no-label"]}}, {"ruleId": "scanner-9191697afd3ed9f6", "level": "note", "message": {"text": "Icon-only button without accessible name \u2014 frontend/src/features/admin/Admin.tsx:205"}, "properties": {"repobilityId": "a1667421d8925c51", "scanner": "scanner-primary", "fingerprint": "9191697afd3ed9f6", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.button.no-label"]}}, {"ruleId": "scanner-e9762af472f97c31", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 src/server.js:23"}, "properties": {"repobilityId": "51ec0d6adae748e2", "scanner": "scanner-primary", "fingerprint": "e9762af472f97c31", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-bd74faffff3e0d63", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 src/middleware/rateLimit.js:17"}, "properties": {"repobilityId": "1620bebcf85d9c58", "scanner": "scanner-primary", "fingerprint": "bd74faffff3e0d63", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-87902277fede235d", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 src/services/market.service.js:26"}, "properties": {"repobilityId": "c142306ea1eb5a56", "scanner": "scanner-primary", "fingerprint": "87902277fede235d", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-207e61c5e0e8c544", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 src/services/email.service.js:23"}, "properties": {"repobilityId": "a3a5acb6a9727105", "scanner": "scanner-primary", "fingerprint": "207e61c5e0e8c544", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-5480c7f7d6788b7a", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 src/config/database.js:31"}, "properties": {"repobilityId": "9c3cca06b12b4b7f", "scanner": "scanner-primary", "fingerprint": "5480c7f7d6788b7a", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-c6b6eadabadcb2b6", "level": "warning", "message": {"text": "`dangerouslySetInnerHTML` used in a React component \u2014 public-react/assets/index-DEXxlYPP.js:10"}, "properties": {"repobilityId": "276c81b80302e513", "scanner": "scanner-primary", "fingerprint": "c6b6eadabadcb2b6", "layer": "frontend", "severity": "medium", "confidence": 1.0, "tags": ["frontend-quality", "fq.dangerous-html"]}}, {"ruleId": "scanner-ad466e0974ca3def", "level": "warning", "message": {"text": "Privileged port 587 in use"}, "properties": {"repobilityId": "a87a96c3b2e62c08", "scanner": "scanner-primary", "fingerprint": "ad466e0974ca3def", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/services/email.service.js"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d63da3583b14afc0", "level": "warning", "message": {"text": "Dockerfile runs as root: Dockerfile"}, "properties": {"repobilityId": "a2ed1bd120e507db", "scanner": "scanner-primary", "fingerprint": "d63da3583b14afc0", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-a35c6a00f751880f", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: node:20-slim"}, "properties": {"repobilityId": "be924fbee382ebe0", "scanner": "scanner-primary", "fingerprint": "a35c6a00f751880f", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a35c6a00f751880f", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: node:20-slim"}, "properties": {"repobilityId": "df13b024226e3d53", "scanner": "scanner-primary", "fingerprint": "a35c6a00f751880f", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "Dockerfile"}, "region": {"startLine": 5}}}]}, {"ruleId": "scanner-f6d98aea9b30273e", "level": "error", "message": {"text": "Possible secret in scripts/seed-admin.js"}, "properties": {"repobilityId": "691f39a84bab0c6b", "scanner": "scanner-primary", "fingerprint": "f6d98aea9b30273e", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/seed-admin.js"}, "region": {"startLine": 13}}}]}, {"ruleId": "scanner-3fcf750b8d838aff", "level": "error", "message": {"text": "Possible secret in scripts/seed-users.js"}, "properties": {"repobilityId": "14baa7038c65e19b", "scanner": "scanner-primary", "fingerprint": "3fcf750b8d838aff", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/seed-users.js"}, "region": {"startLine": 21}}}]}, {"ruleId": "scanner-3fcf750b8d838aff", "level": "error", "message": {"text": "Possible secret in scripts/seed-users.js"}, "properties": {"repobilityId": "14baa7038c65e19b", "scanner": "scanner-primary", "fingerprint": "3fcf750b8d838aff", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/seed-users.js"}, "region": {"startLine": 28}}}]}, {"ruleId": "scanner-61cdd95ceefeef2f", "level": "warning", "message": {"text": "Insecure pattern 'local_storage_auth_token' in frontend/src/stores/auth.ts:52"}, "properties": {"repobilityId": "8e25876318aac303", "scanner": "scanner-primary", "fingerprint": "61cdd95ceefeef2f", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "local_storage_auth_token"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/src/stores/auth.ts"}, "region": {"startLine": 52}}}]}, {"ruleId": "scanner-f18957e2b21f1782", "level": "warning", "message": {"text": "Insecure pattern 'local_storage_auth_token' in frontend/src/components/modals/AuthModal.tsx:431"}, "properties": {"repobilityId": "bb91956ccd6e2190", "scanner": "scanner-primary", "fingerprint": "f18957e2b21f1782", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "local_storage_auth_token"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/src/components/modals/AuthModal.tsx"}, "region": {"startLine": 431}}}]}, {"ruleId": "scanner-87e99da97bcfee1a", "level": "warning", "message": {"text": "Insecure pattern 'dangerous_innerhtml' in public-react/assets/index-DEXxlYPP.js:10"}, "properties": {"repobilityId": "52e51d1ab60bdaad", "scanner": "scanner-primary", "fingerprint": "87e99da97bcfee1a", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "dangerous_innerhtml"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "public-react/assets/index-DEXxlYPP.js"}, "region": {"startLine": 10}}}]}, {"ruleId": "scanner-0a1ada62693131dd", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in public-react/assets/index-DEXxlYPP.js:9"}, "properties": {"repobilityId": "298d44778f863bc4", "scanner": "scanner-primary", "fingerprint": "0a1ada62693131dd", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "public-react/assets/index-DEXxlYPP.js"}, "region": {"startLine": 9}}}]}, {"ruleId": "scanner-db012ec959f927da", "level": "warning", "message": {"text": "Insecure pattern 'local_storage_auth_token' in client/src/api/client.ts:53"}, "properties": {"repobilityId": "3d4f0eb4a03272bf", "scanner": "scanner-primary", "fingerprint": "db012ec959f927da", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "local_storage_auth_token"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "client/src/api/client.ts"}, "region": {"startLine": 53}}}]}, {"ruleId": "scanner-10b984e6634ab921", "level": "warning", "message": {"text": "Insecure pattern 'local_storage_auth_token' in client/src/context/AuthContext.tsx:100"}, "properties": {"repobilityId": "85d685e957cec2ab", "scanner": "scanner-primary", "fingerprint": "10b984e6634ab921", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "local_storage_auth_token"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "client/src/context/AuthContext.tsx"}, "region": {"startLine": 100}}}]}, {"ruleId": "scanner-a20ee6028b4d9d5a", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in public/app.js:51"}, "properties": {"repobilityId": "5192b9054ebe3f07", "scanner": "scanner-primary", "fingerprint": "a20ee6028b4d9d5a", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "public/app.js"}, "region": {"startLine": 51}}}]}, {"ruleId": "scanner-ec0e887139e8120a", "level": "warning", "message": {"text": "Insecure pattern 'local_storage_auth_token' in public/app.js:403"}, "properties": {"repobilityId": "40128feb2b03080f", "scanner": "scanner-primary", "fingerprint": "ec0e887139e8120a", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "local_storage_auth_token"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "public/app.js"}, "region": {"startLine": 403}}}]}, {"ruleId": "scanner-e354e77aff3dff94", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in public/admin.html:210"}, "properties": {"repobilityId": "df5203f722eec321", "scanner": "scanner-primary", "fingerprint": "e354e77aff3dff94", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "public/admin.html"}, "region": {"startLine": 210}}}]}, {"ruleId": "scanner-4601e3ad3bb28677", "level": "warning", "message": {"text": "No CI/CD pipelines detected"}, "properties": {"repobilityId": "c3ee439bce2bc51e", "scanner": "scanner-primary", "fingerprint": "4601e3ad3bb28677", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["coverage"]}}, {"ruleId": "scanner-fe1ae1ceec2882a1", "level": "note", "message": {"text": "Very large file: frontend/src/features/dashboard/Dashboard.tsx (1438 lines)"}, "properties": {"repobilityId": "b38a6fb6690cc1d4", "scanner": "scanner-primary", "fingerprint": "fe1ae1ceec2882a1", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-2eda370417d4e140", "level": "note", "message": {"text": "Very large file: frontend/src/features/admin/Admin.tsx (948 lines)"}, "properties": {"repobilityId": "f59047bcc01575e4", "scanner": "scanner-primary", "fingerprint": "2eda370417d4e140", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-cc31ca7fa0dfc602", "level": "note", "message": {"text": "Very large file: frontend/src/features/learn/Learn.tsx (1706 lines)"}, "properties": {"repobilityId": "869986e27acf5091", "scanner": "scanner-primary", "fingerprint": "cc31ca7fa0dfc602", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-f71f8ce247920a9a", "level": "note", "message": {"text": "Very large file: src/routes/market.routes.js (1510 lines)"}, "properties": {"repobilityId": "4323a01c1f79b502", "scanner": "scanner-primary", "fingerprint": "f71f8ce247920a9a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-8c31335b69837a7b", "level": "note", "message": {"text": "Very large file: src/routes/auth.routes.js (1895 lines)"}, "properties": {"repobilityId": "7dff5e048d84dac9", "scanner": "scanner-primary", "fingerprint": "8c31335b69837a7b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-cc26446bb08ab8bc", "level": "note", "message": {"text": "Very large file: client/src/pages/TechnicalAnalysis.tsx (949 lines)"}, "properties": {"repobilityId": "79cb62303f113ef2", "scanner": "scanner-primary", "fingerprint": "cc26446bb08ab8bc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-55b541f80ea3ce39", "level": "note", "message": {"text": "Very large file: public/app.js (6637 lines)"}, "properties": {"repobilityId": "ce805b07178bda03", "scanner": "scanner-primary", "fingerprint": "55b541f80ea3ce39", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-6893a6c8b0861585", "level": "warning", "message": {"text": "Very low test-to-source ratio"}, "properties": {"repobilityId": "54a7de3f06314bf0", "scanner": "scanner-primary", "fingerprint": "6893a6c8b0861585", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["tests", "coverage"]}}, {"ruleId": "scanner-141b30a41e03817b", "level": "note", "message": {"text": "No license file detected"}, "properties": {"repobilityId": "b74220e36515b2d3", "scanner": "scanner-primary", "fingerprint": "141b30a41e03817b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["license", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-b3ed68815bca2f8c", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: package.json"}, "properties": {"repobilityId": "7edae0550c126386", "scanner": "scanner-primary", "fingerprint": "b3ed68815bca2f8c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0e8a76eb13fd3249", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: frontend/package.json"}, "properties": {"repobilityId": "d8c65da5b68ee95b", "scanner": "scanner-primary", "fingerprint": "0e8a76eb13fd3249", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1a6aeb84f8544549", "level": "note", "message": {"text": "Node manifest has dependencies but no lockfile: client/package.json"}, "properties": {"repobilityId": "289cda4e29a77d84", "scanner": "scanner-primary", "fingerprint": "1a6aeb84f8544549", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["dependency", "lockfile", "reproducibility", "generated-repo-pattern"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "client/package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3ab5d313dda8e5f9", "level": "note", "message": {"text": "Debug logging residue appears in source files"}, "properties": {"repobilityId": "a81864554031b82b", "scanner": "scanner-primary", "fingerprint": "3ab5d313dda8e5f9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["debug", "cleanup", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-72b2a6250083a784", "level": "warning", "message": {"text": "Placeholder or mock-heavy implementation detected"}, "properties": {"repobilityId": "be16ff118d8cbcbb", "scanner": "scanner-primary", "fingerprint": "72b2a6250083a784", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "incomplete", "generated-repo-pattern"]}}, {"ruleId": "scanner-2d0c7b7ab8f8aacf", "level": "warning", "message": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "properties": {"repobilityId": "2ac28017a4bf0084", "scanner": "scanner-primary", "fingerprint": "2d0c7b7ab8f8aacf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "critical-flow", "generated-repo-pattern"]}}, {"ruleId": "scanner-b9088664ace7f748", "level": "warning", "message": {"text": "Composite production-readiness gap"}, "properties": {"repobilityId": "4b5b4a1fd8c20e49", "scanner": "scanner-primary", "fingerprint": "b9088664ace7f748", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["production-readiness", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-749d4bc1bd66df5f", "level": "warning", "message": {"text": "Agent instructions exist but release-hardening basics are missing"}, "properties": {"repobilityId": "e001b0e950a63e52", "scanner": "scanner-primary", "fingerprint": "749d4bc1bd66df5f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-bea357a6497a2d5d", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: CLAUDE.md"}, "properties": {"repobilityId": "aae72df3934829ac", "scanner": "scanner-primary", "fingerprint": "bea357a6497a2d5d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "CLAUDE.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-fa9cd20b9a7123dd", "level": "note", "message": {"text": "Legacy-named symbol `gf_tour_v1` in scripts/shot.mjs:44"}, "properties": {"repobilityId": "08e6236e2194fb52", "scanner": "scanner-primary", "fingerprint": "fa9cd20b9a7123dd", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-5234f96b9b74c82e", "level": "note", "message": {"text": "Legacy-named symbol `gf_compliance_v1` in frontend/src/components/modals/ComplianceModal.tsx:5"}, "properties": {"repobilityId": "88eb7a319b98eef9", "scanner": "scanner-primary", "fingerprint": "5234f96b9b74c82e", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-1c58078f0e9af85c", "level": "note", "message": {"text": "Legacy-named symbol `gf_tour_v1` in frontend/src/components/ui/FeatureGuide.tsx:7"}, "properties": {"repobilityId": "7dd61d1438e3dcbf", "scanner": "scanner-primary", "fingerprint": "1c58078f0e9af85c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-7d08371957a63b98", "level": "note", "message": {"text": "Legacy-named symbol `gf_tour_v1` in frontend/src/components/ui/AppTour.tsx:5"}, "properties": {"repobilityId": "8645740fca30488b", "scanner": "scanner-primary", "fingerprint": "7d08371957a63b98", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-6db4605ceec5e591", "level": "note", "message": {"text": "Legacy-named symbol `gotham_heatmap_v2` in frontend/src/features/dashboard/Heatmap.tsx:41"}, "properties": {"repobilityId": "113babf98f907ec4", "scanner": "scanner-primary", "fingerprint": "6db4605ceec5e591", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-4422852fc355f37f", "level": "note", "message": {"text": "Legacy-named symbol `gotham_learn_progress_v2` in frontend/src/features/learn/Learn.tsx:790"}, "properties": {"repobilityId": "52ad01f49ae14fd1", "scanner": "scanner-primary", "fingerprint": "4422852fc355f37f", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-6ef2b2a9d3c16860", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 frontend/src/features/learn/Learn.tsx:956"}, "properties": {"repobilityId": "b2c643ed90654381", "scanner": "scanner-primary", "fingerprint": "6ef2b2a9d3c16860", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-c9846bec348904da", "level": "none", "message": {"text": "Commented-code block (6 lines) in src/services/market.service.js:153"}, "properties": {"repobilityId": "ea922a6353c4969b", "scanner": "scanner-primary", "fingerprint": "c9846bec348904da", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-bf20aa1d1ef14839", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/routes/payment.routes.js:50"}, "properties": {"repobilityId": "936f762aca30218a", "scanner": "scanner-primary", "fingerprint": "bf20aa1d1ef14839", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-b7e10b0d43250789", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/routes/auth.routes.js:1721"}, "properties": {"repobilityId": "692bd83530ec76ed", "scanner": "scanner-primary", "fingerprint": "b7e10b0d43250789", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-7ea41f7b0a651b51", "level": "note", "message": {"text": "Legacy-named symbol `eleven_multilingual_v2` in src/routes/ai.routes.js:638"}, "properties": {"repobilityId": "3286dbbc8e9f6f1c", "scanner": "scanner-primary", "fingerprint": "7ea41f7b0a651b51", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-f702ea2bba904ae7", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 public-react/assets/api-HAxN0Coo.js:1"}, "properties": {"repobilityId": "906bb9cba82a4908", "scanner": "scanner-primary", "fingerprint": "f702ea2bba904ae7", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-0c81eb51a416f2d2", "level": "note", "message": {"text": "Legacy-named symbol `unstable_legacy` in public-react/assets/index-DEXxlYPP.js:9"}, "properties": {"repobilityId": "d18411c26fbb585e", "scanner": "scanner-primary", "fingerprint": "0c81eb51a416f2d2", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-7570a28d5a0f6cb7", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 public-react/assets/index-DEXxlYPP.js:2"}, "properties": {"repobilityId": "af8e690b03f06f14", "scanner": "scanner-primary", "fingerprint": "7570a28d5a0f6cb7", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-943a3816c3537f16", "level": "note", "message": {"text": "Legacy-named symbol `gotham_heatmap_v2` in public-react/assets/Dashboard-Q4PaOzUF.js:1"}, "properties": {"repobilityId": "3ed8ea511457f1ea", "scanner": "scanner-primary", "fingerprint": "943a3816c3537f16", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-27b85871a3ab64d9", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 public/sw.js:112"}, "properties": {"repobilityId": "872c3ffd243fcfd8", "scanner": "scanner-primary", "fingerprint": "27b85871a3ab64d9", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-51dbf90b6ad9e4e9", "level": "note", "message": {"text": "28 env vars used in code but missing from .env.example"}, "properties": {"repobilityId": "b01aa43f6ad2a3c8", "scanner": "scanner-primary", "fingerprint": "51dbf90b6ad9e4e9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "config-drift"]}}, {"ruleId": "scanner-cce368be899feb10", "level": "warning", "message": {"text": "Frontend route `${e}` has no Link/navigate to it \u2014 public-react/assets/index-DEXxlYPP.js"}, "properties": {"repobilityId": "ac12b2270a98db65", "scanner": "scanner-primary", "fingerprint": "cce368be899feb10", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "orphan-page", "wiring"]}}, {"ruleId": "scanner-fdfc594c0f28c121", "level": "warning", "message": {"text": "Frontend route `${e===`/`?`*`:`${e}/*`}` has no Link/navigate to it \u2014 public-react/assets/index-DEXxlYPP.js"}, "properties": {"repobilityId": "87e0097badf9de16", "scanner": "scanner-primary", "fingerprint": "fdfc594c0f28c121", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "orphan-page", "wiring"]}}, {"ruleId": "scanner-3fc0ade15ffcc69e", "level": "warning", "message": {"text": "Frontend route `onboarding` has no Link/navigate to it \u2014 frontend/src/App.tsx"}, "properties": {"repobilityId": "0afeae5ba0e32e62", "scanner": "scanner-primary", "fingerprint": "3fc0ade15ffcc69e", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "orphan-page", "wiring"]}}, {"ruleId": "scanner-1233cb19f6ac0f08", "level": "warning", "message": {"text": "Frontend route `verify-email` has no Link/navigate to it \u2014 frontend/src/App.tsx"}, "properties": {"repobilityId": "abccee66282f847e", "scanner": "scanner-primary", "fingerprint": "1233cb19f6ac0f08", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "orphan-page", "wiring"]}}, {"ruleId": "scanner-b93e469cd0b0c9e3", "level": "warning", "message": {"text": "Frontend route `subscription` has no Link/navigate to it \u2014 client/src/App.tsx"}, "properties": {"repobilityId": "e24837ac067f99b3", "scanner": "scanner-primary", "fingerprint": "b93e469cd0b0c9e3", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "orphan-page", "wiring"]}}, {"ruleId": "scanner-a35093e136ddab0d", "level": "warning", "message": {"text": "Frontend route `settings` has no Link/navigate to it \u2014 client/src/App.tsx"}, "properties": {"repobilityId": "9fd205c2a1e95fb9", "scanner": "scanner-primary", "fingerprint": "a35093e136ddab0d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "orphan-page", "wiring"]}}, {"ruleId": "scanner-1cb0ec79e6f5e69c", "level": "warning", "message": {"text": "Frontend route `news` has no Link/navigate to it \u2014 client/src/App.tsx"}, "properties": {"repobilityId": "d99b5ef19a2610e8", "scanner": "scanner-primary", "fingerprint": "1cb0ec79e6f5e69c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "orphan-page", "wiring"]}}, {"ruleId": "scanner-d1be5babf76bc479", "level": "warning", "message": {"text": "Frontend route `watchlists` has no Link/navigate to it \u2014 client/src/App.tsx"}, "properties": {"repobilityId": "4b1994c116ba1ef0", "scanner": "scanner-primary", "fingerprint": "d1be5babf76bc479", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "orphan-page", "wiring"]}}, {"ruleId": "scanner-d6c661fc5f8fdbfb", "level": "warning", "message": {"text": "Frontend route `portfolio` has no Link/navigate to it \u2014 client/src/App.tsx"}, "properties": {"repobilityId": "10448e24795fa643", "scanner": "scanner-primary", "fingerprint": "d6c661fc5f8fdbfb", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "orphan-page", "wiring"]}}, {"ruleId": "scanner-7d374ef81bea5900", "level": "warning", "message": {"text": "Frontend route `orders` has no Link/navigate to it \u2014 client/src/App.tsx"}, "properties": {"repobilityId": "ac2618a81cb23923", "scanner": "scanner-primary", "fingerprint": "7d374ef81bea5900", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "orphan-page", "wiring"]}}, {"ruleId": "scanner-185976fd90819aa2", "level": "warning", "message": {"text": "Frontend route `alerts` has no Link/navigate to it \u2014 client/src/App.tsx"}, "properties": {"repobilityId": "a8ee75ffa351edf7", "scanner": "scanner-primary", "fingerprint": "185976fd90819aa2", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "orphan-page", "wiring"]}}, {"ruleId": "scanner-74dbf23f23530aa7", "level": "warning", "message": {"text": "Frontend route `learn` has no Link/navigate to it \u2014 frontend/src/App.tsx"}, "properties": {"repobilityId": "b1589a3e8e187906", "scanner": "scanner-primary", "fingerprint": "74dbf23f23530aa7", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "orphan-page", "wiring"]}}, {"ruleId": "scanner-c406d47be7c0e390", "level": "warning", "message": {"text": "Frontend route `technicals` has no Link/navigate to it \u2014 client/src/App.tsx"}, "properties": {"repobilityId": "022e010b55fc1507", "scanner": "scanner-primary", "fingerprint": "c406d47be7c0e390", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "orphan-page", "wiring"]}}, {"ruleId": "scanner-efafadaf74059045", "level": "warning", "message": {"text": "Frontend route `technicals/:symbol` has no Link/navigate to it \u2014 frontend/src/App.tsx"}, "properties": {"repobilityId": "700df37de0644879", "scanner": "scanner-primary", "fingerprint": "efafadaf74059045", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "orphan-page", "wiring"]}}, {"ruleId": "scanner-737506890ea18327", "level": "warning", "message": {"text": "Frontend route `us-stocks` has no Link/navigate to it \u2014 client/src/App.tsx"}, "properties": {"repobilityId": "07190b8fe7cfe01f", "scanner": "scanner-primary", "fingerprint": "737506890ea18327", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "orphan-page", "wiring"]}}, {"ruleId": "scanner-418b82b22ba672ff", "level": "warning", "message": {"text": "Frontend route `chat` has no Link/navigate to it \u2014 frontend/src/App.tsx"}, "properties": {"repobilityId": "b4b587925bfb956b", "scanner": "scanner-primary", "fingerprint": "418b82b22ba672ff", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "orphan-page", "wiring"]}}, {"ruleId": "scanner-e7ed4afa8345a751", "level": "warning", "message": {"text": "Frontend route `analysis` has no Link/navigate to it \u2014 frontend/src/App.tsx"}, "properties": {"repobilityId": "c2b364c0d629a36a", "scanner": "scanner-primary", "fingerprint": "e7ed4afa8345a751", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "orphan-page", "wiring"]}}, {"ruleId": "scanner-a6e8496ad6eacb32", "level": "warning", "message": {"text": "Frontend route `screener` has no Link/navigate to it \u2014 client/src/App.tsx"}, "properties": {"repobilityId": "eb6a956d4cb9e032", "scanner": "scanner-primary", "fingerprint": "a6e8496ad6eacb32", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "orphan-page", "wiring"]}}, {"ruleId": "scanner-d49fcc58073b94b7", "level": "warning", "message": {"text": "Frontend route `admin` has no Link/navigate to it \u2014 client/src/App.tsx"}, "properties": {"repobilityId": "b2166541652d8d24", "scanner": "scanner-primary", "fingerprint": "d49fcc58073b94b7", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "orphan-page", "wiring"]}}, {"ruleId": "scanner-08aa46a7934e7f79", "level": "warning", "message": {"text": "Frontend route `sectors` has no Link/navigate to it \u2014 client/src/App.tsx"}, "properties": {"repobilityId": "daf4093ef01b44e2", "scanner": "scanner-primary", "fingerprint": "08aa46a7934e7f79", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "orphan-page", "wiring"]}}, {"ruleId": "scanner-2bfac91f01336dc5", "level": "warning", "message": {"text": "Frontend route `leaderboard` has no Link/navigate to it \u2014 client/src/App.tsx"}, "properties": {"repobilityId": "bad4bdd5a7ddbe24", "scanner": "scanner-primary", "fingerprint": "2bfac91f01336dc5", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "orphan-page", "wiring"]}}, {"ruleId": "scanner-02c28729ca77d6f0", "level": "warning", "message": {"text": "Frontend route `dividends` has no Link/navigate to it \u2014 client/src/App.tsx"}, "properties": {"repobilityId": "181f8b21cd55ac9e", "scanner": "scanner-primary", "fingerprint": "02c28729ca77d6f0", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "orphan-page", "wiring"]}}, {"ruleId": "scanner-2ffb5a3aa8c2af86", "level": "warning", "message": {"text": "Frontend route `currency-impact` has no Link/navigate to it \u2014 client/src/App.tsx"}, "properties": {"repobilityId": "cf535b136992bed0", "scanner": "scanner-primary", "fingerprint": "2ffb5a3aa8c2af86", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "orphan-page", "wiring"]}}, {"ruleId": "scanner-749cbc0ddb95423a", "level": "warning", "message": {"text": "Frontend route `privacy` has no Link/navigate to it \u2014 client/src/App.tsx"}, "properties": {"repobilityId": "05acc47b39e09905", "scanner": "scanner-primary", "fingerprint": "749cbc0ddb95423a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "orphan-page", "wiring"]}}, {"ruleId": "scanner-367d8b37d66bcb9e", "level": "warning", "message": {"text": "Frontend route `terms` has no Link/navigate to it \u2014 client/src/App.tsx"}, "properties": {"repobilityId": "0e8b3dcb8a4ba96c", "scanner": "scanner-primary", "fingerprint": "367d8b37d66bcb9e", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "orphan-page", "wiring"]}}, {"ruleId": "scanner-a5cf92e4be779104", "level": "warning", "message": {"text": "Frontend route `analytics` has no Link/navigate to it \u2014 client/src/App.tsx"}, "properties": {"repobilityId": "0fc7016205fd0618", "scanner": "scanner-primary", "fingerprint": "a5cf92e4be779104", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "orphan-page", "wiring"]}}, {"ruleId": "scanner-efe47923ac93fbc5", "level": "warning", "message": {"text": "Frontend route `ai-chat` has no Link/navigate to it \u2014 client/src/App.tsx"}, "properties": {"repobilityId": "883fdd76970129e0", "scanner": "scanner-primary", "fingerprint": "efe47923ac93fbc5", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "orphan-page", "wiring"]}}, {"ruleId": "scanner-e6da630c62f4fab9", "level": "error", "message": {"text": "FastAPI POST `optimize_portfolio` without auth dependency \u2014 python-analytics/routers/portfolio.py:110"}, "properties": {"repobilityId": "676ff1eae25b11a0", "scanner": "scanner-primary", "fingerprint": "e6da630c62f4fab9", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "python-analytics/routers/portfolio.py"}, "region": {"startLine": 110}}}]}, {"ruleId": "scanner-30709fc8c88a9397", "level": "error", "message": {"text": "FastAPI POST `risk_metrics` without auth dependency \u2014 python-analytics/routers/portfolio.py:208"}, "properties": {"repobilityId": "f2af9a2b51b406d8", "scanner": "scanner-primary", "fingerprint": "30709fc8c88a9397", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "python-analytics/routers/portfolio.py"}, "region": {"startLine": 208}}}]}, {"ruleId": "scanner-2bf92fa3eb4595c9", "level": "error", "message": {"text": "FastAPI POST `advanced_screen` without auth dependency \u2014 python-analytics/routers/screener.py:39"}, "properties": {"repobilityId": "dcf5654ef6f6d6aa", "scanner": "scanner-primary", "fingerprint": "2bf92fa3eb4595c9", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "python-analytics/routers/screener.py"}, "region": {"startLine": 39}}}]}, {"ruleId": "scanner-b4b1c730684395d2", "level": "error", "message": {"text": "FastAPI POST `predict` without auth dependency \u2014 python-analytics/routers/prediction.py:97"}, "properties": {"repobilityId": "9d5ed610969319f5", "scanner": "scanner-primary", "fingerprint": "b4b1c730684395d2", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "python-analytics/routers/prediction.py"}, "region": {"startLine": 97}}}]}, {"ruleId": "scanner-c75b29c6ee8f2e5f", "level": "error", "message": {"text": "FastAPI POST `backtest` without auth dependency \u2014 python-analytics/routers/prediction.py:369"}, "properties": {"repobilityId": "210651bae98c2c02", "scanner": "scanner-primary", "fingerprint": "c75b29c6ee8f2e5f", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "python-analytics/routers/prediction.py"}, "region": {"startLine": 369}}}]}, {"ruleId": "scanner-7e4ef9b70ed8fd27", "level": "error", "message": {"text": "FastAPI POST `technical_analysis` without auth dependency \u2014 python-analytics/routers/technical.py:66"}, "properties": {"repobilityId": "ef2a57258fd138f3", "scanner": "scanner-primary", "fingerprint": "7e4ef9b70ed8fd27", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "python-analytics/routers/technical.py"}, "region": {"startLine": 66}}}]}, {"ruleId": "scanner-f516d788b1e8f6e2", "level": "error", "message": {"text": "FastAPI POST `support_resistance` without auth dependency \u2014 python-analytics/routers/technical.py:302"}, "properties": {"repobilityId": "b1795e7b5f9a5e04", "scanner": "scanner-primary", "fingerprint": "f516d788b1e8f6e2", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "python-analytics/routers/technical.py"}, "region": {"startLine": 302}}}]}, {"ruleId": "scanner-f72c1dcf183e66aa", "level": "error", "message": {"text": "FastAPI POST `pattern_detection` without auth dependency \u2014 python-analytics/routers/technical.py:385"}, "properties": {"repobilityId": "60ab71ce7a0739d8", "scanner": "scanner-primary", "fingerprint": "f72c1dcf183e66aa", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.fastapi.unauth_mutation"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "python-analytics/routers/technical.py"}, "region": {"startLine": 385}}}]}, {"ruleId": "scanner-85701369b05e1157", "level": "error", "message": {"text": "JS PUT `/api/admin/users/${id}` admin endpoint without auth \u2014 client/src/api/admin.ts:15"}, "properties": {"repobilityId": "b3ef39a6da8babc4", "scanner": "scanner-primary", "fingerprint": "85701369b05e1157", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.js.admin_unauth"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "client/src/api/admin.ts"}, "region": {"startLine": 15}}}]}, {"ruleId": "scanner-1c7c0ff9c044df6e", "level": "error", "message": {"text": "JS POST `/api/admin/kyc/${userId}/approve` admin endpoint without auth \u2014 client/src/api/admin.ts:25"}, "properties": {"repobilityId": "8629450a4cfdf435", "scanner": "scanner-primary", "fingerprint": "1c7c0ff9c044df6e", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.js.admin_unauth"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "client/src/api/admin.ts"}, "region": {"startLine": 25}}}]}, {"ruleId": "scanner-71071e2e68c75728", "level": "error", "message": {"text": "JS POST `/api/admin/kyc/${userId}/reject` admin endpoint without auth \u2014 client/src/api/admin.ts:30"}, "properties": {"repobilityId": "39e89f237649c679", "scanner": "scanner-primary", "fingerprint": "71071e2e68c75728", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.js.admin_unauth"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "client/src/api/admin.ts"}, "region": {"startLine": 30}}}]}, {"ruleId": "scanner-1037e935050c7c66", "level": "error", "message": {"text": "Dangling fetch: GET https://www.jseinvestor.com/ (jse-scraper.js:156)"}, "properties": {"repobilityId": "929fd7ef4a97f9de", "scanner": "scanner-primary", "fingerprint": "1037e935050c7c66", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "axios"]}}, {"ruleId": "scanner-83dd19f32a1e067b", "level": "error", "message": {"text": "Dangling fetch: GET https://www.jamstockex.com/trading/trade-summary/ (jse-scraper.js:216)"}, "properties": {"repobilityId": "ed6d59770f05ace7", "scanner": "scanner-primary", "fingerprint": "83dd19f32a1e067b", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "axios"]}}, {"ruleId": "scanner-a09e887187eba3e4", "level": "error", "message": {"text": "Dangling fetch: GET https://jamaica.loopnews.com/category/business (news-scraper.js:148)"}, "properties": {"repobilityId": "19014e78c3969b70", "scanner": "scanner-primary", "fingerprint": "a09e887187eba3e4", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "axios"]}}, {"ruleId": "scanner-30b6d5e561c6d27e", "level": "error", "message": {"text": "Dangling fetch: GET https://radiojamaicanewsonline.com/business (news-scraper.js:165)"}, "properties": {"repobilityId": "e1d9e306f3e09a69", "scanner": "scanner-primary", "fingerprint": "30b6d5e561c6d27e", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "axios"]}}, {"ruleId": "scanner-8fa4ad2dc0705353", "level": "error", "message": {"text": "Dangling fetch: GET https://news.google.com/rss/search?q=${encodeURIComponent(query)}&hl=${hl}&gl=${gl}&ceid=${ceid} (news-scraper.js:186)"}, "properties": {"repobilityId": "1e23c099b9c6f4af", "scanner": "scanner-primary", "fingerprint": "8fa4ad2dc0705353", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "axios"]}}, {"ruleId": "scanner-b521ca827f4ff8b1", "level": "error", "message": {"text": "Dangling fetch: POST https://api.elevenlabs.io/v1/text-to-speech/${VOICE_ID} (src/routes/ai.routes.js:627)"}, "properties": {"repobilityId": "722dd78509b5fd4a", "scanner": "scanner-primary", "fingerprint": "b521ca827f4ff8b1", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-fe87af949fef1eda", "level": "error", "message": {"text": "Dangling fetch: POST https://api.elevenlabs.io/v1/text-to-speech/${VOICE_ID} (src/routes/ai.routes.js:766)"}, "properties": {"repobilityId": "2ec7648e912692f3", "scanner": "scanner-primary", "fingerprint": "fe87af949fef1eda", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-0a5a53bac5cb7db6", "level": "note", "message": {"text": "Unused endpoint: POST /optimize"}, "properties": {"repobilityId": "eb3fec577207d47f", "scanner": "scanner-primary", "fingerprint": "0a5a53bac5cb7db6", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-61552fd77f1d7aef", "level": "note", "message": {"text": "Unused endpoint: POST /risk-metrics"}, "properties": {"repobilityId": "f16fe453eff6a91d", "scanner": "scanner-primary", "fingerprint": "61552fd77f1d7aef", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-dad12f1ed2073904", "level": "note", "message": {"text": "Unused endpoint: POST /advanced-screen"}, "properties": {"repobilityId": "e5ab057bba4a114f", "scanner": "scanner-primary", "fingerprint": "dad12f1ed2073904", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-25d3af48cd83c9e6", "level": "note", "message": {"text": "Unused endpoint: POST /predict"}, "properties": {"repobilityId": "5fdd90edfd1bfb05", "scanner": "scanner-primary", "fingerprint": "25d3af48cd83c9e6", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-7563b119d2657acd", "level": "note", "message": {"text": "Unused endpoint: POST /backtest"}, "properties": {"repobilityId": "d89de408f1f93b46", "scanner": "scanner-primary", "fingerprint": "7563b119d2657acd", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-bf2e68ef184d54f0", "level": "note", "message": {"text": "Unused endpoint: POST /technical-analysis"}, "properties": {"repobilityId": "50cadc611cf0b2ad", "scanner": "scanner-primary", "fingerprint": "bf2e68ef184d54f0", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-f9d1182225fbcd35", "level": "note", "message": {"text": "Unused endpoint: POST /support-resistance"}, "properties": {"repobilityId": "6d7401a3a92f185e", "scanner": "scanner-primary", "fingerprint": "f9d1182225fbcd35", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-0cd0a6538a6a6fa1", "level": "note", "message": {"text": "Unused endpoint: POST /pattern-detection"}, "properties": {"repobilityId": "a4e613ec4a84b5b2", "scanner": "scanner-primary", "fingerprint": "0cd0a6538a6a6fa1", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-dde3adb27bf7eebe", "level": "note", "message": {"text": "Unused endpoint: USE /api"}, "properties": {"repobilityId": "a705aac01756018a", "scanner": "scanner-primary", "fingerprint": "dde3adb27bf7eebe", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-1e0fe289f591eb69", "level": "note", "message": {"text": "Unused endpoint: USE /analyze"}, "properties": {"repobilityId": "7502cc1f965d7370", "scanner": "scanner-primary", "fingerprint": "1e0fe289f591eb69", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-6eb452fbfb454d20", "level": "note", "message": {"text": "Unused endpoint: USE /api/auth"}, "properties": {"repobilityId": "0aa2258a9e8b6e24", "scanner": "scanner-primary", "fingerprint": "6eb452fbfb454d20", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-d93a530ce10d47d9", "level": "note", "message": {"text": "Unused endpoint: USE /api/admin"}, "properties": {"repobilityId": "7211129cd929e169", "scanner": "scanner-primary", "fingerprint": "d93a530ce10d47d9", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-d803e7e5650befd4", "level": "note", "message": {"text": "Unused endpoint: USE /api/analytics"}, "properties": {"repobilityId": "7f28c4a4001b815d", "scanner": "scanner-primary", "fingerprint": "d803e7e5650befd4", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-f1d9be6a3dc8deaf", "level": "note", "message": {"text": "Unused endpoint: USE /api/us"}, "properties": {"repobilityId": "7224a3a37092cf86", "scanner": "scanner-primary", "fingerprint": "f1d9be6a3dc8deaf", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-9d2517f9eafc5297", "level": "note", "message": {"text": "Unused endpoint: POST /api/chat"}, "properties": {"repobilityId": "b286b051bf6f3c63", "scanner": "scanner-primary", "fingerprint": "9d2517f9eafc5297", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-991a80734e903c93", "level": "note", "message": {"text": "Unused endpoint: GET /api/docs/openapi.json"}, "properties": {"repobilityId": "f8ee8448657d8a90", "scanner": "scanner-primary", "fingerprint": "991a80734e903c93", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-a6c75407e0e70886", "level": "note", "message": {"text": "Unused endpoint: GET /api/docs"}, "properties": {"repobilityId": "7752fa9ee7256bdd", "scanner": "scanner-primary", "fingerprint": "a6c75407e0e70886", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-139e947b4742b94d", "level": "note", "message": {"text": "Unused endpoint: GET /api/stocks/:symbol"}, "properties": {"repobilityId": "8d6b270d85fec6d2", "scanner": "scanner-primary", "fingerprint": "139e947b4742b94d", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-70f71b7160e9b7db", "level": "note", "message": {"text": "Unused endpoint: GET /api/market-overview"}, "properties": {"repobilityId": "b50643378b66480e", "scanner": "scanner-primary", "fingerprint": "70f71b7160e9b7db", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-b1bcd3fa7164eea4", "level": "note", "message": {"text": "Unused endpoint: GET /api/history/:symbol"}, "properties": {"repobilityId": "80396adb43797401", "scanner": "scanner-primary", "fingerprint": "b1bcd3fa7164eea4", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-829adf31f7d73752", "level": "note", "message": {"text": "Unused endpoint: GET /api/stocks/:symbol/history"}, "properties": {"repobilityId": "7aad22d5128009f1", "scanner": "scanner-primary", "fingerprint": "829adf31f7d73752", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-2e355a963f84bfbf", "level": "note", "message": {"text": "Unused endpoint: GET /api/stocks/:symbol/profile"}, "properties": {"repobilityId": "55ccaa1ea1747ea3", "scanner": "scanner-primary", "fingerprint": "2e355a963f84bfbf", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-2205760646975fb8", "level": "note", "message": {"text": "Unused endpoint: GET /api/search"}, "properties": {"repobilityId": "78305ef394787780", "scanner": "scanner-primary", "fingerprint": "2205760646975fb8", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-d34459896d46813f", "level": "note", "message": {"text": "Unused endpoint: GET /api/stream/prices"}, "properties": {"repobilityId": "4feae0516aacfe60", "scanner": "scanner-primary", "fingerprint": "d34459896d46813f", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-e2103dbc81e9235c", "level": "note", "message": {"text": "Unused endpoint: GET /api/sectors"}, "properties": {"repobilityId": "6577df1318dc180f", "scanner": "scanner-primary", "fingerprint": "e2103dbc81e9235c", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-9191bf29981fd17d", "level": "note", "message": {"text": "Unused endpoint: POST /api/screener"}, "properties": {"repobilityId": "9770c5c92d314383", "scanner": "scanner-primary", "fingerprint": "9191bf29981fd17d", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-c4221670861e52f0", "level": "note", "message": {"text": "Unused endpoint: POST /api/compare"}, "properties": {"repobilityId": "db674b1ef30ddcd0", "scanner": "scanner-primary", "fingerprint": "c4221670861e52f0", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-71b5dce4fdc0b9ee", "level": "note", "message": {"text": "Unused endpoint: GET /api/research/:symbol"}, "properties": {"repobilityId": "d60df55f49c39aa5", "scanner": "scanner-primary", "fingerprint": "71b5dce4fdc0b9ee", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-e3e3d5aeae152b1a", "level": "note", "message": {"text": "Unused endpoint: GET /api/forex"}, "properties": {"repobilityId": "3bba8dc7179788d5", "scanner": "scanner-primary", "fingerprint": "e3e3d5aeae152b1a", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-62e284e16649ef51", "level": "note", "message": {"text": "Unused endpoint: GET /api/global-markets"}, "properties": {"repobilityId": "36976084c14d6836", "scanner": "scanner-primary", "fingerprint": "62e284e16649ef51", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-778f45a124dbd2e7", "level": "note", "message": {"text": "Unused endpoint: GET /api/news"}, "properties": {"repobilityId": "ac438bc73055946e", "scanner": "scanner-primary", "fingerprint": "778f45a124dbd2e7", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-4057ed8815158225", "level": "note", "message": {"text": "Unused endpoint: GET /api/currency-impact"}, "properties": {"repobilityId": "7aae354eef4f8d19", "scanner": "scanner-primary", "fingerprint": "4057ed8815158225", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-e5435f50028f9246", "level": "note", "message": {"text": "Unused endpoint: GET /api/dividends"}, "properties": {"repobilityId": "12c7e196c350d3d3", "scanner": "scanner-primary", "fingerprint": "e5435f50028f9246", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-a369f71214e9ef56", "level": "note", "message": {"text": "Unused endpoint: GET /api/leaderboard"}, "properties": {"repobilityId": "f1af2e3361bc423d", "scanner": "scanner-primary", "fingerprint": "a369f71214e9ef56", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-9855e703086209ba", "level": "note", "message": {"text": "Unused endpoint: GET /api/technicals/:symbol"}, "properties": {"repobilityId": "171a76a9f0c65f30", "scanner": "scanner-primary", "fingerprint": "9855e703086209ba", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-33a002a8601b0d71", "level": "note", "message": {"text": "Unused endpoint: GET /technical/:symbol"}, "properties": {"repobilityId": "40aa1039f3e09d6a", "scanner": "scanner-primary", "fingerprint": "33a002a8601b0d71", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-cd6a84c29b031d6e", "level": "note", "message": {"text": "Unused endpoint: GET /technical/:symbol/advanced"}, "properties": {"repobilityId": "bf4fc82239a75284", "scanner": "scanner-primary", "fingerprint": "cd6a84c29b031d6e", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-b49be01833e72e05", "level": "note", "message": {"text": "Unused endpoint: POST /indicator"}, "properties": {"repobilityId": "8d2618ad91dc225a", "scanner": "scanner-primary", "fingerprint": "b49be01833e72e05", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-5141210e39f74a05", "level": "note", "message": {"text": "Unused endpoint: POST /portfolio"}, "properties": {"repobilityId": "130fd59b19ac7b93", "scanner": "scanner-primary", "fingerprint": "5141210e39f74a05", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-6601964148753c83", "level": "note", "message": {"text": "Unused endpoint: POST /portfolio/optimize"}, "properties": {"repobilityId": "eb7b1ba320902e53", "scanner": "scanner-primary", "fingerprint": "6601964148753c83", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-cd6345ae88bb30d2", "level": "note", "message": {"text": "Unused endpoint: POST /portfolio/risk"}, "properties": {"repobilityId": "456c432ae2bc6abe", "scanner": "scanner-primary", "fingerprint": "cd6345ae88bb30d2", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-ae5e1ff189dc07e2", "level": "note", "message": {"text": "Unused endpoint: GET /predict/:symbol"}, "properties": {"repobilityId": "6a30a6cafe495719", "scanner": "scanner-primary", "fingerprint": "ae5e1ff189dc07e2", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-dbe559e9b33f0b69", "level": "note", "message": {"text": "Unused endpoint: POST /screener"}, "properties": {"repobilityId": "4396826c9173c9b0", "scanner": "scanner-primary", "fingerprint": "dbe559e9b33f0b69", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-6edf5109ba168e44", "level": "note", "message": {"text": "Unused endpoint: POST /compound-growth"}, "properties": {"repobilityId": "b6f485bc073b5a37", "scanner": "scanner-primary", "fingerprint": "6edf5109ba168e44", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-c6742e232cbc195d", "level": "note", "message": {"text": "Unused endpoint: POST /retirement"}, "properties": {"repobilityId": "bc1aeb845136290f", "scanner": "scanner-primary", "fingerprint": "c6742e232cbc195d", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-e272c3d08239da22", "level": "note", "message": {"text": "Unused endpoint: POST /loan"}, "properties": {"repobilityId": "0034b3d99be00a15", "scanner": "scanner-primary", "fingerprint": "e272c3d08239da22", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-34c5e1a3dd987b00", "level": "note", "message": {"text": "Unused endpoint: POST /irr"}, "properties": {"repobilityId": "f907e42792e86fe5", "scanner": "scanner-primary", "fingerprint": "34c5e1a3dd987b00", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-1ee0dcc6a3f24d70", "level": "note", "message": {"text": "Unused endpoint: POST /api/payments/create-order"}, "properties": {"repobilityId": "b382ec7f719c4b6e", "scanner": "scanner-primary", "fingerprint": "1ee0dcc6a3f24d70", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-eeb0815f32f05891", "level": "note", "message": {"text": "Unused endpoint: POST /api/payments/capture-order"}, "properties": {"repobilityId": "f7bf92ea62fbadc9", "scanner": "scanner-primary", "fingerprint": "eeb0815f32f05891", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-8c6f674e3f6d4b50", "level": "note", "message": {"text": "Unused endpoint: POST /api/payments/create-withdrawal"}, "properties": {"repobilityId": "e38bbc6c4eeb95d5", "scanner": "scanner-primary", "fingerprint": "8c6f674e3f6d4b50", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}]}]}