{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "scanner-0d8db759943c7aa0", "name": "Possibly dead Python function: require_api_key", "shortDescription": {"text": "Possibly dead Python function: require_api_key"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f838c9db7046e6d3", "name": "Possibly dead Python function: require_auth", "shortDescription": {"text": "Possibly dead Python function: require_auth"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7814ca44c1211a68", "name": "Possibly dead Python function: require_admin", "shortDescription": {"text": "Possibly dead Python function: require_admin"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7872feb1e0023f6b", "name": "Possibly dead Python function: handle_starttag", "shortDescription": {"text": "Possibly dead Python function: handle_starttag"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-cb42c6d7290a9872", "name": "Possibly dead Python function: handle_endtag", "shortDescription": {"text": "Possibly dead Python function: handle_endtag"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9e9ed0158117f385", "name": "Possibly dead Python function: handle_data", "shortDescription": {"text": "Possibly dead Python function: handle_data"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-92a48644906fd829", "name": "Possibly dead Python function: handle_starttag", "shortDescription": {"text": "Possibly dead Python function: handle_starttag"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3259f2b9da176fd4", "name": "Possibly dead Python function: handle_endtag", "shortDescription": {"text": "Possibly dead Python function: handle_endtag"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c413be8f9fa15f6a", "name": "Possibly dead Python function: handle_data", "shortDescription": {"text": "Possibly dead Python function: handle_data"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9e24328bff91873b", "name": "Possibly dead Python function: check_d14_hreflang_coverage", "shortDescription": {"text": "Possibly dead Python function: check_d14_hreflang_coverage"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-31d34fcfdddd9fe7", "name": "Possibly dead Python function: handle_starttag", "shortDescription": {"text": "Possibly dead Python function: handle_starttag"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d240b7ab9c1620ce", "name": "Possibly dead Python function: handle_endtag", "shortDescription": {"text": "Possibly dead Python function: handle_endtag"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-189a72c5502b331b", "name": "Possibly dead Python function: handle_data", "shortDescription": {"text": "Possibly dead Python function: handle_data"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6b8d368ef921dbf7", "name": "Possibly dead Python function: load_schema_specs", "shortDescription": {"text": "Possibly dead Python function: load_schema_specs"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2a0027726f42ed2a", "name": "Possibly dead Python function: validate_entity_fields", "shortDescription": {"text": "Possibly dead Python function: validate_entity_fields"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-04633cec6eef0a56", "name": "Possibly dead Python function: tier_calculator", "shortDescription": {"text": "Possibly dead Python function: tier_calculator"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7c7946c65c75f117", "name": "Possibly dead Python function: sort_key", "shortDescription": {"text": "Possibly dead Python function: sort_key"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0561c2f6b5b5b398", "name": "Privileged port 12 in use", "shortDescription": {"text": "Privileged port 12 in use"}, "fullDescription": {"text": "Port 12 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a7cf997f621a989c", "name": "Dockerfile runs as root: standalone/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: standalone/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5da753fa6481617f", "name": "Docker base image is tag-pinned but not digest-pinned: python:3.11-slim", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.11-slim"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-aa5acaa49eb8315b", "name": "Containers defined but no K8s/orchestration manifest found", "shortDescription": {"text": "Containers defined but no K8s/orchestration manifest found"}, "fullDescription": {"text": "Repo has Dockerfiles/compose but no Kubernetes/Nomad manifests. If the target deployment is K8s, the manifests may live in a separate ops repo."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9710c8d059e53154", "name": "No frontend routes/components detected", "shortDescription": {"text": "No frontend routes/components detected"}, "fullDescription": {"text": "No React/Vue/Next routes were found. This is fine for backend-only repos."}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-dca609be8ad721bc", "name": "Insecure pattern 'weak_hash' in README.md:16", "shortDescription": {"text": "Insecure pattern 'weak_hash' in README.md:16"}, "fullDescription": {"text": "Found a known-risky pattern (weak_hash). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6372cebde0220094", "name": "No auth library detected", "shortDescription": {"text": "No auth library detected"}, "fullDescription": {"text": "The scanner did not find any standard auth library (JWT, OAuth, NextAuth, Auth0, etc.). The repo has auth/admin/session surface indicators, so auth may live in custom code, in a separate service, or be missing."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4601e3ad3bb28677", "name": "No CI/CD pipelines detected", "shortDescription": {"text": "No CI/CD pipelines detected"}, "fullDescription": {"text": "No GitHub Actions, GitLab CI, or CircleCI configs found. Without CI you can't gate deploys on tests/lints."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4f2b79d2274c1e8f", "name": "Very large file: standalone/main.py (2315 lines)", "shortDescription": {"text": "Very large file: standalone/main.py (2315 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d3926817691db047", "name": "Very large file: skill-unified/scripts/deterministic_checks.py (1157 lines)", "shortDescription": {"text": "Very large file: skill-unified/scripts/deterministic_checks.py (1157 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6893a6c8b0861585", "name": "Very low test-to-source ratio", "shortDescription": {"text": "Very low test-to-source ratio"}, "fullDescription": {"text": "0 test file(s) for 24 source file(s) (ratio 0.00). Consider adding integration or unit tests for critical paths."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-141b30a41e03817b", "name": "No license file detected", "shortDescription": {"text": "No license file detected"}, "fullDescription": {"text": "No LICENSE/COPYING/NOTICE file was found. Generated repositories often omit licensing, which blocks reuse and automated intake."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3ab5d313dda8e5f9", "name": "Debug logging residue appears in source files", "shortDescription": {"text": "Debug logging residue appears in source files"}, "fullDescription": {"text": "Found 223 console/debugger/print-style debug statements in non-test source. This is a common fast-generation residue before production cleanup."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-72b2a6250083a784", "name": "Placeholder or mock-heavy implementation detected", "shortDescription": {"text": "Placeholder or mock-heavy implementation detected"}, "fullDescription": {"text": "Found 12 placeholder/mock markers across 3 source files. This often means the repo looks complete while core flows still use generated scaffolding or fake data."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2d0c7b7ab8f8aacf", "name": "Critical user flow still appears backed by mock or placeholder data", "shortDescription": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "fullDescription": {"text": "A payment/auth/admin/order/billing-style flow contains mock, fake, TODO, dummy, or placeholder markers in runtime source. In the Fable corpus this is a high-leverage completeness smell: the app can look finished while the money, identity, or tenant flow is still scaffolded."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b9088664ace7f748", "name": "Composite production-readiness gap", "shortDescription": {"text": "Composite production-readiness gap"}, "fullDescription": {"text": "Multiple low-cost hardening controls are missing together: license, ci, tests. Opus verification showed these co-occurring gaps are a better readiness signal than reading each flag in isolation."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ea8f3013f588db25", "name": "Shallow git history limits provenance confidence", "shortDescription": {"text": "Shallow git history limits provenance confidence"}, "fullDescription": {"text": "The repository is a shallow clone. Origin/evolution analysis cannot distinguish fresh generation, imported legacy code, or long-lived human code with high confidence."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8424db9c75e04ba4", "name": "Very short observed git history", "shortDescription": {"text": "Very short observed git history"}, "fullDescription": {"text": "The repo has multiple source files but two or fewer visible commits. This is not a failure by itself, but it lowers confidence in evolution-based diagnosis."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-f1d79812073a7566", "name": "Commented-code block (5 lines) in standalone/tools.py:214", "shortDescription": {"text": "Commented-code block (5 lines) in standalone/tools.py:214"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-935b514d1544d9c0", "name": "Commented-code block (5 lines) in standalone/agent.py:58", "shortDescription": {"text": "Commented-code block (5 lines) in standalone/agent.py:58"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-ae18e607b107f645", "name": "Legacy-named symbol `check_sitemap_v2` in scripts-v2/check_sitemap_v2.py:3", "shortDescription": {"text": "Legacy-named symbol `check_sitemap_v2` in scripts-v2/check_sitemap_v2.py:3"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-de5d694a360e3895", "name": "Legacy-named symbol `deterministic_checks_v2` in scripts-v2/deterministic_checks_v2.py:3", "shortDescription": {"text": "Legacy-named symbol `deterministic_checks_v2` in scripts-v2/deterministic_checks_v2.py:3"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-dc5b5b5b85548df3", "name": "Legacy-named symbol `bev_analyze_v2` in scripts-v2/bev_analyze_v2.py:3", "shortDescription": {"text": "Legacy-named symbol `bev_analyze_v2` in scripts-v2/bev_analyze_v2.py:3"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8d9c9253a55b340d", "name": "Legacy-named symbol `check_robots_txt_v2` in scripts-v2/check_robots_txt_v2.py:3", "shortDescription": {"text": "Legacy-named symbol `check_robots_txt_v2` in scripts-v2/check_robots_txt_v2.py:3"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f05722cefb33116c", "name": "Legacy-named symbol `check_robots_txt_v2` in skill-unified/scripts/check_robots_txt.py:3", "shortDescription": {"text": "Legacy-named symbol `check_robots_txt_v2` in skill-unified/scripts/check_robots_txt.py:3"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c38c76b5d50b4270", "name": "Legacy-named symbol `bev_analyze_v2` in skill-unified/scripts/_bev_analyze.py:3", "shortDescription": {"text": "Legacy-named symbol `bev_analyze_v2` in skill-unified/scripts/_bev_analyze.py:3"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e844367063073ac7", "name": "Legacy-named symbol `check_sitemap_v2` in skill-unified/scripts/check_sitemap.py:3", "shortDescription": {"text": "Legacy-named symbol `check_sitemap_v2` in skill-unified/scripts/check_sitemap.py:3"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7cf83973ec276ac1", "name": "Commented-code block (5 lines) in skill-unified/scripts/deterministic_checks.py:330", "shortDescription": {"text": "Commented-code block (5 lines) in skill-unified/scripts/deterministic_checks.py:330"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-cc22637600307337", "name": "Stub function `redirect_request` (body is just `pass`/`return`) \u2014 skill-unified/scripts/deterministic_checks.py:120", "shortDescription": {"text": "Stub function `redirect_request` (body is just `pass`/`return`) \u2014 skill-unified/scripts/deterministic_checks.py:120"}, "fullDescription": {"text": "Likely an AI scaffold that was never filled in. Remove or implement."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c0b61a5f843cbcb6", "name": "Legacy-named symbol `deterministic_checks_v2` in skill-unified/scripts/deterministic_checks_extras.py:262", "shortDescription": {"text": "Legacy-named symbol `deterministic_checks_v2` in skill-unified/scripts/deterministic_checks_extras.py:262"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e9b8b1e1bafdea9e", "name": "Commented-code block (10 lines) in skill-unified/scripts/deterministic_checks_extras.py:95", "shortDescription": {"text": "Commented-code block (10 lines) in skill-unified/scripts/deterministic_checks_extras.py:95"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-d31f084816d9de97", "name": "Stub function `redirect_request` (body is just `pass`/`return`) \u2014 skill/scripts/check_sitemap.py:44", "shortDescription": {"text": "Stub function `redirect_request` (body is just `pass`/`return`) \u2014 skill/scripts/check_sitemap.py:44"}, "fullDescription": {"text": "Likely an AI scaffold that was never filled in. Remove or implement."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b2584e5804676088", "name": "Stub function `redirect_request` (body is just `pass`/`return`) \u2014 skill/scripts/deterministic_checks.py:65", "shortDescription": {"text": "Stub function `redirect_request` (body is just `pass`/`return`) \u2014 skill/scripts/deterministic_checks.py:65"}, "fullDescription": {"text": "Likely an AI scaffold that was never filled in. Remove or implement."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f808a4ef3e1071fb", "name": "14 env vars used in code but missing from .env.example", "shortDescription": {"text": "14 env vars used in code but missing from .env.example"}, "fullDescription": {"text": "Drift between code and config docs. The first few: `AUDITOR_FAIL_CLOSED`, `AUDIT_API_KEY`, `AUDIT_MODE`, `AUDIT_PASSWORD`, `AUDIT_USERNAME`, `LOG_LEVEL`, `MAX_AUDIT_SECONDS`, `MAX_CONCURRENT_AUDITS` + 6 more. Add them (with a placeholder/comment) to .env.example so onboarding doesn't break."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2c04133e54348533", "name": "Near-duplicate function bodies in 2 places", "shortDescription": {"text": "Near-duplicate function bodies in 2 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\nstandalone/main.py:list_audits_for_domain, standalone/main.py:list_audits\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-be46ea126aa5d8dc", "name": "Near-duplicate function bodies in 3 places", "shortDescription": {"text": "Near-duplicate function bodies in 3 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\nscripts-v2/bev_analyze_v2.py:handle_starttag, skill-unified/scripts/_bev_analyze.py:handle_starttag, auditor-ruleset-export/validators.py:handle_starttag\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5baa8971ebe192a1", "name": "Unused endpoint: GET /", "shortDescription": {"text": "Unused endpoint: GET /"}, "fullDescription": {"text": "`standalone/main.py` declares `GET /` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8f5614c18a2feac7", "name": "Unused endpoint: GET /api", "shortDescription": {"text": "Unused endpoint: GET /api"}, "fullDescription": {"text": "`standalone/main.py` declares `GET /api` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-44de7bf2773e2811", "name": "Unused endpoint: POST /audit", "shortDescription": {"text": "Unused endpoint: POST /audit"}, "fullDescription": {"text": "`standalone/main.py` declares `POST /audit` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d24f37422fab7d53", "name": "Unused endpoint: GET /audit/{audit_id}", "shortDescription": {"text": "Unused endpoint: GET /audit/{audit_id}"}, "fullDescription": {"text": "`standalone/main.py` declares `GET /audit/{audit_id}` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6ae3a844c76eb898", "name": "Unused endpoint: GET /audit/{audit_id}/json", "shortDescription": {"text": "Unused endpoint: GET /audit/{audit_id}/json"}, "fullDescription": {"text": "`standalone/main.py` declares `GET /audit/{audit_id}/json` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b55c95afd69ab89f", "name": "Unused endpoint: GET /audit/{audit_id}/md", "shortDescription": {"text": "Unused endpoint: GET /audit/{audit_id}/md"}, "fullDescription": {"text": "`standalone/main.py` declares `GET /audit/{audit_id}/md` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8804a5d13a3b0ebb", "name": "Unused endpoint: GET /audit/{audit_id}/pdf", "shortDescription": {"text": "Unused endpoint: GET /audit/{audit_id}/pdf"}, "fullDescription": {"text": "`standalone/main.py` declares `GET /audit/{audit_id}/pdf` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-144497972cf58e7c", "name": "Unused endpoint: GET /audits", "shortDescription": {"text": "Unused endpoint: GET /audits"}, "fullDescription": {"text": "`standalone/main.py` declares `GET /audits` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-804217699a839729", "name": "Unused endpoint: POST /debug/persist-test", "shortDescription": {"text": "Unused endpoint: POST /debug/persist-test"}, "fullDescription": {"text": "`standalone/main.py` declares `POST /debug/persist-test` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-720fb5423cdd1d35", "name": "Unused endpoint: GET /api/by-domain/{domain:path}", "shortDescription": {"text": "Unused endpoint: GET /api/by-domain/{domain:path}"}, "fullDescription": {"text": "`standalone/main.py` declares `GET /api/by-domain/{domain:path}` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-06d976be8f8aa3a5", "name": "Unused endpoint: GET /api/by-id/{audit_id}", "shortDescription": {"text": "Unused endpoint: GET /api/by-id/{audit_id}"}, "fullDescription": {"text": "`standalone/main.py` declares `GET /api/by-id/{audit_id}` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2f727b7d14322cec", "name": "Unused endpoint: GET /api/history/{domain:path}", "shortDescription": {"text": "Unused endpoint: GET /api/history/{domain:path}"}, "fullDescription": {"text": "`standalone/main.py` declares `GET /api/history/{domain:path}` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-34d162e78533d5ec", "name": "Unused endpoint: GET /api/audits", "shortDescription": {"text": "Unused endpoint: GET /api/audits"}, "fullDescription": {"text": "`standalone/main.py` declares `GET /api/audits` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-595cc89b182dba47", "name": "Unused endpoint: POST /api/audit/start", "shortDescription": {"text": "Unused endpoint: POST /api/audit/start"}, "fullDescription": {"text": "`standalone/main.py` declares `POST /api/audit/start` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-bf2bce7fa8c66273", "name": "Unused endpoint: GET /api/audit/{audit_id}/status", "shortDescription": {"text": "Unused endpoint: GET /api/audit/{audit_id}/status"}, "fullDescription": {"text": "`standalone/main.py` declares `GET /api/audit/{audit_id}/status` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6cee9ee567ce4fa0", "name": "Unused endpoint: GET /api/audit/{audit_id}/result", "shortDescription": {"text": "Unused endpoint: GET /api/audit/{audit_id}/result"}, "fullDescription": {"text": "`standalone/main.py` declares `GET /api/audit/{audit_id}/result` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3fd7d34628d0d32d", "name": "Unused endpoint: DELETE /api/audit/by-domain/{domain:path}", "shortDescription": {"text": "Unused endpoint: DELETE /api/audit/by-domain/{domain:path}"}, "fullDescription": {"text": "`standalone/main.py` declares `DELETE /api/audit/by-domain/{domain:path}` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f32d507ac8adb095", "name": "Unused endpoint: DELETE /api/audit/{audit_id}", "shortDescription": {"text": "Unused endpoint: DELETE /api/audit/{audit_id}"}, "fullDescription": {"text": "`standalone/main.py` declares `DELETE /api/audit/{audit_id}` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5ddabfac939b8d15", "name": "Unused endpoint: GET /api/suppressed", "shortDescription": {"text": "Unused endpoint: GET /api/suppressed"}, "fullDescription": {"text": "`standalone/main.py` declares `GET /api/suppressed` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0c6f03a808236c30", "name": "Unused endpoint: DELETE /api/suppressed/{domain:path}", "shortDescription": {"text": "Unused endpoint: DELETE /api/suppressed/{domain:path}"}, "fullDescription": {"text": "`standalone/main.py` declares `DELETE /api/suppressed/{domain:path}` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-56608a3bd032f5f4", "name": "Unused endpoint: GET /{slug}", "shortDescription": {"text": "Unused endpoint: GET /{slug}"}, "fullDescription": {"text": "`standalone/main.py` declares `GET /{slug}` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/21397"}, "properties": {"repository": "tnsaruniitr-lab/aeo-seo-auditor", "repoUrl": "https://github.com/tnsaruniitr-lab/aeo-seo-auditor", "branch": "main"}, "results": [{"ruleId": "scanner-0d8db759943c7aa0", "level": "note", "message": {"text": "Possibly dead Python function: require_api_key"}, "properties": {"repobilityId": "44e8e9840fc57179", "scanner": "scanner-primary", "fingerprint": "0d8db759943c7aa0", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "standalone/main.py:334"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f838c9db7046e6d3", "level": "note", "message": {"text": "Possibly dead Python function: require_auth"}, "properties": {"repobilityId": "d7855475dea79341", "scanner": "scanner-primary", "fingerprint": "f838c9db7046e6d3", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "standalone/main.py:360"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7814ca44c1211a68", "level": "note", "message": {"text": "Possibly dead Python function: require_admin"}, "properties": {"repobilityId": "3c06db2e25566bf7", "scanner": "scanner-primary", "fingerprint": "7814ca44c1211a68", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "standalone/main.py:388"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7872feb1e0023f6b", "level": "note", "message": {"text": "Possibly dead Python function: handle_starttag"}, "properties": {"repobilityId": "3bf216d149959ebf", "scanner": "scanner-primary", "fingerprint": "7872feb1e0023f6b", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts-v2/bev_analyze_v2.py:52"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-cb42c6d7290a9872", "level": "note", "message": {"text": "Possibly dead Python function: handle_endtag"}, "properties": {"repobilityId": "7eb6f3decafc1766", "scanner": "scanner-primary", "fingerprint": "cb42c6d7290a9872", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts-v2/bev_analyze_v2.py:56"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9e9ed0158117f385", "level": "note", "message": {"text": "Possibly dead Python function: handle_data"}, "properties": {"repobilityId": "3a673a278f4fc1e6", "scanner": "scanner-primary", "fingerprint": "9e9ed0158117f385", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts-v2/bev_analyze_v2.py:60"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-92a48644906fd829", "level": "note", "message": {"text": "Possibly dead Python function: handle_starttag"}, "properties": {"repobilityId": "3bf216d149959ebf", "scanner": "scanner-primary", "fingerprint": "92a48644906fd829", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skill-unified/scripts/_bev_analyze.py:52"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3259f2b9da176fd4", "level": "note", "message": {"text": "Possibly dead Python function: handle_endtag"}, "properties": {"repobilityId": "7eb6f3decafc1766", "scanner": "scanner-primary", "fingerprint": "3259f2b9da176fd4", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skill-unified/scripts/_bev_analyze.py:56"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c413be8f9fa15f6a", "level": "note", "message": {"text": "Possibly dead Python function: handle_data"}, "properties": {"repobilityId": "3a673a278f4fc1e6", "scanner": "scanner-primary", "fingerprint": "c413be8f9fa15f6a", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skill-unified/scripts/_bev_analyze.py:60"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9e24328bff91873b", "level": "note", "message": {"text": "Possibly dead Python function: check_d14_hreflang_coverage"}, "properties": {"repobilityId": "2bb241788b7151b3", "scanner": "scanner-primary", "fingerprint": "9e24328bff91873b", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skill-unified/scripts/deterministic_checks.py:1046"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-31d34fcfdddd9fe7", "level": "note", "message": {"text": "Possibly dead Python function: handle_starttag"}, "properties": {"repobilityId": "3bf216d149959ebf", "scanner": "scanner-primary", "fingerprint": "31d34fcfdddd9fe7", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "auditor-ruleset-export/validators.py:55"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d240b7ab9c1620ce", "level": "note", "message": {"text": "Possibly dead Python function: handle_endtag"}, "properties": {"repobilityId": "7eb6f3decafc1766", "scanner": "scanner-primary", "fingerprint": "d240b7ab9c1620ce", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "auditor-ruleset-export/validators.py:59"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-189a72c5502b331b", "level": "note", "message": {"text": "Possibly dead Python function: handle_data"}, "properties": {"repobilityId": "3a673a278f4fc1e6", "scanner": "scanner-primary", "fingerprint": "189a72c5502b331b", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "auditor-ruleset-export/validators.py:63"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6b8d368ef921dbf7", "level": "note", "message": {"text": "Possibly dead Python function: load_schema_specs"}, "properties": {"repobilityId": "050bf68c06eaa50e", "scanner": "scanner-primary", "fingerprint": "6b8d368ef921dbf7", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "auditor-ruleset-export/validators.py:429"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2a0027726f42ed2a", "level": "note", "message": {"text": "Possibly dead Python function: validate_entity_fields"}, "properties": {"repobilityId": "5216957f8f655adf", "scanner": "scanner-primary", "fingerprint": "2a0027726f42ed2a", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "auditor-ruleset-export/validators.py:435"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-04633cec6eef0a56", "level": "note", "message": {"text": "Possibly dead Python function: tier_calculator"}, "properties": {"repobilityId": "72163fdf146693d1", "scanner": "scanner-primary", "fingerprint": "04633cec6eef0a56", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "auditor-ruleset-export/validators.py:485"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7c7946c65c75f117", "level": "note", "message": {"text": "Possibly dead Python function: sort_key"}, "properties": {"repobilityId": "ac2a4181eae38738", "scanner": "scanner-primary", "fingerprint": "7c7946c65c75f117", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "skill/scripts/check_sitemap.py:204"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0561c2f6b5b5b398", "level": "warning", "message": {"text": "Privileged port 12 in use"}, "properties": {"repobilityId": "65e7eefa33f2def4", "scanner": "scanner-primary", "fingerprint": "0561c2f6b5b5b398", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tests/run_tests.sh"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a7cf997f621a989c", "level": "warning", "message": {"text": "Dockerfile runs as root: standalone/Dockerfile"}, "properties": {"repobilityId": "dfc2a0b9668fc497", "scanner": "scanner-primary", "fingerprint": "a7cf997f621a989c", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-5da753fa6481617f", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.11-slim"}, "properties": {"repobilityId": "efe97549e6fe85d3", "scanner": "scanner-primary", "fingerprint": "5da753fa6481617f", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "standalone/Dockerfile"}, "region": {"startLine": 3}}}]}, {"ruleId": "scanner-aa5acaa49eb8315b", "level": "note", "message": {"text": "Containers defined but no K8s/orchestration manifest found"}, "properties": {"repobilityId": "b230ea9b68736081", "scanner": "scanner-primary", "fingerprint": "aa5acaa49eb8315b", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["coverage", "deployment"]}}, {"ruleId": "scanner-9710c8d059e53154", "level": "none", "message": {"text": "No frontend routes/components detected"}, "properties": {"repobilityId": "44ca61485762e494", "scanner": "scanner-primary", "fingerprint": "9710c8d059e53154", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["coverage"]}}, {"ruleId": "scanner-dca609be8ad721bc", "level": "warning", "message": {"text": "Insecure pattern 'weak_hash' in README.md:16"}, "properties": {"repobilityId": "5388562008acceec", "scanner": "scanner-primary", "fingerprint": "dca609be8ad721bc", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "weak_hash"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "README.md"}, "region": {"startLine": 16}}}]}, {"ruleId": "scanner-6372cebde0220094", "level": "warning", "message": {"text": "No auth library detected"}, "properties": {"repobilityId": "a5b6035a5bbf8054", "scanner": "scanner-primary", "fingerprint": "6372cebde0220094", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["coverage", "auth"]}}, {"ruleId": "scanner-4601e3ad3bb28677", "level": "warning", "message": {"text": "No CI/CD pipelines detected"}, "properties": {"repobilityId": "c3ee439bce2bc51e", "scanner": "scanner-primary", "fingerprint": "4601e3ad3bb28677", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["coverage"]}}, {"ruleId": "scanner-4f2b79d2274c1e8f", "level": "note", "message": {"text": "Very large file: standalone/main.py (2315 lines)"}, "properties": {"repobilityId": "9ac0af560f10ae85", "scanner": "scanner-primary", "fingerprint": "4f2b79d2274c1e8f", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-d3926817691db047", "level": "note", "message": {"text": "Very large file: skill-unified/scripts/deterministic_checks.py (1157 lines)"}, "properties": {"repobilityId": "14d787b1304cb807", "scanner": "scanner-primary", "fingerprint": "d3926817691db047", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-6893a6c8b0861585", "level": "warning", "message": {"text": "Very low test-to-source ratio"}, "properties": {"repobilityId": "54a7de3f06314bf0", "scanner": "scanner-primary", "fingerprint": "6893a6c8b0861585", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["tests", "coverage"]}}, {"ruleId": "scanner-141b30a41e03817b", "level": "note", "message": {"text": "No license file detected"}, "properties": {"repobilityId": "bb370aad71d2e0fa", "scanner": "scanner-primary", "fingerprint": "141b30a41e03817b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["license", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-3ab5d313dda8e5f9", "level": "note", "message": {"text": "Debug logging residue appears in source files"}, "properties": {"repobilityId": "2e087b17f80b2dde", "scanner": "scanner-primary", "fingerprint": "3ab5d313dda8e5f9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["debug", "cleanup", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-72b2a6250083a784", "level": "warning", "message": {"text": "Placeholder or mock-heavy implementation detected"}, "properties": {"repobilityId": "e925ab11d6cb23b8", "scanner": "scanner-primary", "fingerprint": "72b2a6250083a784", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "incomplete", "generated-repo-pattern"]}}, {"ruleId": "scanner-2d0c7b7ab8f8aacf", "level": "warning", "message": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "properties": {"repobilityId": "1dee677db2b65320", "scanner": "scanner-primary", "fingerprint": "2d0c7b7ab8f8aacf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "critical-flow", "generated-repo-pattern"]}}, {"ruleId": "scanner-b9088664ace7f748", "level": "warning", "message": {"text": "Composite production-readiness gap"}, "properties": {"repobilityId": "7b966718eeafc07e", "scanner": "scanner-primary", "fingerprint": "b9088664ace7f748", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["production-readiness", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-ea8f3013f588db25", "level": "note", "message": {"text": "Shallow git history limits provenance confidence"}, "properties": {"repobilityId": "87c28b58debc7767", "scanner": "scanner-primary", "fingerprint": "ea8f3013f588db25", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-8424db9c75e04ba4", "level": "none", "message": {"text": "Very short observed git history"}, "properties": {"repobilityId": "7a52ccf0bec82463", "scanner": "scanner-primary", "fingerprint": "8424db9c75e04ba4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-f1d79812073a7566", "level": "none", "message": {"text": "Commented-code block (5 lines) in standalone/tools.py:214"}, "properties": {"repobilityId": "81bc4439627c03ae", "scanner": "scanner-primary", "fingerprint": "f1d79812073a7566", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-935b514d1544d9c0", "level": "none", "message": {"text": "Commented-code block (5 lines) in standalone/agent.py:58"}, "properties": {"repobilityId": "589ea8c15345047c", "scanner": "scanner-primary", "fingerprint": "935b514d1544d9c0", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-ae18e607b107f645", "level": "note", "message": {"text": "Legacy-named symbol `check_sitemap_v2` in scripts-v2/check_sitemap_v2.py:3"}, "properties": {"repobilityId": "4d9e5dde440dcddf", "scanner": "scanner-primary", "fingerprint": "ae18e607b107f645", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-de5d694a360e3895", "level": "note", "message": {"text": "Legacy-named symbol `deterministic_checks_v2` in scripts-v2/deterministic_checks_v2.py:3"}, "properties": {"repobilityId": "7b1dcd9ce3ff0544", "scanner": "scanner-primary", "fingerprint": "de5d694a360e3895", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-dc5b5b5b85548df3", "level": "note", "message": {"text": "Legacy-named symbol `bev_analyze_v2` in scripts-v2/bev_analyze_v2.py:3"}, "properties": {"repobilityId": "cbcdd8e6b1e8ca62", "scanner": "scanner-primary", "fingerprint": "dc5b5b5b85548df3", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-8d9c9253a55b340d", "level": "note", "message": {"text": "Legacy-named symbol `check_robots_txt_v2` in scripts-v2/check_robots_txt_v2.py:3"}, "properties": {"repobilityId": "8242f8c62f782fd4", "scanner": "scanner-primary", "fingerprint": "8d9c9253a55b340d", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-f05722cefb33116c", "level": "note", "message": {"text": "Legacy-named symbol `check_robots_txt_v2` in skill-unified/scripts/check_robots_txt.py:3"}, "properties": {"repobilityId": "67bc4add6b9251a2", "scanner": "scanner-primary", "fingerprint": "f05722cefb33116c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-c38c76b5d50b4270", "level": "note", "message": {"text": "Legacy-named symbol `bev_analyze_v2` in skill-unified/scripts/_bev_analyze.py:3"}, "properties": {"repobilityId": "781474e00bf5dc30", "scanner": "scanner-primary", "fingerprint": "c38c76b5d50b4270", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-e844367063073ac7", "level": "note", "message": {"text": "Legacy-named symbol `check_sitemap_v2` in skill-unified/scripts/check_sitemap.py:3"}, "properties": {"repobilityId": "bf8bc1f9a1191a13", "scanner": "scanner-primary", "fingerprint": "e844367063073ac7", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-7cf83973ec276ac1", "level": "none", "message": {"text": "Commented-code block (5 lines) in skill-unified/scripts/deterministic_checks.py:330"}, "properties": {"repobilityId": "0640d8f707fd03da", "scanner": "scanner-primary", "fingerprint": "7cf83973ec276ac1", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-cc22637600307337", "level": "note", "message": {"text": "Stub function `redirect_request` (body is just `pass`/`return`) \u2014 skill-unified/scripts/deterministic_checks.py:120"}, "properties": {"repobilityId": "5571077b3479d37d", "scanner": "scanner-primary", "fingerprint": "cc22637600307337", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "empty-handler", "dead-code"]}}, {"ruleId": "scanner-c0b61a5f843cbcb6", "level": "note", "message": {"text": "Legacy-named symbol `deterministic_checks_v2` in skill-unified/scripts/deterministic_checks_extras.py:262"}, "properties": {"repobilityId": "9a3789e7acaf5833", "scanner": "scanner-primary", "fingerprint": "c0b61a5f843cbcb6", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-e9b8b1e1bafdea9e", "level": "none", "message": {"text": "Commented-code block (10 lines) in skill-unified/scripts/deterministic_checks_extras.py:95"}, "properties": {"repobilityId": "4ea8de8ff9c4989f", "scanner": "scanner-primary", "fingerprint": "e9b8b1e1bafdea9e", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-d31f084816d9de97", "level": "note", "message": {"text": "Stub function `redirect_request` (body is just `pass`/`return`) \u2014 skill/scripts/check_sitemap.py:44"}, "properties": {"repobilityId": "a7f2ab944e32bda5", "scanner": "scanner-primary", "fingerprint": "d31f084816d9de97", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "empty-handler", "dead-code"]}}, {"ruleId": "scanner-b2584e5804676088", "level": "note", "message": {"text": "Stub function `redirect_request` (body is just `pass`/`return`) \u2014 skill/scripts/deterministic_checks.py:65"}, "properties": {"repobilityId": "75f8f1ba6eb70b23", "scanner": "scanner-primary", "fingerprint": "b2584e5804676088", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "empty-handler", "dead-code"]}}, {"ruleId": "scanner-f808a4ef3e1071fb", "level": "note", "message": {"text": "14 env vars used in code but missing from .env.example"}, "properties": {"repobilityId": "ce6b2ec4be4ec75a", "scanner": "scanner-primary", "fingerprint": "f808a4ef3e1071fb", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "config-drift"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "c5bf571e3d0509de", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "8c9c78d65fe15d07", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "d132182d12d1194c", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "f1021367071ee4f9", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "0ec0dfc76d9e3931", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "433afe9479b302ed", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "a7798f0a321a6e78", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "7e8138caac722f64", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "c49c866e837996a8", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "52c77a4418b8653f", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "12784458658064ae", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-be46ea126aa5d8dc", "level": "note", "message": {"text": "Near-duplicate function bodies in 3 places"}, "properties": {"repobilityId": "c2141bf6d890383a", "scanner": "scanner-primary", "fingerprint": "be46ea126aa5d8dc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-be46ea126aa5d8dc", "level": "note", "message": {"text": "Near-duplicate function bodies in 3 places"}, "properties": {"repobilityId": "cabd169ffe95c6bb", "scanner": "scanner-primary", "fingerprint": "be46ea126aa5d8dc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-be46ea126aa5d8dc", "level": "note", "message": {"text": "Near-duplicate function bodies in 3 places"}, "properties": {"repobilityId": "c7fbfae4d21a76ed", "scanner": "scanner-primary", "fingerprint": "be46ea126aa5d8dc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "7cd22809220ec589", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "d7357768ae4e339e", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-be46ea126aa5d8dc", "level": "note", "message": {"text": "Near-duplicate function bodies in 3 places"}, "properties": {"repobilityId": "c555e41632d0a852", "scanner": "scanner-primary", "fingerprint": "be46ea126aa5d8dc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "8d60d5ec84a84e0d", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "7ccbb5b21e343fd9", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "5155501573444456", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-5baa8971ebe192a1", "level": "note", "message": {"text": "Unused endpoint: GET /"}, "properties": {"repobilityId": "1c2a9b75366737a7", "scanner": "scanner-primary", "fingerprint": "5baa8971ebe192a1", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-8f5614c18a2feac7", "level": "note", "message": {"text": "Unused endpoint: GET /api"}, "properties": {"repobilityId": "c3b31319547a4cb8", "scanner": "scanner-primary", "fingerprint": "8f5614c18a2feac7", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-44de7bf2773e2811", "level": "note", "message": {"text": "Unused endpoint: POST /audit"}, "properties": {"repobilityId": "b86c7f3631108677", "scanner": "scanner-primary", "fingerprint": "44de7bf2773e2811", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-d24f37422fab7d53", "level": "note", "message": {"text": "Unused endpoint: GET /audit/{audit_id}"}, "properties": {"repobilityId": "b59922a7fbc932bf", "scanner": "scanner-primary", "fingerprint": "d24f37422fab7d53", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-6ae3a844c76eb898", "level": "note", "message": {"text": "Unused endpoint: GET /audit/{audit_id}/json"}, "properties": {"repobilityId": "b21df99cfc7dfe78", "scanner": "scanner-primary", "fingerprint": "6ae3a844c76eb898", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-b55c95afd69ab89f", "level": "note", "message": {"text": "Unused endpoint: GET /audit/{audit_id}/md"}, "properties": {"repobilityId": "dc0d3c9ea5327cbe", "scanner": "scanner-primary", "fingerprint": "b55c95afd69ab89f", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-8804a5d13a3b0ebb", "level": "note", "message": {"text": "Unused endpoint: GET /audit/{audit_id}/pdf"}, "properties": {"repobilityId": "f2dc07526ec98853", "scanner": "scanner-primary", "fingerprint": "8804a5d13a3b0ebb", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-144497972cf58e7c", "level": "note", "message": {"text": "Unused endpoint: GET /audits"}, "properties": {"repobilityId": "9972d4dce582177f", "scanner": "scanner-primary", "fingerprint": "144497972cf58e7c", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-804217699a839729", "level": "note", "message": {"text": "Unused endpoint: POST /debug/persist-test"}, "properties": {"repobilityId": "bd26f1b140f92377", "scanner": "scanner-primary", "fingerprint": "804217699a839729", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-720fb5423cdd1d35", "level": "note", "message": {"text": "Unused endpoint: GET /api/by-domain/{domain:path}"}, "properties": {"repobilityId": "14d75ce6ded48655", "scanner": "scanner-primary", "fingerprint": "720fb5423cdd1d35", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-06d976be8f8aa3a5", "level": "note", "message": {"text": "Unused endpoint: GET /api/by-id/{audit_id}"}, "properties": {"repobilityId": "ef8bc334867ee434", "scanner": "scanner-primary", "fingerprint": "06d976be8f8aa3a5", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-2f727b7d14322cec", "level": "note", "message": {"text": "Unused endpoint: GET /api/history/{domain:path}"}, "properties": {"repobilityId": "12972aa8891181f5", "scanner": "scanner-primary", "fingerprint": "2f727b7d14322cec", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-34d162e78533d5ec", "level": "note", "message": {"text": "Unused endpoint: GET /api/audits"}, "properties": {"repobilityId": "1cf3ac2f30e58c3c", "scanner": "scanner-primary", "fingerprint": "34d162e78533d5ec", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-595cc89b182dba47", "level": "note", "message": {"text": "Unused endpoint: POST /api/audit/start"}, "properties": {"repobilityId": "27016e46429b22d9", "scanner": "scanner-primary", "fingerprint": "595cc89b182dba47", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-bf2bce7fa8c66273", "level": "note", "message": {"text": "Unused endpoint: GET /api/audit/{audit_id}/status"}, "properties": {"repobilityId": "3c593da392d677d9", "scanner": "scanner-primary", "fingerprint": "bf2bce7fa8c66273", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-6cee9ee567ce4fa0", "level": "note", "message": {"text": "Unused endpoint: GET /api/audit/{audit_id}/result"}, "properties": {"repobilityId": "0191f92363dbb648", "scanner": "scanner-primary", "fingerprint": "6cee9ee567ce4fa0", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-3fd7d34628d0d32d", "level": "note", "message": {"text": "Unused endpoint: DELETE /api/audit/by-domain/{domain:path}"}, "properties": {"repobilityId": "dad3a217048f625a", "scanner": "scanner-primary", "fingerprint": "3fd7d34628d0d32d", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-f32d507ac8adb095", "level": "note", "message": {"text": "Unused endpoint: DELETE /api/audit/{audit_id}"}, "properties": {"repobilityId": "6dd58148882f872c", "scanner": "scanner-primary", "fingerprint": "f32d507ac8adb095", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-5ddabfac939b8d15", "level": "note", "message": {"text": "Unused endpoint: GET /api/suppressed"}, "properties": {"repobilityId": "1a7a9f9aab70dbe3", "scanner": "scanner-primary", "fingerprint": "5ddabfac939b8d15", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-0c6f03a808236c30", "level": "note", "message": {"text": "Unused endpoint: DELETE /api/suppressed/{domain:path}"}, "properties": {"repobilityId": "f761791578580d96", "scanner": "scanner-primary", "fingerprint": "0c6f03a808236c30", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-56608a3bd032f5f4", "level": "note", "message": {"text": "Unused endpoint: GET /{slug}"}, "properties": {"repobilityId": "589c08ccfaa0fb40", "scanner": "scanner-primary", "fingerprint": "56608a3bd032f5f4", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}]}]}