{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "scanner-fd6bd6afd67ab6df", "name": "Stray `console.log` in TS/JS \u2014 scripts/llm-task-extraction.js:51", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/llm-task-extraction.js:51"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-97469f2584559636", "name": "Stray `console.log` in TS/JS \u2014 scripts/local-worker.js:238", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/local-worker.js:238"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-db99c992618149fc", "name": "Stray `console.log` in TS/JS \u2014 scripts/automation-run-log.js:58", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/automation-run-log.js:58"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a40c1de1f396adf4", "name": "Stray `console.log` in TS/JS \u2014 scripts/build-user-ui-connected-preview.js:128", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/build-user-ui-connected-preview.js:128"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f79bfb61ad0c06d6", "name": "Stray `console.log` in TS/JS \u2014 scripts/setup-codex-command-queue.js:20", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/setup-codex-command-queue.js:20"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d58812498df9b00e", "name": "Stray `console.log` in TS/JS \u2014 scripts/rebuild-task-candidates-from-conversations.js:123", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/rebuild-task-candidates-from-conversations.js:123"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-767ef4a50b703ad0", "name": "Stray `console.log` in TS/JS \u2014 scripts/clean-total-control-task-titles.js:55", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/clean-total-control-task-titles.js:55"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1377d1baac25fdcd", "name": "Stray `console.log` in TS/JS \u2014 scripts/render-cron-report.js:105", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/render-cron-report.js:105"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-91af9e7f02d39533", "name": "Stray `console.log` in TS/JS \u2014 scripts/sync-line-message-judgements.js:53", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/sync-line-message-judgements.js:53"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0380350b6ed3c3eb", "name": "Stray `console.log` in TS/JS \u2014 scripts/sync-extraction-feedback.js:49", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/sync-extraction-feedback.js:49"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c1b80cc815fc2936", "name": "Stray `console.log` in TS/JS \u2014 scripts/codex-command-queue.js:23", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/codex-command-queue.js:23"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-31cf247ce925e022", "name": "Stray `console.log` in TS/JS \u2014 scripts/run-cron-with-alert.js:28", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/run-cron-with-alert.js:28"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5098aec02af2a378", "name": "Stray `console.log` in TS/JS \u2014 scripts/setup-responsibility-owner-narrowing.js:22", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/setup-responsibility-owner-narrowing.js:22"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-bd0e467dc5b167a1", "name": "Stray `console.log` in TS/JS \u2014 scripts/parse-attachments.js:53", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/parse-attachments.js:53"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-00bfb4187c10d54f", "name": "Stray `console.log` in TS/JS \u2014 scripts/setup-daily-report-snapshots.js:16", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/setup-daily-report-snapshots.js:16"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d0878570677f400d", "name": "Stray `console.log` in TS/JS \u2014 scripts/setup-line-group-member-index.js:29", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/setup-line-group-member-index.js:29"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ff00c0898532a9b8", "name": "Stray `console.log` in TS/JS \u2014 scripts/sync-responsibility-candidates.js:40", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/sync-responsibility-candidates.js:40"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4282a55a83d1534f", "name": "Stray `console.log` in TS/JS \u2014 scripts/run-scheduled-actions.js:55", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/run-scheduled-actions.js:55"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-13c8205ddc48e129", "name": "Stray `console.log` in TS/JS \u2014 scripts/sync-meeting-actions.js:35", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/sync-meeting-actions.js:35"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5f6b27ce54df7429", "name": "Stray `console.log` in TS/JS \u2014 scripts/judgment-calibration.js:681", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/judgment-calibration.js:681"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-aac0f2cad0b61629", "name": "Stray `console.log` in TS/JS \u2014 scripts/llm-codex-command-triage.js:44", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/llm-codex-command-triage.js:44"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8781ce0da522f794", "name": "Stray `console.log` in TS/JS \u2014 scripts/line-push.js:43", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/line-push.js:43"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fa3f3af191a16479", "name": "Stray `console.log` in TS/JS \u2014 scripts/backfill-task-media-evidence-from-conversations.js:139", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/backfill-task-media-evidence-from-conversations.js:139"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5e65c9be448f75b4", "name": "Stray `console.log` in TS/JS \u2014 scripts/eval-extraction.js:46", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/eval-extraction.js:46"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e2aa9efd2f7b8783", "name": "Stray `console.log` in TS/JS \u2014 scripts/propose-projects.js:42", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/propose-projects.js:42"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c01f8d23926604e5", "name": "Stray `console.log` in TS/JS \u2014 scripts/backfill-active-task-details.js:50", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/backfill-active-task-details.js:50"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ef4ff295b68be64e", "name": "Stray `console.log` in TS/JS \u2014 scripts/sync-line-group-member-index.js:101", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/sync-line-group-member-index.js:101"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f665ac82f690e48f", "name": "Stray `console.log` in TS/JS \u2014 scripts/sync-line-group-options.js:144", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/sync-line-group-options.js:144"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d4dbea18480c5372", "name": "Stray `console.log` in TS/JS \u2014 scripts/dump-conversations.js:46", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/dump-conversations.js:46"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-18a909d1d70471ec", "name": "Stray `console.log` in TS/JS \u2014 src/event-queue.js:75", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 src/event-queue.js:75"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2f3f358473520736", "name": "Stray `console.log` in TS/JS \u2014 src/control-api.js:1877", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 src/control-api.js:1877"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-679d7227ca73282a", "name": "Stray `console.log` in TS/JS \u2014 src/server.js:1058", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 src/server.js:1058"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9710c8d059e53154", "name": "No frontend routes/components detected", "shortDescription": {"text": "No frontend routes/components detected"}, "fullDescription": {"text": "No React/Vue/Next routes were found. This is fine for backend-only repos."}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-74a4ad19dc0e74b7", "name": "Insecure pattern 'node_child_process' in scripts/llm-task-extraction.js:1", "shortDescription": {"text": "Insecure pattern 'node_child_process' in scripts/llm-task-extraction.js:1"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0971787f0839193b", "name": "Insecure pattern 'node_child_process' in scripts/local-worker.js:15", "shortDescription": {"text": "Insecure pattern 'node_child_process' in scripts/local-worker.js:15"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-5a817defcca513f7", "name": "Insecure pattern 'node_child_process' in scripts/start-server.js:1", "shortDescription": {"text": "Insecure pattern 'node_child_process' in scripts/start-server.js:1"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-fea35cadfc2b386a", "name": "Insecure pattern 'node_child_process' in scripts/run-cron-with-alert.js:1", "shortDescription": {"text": "Insecure pattern 'node_child_process' in scripts/run-cron-with-alert.js:1"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c4d52456cb38d398", "name": "Insecure pattern 'direct_innerhtml_assignment' in reports/morning-brief-prototype.html:34", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in reports/morning-brief-prototype.html:34"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e4c531aeed518a72", "name": "Insecure pattern 'direct_innerhtml_assignment' in reports/daily-control-report-prototype.html:207", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in reports/daily-control-report-prototype.html:207"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6a6dc3cde1080550", "name": "Insecure pattern 'direct_innerhtml_assignment' in reports/followup-confirmation-prototype.html:137", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in reports/followup-confirmation-prototype.html:137"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-afceef7d82d610dd", "name": "Insecure pattern 'direct_innerhtml_assignment' in src/dashboard-pages.js:436", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in src/dashboard-pages.js:436"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-fa547e54859ecc2e", "name": "Insecure pattern 'cors_wildcard' in src/control-api.js:3901", "shortDescription": {"text": "Insecure pattern 'cors_wildcard' in src/control-api.js:3901"}, "fullDescription": {"text": "Found a known-risky pattern (cors_wildcard). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cca9261285cf3e1d", "name": "Insecure pattern 'node_child_process' in src/llm-backend.js:9", "shortDescription": {"text": "Insecure pattern 'node_child_process' in src/llm-backend.js:9"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4601e3ad3bb28677", "name": "No CI/CD pipelines detected", "shortDescription": {"text": "No CI/CD pipelines detected"}, "fullDescription": {"text": "No GitHub Actions, GitLab CI, or CircleCI configs found. Without CI you can't gate deploys on tests/lints."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7f55dabf9ca84d33", "name": "Very large file: scripts/build-user-ui-connected-preview.js (3492 lines)", "shortDescription": {"text": "Very large file: scripts/build-user-ui-connected-preview.js (3492 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a2bee41b318cc568", "name": "Very large file: scripts/sync-line-message-judgements.js (1750 lines)", "shortDescription": {"text": "Very large file: scripts/sync-line-message-judgements.js (1750 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7066bf9f2917fb41", "name": "Very large file: src/control-api.js (3920 lines)", "shortDescription": {"text": "Very large file: src/control-api.js (3920 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0798bca1ecc08879", "name": "Very large file: src/server.js (2056 lines)", "shortDescription": {"text": "Very large file: src/server.js (2056 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6893a6c8b0861585", "name": "Very low test-to-source ratio", "shortDescription": {"text": "Very low test-to-source ratio"}, "fullDescription": {"text": "0 test file(s) for 36 source file(s) (ratio 0.00). Consider adding integration or unit tests for critical paths."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-141b30a41e03817b", "name": "No license file detected", "shortDescription": {"text": "No license file detected"}, "fullDescription": {"text": "No LICENSE/COPYING/NOTICE file was found. Generated repositories often omit licensing, which blocks reuse and automated intake."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3ab5d313dda8e5f9", "name": "Debug logging residue appears in source files", "shortDescription": {"text": "Debug logging residue appears in source files"}, "fullDescription": {"text": "Found 43 console/debugger/print-style debug statements in non-test source. This is a common fast-generation residue before production cleanup."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-72b2a6250083a784", "name": "Placeholder or mock-heavy implementation detected", "shortDescription": {"text": "Placeholder or mock-heavy implementation detected"}, "fullDescription": {"text": "Found 18 placeholder/mock markers across 3 source files. This often means the repo looks complete while core flows still use generated scaffolding or fake data."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9d79c4077342a7d0", "name": "Runtime service client appears to use placeholder configuration", "shortDescription": {"text": "Runtime service client appears to use placeholder configuration"}, "fullDescription": {"text": "A runtime source file appears to wire Supabase/Firebase/AI/payment-style clients to placeholder URLs, keys, or fallback values. In the Fable corpus this often means the UI/API shape is present while the backend service is not actually configured."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2d0c7b7ab8f8aacf", "name": "Critical user flow still appears backed by mock or placeholder data", "shortDescription": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "fullDescription": {"text": "A payment/auth/admin/order/billing-style flow contains mock, fake, TODO, dummy, or placeholder markers in runtime source. In the Fable corpus this is a high-leverage completeness smell: the app can look finished while the money, identity, or tenant flow is still scaffolded."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b9088664ace7f748", "name": "Composite production-readiness gap", "shortDescription": {"text": "Composite production-readiness gap"}, "fullDescription": {"text": "Multiple low-cost hardening controls are missing together: license, ci, tests. Opus verification showed these co-occurring gaps are a better readiness signal than reading each flag in isolation."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-749d4bc1bd66df5f", "name": "Agent instructions exist but release-hardening basics are missing", "shortDescription": {"text": "Agent instructions exist but release-hardening basics are missing"}, "fullDescription": {"text": "AI-coder instruction files were found, but the repo is missing license, ci, tests. Treat this as a contract gap: the agent is guided, but the generated output is not yet guarded by the controls that make it repeatable."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ea8f3013f588db25", "name": "Shallow git history limits provenance confidence", "shortDescription": {"text": "Shallow git history limits provenance confidence"}, "fullDescription": {"text": "The repository is a shallow clone. Origin/evolution analysis cannot distinguish fresh generation, imported legacy code, or long-lived human code with high confidence."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8424db9c75e04ba4", "name": "Very short observed git history", "shortDescription": {"text": "Very short observed git history"}, "fullDescription": {"text": "The repo has multiple source files but two or fewer visible commits. This is not a failure by itself, but it lowers confidence in evolution-based diagnosis."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-a10a28c059f4d501", "name": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/llm-task-extraction.js:839", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/llm-task-extraction.js:839"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4ecf9472fbbca829", "name": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/automation-run-log.js:147", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/automation-run-log.js:147"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d8d64df23412ac28", "name": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/build-user-ui-connected-preview.js:190", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/build-user-ui-connected-preview.js:190"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e38fbf947869f47f", "name": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/setup-codex-command-queue.js:112", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/setup-codex-command-queue.js:112"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b32ab48e8b399043", "name": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/sync-line-message-judgements.js:1621", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/sync-line-message-judgements.js:1621"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-14ca9e16e7960834", "name": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/sync-extraction-feedback.js:324", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/sync-extraction-feedback.js:324"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-008074913aceecfd", "name": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/codex-command-queue.js:83", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/codex-command-queue.js:83"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-52859721f1e5f601", "name": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/setup-responsibility-owner-narrowing.js:367", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/setup-responsibility-owner-narrowing.js:367"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-dc3cf1bc52a4899a", "name": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/parse-attachments.js:148", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/parse-attachments.js:148"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-809beb0f5a90e670", "name": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/setup-daily-report-snapshots.js:91", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/setup-daily-report-snapshots.js:91"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-951f23c8cd51577a", "name": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/setup-line-group-member-index.js:118", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/setup-line-group-member-index.js:118"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4ac3755625da540c", "name": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/sync-responsibility-candidates.js:196", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/sync-responsibility-candidates.js:196"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c801757c6e2678f9", "name": "Commented-code block (5 lines) in scripts/run-scheduled-actions.js:3", "shortDescription": {"text": "Commented-code block (5 lines) in scripts/run-scheduled-actions.js:3"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-37be95647c8fd34e", "name": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/run-scheduled-actions.js:219", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/run-scheduled-actions.js:219"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d9fbd86dcdf9cc86", "name": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/sync-meeting-actions.js:640", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/sync-meeting-actions.js:640"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3f2cb43ea9921bbd", "name": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/judgment-calibration.js:456", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/judgment-calibration.js:456"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-649df6a447c02b84", "name": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/llm-codex-command-triage.js:215", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/llm-codex-command-triage.js:215"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0d24969cb529c3db", "name": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/line-push.js:29", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/line-push.js:29"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d82b216cd319eb20", "name": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/backfill-task-media-evidence-from-conversations.js:194", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/backfill-task-media-evidence-from-conversations.js:194"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-edbe75f80773868a", "name": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/eval-extraction.js:239", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/eval-extraction.js:239"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a9b73dd51ebe32b7", "name": "Commented-code block (5 lines) in scripts/propose-projects.js:1", "shortDescription": {"text": "Commented-code block (5 lines) in scripts/propose-projects.js:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-baa637204fbde72f", "name": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/propose-projects.js:283", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/propose-projects.js:283"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-fafef1f715466ace", "name": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/sync-line-group-member-index.js:137", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/sync-line-group-member-index.js:137"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b242afd8c355390c", "name": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/sync-line-group-options.js:308", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/sync-line-group-options.js:308"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6316706697ef1811", "name": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/dump-conversations.js:139", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/dump-conversations.js:139"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-eb1f91b5be17d0fc", "name": "`fetch()` without try/.catch or AbortSignal \u2014 src/dashboard-pages.js:788", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/dashboard-pages.js:788"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-77968affa5526849", "name": "`fetch()` without try/.catch or AbortSignal \u2014 src/report-pages.js:630", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/report-pages.js:630"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-660305b0c467b78a", "name": "`fetch()` without try/.catch or AbortSignal \u2014 src/control-api.js:2980", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/control-api.js:2980"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-fba1bca6f6e53e85", "name": "`fetch()` without try/.catch or AbortSignal \u2014 src/server.js:193", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/server.js:193"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-528990ae4787cb10", "name": "Commented-code block (5 lines) in src/llm-backend.js:1", "shortDescription": {"text": "Commented-code block (5 lines) in src/llm-backend.js:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-a5417a5f0affce13", "name": "52 env vars used in code but missing from .env.example", "shortDescription": {"text": "52 env vars used in code but missing from .env.example"}, "fullDescription": {"text": "Drift between code and config docs. The first few: `AM_CONTROL_API_KEY`, `AM_CONTROL_HEADER_PREFIX`, `AM_CRON_ALERTS_ENABLED`, `AM_CRON_RETRY_DELAYS_MS`, `AM_OUTGOING_ACTOR_NAME`, `AM_PROJECT_ENV_PREFIX`, `AM_SKIP_IF_WORKER_ACTIVE`, `AM_WORKER_STATUS_URL` + 44 more. Add them (with a placeholder/comment) to .env.example so onboarding doesn't break."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/19314"}, "properties": {"repository": "sevenchen611/HOZO-AM", "repoUrl": "https://github.com/sevenchen611/HOZO-AM", "branch": "main"}, "results": [{"ruleId": "scanner-fd6bd6afd67ab6df", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/llm-task-extraction.js:51"}, "properties": {"repobilityId": "04175f7fec777202", "scanner": "scanner-primary", "fingerprint": "fd6bd6afd67ab6df", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-97469f2584559636", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/local-worker.js:238"}, "properties": {"repobilityId": "5f19e11e025dfdaa", "scanner": "scanner-primary", "fingerprint": "97469f2584559636", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-db99c992618149fc", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/automation-run-log.js:58"}, "properties": {"repobilityId": "c7685017edc2e76f", "scanner": "scanner-primary", "fingerprint": "db99c992618149fc", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-a40c1de1f396adf4", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/build-user-ui-connected-preview.js:128"}, "properties": {"repobilityId": "8ac860034eacdf03", "scanner": "scanner-primary", "fingerprint": "a40c1de1f396adf4", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-f79bfb61ad0c06d6", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/setup-codex-command-queue.js:20"}, "properties": {"repobilityId": "77c91b7076231c9d", "scanner": "scanner-primary", "fingerprint": "f79bfb61ad0c06d6", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-d58812498df9b00e", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/rebuild-task-candidates-from-conversations.js:123"}, "properties": {"repobilityId": "3cd8ac5ffa74b9bb", "scanner": "scanner-primary", "fingerprint": "d58812498df9b00e", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-767ef4a50b703ad0", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/clean-total-control-task-titles.js:55"}, "properties": {"repobilityId": "13126f9cae2f48b9", "scanner": "scanner-primary", "fingerprint": "767ef4a50b703ad0", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-1377d1baac25fdcd", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/render-cron-report.js:105"}, "properties": {"repobilityId": "040fb3ed14a7a2f5", "scanner": "scanner-primary", "fingerprint": "1377d1baac25fdcd", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-91af9e7f02d39533", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/sync-line-message-judgements.js:53"}, "properties": {"repobilityId": "8b9c46b296f752ef", "scanner": "scanner-primary", "fingerprint": "91af9e7f02d39533", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-0380350b6ed3c3eb", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/sync-extraction-feedback.js:49"}, "properties": {"repobilityId": "fd772125acfde178", "scanner": "scanner-primary", "fingerprint": "0380350b6ed3c3eb", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-c1b80cc815fc2936", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/codex-command-queue.js:23"}, "properties": {"repobilityId": "c9c307309e135063", "scanner": "scanner-primary", "fingerprint": "c1b80cc815fc2936", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-31cf247ce925e022", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/run-cron-with-alert.js:28"}, "properties": {"repobilityId": "c9dc13c4bc1f6997", "scanner": "scanner-primary", "fingerprint": "31cf247ce925e022", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-5098aec02af2a378", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/setup-responsibility-owner-narrowing.js:22"}, "properties": {"repobilityId": "78dc24ddf8653e74", "scanner": "scanner-primary", "fingerprint": "5098aec02af2a378", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-bd0e467dc5b167a1", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/parse-attachments.js:53"}, "properties": {"repobilityId": "9f4e9e07ccf2a03f", "scanner": "scanner-primary", "fingerprint": "bd0e467dc5b167a1", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-00bfb4187c10d54f", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/setup-daily-report-snapshots.js:16"}, "properties": {"repobilityId": "a4c5edeb40ed8aee", "scanner": "scanner-primary", "fingerprint": "00bfb4187c10d54f", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-d0878570677f400d", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/setup-line-group-member-index.js:29"}, "properties": {"repobilityId": "33085b508fa57fa9", "scanner": "scanner-primary", "fingerprint": "d0878570677f400d", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-ff00c0898532a9b8", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/sync-responsibility-candidates.js:40"}, "properties": {"repobilityId": "c7707a17b568522a", "scanner": "scanner-primary", "fingerprint": "ff00c0898532a9b8", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-4282a55a83d1534f", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/run-scheduled-actions.js:55"}, "properties": {"repobilityId": "180fe13e0f0a84ca", "scanner": "scanner-primary", "fingerprint": "4282a55a83d1534f", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-13c8205ddc48e129", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/sync-meeting-actions.js:35"}, "properties": {"repobilityId": "57491a5dc3c26686", "scanner": "scanner-primary", "fingerprint": "13c8205ddc48e129", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-5f6b27ce54df7429", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/judgment-calibration.js:681"}, "properties": {"repobilityId": "16dfd1e727c50c5e", "scanner": "scanner-primary", "fingerprint": "5f6b27ce54df7429", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-aac0f2cad0b61629", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/llm-codex-command-triage.js:44"}, "properties": {"repobilityId": "0193d8447bee2378", "scanner": "scanner-primary", "fingerprint": "aac0f2cad0b61629", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-8781ce0da522f794", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/line-push.js:43"}, "properties": {"repobilityId": "6d74abbadb619791", "scanner": "scanner-primary", "fingerprint": "8781ce0da522f794", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-fa3f3af191a16479", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/backfill-task-media-evidence-from-conversations.js:139"}, "properties": {"repobilityId": "b9ad513067051804", "scanner": "scanner-primary", "fingerprint": "fa3f3af191a16479", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-5e65c9be448f75b4", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/eval-extraction.js:46"}, "properties": {"repobilityId": "059c43c7306d08b3", "scanner": "scanner-primary", "fingerprint": "5e65c9be448f75b4", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-e2aa9efd2f7b8783", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/propose-projects.js:42"}, "properties": {"repobilityId": "3e89233c676b387f", "scanner": "scanner-primary", "fingerprint": "e2aa9efd2f7b8783", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-c01f8d23926604e5", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/backfill-active-task-details.js:50"}, "properties": {"repobilityId": "965e737a90c3fca1", "scanner": "scanner-primary", "fingerprint": "c01f8d23926604e5", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-ef4ff295b68be64e", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/sync-line-group-member-index.js:101"}, "properties": {"repobilityId": "2381247b676c7626", "scanner": "scanner-primary", "fingerprint": "ef4ff295b68be64e", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-f665ac82f690e48f", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/sync-line-group-options.js:144"}, "properties": {"repobilityId": "514ebe2e9ea54e5d", "scanner": "scanner-primary", "fingerprint": "f665ac82f690e48f", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-d4dbea18480c5372", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/dump-conversations.js:46"}, "properties": {"repobilityId": "9709bc46f84e0ff4", "scanner": "scanner-primary", "fingerprint": "d4dbea18480c5372", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-18a909d1d70471ec", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 src/event-queue.js:75"}, "properties": {"repobilityId": "549452f617f0d3de", "scanner": "scanner-primary", "fingerprint": "18a909d1d70471ec", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-2f3f358473520736", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 src/control-api.js:1877"}, "properties": {"repobilityId": "6fe5bc19dee0b6fa", "scanner": "scanner-primary", "fingerprint": "2f3f358473520736", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-679d7227ca73282a", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 src/server.js:1058"}, "properties": {"repobilityId": "51ec0d6adae748e2", "scanner": "scanner-primary", "fingerprint": "679d7227ca73282a", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-9710c8d059e53154", "level": "none", "message": {"text": "No frontend routes/components detected"}, "properties": {"repobilityId": "44ca61485762e494", "scanner": "scanner-primary", "fingerprint": "9710c8d059e53154", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["coverage"]}}, {"ruleId": "scanner-74a4ad19dc0e74b7", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in scripts/llm-task-extraction.js:1"}, "properties": {"repobilityId": "6cdf2ab431565f7c", "scanner": "scanner-primary", "fingerprint": "74a4ad19dc0e74b7", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/llm-task-extraction.js"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0971787f0839193b", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in scripts/local-worker.js:15"}, "properties": {"repobilityId": "7d5df7e6efa7f4ab", "scanner": "scanner-primary", "fingerprint": "0971787f0839193b", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/local-worker.js"}, "region": {"startLine": 15}}}]}, {"ruleId": "scanner-5a817defcca513f7", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in scripts/start-server.js:1"}, "properties": {"repobilityId": "d375673199cba198", "scanner": "scanner-primary", "fingerprint": "5a817defcca513f7", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/start-server.js"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-fea35cadfc2b386a", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in scripts/run-cron-with-alert.js:1"}, "properties": {"repobilityId": "ff201eb444f50f08", "scanner": "scanner-primary", "fingerprint": "fea35cadfc2b386a", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/run-cron-with-alert.js"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c4d52456cb38d398", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in reports/morning-brief-prototype.html:34"}, "properties": {"repobilityId": "e37c84a4389595db", "scanner": "scanner-primary", "fingerprint": "c4d52456cb38d398", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "reports/morning-brief-prototype.html"}, "region": {"startLine": 34}}}]}, {"ruleId": "scanner-e4c531aeed518a72", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in reports/daily-control-report-prototype.html:207"}, "properties": {"repobilityId": "567c66da032a2564", "scanner": "scanner-primary", "fingerprint": "e4c531aeed518a72", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "reports/daily-control-report-prototype.html"}, "region": {"startLine": 207}}}]}, {"ruleId": "scanner-6a6dc3cde1080550", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in reports/followup-confirmation-prototype.html:137"}, "properties": {"repobilityId": "f67ed2a1af3c5bea", "scanner": "scanner-primary", "fingerprint": "6a6dc3cde1080550", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "reports/followup-confirmation-prototype.html"}, "region": {"startLine": 137}}}]}, {"ruleId": "scanner-afceef7d82d610dd", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in src/dashboard-pages.js:436"}, "properties": {"repobilityId": "7d4ef97a8ad0fecc", "scanner": "scanner-primary", "fingerprint": "afceef7d82d610dd", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/dashboard-pages.js"}, "region": {"startLine": 436}}}]}, {"ruleId": "scanner-fa547e54859ecc2e", "level": "warning", "message": {"text": "Insecure pattern 'cors_wildcard' in src/control-api.js:3901"}, "properties": {"repobilityId": "82d026b4283e7a3a", "scanner": "scanner-primary", "fingerprint": "fa547e54859ecc2e", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "cors_wildcard"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/control-api.js"}, "region": {"startLine": 3901}}}]}, {"ruleId": "scanner-cca9261285cf3e1d", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in src/llm-backend.js:9"}, "properties": {"repobilityId": "fb8d4a4911538cee", "scanner": "scanner-primary", "fingerprint": "cca9261285cf3e1d", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/llm-backend.js"}, "region": {"startLine": 9}}}]}, {"ruleId": "scanner-4601e3ad3bb28677", "level": "warning", "message": {"text": "No CI/CD pipelines detected"}, "properties": {"repobilityId": "c3ee439bce2bc51e", "scanner": "scanner-primary", "fingerprint": "4601e3ad3bb28677", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["coverage"]}}, {"ruleId": "scanner-7f55dabf9ca84d33", "level": "note", "message": {"text": "Very large file: scripts/build-user-ui-connected-preview.js (3492 lines)"}, "properties": {"repobilityId": "b1f71de43476e6bc", "scanner": "scanner-primary", "fingerprint": "7f55dabf9ca84d33", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-a2bee41b318cc568", "level": "note", "message": {"text": "Very large file: scripts/sync-line-message-judgements.js (1750 lines)"}, "properties": {"repobilityId": "36be7e2ed475507c", "scanner": "scanner-primary", "fingerprint": "a2bee41b318cc568", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-7066bf9f2917fb41", "level": "note", "message": {"text": "Very large file: src/control-api.js (3920 lines)"}, "properties": {"repobilityId": "5b136bf8d6d17ea8", "scanner": "scanner-primary", "fingerprint": "7066bf9f2917fb41", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-0798bca1ecc08879", "level": "note", "message": {"text": "Very large file: src/server.js (2056 lines)"}, "properties": {"repobilityId": "ba2a4d84798285f4", "scanner": "scanner-primary", "fingerprint": "0798bca1ecc08879", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-6893a6c8b0861585", "level": "warning", "message": {"text": "Very low test-to-source ratio"}, "properties": {"repobilityId": "54a7de3f06314bf0", "scanner": "scanner-primary", "fingerprint": "6893a6c8b0861585", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["tests", "coverage"]}}, {"ruleId": "scanner-141b30a41e03817b", "level": "note", "message": {"text": "No license file detected"}, "properties": {"repobilityId": "5fbf48a6064c3e64", "scanner": "scanner-primary", "fingerprint": "141b30a41e03817b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["license", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-3ab5d313dda8e5f9", "level": "note", "message": {"text": "Debug logging residue appears in source files"}, "properties": {"repobilityId": "16bb7365006c2c30", "scanner": "scanner-primary", "fingerprint": "3ab5d313dda8e5f9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["debug", "cleanup", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-72b2a6250083a784", "level": "warning", "message": {"text": "Placeholder or mock-heavy implementation detected"}, "properties": {"repobilityId": "4d06e7f6deadad09", "scanner": "scanner-primary", "fingerprint": "72b2a6250083a784", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "incomplete", "generated-repo-pattern"]}}, {"ruleId": "scanner-9d79c4077342a7d0", "level": "warning", "message": {"text": "Runtime service client appears to use placeholder configuration"}, "properties": {"repobilityId": "0080d8eff5202884", "scanner": "scanner-primary", "fingerprint": "9d79c4077342a7d0", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "runtime-config", "service-client", "generated-repo-pattern"]}}, {"ruleId": "scanner-2d0c7b7ab8f8aacf", "level": "warning", "message": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "properties": {"repobilityId": "96171a32d023e2db", "scanner": "scanner-primary", "fingerprint": "2d0c7b7ab8f8aacf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "critical-flow", "generated-repo-pattern"]}}, {"ruleId": "scanner-b9088664ace7f748", "level": "warning", "message": {"text": "Composite production-readiness gap"}, "properties": {"repobilityId": "59adb55bf96e356f", "scanner": "scanner-primary", "fingerprint": "b9088664ace7f748", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["production-readiness", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-749d4bc1bd66df5f", "level": "warning", "message": {"text": "Agent instructions exist but release-hardening basics are missing"}, "properties": {"repobilityId": "c0e7f0530dc58ea0", "scanner": "scanner-primary", "fingerprint": "749d4bc1bd66df5f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-ea8f3013f588db25", "level": "note", "message": {"text": "Shallow git history limits provenance confidence"}, "properties": {"repobilityId": "5187f1971c35a4da", "scanner": "scanner-primary", "fingerprint": "ea8f3013f588db25", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-8424db9c75e04ba4", "level": "none", "message": {"text": "Very short observed git history"}, "properties": {"repobilityId": "b29bc7bfdeaa40e1", "scanner": "scanner-primary", "fingerprint": "8424db9c75e04ba4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-a10a28c059f4d501", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/llm-task-extraction.js:839"}, "properties": {"repobilityId": "b58844a63eca25ce", "scanner": "scanner-primary", "fingerprint": "a10a28c059f4d501", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-4ecf9472fbbca829", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/automation-run-log.js:147"}, "properties": {"repobilityId": "3ca74c3ef4d1fda6", "scanner": "scanner-primary", "fingerprint": "4ecf9472fbbca829", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-d8d64df23412ac28", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/build-user-ui-connected-preview.js:190"}, "properties": {"repobilityId": "b85e99dec6aff6fd", "scanner": "scanner-primary", "fingerprint": "d8d64df23412ac28", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-e38fbf947869f47f", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/setup-codex-command-queue.js:112"}, "properties": {"repobilityId": "2df1e0780052f91e", "scanner": "scanner-primary", "fingerprint": "e38fbf947869f47f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-b32ab48e8b399043", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/sync-line-message-judgements.js:1621"}, "properties": {"repobilityId": "161d9454ee875696", "scanner": "scanner-primary", "fingerprint": "b32ab48e8b399043", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-14ca9e16e7960834", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/sync-extraction-feedback.js:324"}, "properties": {"repobilityId": "68b630c1c97586c1", "scanner": "scanner-primary", "fingerprint": "14ca9e16e7960834", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-008074913aceecfd", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/codex-command-queue.js:83"}, "properties": {"repobilityId": "2246f9a5240aab2e", "scanner": "scanner-primary", "fingerprint": "008074913aceecfd", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-52859721f1e5f601", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/setup-responsibility-owner-narrowing.js:367"}, "properties": {"repobilityId": "59ba75c49537bbd5", "scanner": "scanner-primary", "fingerprint": "52859721f1e5f601", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-dc3cf1bc52a4899a", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/parse-attachments.js:148"}, "properties": {"repobilityId": "58917a28db4e5d60", "scanner": "scanner-primary", "fingerprint": "dc3cf1bc52a4899a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-809beb0f5a90e670", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/setup-daily-report-snapshots.js:91"}, "properties": {"repobilityId": "f1ade456bda4b3da", "scanner": "scanner-primary", "fingerprint": "809beb0f5a90e670", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-951f23c8cd51577a", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/setup-line-group-member-index.js:118"}, "properties": {"repobilityId": "79cf26a9d88b3e0e", "scanner": "scanner-primary", "fingerprint": "951f23c8cd51577a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-4ac3755625da540c", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/sync-responsibility-candidates.js:196"}, "properties": {"repobilityId": "e5ff5336c3ab1417", "scanner": "scanner-primary", "fingerprint": "4ac3755625da540c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-c801757c6e2678f9", "level": "none", "message": {"text": "Commented-code block (5 lines) in scripts/run-scheduled-actions.js:3"}, "properties": {"repobilityId": "70890321ea8c15a4", "scanner": "scanner-primary", "fingerprint": "c801757c6e2678f9", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-37be95647c8fd34e", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/run-scheduled-actions.js:219"}, "properties": {"repobilityId": "ec89f1a01ad5051c", "scanner": "scanner-primary", "fingerprint": "37be95647c8fd34e", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-d9fbd86dcdf9cc86", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/sync-meeting-actions.js:640"}, "properties": {"repobilityId": "cc58f73473fe47bc", "scanner": "scanner-primary", "fingerprint": "d9fbd86dcdf9cc86", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-3f2cb43ea9921bbd", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/judgment-calibration.js:456"}, "properties": {"repobilityId": "f442fb67e81f0e01", "scanner": "scanner-primary", "fingerprint": "3f2cb43ea9921bbd", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-649df6a447c02b84", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/llm-codex-command-triage.js:215"}, "properties": {"repobilityId": "603996f36dd3120a", "scanner": "scanner-primary", "fingerprint": "649df6a447c02b84", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-0d24969cb529c3db", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/line-push.js:29"}, "properties": {"repobilityId": "970bdae6cb30d7bb", "scanner": "scanner-primary", "fingerprint": "0d24969cb529c3db", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-d82b216cd319eb20", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/backfill-task-media-evidence-from-conversations.js:194"}, "properties": {"repobilityId": "66b805c3bf075e3d", "scanner": "scanner-primary", "fingerprint": "d82b216cd319eb20", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-edbe75f80773868a", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/eval-extraction.js:239"}, "properties": {"repobilityId": "db4546e44b384e3b", "scanner": "scanner-primary", "fingerprint": "edbe75f80773868a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-a9b73dd51ebe32b7", "level": "none", "message": {"text": "Commented-code block (5 lines) in scripts/propose-projects.js:1"}, "properties": {"repobilityId": "5ad65bfb304e880a", "scanner": "scanner-primary", "fingerprint": "a9b73dd51ebe32b7", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-baa637204fbde72f", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/propose-projects.js:283"}, "properties": {"repobilityId": "3227ae1653f72a0d", "scanner": "scanner-primary", "fingerprint": "baa637204fbde72f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-fafef1f715466ace", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/sync-line-group-member-index.js:137"}, "properties": {"repobilityId": "c4d54b56753bb651", "scanner": "scanner-primary", "fingerprint": "fafef1f715466ace", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-b242afd8c355390c", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/sync-line-group-options.js:308"}, "properties": {"repobilityId": "e405127882539b3e", "scanner": "scanner-primary", "fingerprint": "b242afd8c355390c", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-6316706697ef1811", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/dump-conversations.js:139"}, "properties": {"repobilityId": "c378d39f6caf0865", "scanner": "scanner-primary", "fingerprint": "6316706697ef1811", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-eb1f91b5be17d0fc", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/dashboard-pages.js:788"}, "properties": {"repobilityId": "5c9c87a9985b0ac9", "scanner": "scanner-primary", "fingerprint": "eb1f91b5be17d0fc", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-77968affa5526849", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/report-pages.js:630"}, "properties": {"repobilityId": "ee5d0312c36cf72a", "scanner": "scanner-primary", "fingerprint": "77968affa5526849", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-660305b0c467b78a", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/control-api.js:2980"}, "properties": {"repobilityId": "e9583dcd84df0ab5", "scanner": "scanner-primary", "fingerprint": "660305b0c467b78a", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-fba1bca6f6e53e85", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 src/server.js:193"}, "properties": {"repobilityId": "7c4935f4723b3ffc", "scanner": "scanner-primary", "fingerprint": "fba1bca6f6e53e85", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-528990ae4787cb10", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/llm-backend.js:1"}, "properties": {"repobilityId": "e024a16dac3bc821", "scanner": "scanner-primary", "fingerprint": "528990ae4787cb10", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-a5417a5f0affce13", "level": "note", "message": {"text": "52 env vars used in code but missing from .env.example"}, "properties": {"repobilityId": "39c9352136098d82", "scanner": "scanner-primary", "fingerprint": "a5417a5f0affce13", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "config-drift"]}}]}]}