google-gemini/gemini-cli

Component	Sub-score	Weight	Contribution
`structure_score`	60.0	0.15	9.00
`security_score`	100.0	0.25	25.00
`testing_score`	95.0	0.20	19.00
`documentation_score`	89.0	0.15	13.35
`practices_score`	94.0	0.15	14.10
`code_quality`	70.0	0.10	7.00
Overall		1.00	87.5

critical Legacy software dependency conf 0.90 ✓ Repobility [MINED116] Workflow uses `secrets.GEMINI_API_KEY` on a `pull_request` trigger: This workflow triggers on `pull_request`, which checks out the FORK's code. Referencing `${ secrets.GEMINI_API_KEY }` lets a PR from any fork exfiltrate the secret (modify a script, log the value, etc.). Use `pull_request_target` ONLY with strict checkout discipline (no fork code in the trusted context).

Either remove the secret reference, or switch the trigger to `pull_request_target` AND ensure no fork-controlled code runs before the secret is consumed.

.github/workflows/ci.yml:443 dependencylegacy

critical Legacy software dependency conf 0.90 ✓ Repobility [MINED116] Workflow uses `secrets.GEMINI_CLI_ROBOT_GITHUB_PAT` on a `pull_request` trigger: This workflow triggers on `pull_request`, which checks out the FORK's code. Referencing `${ secrets.GEMINI_CLI_ROBOT_GITHUB_PAT }` lets a PR from any fork exfiltrate the secret (modify a script, log the value, etc.). Use `pull_request_target` ONLY with strict checkout discipline (no fork code in the trusted context).

Either remove the secret reference, or switch the trigger to `pull_request_target` AND ensure no fork-controlled code runs before the secret is consumed.

.github/workflows/ci.yml:47 dependencylegacy

critical 9-layer security secrets conf 1.00 Possible secret in .github/actions/push-docker/action.yml

Detected pattern matching password_literal. Rotate the credential and move to a secret manager.

.github/actions/push-docker/action.yml:50 secrets

critical 9-layer security secrets conf 1.00 Possible secret in .github/actions/push-sandbox/action.yml

Detected pattern matching password_literal. Rotate the credential and move to a secret manager.

.github/actions/push-sandbox/action.yml:56 secrets

critical 9-layer security secrets conf 1.00 Possible secret in .github/workflows/eval.yml

Detected pattern matching password_literal. Rotate the credential and move to a secret manager.

.github/workflows/eval.yml:25 secrets

critical 9-layer security secrets conf 1.00 Possible secret in .github/workflows/gemini-automated-issue-dedup.yml

Detected pattern matching password_literal. Rotate the credential and move to a secret manager.

.github/workflows/gemini-automated-issue-dedup.yml:59 secrets

critical 9-layer security secrets conf 1.00 Possible secret in .github/workflows/gemini-scheduled-issue-dedup.yml

Detected pattern matching password_literal. Rotate the credential and move to a secret manager.

.github/workflows/gemini-scheduled-issue-dedup.yml:39 secrets

high Legacy quality quality conf 0.80 ✓ Repobility [MINED113] Express POST /mcp has no auth: Express route POST /mcp declared without an auth middleware in its handler chain. Destructive methods (POST/PUT/DELETE/PATCH) on unauthenticated routes are OWASP A01:2021 broken access control.

Add an auth middleware: app.post('/mcp', requireAuth, handler) — or mount the router under app.use('/api', authMiddleware) and ensure the path is covered. If truly public, mark with a comment.

packages/vscode-ide-companion/src/ide-server.ts:213 qualitylegacy

high Legacy quality quality conf 0.80 ✓ Repobility [MINED113] Express POST /users has no auth: Express route POST /users declared without an auth middleware in its handler chain. Destructive methods (POST/PUT/DELETE/PATCH) on unauthenticated routes are OWASP A01:2021 broken access control.

Add an auth middleware: app.post('/users', requireAuth, handler) — or mount the router under app.use('/api', authMiddleware) and ensure the path is covered. If truly public, mark with a comment.

evals/update_topic.eval.ts:200 qualitylegacy

high Legacy software dependency conf 0.90 ✓ Repobility [MINED118] Dockerfile FROM `debian:bookworm-slim` not pinned by digest: `FROM debian:bookworm-slim` resolves the tag at build time. The registry CAN re-push a different image for the same tag, so every build is potentially different. Production images should pin to `image@sha256:...` for reproducibility + supply-chain integrity.

Replace with: `FROM debian:bookworm-slim@sha256:<digest>`. Get the digest from `docker manifest inspect`. Re-pin via a scheduled bot (Renovate, Dependabot).

.gcp/Dockerfile.gemini-code-builder:3 dependencylegacy

high Legacy software dependency conf 0.90 ✓ Repobility [MINED118] Dockerfile FROM `docker.io/library/node:20-slim` not pinned by digest: `FROM docker.io/library/node:20-slim` resolves the tag at build time. The registry CAN re-push a different image for the same tag, so every build is potentially different. Production images should pin to `image@sha256:...` for reproducibility + supply-chain integrity.

Replace with: `FROM docker.io/library/node:20-slim@sha256:<digest>`. Get the digest from `docker manifest inspect`. Re-pin via a scheduled bot (Renovate, Dependabot).

.gcp/Dockerfile.development:2 dependencylegacy

high Legacy software dependency conf 0.90 ✓ Repobility [MINED118] Dockerfile FROM `docker.io/library/node:20-slim` not pinned by digest: `FROM docker.io/library/node:20-slim` resolves the tag at build time. The registry CAN re-push a different image for the same tag, so every build is potentially different. Production images should pin to `image@sha256:...` for reproducibility + supply-chain integrity.

Replace with: `FROM docker.io/library/node:20-slim@sha256:<digest>`. Get the digest from `docker manifest inspect`. Re-pin via a scheduled bot (Renovate, Dependabot).

Dockerfile:42 dependencylegacy

high Legacy software dependency conf 0.90 ✓ Repobility [MINED118] Dockerfile FROM `docker.io/library/node:20-slim` not pinned by digest: `FROM docker.io/library/node:20-slim` resolves the tag at build time. The registry CAN re-push a different image for the same tag, so every build is potentially different. Production images should pin to `image@sha256:...` for reproducibility + supply-chain integrity.

Replace with: `FROM docker.io/library/node:20-slim@sha256:<digest>`. Get the digest from `docker manifest inspect`. Re-pin via a scheduled bot (Renovate, Dependabot).

Dockerfile:2 dependencylegacy

high Legacy software dependency conf 0.90 ✓ Repobility [MINED122] package.json dep `@google/gemini-cli-core` pulled from URL/Git: `dependencies.@google/gemini-cli-core` = `file:../core` bypasses the npm registry. No integrity hash, no version locking, no registry-side scanning. If the URL or git host is compromised, every `npm install` pulls the new payload.

Publish the dependency to npm (or your private registry) and reference it by `^x.y.z`. If that's not possible, lock by commit SHA: `git+https://...#<full-sha>` AND verify the SHA in CI.

packages/a2a-server/package.json:1 dependencylegacy

high Legacy software dependency conf 0.90 ✓ Repobility [MINED122] package.json dep `@google/gemini-cli-core` pulled from URL/Git: `dependencies.@google/gemini-cli-core` = `file:../core` bypasses the npm registry. No integrity hash, no version locking, no registry-side scanning. If the URL or git host is compromised, every `npm install` pulls the new payload.

Publish the dependency to npm (or your private registry) and reference it by `^x.y.z`. If that's not possible, lock by commit SHA: `git+https://...#<full-sha>` AND verify the SHA in CI.

packages/cli/package.json:1 dependencylegacy

high Legacy software dependency conf 0.90 ✓ Repobility [MINED122] package.json dep `@google/gemini-cli-core` pulled from URL/Git: `dependencies.@google/gemini-cli-core` = `file:../core` bypasses the npm registry. No integrity hash, no version locking, no registry-side scanning. If the URL or git host is compromised, every `npm install` pulls the new payload.

Publish the dependency to npm (or your private registry) and reference it by `^x.y.z`. If that's not possible, lock by commit SHA: `git+https://...#<full-sha>` AND verify the SHA in CI.

packages/sdk/package.json:1 dependencylegacy

high Legacy software dependency conf 0.90 ✓ Repobility [MINED122] package.json dep `@google/gemini-cli-test-utils` pulled from URL/Git: `devDependencies.@google/gemini-cli-test-utils` = `file:../test-utils` bypasses the npm registry. No integrity hash, no version locking, no registry-side scanning. If the URL or git host is compromised, every `npm install` pulls the new payload.

Publish the dependency to npm (or your private registry) and reference it by `^x.y.z`. If that's not possible, lock by commit SHA: `git+https://...#<full-sha>` AND verify the SHA in CI.

packages/cli/package.json:1 dependencylegacy

high Legacy software dependency conf 0.90 ✓ Repobility [MINED122] package.json dep `@google/gemini-cli-test-utils` pulled from URL/Git: `devDependencies.@google/gemini-cli-test-utils` = `file:../test-utils` bypasses the npm registry. No integrity hash, no version locking, no registry-side scanning. If the URL or git host is compromised, every `npm install` pulls the new payload.

Publish the dependency to npm (or your private registry) and reference it by `^x.y.z`. If that's not possible, lock by commit SHA: `git+https://...#<full-sha>` AND verify the SHA in CI.

packages/core/package.json:1 dependencylegacy

low Legacy software xss conf 1.00 [SEC040] innerHTML XSS — template literal with server-supplied data: Setting .innerHTML with a template literal that interpolates server-supplied or user-supplied data is the canonical stored/reflected XSS vector. The browser parses the HTML and executes any <script> or event-handler attributes in the data. CWE-79. Especially dangerous when the data comes from a CV parser, profile field, or any user-input pipeline.

For plain text: use el.textContent = data.value (auto-escapes). For HTML you need to render: el.innerHTML = DOMPurify.sanitize(html). For React/Vue/Svelte: stop using innerHTML; use the framework's binding. When data comes from CV/PDF parsers, sanitize at the parser boundary too.

packages/cli/src/services/McpPromptLoader.ts:69 xsslegacy

low Legacy software xss conf 1.00 [SEC040] innerHTML XSS — template literal with server-supplied data: Setting .innerHTML with a template literal that interpolates server-supplied or user-supplied data is the canonical stored/reflected XSS vector. The browser parses the HTML and executes any <script> or event-handler attributes in the data. CWE-79. Especially dangerous when the data comes from a CV parser, profile field, or any user-input pipeline.

For plain text: use el.textContent = data.value (auto-escapes). For HTML you need to render: el.innerHTML = DOMPurify.sanitize(html). For React/Vue/Svelte: stop using innerHTML; use the framework's binding. When data comes from CV/PDF parsers, sanitize at the parser boundary too.

packages/cli/src/commands/extensions/update.ts:61 xsslegacy

low Legacy quality quality conf 1.00 [SEC083] JS: new RegExp() with non-literal: new RegExp(<variable>) — variable input can craft a ReDoS pattern. Ported from eslint-plugin-security detect-non-literal-regexp (Apache-2.0).

Use a literal RegExp or whitelist-validate user input before constructing patterns.

packages/core/src/policy/utils.ts:21 qualitylegacy

low Legacy quality quality conf 1.00 [SEC083] JS: new RegExp() with non-literal: new RegExp(<variable>) — variable input can craft a ReDoS pattern. Ported from eslint-plugin-security detect-non-literal-regexp (Apache-2.0).

Use a literal RegExp or whitelist-validate user input before constructing patterns.

packages/core/src/hooks/hookPlanner.ts:107 qualitylegacy

low Legacy quality quality conf 1.00 [SEC083] JS: new RegExp() with non-literal: new RegExp(<variable>) — variable input can craft a ReDoS pattern. Ported from eslint-plugin-security detect-non-literal-regexp (Apache-2.0).

Use a literal RegExp or whitelist-validate user input before constructing patterns.

packages/cli/src/services/McpPromptLoader.ts:196 qualitylegacy

low Legacy quality quality conf 1.00 [SEC085] JS: child_process.exec with non-literal: child_process.exec with user-derived input enables command injection. Ported from eslint-plugin-security detect-child-process (Apache-2.0).

Use execFile / spawn with separate args array; never pass shell strings.

packages/cli/src/acp/commands/about.ts:32 qualitylegacy

low Legacy quality quality conf 1.00 [SEC085] JS: child_process.exec with non-literal: child_process.exec with user-derived input enables command injection. Ported from eslint-plugin-security detect-child-process (Apache-2.0).

Use execFile / spawn with separate args array; never pass shell strings.

.github/scripts/sync-maintainer-labels.cjs:57 qualitylegacy

low Legacy quality quality conf 1.00 [SEC085] JS: child_process.exec with non-literal: child_process.exec with user-derived input enables command injection. Ported from eslint-plugin-security detect-child-process (Apache-2.0).

Use execFile / spawn with separate args array; never pass shell strings.

.gemini/skills/ci/scripts/ci.mjs:41 qualitylegacy

high Legacy security path_traversal conf 1.00 [SEC114] path.join / Path() on user-controlled segment without containment check: filepath.Clean / path.Join on attacker-supplied segments does NOT prevent escape from the base directory. `../../../etc/passwd` resolves cleanly.

After joining, re-check containment: `if !strings.HasPrefix(filepath.Clean(joined), filepath.Clean(baseDir)+string(os.PathSeparator)) { error }`. In Node: `path.resolve(base, x); if (!resolved.startsWith(base + path.sep)) throw`.

packages/core/src/tools/get-internal-docs.ts:124 path_traversallegacy

high Legacy security path_traversal conf 1.00 [SEC114] path.join / Path() on user-controlled segment without containment check: filepath.Clean / path.Join on attacker-supplied segments does NOT prevent escape from the base directory. `../../../etc/passwd` resolves cleanly.

After joining, re-check containment: `if !strings.HasPrefix(filepath.Clean(joined), filepath.Clean(baseDir)+string(os.PathSeparator)) { error }`. In Node: `path.resolve(base, x); if (!resolved.startsWith(base + path.sep)) throw`.

packages/core/src/safety/built-in.ts:83 path_traversallegacy

high Legacy security path_traversal conf 1.00 [SEC114] path.join / Path() on user-controlled segment without containment check: filepath.Clean / path.Join on attacker-supplied segments does NOT prevent escape from the base directory. `../../../etc/passwd` resolves cleanly.

After joining, re-check containment: `if !strings.HasPrefix(filepath.Clean(joined), filepath.Clean(baseDir)+string(os.PathSeparator)) { error }`. In Node: `path.resolve(base, x); if (!resolved.startsWith(base + path.sep)) throw`.

packages/cli/src/commands/extensions/validate.ts:54 path_traversallegacy

high 9-layer api wiring conf 1.00 Dangling fetch: GET https://api.github.com/repos/${repoName}/actions/runs/${r.databaseId}/jobs (tools/gemini-cli-bot/metrics/scripts/actions_spend.ts:47)

`tools/gemini-cli-bot/metrics/scripts/actions_spend.ts:47` calls `GET https://api.github.com/repos/${repoName}/actions/runs/${r.databaseId}/jobs` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/https:/api.github.com/…

wiringdangling-fetchfetch

high 9-layer api wiring conf 1.00 Dangling fetch: GET https://www.googleapis.com/oauth2/v2/userinfo (packages/core/src/code_assist/oauth2.ts:729)

`packages/core/src/code_assist/oauth2.ts:729` calls `GET https://www.googleapis.com/oauth2/v2/userinfo` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/https:/www.googleapis.com/oauth2/v2/userinfo` If this points at …

wiringdangling-fetchfetch

high 9-layer api wiring conf 1.00 Dangling fetch: POST /api/trigger-debugger (packages/devtools/client/src/App.tsx:328)

`packages/devtools/client/src/App.tsx:328` calls `POST /api/trigger-debugger` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/trigger-debugger` If this points at an external API, prefix it with `https://` so the matc…

wiringdangling-fetchfetch

high 9-layer api wiring conf 1.00 Dangling fetch: POST http://localhost:${port}/${LITERT_API_VERSION}/models/${GEMMA_MODEL_NAME}:generateContent (packages/cli/src/commands/gemma/platform.ts:140)

`packages/cli/src/commands/gemma/platform.ts:140` calls `POST http://localhost:${port}/${LITERT_API_VERSION}/models/${GEMMA_MODEL_NAME}:generateContent` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/localhost…

wiringdangling-fetchfetch

high 9-layer api wiring conf 1.00 Dangling fetch: POST http://localhost:${port}/mcp (packages/vscode-ide-companion/src/ide-server.test.ts:359)

`packages/vscode-ide-companion/src/ide-server.test.ts:359` calls `POST http://localhost:${port}/mcp` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/localhost:/<p>/mcp` If this points at an external API, prefix…

wiringdangling-fetchfetch

high 9-layer api wiring conf 1.00 Dangling fetch: POST http://localhost:${port}/mcp (packages/vscode-ide-companion/src/ide-server.test.ts:373)

`packages/vscode-ide-companion/src/ide-server.test.ts:373` calls `POST http://localhost:${port}/mcp` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/localhost:/<p>/mcp` If this points at an external API, prefix…

wiringdangling-fetchfetch

high 9-layer api wiring conf 1.00 Dangling fetch: POST http://localhost:${port}/mcp (packages/vscode-ide-companion/src/ide-server.test.ts:390)

`packages/vscode-ide-companion/src/ide-server.test.ts:390` calls `POST http://localhost:${port}/mcp` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/localhost:/<p>/mcp` If this points at an external API, prefix…

wiringdangling-fetchfetch

high 9-layer api wiring conf 1.00 Dangling fetch: POST http://localhost:${port}/mcp (packages/vscode-ide-companion/src/ide-server.test.ts:416)

`packages/vscode-ide-companion/src/ide-server.test.ts:416` calls `POST http://localhost:${port}/mcp` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/localhost:/<p>/mcp` If this points at an external API, prefix…

wiringdangling-fetchfetch

high 9-layer api wiring conf 1.00 Dangling fetch: POST https://marketplace.visualstudio.com/_apis/public/gallery/extensionquery (packages/vscode-ide-companion/src/extension.ts:45)

`packages/vscode-ide-companion/src/extension.ts:45` calls `POST https://marketplace.visualstudio.com/_apis/public/gallery/extensionquery` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/https:/marketplace.visualstudi…

wiringdangling-fetchfetch

high 9-layer security owasp conf 1.00 Insecure pattern 'exec_used' in packages/cli/src/acp/commands/about.ts:32

Found a known-risky pattern (exec_used). Review and replace if possible.

packages/cli/src/acp/commands/about.ts:32 owaspexec_used

high 9-layer security owasp conf 1.00 Insecure pattern 'exec_used' in packages/cli/src/ui/commands/aboutCommand.ts:33

Found a known-risky pattern (exec_used). Review and replace if possible.

packages/cli/src/ui/commands/aboutCommand.ts:33 owaspexec_used

high 9-layer security owasp conf 1.00 Insecure pattern 'exec_used' in packages/cli/src/ui/commands/bugCommand.ts:46

Found a known-risky pattern (exec_used). Review and replace if possible.

packages/cli/src/ui/commands/bugCommand.ts:46 owaspexec_used

high 9-layer security owasp conf 1.00 Insecure pattern 'exec_used' in packages/sdk/src/shell.ts:34

Found a known-risky pattern (exec_used). Review and replace if possible.

packages/sdk/src/shell.ts:34 owaspexec_used

high 9-layer security owasp conf 1.00 Insecure pattern 'exec_used' in packages/sdk/src/types.ts:183

Found a known-risky pattern (exec_used). Review and replace if possible.

packages/sdk/src/types.ts:183 owaspexec_used

high 9-layer cicd supply-chain conf 1.00 pull_request_target workflow appears to check out untrusted PR code

pull_request_target runs with base-repo privileges. Checking out PR head code in that context can expose repository tokens or secrets to attacker-controlled code.

.github/workflows/eval-pr.yml supply-chaingithub-actionspull-request-target

medium Legacy quality error_handling conf 1.00 [ERR002] Empty Catch Block: Empty catch blocks hide errors.

Log the error or rethrow it. Use console.error() at minimum.

packages/cli/src/ui/utils/directoryUtils.ts:128 error_handlinglegacy

medium Legacy quality error_handling conf 1.00 [ERR002] Empty Catch Block: Empty catch blocks hide errors.

Log the error or rethrow it. Use console.error() at minimum.

packages/cli/src/ui/hooks/useLogger.ts:27 error_handlinglegacy

medium Legacy quality error_handling conf 1.00 [ERR002] Empty Catch Block: Empty catch blocks hide errors.

Log the error or rethrow it. Use console.error() at minimum.

packages/cli/src/ui/components/Notifications.tsx:109 error_handlinglegacy

medium Legacy software redos conf 1.00 [SEC031] Catastrophic Backtracking Regex (ReDoS): Regex contains nested quantifiers like `(a+)+` or quantified alternation with overlapping branches. On adversarial input these patterns exhibit exponential backtracking, freezing the process. CWE-1333. Real CVEs: CVE-2017-16129 (minimatch), CVE-2021-3807 (ansi-regex), and dozens more.

Three options, pick one: 1. Rewrite the pattern to avoid nested quantifiers. E.g. `(a+)+` is functionally equivalent to `a+` for matching purposes. 2. Use Google's re2 (`pip install google-re2`): linear-time, drop-in replacement for `re` for most use cases. 3. Set a hard timeout: `s…

packages/core/src/utils/agent-sanitization-utils.ts:120 redoslegacy

medium Legacy software redos conf 1.00 [SEC031] Catastrophic Backtracking Regex (ReDoS): Regex contains nested quantifiers like `(a+)+` or quantified alternation with overlapping branches. On adversarial input these patterns exhibit exponential backtracking, freezing the process. CWE-1333. Real CVEs: CVE-2017-16129 (minimatch), CVE-2021-3807 (ansi-regex), and dozens more.

Three options, pick one: 1. Rewrite the pattern to avoid nested quantifiers. E.g. `(a+)+` is functionally equivalent to `a+` for matching purposes. 2. Use Google's re2 (`pip install google-re2`): linear-time, drop-in replacement for `re` for most use cases. 3. Set a hard timeout: `s…

packages/core/src/policy/utils.ts:21 redoslegacy

medium Legacy quality quality conf 1.00 [SEC136] AI-typical over-broad exception handler swallowing all errors: Catch-all exception block that silently returns success or no-ops. AI agents reach for this pattern when a flaky test or an unfamiliar API throws — wrap, swallow, return success. Real bugs are masked, observability is destroyed, and callers think the operation worked. CWE-396 (improperly-generalized exception). Distinct from intentional fallback because there's no log line and the success value is fabricated.

Catch the specific exception type, log at error level with full exception info, and return a failure-shaped result. If the operation is genuinely best-effort, log at warning and document why in a comment so the next reader (or scanner) knows.

.gemini/skills/ci/scripts/ci.mjs:33 qualitylegacy

high Legacy quality quality conf 0.68 Agent auto-approve or skip-permissions mode is easy to enable

Require an explicit isolated profile for auto-approve modes. Keep safe defaults interactive, add visible warnings, and block these modes when the workspace contains secrets or production deploy credentials.

packages/cli/src/config/settingsSchema.ts:236 qualitylegacy

high Legacy quality quality conf 0.68 Agent auto-approve or skip-permissions mode is easy to enable

Require an explicit isolated profile for auto-approve modes. Keep safe defaults interactive, add visible warnings, and block these modes when the workspace contains secrets or production deploy credentials.

packages/cli/src/config/config.ts:258 qualitylegacy

high Legacy quality quality conf 0.68 Agent auto-approve or skip-permissions mode is easy to enable

Require an explicit isolated profile for auto-approve modes. Keep safe defaults interactive, add visible warnings, and block these modes when the workspace contains secrets or production deploy credentials.

docs/reference/configuration.md:128 qualitylegacy

high Legacy quality quality conf 0.68 Agent auto-approve or skip-permissions mode is easy to enable

Require an explicit isolated profile for auto-approve modes. Keep safe defaults interactive, add visible warnings, and block these modes when the workspace contains secrets or production deploy credentials.

docs/cli/settings.md:30 qualitylegacy

high Legacy quality quality conf 0.68 Agent auto-approve or skip-permissions mode is easy to enable

Require an explicit isolated profile for auto-approve modes. Keep safe defaults interactive, add visible warnings, and block these modes when the workspace contains secrets or production deploy credentials.

docs/cli/cli-reference.md:58 qualitylegacy

high Legacy cicd docker conf 0.82 Docker final stage has no non-root USER

Add a non-root USER in the final runtime stage after files and permissions are prepared.

.gcp/Dockerfile.gemini-code-builder:3 dockerlegacy

medium Legacy cicd docker conf 0.76 Dockerfile copies broad context with incomplete .dockerignore

Tighten .dockerignore or replace COPY . with explicit COPY statements.

.gcp/Dockerfile.development:20 dockerlegacy

medium Legacy cicd docker conf 0.90 Dockerfile installs dependencies after copying the full source tree

Copy dependency manifests first, install dependencies in a cached layer, then copy the rest of the source tree.

.gcp/Dockerfile.development:21 dockerlegacy

medium Legacy quality quality conf 0.70 Public web app has no Content Security Policy

Add a Content-Security-Policy header through the web framework or hosting config. For static apps, add a CSP meta tag that restricts default-src, script-src, connect-src, img-src, and frame-ancestors.

index.html qualitylegacy

medium Legacy quality quality conf 0.78 Public web service has no security.txt

Add /.well-known/security.txt with Contact, Expires, Canonical, Preferred-Languages, and Policy fields. Keep the contact endpoint monitored.

.well-known/security.txt qualitylegacy

medium Legacy quality quality conf 0.72 Service worker is present without a web app manifest

Add a valid manifest.json or site.webmanifest and reference it from the document head. Include name, icons, start_url, display, and theme colors.

manifest.json qualitylegacy

medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — packages/cli/src/commands/extensions/examples/mcp-server/example.js:23

Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.

integrityfragile-runtimerobustness

medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — packages/cli/src/commands/gemma/setup.ts:77

Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.

integrityfragile-runtimerobustness

medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — packages/cli/src/config/extensions/github.ts:67

Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.

integrityfragile-runtimerobustness

medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — packages/cli/src/utils/activityLogger.test.ts:166

Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.

integrityfragile-runtimerobustness

medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — packages/core/src/agents/a2a-client-manager.ts:77

Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.

integrityfragile-runtimerobustness

medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — packages/core/src/code_assist/admin/admin_controls.test.ts:654

Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.

integrityfragile-runtimerobustness

medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — packages/core/src/mcp/oauth-provider.ts:114

Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.

integrityfragile-runtimerobustness

medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — packages/core/src/tools/mcp-client.ts:2208

Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.

integrityfragile-runtimerobustness

medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — packages/core/src/tools/web-fetch.ts:213

Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.

integrityfragile-runtimerobustness

medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — packages/core/src/utils/oauth-flow.ts:472

Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.

integrityfragile-runtimerobustness

medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — packages/core/src/voice/whisperModelManager.ts:66

Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.

integrityfragile-runtimerobustness

medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — packages/vscode-ide-companion/src/extension.ts:45

Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.

integrityfragile-runtimerobustness

medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — packages/vscode-ide-companion/src/ide-server.test.ts:359

Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.

integrityfragile-runtimerobustness

medium 9-layer quality integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — scripts/download-ripgrep-binaries.ts:65

Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.

integrityfragile-runtimerobustness

low Legacy cicd docker conf 0.72 .dockerignore misses sensitive defaults

Add missing patterns such as .env, .git, private keys, certificates, dependency folders, and local databases.

.dockerignore dockerlegacy

low Legacy cicd docker conf 0.72 Dockerfile installs recommended OS packages

Add `--no-install-recommends` and explicitly list only packages the image needs.

.gcp/Dockerfile.gemini-code-builder:81 dockerlegacy

low Legacy cicd docker conf 0.74 Dockerfile leaves apt package indexes in the image layer

End the apt install layer with `rm -rf /var/lib/apt/lists/*`.

.gcp/Dockerfile.gemini-code-builder:81 dockerlegacy

high Legacy quality quality conf 0.86 Duplicated implementation block across source files

Extract the shared behavior into one function/module or delete the inactive duplicate after proving which path is used.

packages/cli/src/ui/components/messages/ToolMessage.tsx:71 qualitylegacy

high Legacy quality quality conf 0.86 Duplicated implementation block across source files

Extract the shared behavior into one function/module or delete the inactive duplicate after proving which path is used.

packages/cli/src/ui/components/messages/GeminiMessageContent.tsx:22 qualitylegacy

high Legacy quality quality conf 0.86 Duplicated implementation block across source files

Extract the shared behavior into one function/module or delete the inactive duplicate after proving which path is used.

packages/cli/src/ui/components/PolicyUpdateDialog.tsx:78 qualitylegacy

high Legacy quality quality conf 0.86 Duplicated implementation block across source files

Extract the shared behavior into one function/module or delete the inactive duplicate after proving which path is used.

packages/cli/src/ui/components/OverageMenuDialog.tsx:38 qualitylegacy

high Legacy quality quality conf 0.86 Duplicated implementation block across source files

Extract the shared behavior into one function/module or delete the inactive duplicate after proving which path is used.

packages/cli/src/ui/components/NewAgentsNotification.tsx:46 qualitylegacy

high Legacy quality quality conf 0.86 Duplicated implementation block across source files

Extract the shared behavior into one function/module or delete the inactive duplicate after proving which path is used.

packages/cli/src/ui/components/BackgroundTaskDisplay.tsx:346 qualitylegacy

high Legacy quality quality conf 0.86 Duplicated implementation block across source files

Extract the shared behavior into one function/module or delete the inactive duplicate after proving which path is used.

packages/cli/src/nonInteractiveCliAgentSession.ts:59 qualitylegacy

high Legacy quality quality conf 0.86 Duplicated implementation block across source files

Extract the shared behavior into one function/module or delete the inactive duplicate after proving which path is used.

packages/cli/src/config/extensions/update.ts:69 qualitylegacy

high Legacy quality quality conf 0.86 Duplicated implementation block across source files

Extract the shared behavior into one function/module or delete the inactive duplicate after proving which path is used.

packages/cli/src/commands/extensions/enable.ts:72 qualitylegacy

high Legacy quality quality conf 0.86 Duplicated implementation block across source files

Extract the shared behavior into one function/module or delete the inactive duplicate after proving which path is used.

packages/cli/src/acp/commands/restore.ts:1 qualitylegacy

high Legacy quality quality conf 0.86 Duplicated implementation block across source files

Extract the shared behavior into one function/module or delete the inactive duplicate after proving which path is used.

packages/cli/src/acp/commands/memory.ts:5 qualitylegacy

high Legacy quality quality conf 0.86 Duplicated implementation block across source files

Extract the shared behavior into one function/module or delete the inactive duplicate after proving which path is used.

packages/cli/src/acp/commands/extensions.ts:32 qualitylegacy

high Legacy quality quality conf 0.86 Duplicated implementation block across source files

Extract the shared behavior into one function/module or delete the inactive duplicate after proving which path is used.

packages/cli/src/acp/commands/commandRegistry.ts:5 qualitylegacy

high Legacy quality quality conf 0.86 Duplicated implementation block across source files

Extract the shared behavior into one function/module or delete the inactive duplicate after proving which path is used.

evals/validation_fidelity_pre_existing_errors.eval.ts:22 qualitylegacy

high Legacy quality quality conf 0.86 Duplicated implementation block across source files

Extract the shared behavior into one function/module or delete the inactive duplicate after proving which path is used.

evals/tool_output_masking.eval.ts:6 qualitylegacy

high Legacy quality quality conf 0.86 Duplicated implementation block across source files

Extract the shared behavior into one function/module or delete the inactive duplicate after proving which path is used.

evals/skill_extraction.eval.ts:117 qualitylegacy

low Legacy quality quality conf 0.64 Public docs site has no llms.txt

Add llms.txt with the product summary, canonical docs, API endpoints, security guidance, and preferred CLI workflow for AI agents.

llms.txt qualitylegacy

low Legacy quality quality conf 0.50 Public web app has no humans.txt

Add humans.txt with team ownership, contact URL, key documentation links, and the last-updated date.

humans.txt qualitylegacy

low Legacy quality quality conf 0.72 Public web app has no sitemap

Add sitemap.xml, a sitemap index, or a framework-native sitemap route and reference it from robots.txt.

sitemap.xml qualitylegacy

low Legacy quality quality conf 0.74 robots.txt does not advertise a sitemap

Add `Sitemap: https://your-domain.example/sitemap.xml` to robots.txt.

docs/cli/telemetry.md qualitylegacy

low 9-layer quality maintenance conf 1.00 113 TODO/FIXME markers

High count of TODO/FIXME/HACK markers — track them as issues so they're not forgotten.

maintenance

low 9-layer hardware coverage conf 1.00 Containers defined but no K8s/orchestration manifest found

Repo has Dockerfiles/compose but no Kubernetes/Nomad manifests. If the target deployment is K8s, the manifests may live in a separate ops repo.

coveragedeployment

low 9-layer hardware supply-chain conf 1.00 Docker base image is tag-pinned but not digest-pinned: docker.io/library/node:20-slim

Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter.

Dockerfile:2 supply-chaindockerpinned-dependencies

low 9-layer hardware supply-chain conf 1.00 Docker base image is tag-pinned but not digest-pinned: docker.io/library/node:20-slim

Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter.

Dockerfile:42 supply-chaindockerpinned-dependencies

low 9-layer software dead-code-candidate conf 1.00 File has no detected symbols: integration-tests/api-resilience.test.ts

Source file with no class/function declarations — possible config, dead code, or scratch file.

dead-code-candidate

low 9-layer software dead-code-candidate conf 1.00 File has no detected symbols: integration-tests/browser-agent-localhost.test.ts

Source file with no class/function declarations — possible config, dead code, or scratch file.

dead-code-candidate

low 9-layer software dead-code-candidate conf 1.00 File has no detected symbols: integration-tests/checkpointing.test.ts

Source file with no class/function declarations — possible config, dead code, or scratch file.

dead-code-candidate

low 9-layer software dead-code-candidate conf 1.00 File has no detected symbols: integration-tests/clipboard-linux.test.ts

Source file with no class/function declarations — possible config, dead code, or scratch file.

dead-code-candidate

low 9-layer software dead-code-candidate conf 1.00 File has no detected symbols: integration-tests/concurrency-limit.test.ts

Source file with no class/function declarations — possible config, dead code, or scratch file.

dead-code-candidate

low 9-layer software dead-code-candidate conf 1.00 File has no detected symbols: integration-tests/context-compress-interactive.test.ts

Source file with no class/function declarations — possible config, dead code, or scratch file.

dead-code-candidate

low 9-layer software dead-code-candidate conf 1.00 File has no detected symbols: integration-tests/ctrl-c-exit.test.ts

Source file with no class/function declarations — possible config, dead code, or scratch file.

dead-code-candidate

low 9-layer software dead-code-candidate conf 1.00 File has no detected symbols: integration-tests/deprecation-warnings.test.ts

Source file with no class/function declarations — possible config, dead code, or scratch file.

dead-code-candidate

low 9-layer software dead-code-candidate conf 1.00 File has no detected symbols: integration-tests/extensions-install.test.ts

Source file with no class/function declarations — possible config, dead code, or scratch file.

dead-code-candidate

low 9-layer software dead-code-candidate conf 1.00 File has no detected symbols: integration-tests/extensions-reload.test.ts

Source file with no class/function declarations — possible config, dead code, or scratch file.

dead-code-candidate

low 9-layer software dead-code-candidate conf 1.00 File has no detected symbols: integration-tests/file-system-interactive.test.ts

Source file with no class/function declarations — possible config, dead code, or scratch file.

dead-code-candidate

low 9-layer software dead-code-candidate conf 1.00 File has no detected symbols: integration-tests/file-system.test.ts

Source file with no class/function declarations — possible config, dead code, or scratch file.

dead-code-candidate

low 9-layer software dead-code-candidate conf 1.00 File has no detected symbols: integration-tests/flicker.test.ts

Source file with no class/function declarations — possible config, dead code, or scratch file.

dead-code-candidate

low 9-layer software dead-code-candidate conf 1.00 File has no detected symbols: integration-tests/google_web_search.test.ts

Source file with no class/function declarations — possible config, dead code, or scratch file.

dead-code-candidate

low 9-layer software dead-code-candidate conf 1.00 File has no detected symbols: integration-tests/hooks-agent-flow.test.ts

Source file with no class/function declarations — possible config, dead code, or scratch file.

dead-code-candidate

low 9-layer software dead-code-candidate conf 1.00 File has no detected symbols: integration-tests/hooks-system.test.ts

Source file with no class/function declarations — possible config, dead code, or scratch file.

dead-code-candidate

low 9-layer software dead-code-candidate conf 1.00 File has no detected symbols: integration-tests/list_directory.test.ts

Source file with no class/function declarations — possible config, dead code, or scratch file.

dead-code-candidate

low 9-layer software dead-code-candidate conf 1.00 File has no detected symbols: integration-tests/mcp-resources.test.ts

Source file with no class/function declarations — possible config, dead code, or scratch file.

dead-code-candidate

low 9-layer software dead-code-candidate conf 1.00 File has no detected symbols: integration-tests/mixed-input-crash.test.ts

Source file with no class/function declarations — possible config, dead code, or scratch file.

dead-code-candidate

low 9-layer software dead-code-candidate conf 1.00 File has no detected symbols: integration-tests/parallel-tools.test.ts

Source file with no class/function declarations — possible config, dead code, or scratch file.

dead-code-candidate

low 9-layer software dead-code-candidate conf 1.00 File has no detected symbols: integration-tests/plan-mode.test.ts

Source file with no class/function declarations — possible config, dead code, or scratch file.

dead-code-candidate

low 9-layer software dead-code-candidate conf 1.00 File has no detected symbols: integration-tests/read_many_files.test.ts

Source file with no class/function declarations — possible config, dead code, or scratch file.

dead-code-candidate

low 9-layer software dead-code-candidate conf 1.00 File has no detected symbols: integration-tests/replace.test.ts

Source file with no class/function declarations — possible config, dead code, or scratch file.

dead-code-candidate

low 9-layer software dead-code-candidate conf 1.00 File has no detected symbols: integration-tests/resume_repro.test.ts

Source file with no class/function declarations — possible config, dead code, or scratch file.

dead-code-candidate

low 9-layer software dead-code-candidate conf 1.00 File has no detected symbols: integration-tests/shell-background.test.ts

Source file with no class/function declarations — possible config, dead code, or scratch file.

dead-code-candidate

low 9-layer software dead-code-candidate conf 1.00 File has no detected symbols: integration-tests/skill-creator-scripts.test.ts

Source file with no class/function declarations — possible config, dead code, or scratch file.

dead-code-candidate

low 9-layer software dead-code-candidate conf 1.00 File has no detected symbols: integration-tests/skill-creator-vulnerabilities.test.ts

Source file with no class/function declarations — possible config, dead code, or scratch file.

dead-code-candidate

low 9-layer software dead-code-candidate conf 1.00 File has no detected symbols: integration-tests/stdin-context.test.ts

Source file with no class/function declarations — possible config, dead code, or scratch file.

dead-code-candidate

low 9-layer software dead-code-candidate conf 1.00 File has no detected symbols: integration-tests/stdout-stderr-output.test.ts

Source file with no class/function declarations — possible config, dead code, or scratch file.

dead-code-candidate

low 9-layer software dead-code-candidate conf 1.00 File has no detected symbols: integration-tests/telemetry.test.ts

Source file with no class/function declarations — possible config, dead code, or scratch file.

dead-code-candidate

low 9-layer software dead-code-candidate conf 1.00 File has no detected symbols: integration-tests/test-helper.ts

Source file with no class/function declarations — possible config, dead code, or scratch file.

dead-code-candidate

low 9-layer software dead-code-candidate conf 1.00 File has no detected symbols: integration-tests/test-mcp-support.test.ts

Source file with no class/function declarations — possible config, dead code, or scratch file.

dead-code-candidate

low 9-layer software dead-code-candidate conf 1.00 File has no detected symbols: integration-tests/user-policy.test.ts

Source file with no class/function declarations — possible config, dead code, or scratch file.

dead-code-candidate

low 9-layer software dead-code-candidate conf 1.00 File has no detected symbols: integration-tests/vitest.config.ts

Source file with no class/function declarations — possible config, dead code, or scratch file.

dead-code-candidate

low 9-layer software dead-code-candidate conf 1.00 File has no detected symbols: integration-tests/voice-mode.test.ts

Source file with no class/function declarations — possible config, dead code, or scratch file.

dead-code-candidate

low 9-layer software dead-code-candidate conf 1.00 File has no detected symbols: integration-tests/write_file.test.ts

Source file with no class/function declarations — possible config, dead code, or scratch file.

dead-code-candidate

low 9-layer software dead-code-candidate conf 1.00 File has no detected symbols: memory-tests/vitest.config.ts

Source file with no class/function declarations — possible config, dead code, or scratch file.

dead-code-candidate

low 9-layer software dead-code-candidate conf 1.00 File has no detected symbols: scripts/build.js

Source file with no class/function declarations — possible config, dead code, or scratch file.

dead-code-candidate

low 9-layer software dead-code-candidate conf 1.00 File has no detected symbols: scripts/build_package.js

Source file with no class/function declarations — possible config, dead code, or scratch file.

dead-code-candidate

low 9-layer software dead-code-candidate conf 1.00 File has no detected symbols: scripts/build_vscode_companion.js

Source file with no class/function declarations — possible config, dead code, or scratch file.

dead-code-candidate

low 9-layer software dead-code-candidate conf 1.00 File has no detected symbols: scripts/check-inbox.js

Source file with no class/function declarations — possible config, dead code, or scratch file.

dead-code-candidate

low 9-layer software dead-code-candidate conf 1.00 File has no detected symbols: scripts/clean.js

Source file with no class/function declarations — possible config, dead code, or scratch file.

dead-code-candidate

low 9-layer software dead-code-candidate conf 1.00 File has no detected symbols: scripts/copy_bundle_assets.js

Source file with no class/function declarations — possible config, dead code, or scratch file.

dead-code-candidate

low 9-layer software dead-code-candidate conf 1.00 File has no detected symbols: scripts/generate-git-commit-info.js

Source file with no class/function declarations — possible config, dead code, or scratch file.

dead-code-candidate

low 9-layer software dead-code-candidate conf 1.00 File has no detected symbols: scripts/pre-commit.js

Source file with no class/function declarations — possible config, dead code, or scratch file.

dead-code-candidate

low 9-layer software dead-code-candidate conf 1.00 File has no detected symbols: scripts/start.js

Source file with no class/function declarations — possible config, dead code, or scratch file.

dead-code-candidate

low 9-layer software dead-code-candidate conf 1.00 File has no detected symbols: scripts/tests/autogen.test.ts

Source file with no class/function declarations — possible config, dead code, or scratch file.

dead-code-candidate

low 9-layer software dead-code-candidate conf 1.00 File has no detected symbols: scripts/tests/generate-keybindings-doc.test.ts

Source file with no class/function declarations — possible config, dead code, or scratch file.

dead-code-candidate

low 9-layer software dead-code-candidate conf 1.00 File has no detected symbols: scripts/tests/telemetry_gcp.test.ts

Source file with no class/function declarations — possible config, dead code, or scratch file.

dead-code-candidate

low 9-layer software dead-code-candidate conf 1.00 File has no detected symbols: scripts/tests/test-setup.ts

Source file with no class/function declarations — possible config, dead code, or scratch file.

dead-code-candidate

low 9-layer quality integrity conf 1.00 Legacy-named symbol `anotherOld` in packages/cli/src/ui/components/messages/DiffRenderer.test.tsx:294

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

integritylegacy-markerdead-code

low 9-layer quality integrity conf 1.00 Legacy-named symbol `fuzzyOld` in packages/core/src/tools/edit.test.ts:578

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

integritylegacy-markerdead-code

low 9-layer quality integrity conf 1.00 Legacy-named symbol `isVersionDeprecated` in scripts/get-release-version.js:110

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

integritylegacy-markerdead-code

low 9-layer quality integrity conf 1.00 Legacy-named symbol `matchOld` in scripts/aggregate_evals.js:44

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

integritylegacy-markerdead-code

low 9-layer quality integrity conf 1.00 Legacy-named symbol `mockWithDeprecated` in scripts/tests/get-release-version.test.js:120

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

integritylegacy-markerdead-code

low 9-layer quality integrity conf 1.00 Legacy-named symbol `nOld` in packages/core/src/utils/sessionUtils.test.ts:114

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

integritylegacy-markerdead-code

low 9-layer quality integrity conf 1.00 Legacy-named symbol `removeDeprecated` in packages/cli/src/config/settings.test.ts:2512

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

integritylegacy-markerdead-code

low 9-layer quality integrity conf 1.00 Legacy-named symbol `removeDeprecated` in packages/cli/src/config/settings.ts:975

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

integritylegacy-markerdead-code

low 9-layer quality integrity conf 1.00 Legacy-named symbol `sensitiveOld` in packages/cli/src/config/extensions/extensionSettings.ts:324

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

integritylegacy-markerdead-code

low 9-layer quality integrity conf 1.00 Legacy-named symbol `shell_old` in packages/cli/src/utils/toolOutputCleanup.test.ts:99

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

integritylegacy-markerdead-code

low 9-layer cicd supply-chain conf 1.00 package.json defines install-time lifecycle scripts

preinstall/install/postinstall/prepare scripts execute during dependency installation. Review them carefully for network calls, obfuscation, shell execution, or credential access.

package.json supply-chainnpminstall-scripts

low 9-layer cicd supply-chain conf 1.00 package.json defines install-time lifecycle scripts

preinstall/install/postinstall/prepare scripts execute during dependency installation. Review them carefully for network calls, obfuscation, shell execution, or credential access.

packages/vscode-ide-companion/package.json supply-chainnpminstall-scripts

low 9-layer cicd supply-chain conf 1.00 package.json defines install-time lifecycle scripts

preinstall/install/postinstall/prepare scripts execute during dependency installation. Review them carefully for network calls, obfuscation, shell execution, or credential access.

third_party/get-ripgrep/package.json supply-chainnpminstall-scripts

low 9-layer frontend frontend-quality conf 1.00 Stray `console.log` in TS/JS — evals/automated-tool-use.eval.ts:65

Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable. Why: Hygiene — easy to leak debug output. Rule id: fq.console-leak