fern-api/fern

Component	Sub-score	Weight	Contribution
`structure_score`	60.0	0.15	9.00
`security_score`	100.0	0.25	25.00
`testing_score`	50.0	0.20	10.00
`documentation_score`	89.0	0.15	13.35
`practices_score`	69.0	0.15	10.35
`code_quality`	51.0	0.10	5.10
Overall		1.00	72.8

low Security checks cicd CI/CD security conf 0.35 ✓ Repobility 25 occurrences Workflow references repository secrets in a pull_request workflow

Fork pull_request runs do not receive normal repository secrets on GitHub Actions. Review this as a reliability/intent signal, not as direct fork-secret exfiltration. Raise severity only for pull_request_target or another trusted-context path that runs untrusted PR code with secrets.

4 files, 25 locations

.github/workflows/ci.yml:26, 281, 283, 284, 338, 340, 346, 348, +9 more (17 hits)

.github/workflows/sdk-ete-tests.yml:149, 192, 223, 224, 282, 283 (6 hits)

.github/workflows/ci-dynamic-snippets.yml:20

.github/workflows/validate-changelog.yml:35

CI/CD securityworkflow secretsGitHub Actions

critical System graph security Secrets conf 1.00 2 occurrences Possible secret in packages/seed/src/utils/getGeneratorInvocation.ts

Detected pattern matching password_literal. Rotate the credential and move to a secret manager.

lines 185, 192

packages/seed/src/utils/getGeneratorInvocation.ts:185, 192 (2 hits)

critical System graph security Secrets conf 1.00 4 occurrences Possible secret in seed/python-sdk/client-side-params/src/seed/service/client.py

Detected pattern matching password_literal. Rotate the credential and move to a secret manager.

lines 394, 480, 1165, 1259

seed/python-sdk/client-side-params/src/seed/service/client.py:394, 480, 1165, 1259 (4 hits)

critical System graph security Secrets conf 1.00 2 occurrences Possible secret in seed/python-sdk/oauth-client-credentials-openapi/src/seed/identity/client.py

Detected pattern matching password_literal. Rotate the credential and move to a secret manager.

lines 58, 114

seed/python-sdk/oauth-client-credentials-openapi/src/seed/identity/client.py:58, 114 (2 hits)

critical System graph security Secrets conf 1.00 2 occurrences Possible secret in seed/python-sdk/property-access/src/seed/client.py

Detected pattern matching password_literal. Rotate the credential and move to a secret manager.

lines 134, 288

seed/python-sdk/property-access/src/seed/client.py:134, 288 (2 hits)

critical System graph security Secrets conf 1.00 4 occurrences Possible secret in seed/python-sdk/request-parameters/src/seed/user/client.py

Detected pattern matching password_literal. Rotate the credential and move to a secret manager.

lines 70, 116, 362, 416

seed/python-sdk/request-parameters/src/seed/user/client.py:70, 116, 362, 416 (4 hits)

low Security checks quality Quality conf 1.00 ✓ Repobility [MINED012] Curl Pipe Bash: curl ... | sh / bash — runs unverified network code.

Review and fix per the pattern semantics. See CWE-494 / A08:2021 for context.

generators/java/install-gradle.sh:17

high Security checks quality Quality conf 1.00 ✓ Repobility 2 occurrences [MINED106] Phantom test coverage: test_group: Test function `test_group` runs code but contains no assert / expect / should call — it passes regardless of behaviour. Adds line coverage without verifying anything.

Add an explicit assertion that captures the test's intent, or remove the test.

lines 81, 171

seed/python-sdk/nullable-request-body/src/seed/client.py:81, 171 (2 hits)

high Security checks quality Quality conf 1.00 ✓ Repobility 4 occurrences [MINED106] Phantom test coverage: test_method_name: Test function `test_method_name` runs code but contains no assert / expect / should call — it passes regardless of behaviour. Adds line coverage without verifying anything.

Add an explicit assertion that captures the test's intent, or remove the test.

2 files, 4 locations

seed/python-sdk/nullable-request-body/src/seed/test_group/client.py:29, 96 (2 hits)

seed/python-sdk/nullable-request-body/src/seed/test_group/raw_client.py:26, 111 (2 hits)

high Security checks quality Quality conf 1.00 ✓ Repobility 4 occurrences [MINED108] `self.get_base_url` used but never assigned in __init__: Method `request` of class `HttpClient` reads `self.get_base_url`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance.

Initialize `self.get_base_url = <default>` in __init__, or add a class-level default.

lines 314, 395, 415, 474

seed/python-sdk/no-content-response/src/seed/core/http_client.py:314, 395, 415, 474 (4 hits)

high Security checks software dependencies conf 0.90 ✓ Repobility 25 occurrences [MINED118] Dockerfile FROM `rust:1.95.0-bookworm` not pinned by digest: `FROM rust:1.95.0-bookworm` resolves the tag at build time. The registry CAN re-push a different image for the same tag, so every build is potentially different. Production images should pin to `image@sha256:...` for reproducibility + supply-chain integrity.

Replace with: `FROM rust:1.95.0-bookworm@sha256:<digest>`. Get the digest from `docker manifest inspect`. Re-pin via a scheduled bot (Renovate, Dependabot).

12 files, 23 locations

docker/seed/Dockerfile.go:2, 11, 87 (3 hits)

docker/seed/Dockerfile.php:2, 11, 109 (3 hits)

docker/seed/Dockerfile.python:2, 11, 109 (3 hits)

docker/seed/Dockerfile.ts:4, 26 (2 hits)

generators/php/model/Dockerfile:1, 2 (2 hits)

generators/php/sdk/Dockerfile:1, 2 (2 hits)

generators/rust/model/Dockerfile:4, 10 (2 hits)

generators/rust/sdk/Dockerfile:5, 7 (2 hits)

high Security checks software dependencies conf 0.90 ✓ Repobility 5 occurrences [MINED131] pre-commit hook `https://github.com/pre-commit/pre-commit-hooks` pinned to mutable rev `v4.3.0`: `.pre-commit-config.yaml` references `https://github.com/pre-commit/pre-commit-hooks` at `rev: v4.3.0`. If `{rev}` is a branch or version tag, the repo owner can push new code there and `pre-commit install --install-hooks` will fetch it on every developer's machine.

Pin to a commit SHA: `rev: <40-char-sha>` and bump it through `pre-commit autoupdate` (which writes to PRs that are reviewed).

lines 6, 20, 26, 30, 37

generators/python/.pre-commit-config.yaml:6, 20, 26, 30, 37 (5 hits)

high Security checks software dependencies conf 0.90 ✓ Repobility [MINED134] Binary file `generators/java/generator-utils/src/main/resources/gradle-wrapper/gradle/wrapper/gradle-wrapper.jar` committed in source repo: `generators/java/generator-utils/src/main/resources/gradle-wrapper/gradle/wrapper/gradle-wrapper.jar` is a .jar binary (43,764 bytes) committed to a repo that otherwise has 111671 source files. Trojan binaries inside otherwise-normal source repos are a known supply-chain attack: a compromised dependency or PR slips in a binary that gets executed b

Audit the binary's provenance. If it's vendored library code, document it in a VENDORED.md. If it's a build artifact, add the extension to .gitignore and rebuild from source.

generators/java/generator-utils/src/main/resources/gradle-wrapper/gradle/wrapper/gradle-wrapper.jar:1

high Security checks software dependencies conf 0.90 ✓ Repobility [MINED134] Binary file `generators/java/gradle/wrapper/gradle-wrapper.jar` committed in source repo: `generators/java/gradle/wrapper/gradle-wrapper.jar` is a .jar binary (58,910 bytes) committed to a repo that otherwise has 111671 source files. Trojan binaries inside otherwise-normal source repos are a known supply-chain attack: a compromised dependency or PR slips in a binary that gets executed by build scripts.

Audit the binary's provenance. If it's vendored library code, document it in a VENDORED.md. If it's a build artifact, add the extension to .gitignore and rebuild from source.

generators/java/gradle/wrapper/gradle-wrapper.jar:1

low Security checks security Injection conf 1.00 [SEC103] LDAP injection — non-constant search filter: User input concatenated into an LDAP search filter. Attackers inject `*)(uid=*` style payloads to bypass auth or enumerate accounts.

Escape with javax.naming.ldap.Rdn.escapeValue or equivalent. For python-ldap, use ldap.filter.escape_filter_chars. Better: use parameterized search APIs (Spring LdapTemplate filter encoders).

generators/python/core_utilities/shared/http_sse/_api.py:28

high Security checks software Xss conf 1.00 [SEC111] Django mark_safe / |safe filter on user data: Django's `mark_safe()` and `|safe` disable HTML autoescaping. Calling them on non-constant data is XSS.

Use `django.utils.html.format_html("{}", user_input)` — Django will escape the placeholder. Or escape explicitly with `django.utils.html.escape()`. Only use `mark_safe` on string literals.

generators/python/src/fern_python/utils/name_resolver.py:108

high Security checks cicd CI/CD security conf 0.92 Docker build context is very large

Shrink the build context with .dockerignore, move generated/runtime data outside the build context, and copy only the manifest files needed for cached dependency layers.

.dockerignore CI/CD securitycontainers

high Security checks cicd CI/CD security conf 0.92 Dockerfile pipes a remote script into a shell

Download the artifact, verify its checksum or signature, pin the version, and then execute it.

generators/python-v2/sdk/Dockerfile:32 CI/CD securitycontainers

high Security checks cicd CI/CD security conf 0.92 Dockerfile pipes a remote script into a shell

Download the artifact, verify its checksum or signature, pin the version, and then execute it.

generators/python-v2/pydantic-model/Dockerfile:27 CI/CD securitycontainers

low Security checks cicd CI/CD security conf 0.90 ✓ Repobility 2281 occurrences GitHub Action is tag-pinned rather than SHA-pinned

[MINED115] Action `actions/checkout` pinned to mutable ref `@v6`: `uses: actions/checkout@v6` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the tj-actions/changed-files compromise (2025) instantly affect ~23K repos. Pin to a 40-char commit SHA + lo…

12 files, 87 locations

seed/cli/query-parameters-openapi/github-npm/.github/workflows/ci.yml:17, 29, 41, 79, 87, 169, 172 (14 hits)

seed/go-sdk/no-content-response/.github/workflows/ci.yml:14, 17, 25, 28, 38, 41 (12 hits)

seed/go-sdk/nullable-request-body/dynamic-snippets-disabled/.github/workflows/ci.yml:14, 17, 25, 28, 38, 41 (7 hits)

seed/cli/query-parameters-openapi/github-no-publish/.github/workflows/ci.yml:17, 29, 41 (6 hits)

seed/go-sdk/accept-header/.github/workflows/ci.yml:14, 17, 25, 28, 38, 41 (6 hits)

seed/go-sdk/alias/.github/workflows/ci.yml:14, 17, 25, 28, 38, 41 (6 hits)

seed/go-sdk/allof-inline/.github/workflows/ci.yml:14, 17, 25, 28, 38, 41 (6 hits)

seed/go-sdk/allof/.github/workflows/ci.yml:14, 17, 25, 28, 38, 41 (6 hits)

CI/CD securitySupply chainGitHub Actions

medium Security checks cicd CI/CD security conf 0.90 ✓ Repobility 167 occurrences GitHub Action is tag-pinned rather than SHA-pinned

[MINED115] Action `actions-rust-lang/setup-rust-toolchain` pinned to mutable ref `@v1`: `uses: actions-rust-lang/setup-rust-toolchain@v1` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the tj-actions/changed-files compromise (2025) instantly affect …

12 files, 25 locations

seed/cli/query-parameters-openapi/github-npm/.github/workflows/ci.yml:20, 32, 44, 82 (8 hits)

seed/cli/query-parameters-openapi/github-no-publish/.github/workflows/ci.yml:20, 32, 44 (6 hits)

seed/go-sdk/no-content-response/.github/workflows/ci.yml:31 (2 hits)

seed/go-sdk/accept-header/.github/workflows/ci.yml:31

seed/go-sdk/alias/.github/workflows/ci.yml:31

seed/go-sdk/allof-inline/.github/workflows/ci.yml:31

seed/go-sdk/allof/.github/workflows/ci.yml:31

seed/go-sdk/any-auth/.github/workflows/ci.yml:31

CI/CD securitySupply chainGitHub Actions

high System graph api Wiring conf 1.00 Dangling fetch: GET http://localhost:3001/test/root/movies/id-123?movieName=hello (packages/cli/ete-tests/src/tests/mock/mock.test.ts:18)

`packages/cli/ete-tests/src/tests/mock/mock.test.ts:18` calls `GET http://localhost:3001/test/root/movies/id-123?movieName=hello` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/localhost:3001/test/root/movies/…

Dangling fetchFetch

high System graph api Wiring conf 1.00 Dangling fetch: GET https://api.nuget.org/v3-flatcontainer/${packageName.toLowerCase()}/index.json (packages/commons/api-workspace-commons/src/checkVersionExists.ts:271)

`packages/commons/api-workspace-commons/src/checkVersionExists.ts:271` calls `GET https://api.nuget.org/v3-flatcontainer/${packageName.toLowerCase()}/index.json` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/https:…

Dangling fetchFetch

high System graph api Wiring conf 1.00 Dangling fetch: GET https://crates.io/api/v1/crates/${packageName}/${version} (packages/commons/api-workspace-commons/src/checkVersionExists.ts:320)

`packages/commons/api-workspace-commons/src/checkVersionExists.ts:320` calls `GET https://crates.io/api/v1/crates/${packageName}/${version}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/https:/crates.io/api/v1/cra…

Dangling fetchFetch

high System graph api Wiring conf 1.00 Dangling fetch: GET https://proxy.golang.org/${encodedPath}/@v/${goVersion}.info (packages/commons/api-workspace-commons/src/checkVersionExists.ts:304)

`packages/commons/api-workspace-commons/src/checkVersionExists.ts:304` calls `GET https://proxy.golang.org/${encodedPath}/@v/${goVersion}.info` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/https:/proxy.golang.org/…

Dangling fetchFetch

high System graph api Wiring conf 1.00 Dangling fetch: GET https://pypi.org/pypi/${packageName}/${version}/json (packages/commons/api-workspace-commons/src/checkVersionExists.ts:235)

`packages/commons/api-workspace-commons/src/checkVersionExists.ts:235` calls `GET https://pypi.org/pypi/${packageName}/${version}/json` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/https:/pypi.org/pypi///jso…

Dangling fetchFetch

high System graph api Wiring conf 1.00 Dangling fetch: GET https://registry.npmjs.org/${encodedName}/${version} (packages/commons/api-workspace-commons/src/checkVersionExists.ts:218)

`packages/commons/api-workspace-commons/src/checkVersionExists.ts:218` calls `GET https://registry.npmjs.org/${encodedName}/${version}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/https:/registry.npmjs.org//<p…

Dangling fetchFetch

high System graph api Wiring conf 1.00 Dangling fetch: GET https://rubygems.org/api/v2/rubygems/${packageName}/versions/${version}.json (packages/commons/api-workspace-commons/src/checkVersionExists.ts:288)

`packages/commons/api-workspace-commons/src/checkVersionExists.ts:288` calls `GET https://rubygems.org/api/v2/rubygems/${packageName}/versions/${version}.json` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/https:/r…

Dangling fetchFetch

high System graph api Wiring conf 1.00 Dangling fetch: GET https://search.maven.org/solrsearch/select?q=g:${encodeURIComponent(groupId)}+AND+a:${encodeURIComponent(artifactId)}+AND+v:${encodeURIComponent(version)}&rows=1&wt=json (packages/commons/api-workspace-commons/src/checkVersionExists.ts:254)

`packages/commons/api-workspace-commons/src/checkVersionExists.ts:254` calls `GET https://search.maven.org/solrsearch/select?q=g:${encodeURIComponent(groupId)}+AND+a:${encodeURIComponent(artifactId)}+AND+v:${encodeURIComponent(version)}&rows=1&wt=json` but no backend route matches that path. This i…

Dangling fetchFetch

high System graph api Wiring conf 1.00 Dangling fetch: POST http://localhost:3001/test/root/movies (packages/cli/ete-tests/src/tests/mock/mock.test.ts:29)

`packages/cli/ete-tests/src/tests/mock/mock.test.ts:29` calls `POST http://localhost:3001/test/root/movies` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/localhost:3001/test/root/movies` If this points at an …

Dangling fetchFetch

high System graph api Wiring conf 1.00 Dangling fetch: POST https://api.anthropic.com/v1/messages (packages/cli/cli-v2/src/docs/fixer/AiProvider.ts:82)

`packages/cli/cli-v2/src/docs/fixer/AiProvider.ts:82` calls `POST https://api.anthropic.com/v1/messages` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/https:/api.anthropic.com/v1/messages` If this points at an exte…

Dangling fetchFetch

high System graph api Wiring conf 1.00 Dangling fetch: POST https://api.openai.com/v1/chat/completions (packages/cli/cli-v2/src/docs/fixer/AiProvider.ts:123)

`packages/cli/cli-v2/src/docs/fixer/AiProvider.ts:123` calls `POST https://api.openai.com/v1/chat/completions` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/https:/api.openai.com/v1/chat/completions` If this points…

Dangling fetchFetch

high System graph security security conf 1.00 Insecure pattern 'eval_used' in seed/python-sdk/exhaustive/aliases_without_validation/src/seed/core/unchecked_base_model.py:55

Found a known-risky pattern (eval_used). Review and replace if possible.

seed/python-sdk/exhaustive/aliases_without_validation/src/seed/core/unchecked_base_model.py:55 Eval used

high System graph security security conf 1.00 Insecure pattern 'eval_used' in seed/python-sdk/exhaustive/skip-pydantic-validation/src/seed/core/unchecked_base_model.py:55

Found a known-risky pattern (eval_used). Review and replace if possible.

seed/python-sdk/exhaustive/skip-pydantic-validation/src/seed/core/unchecked_base_model.py:55 Eval used

high System graph security security conf 1.00 Insecure pattern 'eval_used' in seed/python-sdk/streaming/skip-pydantic-validation/src/seed/core/unchecked_base_model.py:55

Found a known-risky pattern (eval_used). Review and replace if possible.

seed/python-sdk/streaming/skip-pydantic-validation/src/seed/core/unchecked_base_model.py:55 Eval used

high System graph security security conf 1.00 Insecure pattern 'eval_used' in seed/python-sdk/websocket/websocket-with_generated_clients-skip_validation/src/seed/core/unchecked_base_model.py:55

Found a known-risky pattern (eval_used). Review and replace if possible.

seed/python-sdk/websocket/websocket-with_generated_clients-skip_validation/src/seed/core/unchecked_base_model.py:55 Eval used

low Security checks quality Error handling conf 1.00 [ERR001] Silent Exception Swallowing: Silently swallowing all exceptions hides bugs. Even in cleanup code, log at DEBUG level.

Log the error: `except Exception: logger.debug('cleanup failed', exc_info=True)`. Or handle specific exception types.

generators/python/core_utilities/shared/datetime_utils.py:21

medium Security checks quality Quality conf 1.00 [SEC087] JS: weak Math.random for crypto: Math.random() is not cryptographically secure; using it for tokens/keys/nonces is predictable. Ported from gosec G404 / eslint detect-pseudoRandomBytes concept (Apache-2.0).

Use `crypto.randomBytes(32).toString('hex')` (Node) or `crypto.getRandomValues()` (browser).

generators/typescript/utils/core-utilities/src/core/fetcher/requestWithRetries.template.ts:14

low Security checks quality Quality conf 1.00 3 occurrences [SEC136] AI-typical over-broad exception handler swallowing all errors: Catch-all exception block that silently returns success or no-ops. AI agents reach for this pattern when a flaky test or an unfamiliar API throws — wrap, swallow, return success. Real bugs are masked, observability is destroyed, and callers think the operation worked. CWE-396 (improperly-generalized exception). Distinct from intentional fallback because there's no log line and the success value is fabricated.

Catch the specific exception type, log at error level with full exception info, and return a failure-shaped result. If the operation is genuinely best-effort, log at warning and document why in a comment so the next reader (or scanner) knows.

3 files, 3 locations

generators/go-v2/sdk/src/reference/EndpointSnippetsGenerator.ts:185

generators/java-v2/sdk/src/reference/EndpointSnippetsGenerator.ts:178

generators/php/sdk/src/reference/EndpointSnippetsGenerator.ts:163

low Security checks quality Error handling conf 0.55 ✓ Repobility 25 occurrences Broad exception handler needs review

This handler catches Exception/BaseException. It is actionable when it swallows errors without logging, re-raising, or returning a structured error. Handlers that intentionally convert exceptions into typed error results should not be treated as high risk.

12 files, 13 locations

seed/python-sdk/python-streaming-parameter-openapi/with-wire-tests/src/seed/raw_client.py:82, 215 (2 hits)

seed/python-sdk/basic-auth/src/seed/core/jsonable_encoder.py:98

seed/python-sdk/basic-auth/src/seed/core/pydantic_utilities.py:500

seed/python-sdk/error-property/src/seed/core/jsonable_encoder.py:98

seed/python-sdk/error-property/src/seed/core/pydantic_utilities.py:500

seed/python-sdk/inferred-auth-implicit-reference/src/seed/core/jsonable_encoder.py:98

seed/python-sdk/inferred-auth-implicit-reference/src/seed/core/pydantic_utilities.py:500

seed/python-sdk/no-content-response/src/seed/core/jsonable_encoder.py:98

Error handlingquality

medium Security checks cicd CI/CD security conf 0.90 Docker build context has no .dockerignore

Add .dockerignore with at least .git, .env, private keys, dependency folders, build outputs, and local databases.

.dockerignore CI/CD securitycontainers

high Security checks cicd CI/CD security conf 0.82 30 occurrences Docker final stage has no non-root USER

Add a non-root USER in the final runtime stage after files and permissions are prepared.

12 files, 12 locations

docker/seed/Dockerfile.cli:16

docker/seed/Dockerfile.csharp:1

docker/seed/Dockerfile.go:87

docker/seed/Dockerfile.java:2

docker/seed/Dockerfile.php:109

docker/seed/Dockerfile.python:109

docker/seed/Dockerfile.ts:27

generators/cli/Dockerfile:1

CI/CD securitycontainers

medium Security checks cicd CI/CD security conf 0.86 6 occurrences Dockerfile separates apt update from install

Combine update and install in the same RUN instruction and clean package indexes in that layer.

6 files, 6 locations

docker/seed/Dockerfile.cli:22

docker/seed/Dockerfile.csharp:13

docker/seed/Dockerfile.ts:38

generators/cli/Dockerfile:2

generators/java/model/Dockerfile:7

generators/python/pydantic/Dockerfile:4

CI/CD securitycontainers

medium Security checks quality Quality conf 0.78 Public web service has no security.txt

Add /.well-known/security.txt with Contact, Expires, Canonical, Preferred-Languages, and Policy fields. Keep the contact endpoint monitored.

.well-known/security.txt

high Security checks software dependencies conf 0.70 Remote install command pipes network code directly to a shell

Publish a package-manager install path or add checksum/signature verification before execution. For docs, show the inspect-then-run flow and pin the downloaded artifact version.

generators/cli/src/emitReadme.ts:173

high Security checks software dependencies conf 0.70 Remote install command pipes network code directly to a shell

Publish a package-manager install path or add checksum/signature verification before execution. For docs, show the inspect-then-run flow and pin the downloaded artifact version.

.github/workflows/security-scanning-and-remediation.yml:518

medium Security checks quality Quality conf 0.78 3 occurrences Suspicious implementation file appears unreferenced

Confirm whether this file is reachable. If not, delete it; if yes, wire it through explicit imports, routes, or entry points and add a test that proves the path executes.

3 files, 3 locations

seed/rust-sdk/trace/src/api/types/submission_code_execution_update.rs:1

seed/rust-sdk/trace/src/api/types/submission_test_submission_update.rs:1

seed/rust-sdk/trace/src/api/types/submission_workspace_submission_update.rs:1

medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — packages/cli/cli-v2/src/commands/docs/diff/command.ts:306

Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.

runtime safetyRobustness

medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — packages/cli/cli-v2/src/commands/docs/link/check/LinkCheckClient.ts:272

Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.

runtime safetyRobustness

medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — packages/cli/cli-v2/src/docs/fixer/AiProvider.ts:82

Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.

runtime safetyRobustness

medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — packages/cli/cli/src/cli.ts:3363

Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.

runtime safetyRobustness

medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — packages/cli/cli/src/commands/docs-diff/docsDiff.ts:45

Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.

runtime safetyRobustness

medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — packages/cli/cli/src/commands/docs-theme/listDocsThemes.ts:41

Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.

runtime safetyRobustness

medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — packages/cli/cli/src/commands/upgrade/updateApiSpec.ts:121

Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.

runtime safetyRobustness

medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — packages/cli/cli/src/telemetry/AutomationEventApiClient.ts:90

Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.

runtime safetyRobustness

medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — packages/cli/docs-importers/readme/src/ReadmeImporter.ts:102

Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.

runtime safetyRobustness

medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — packages/cli/docs-preview/src/createBunServer.ts:21

Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.

runtime safetyRobustness

medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — packages/cli/docs-preview/src/downloadLocalDocsBundle.ts:335

Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.

runtime safetyRobustness

medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — packages/cli/docs-resolver/src/stitchGlobalTheme.ts:55

Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.

runtime safetyRobustness

medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — packages/cli/generation/remote-generation/remote-workspace-runner/src/publishDocs.ts:949

Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.

runtime safetyRobustness

medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — packages/cli/library-docs-generator/src/orchestrate.ts:415

Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.

runtime safetyRobustness

medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — packages/cli/workspace/lazy-fern-workspace/src/utils/resolveExternalRefs.ts:12

Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.

runtime safetyRobustness

medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — packages/commons/api-workspace-commons/src/computeSemanticVersion.ts:380

Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.

runtime safetyRobustness

medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — packages/commons/github/src/ClonedRepository.ts:116

Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.

runtime safetyRobustness

medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — packages/commons/github/src/deleteBranch.ts:6

Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.

runtime safetyRobustness

medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — packages/generator-cli/src/pipeline/github/pushSignedCommit.ts:194

Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.

runtime safetyRobustness

medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — packages/generator-cli/src/replay/replay-submit-init.ts:34

Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.

runtime safetyRobustness

medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — packages/generator-migrations/src/generators/typescript/migrations/2.0.0.ts:22

Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.

runtime safetyRobustness

medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — packages/seed/src/commands/test-remote-local/dockerHubClient.ts:68

Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.

runtime safetyRobustness

medium System graph software Analyzer error conf 1.00 Analyzer timeout: software.tree

analyzer exceeded 60.0s wall-clock (thread mode — daemon abandoned). Bump REPOBILITY_ANALYZER_TIMEOUT_S if expected.

Timeout

medium System graph hardware Security conf 1.00 Dockerfile runs as root: packages/cli/generation/local-generation/docker-utils/src/__test__/resources/basic-writer/Dockerfile

No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image.

Container

medium System graph security security conf 1.00 Insecure pattern 'weak_hash' in fern/vale-styles/FernStyles/WordList.yml:70

Found a known-risky pattern (weak_hash). Review and replace if possible.

fern/vale-styles/FernStyles/WordList.yml:70 Weak hash

medium System graph security security conf 1.00 Insecure pattern 'weak_hash' in packages/commons/core-utils/src/titleCase.ts:83

Found a known-risky pattern (weak_hash). Review and replace if possible.

packages/commons/core-utils/src/titleCase.ts:83 Weak hash

medium System graph security security conf 1.00 Insecure pattern 'weak_hash' in packages/ir-sdk/fern/apis/ir-types-v65/definition/webhooks.yml:105

Found a known-risky pattern (weak_hash). Review and replace if possible.

packages/ir-sdk/fern/apis/ir-types-v65/definition/webhooks.yml:105 Weak hash

medium System graph security security conf 1.00 Insecure pattern 'weak_hash' in packages/ir-sdk/fern/apis/ir-types-v66/definition/webhooks.yml:105

Found a known-risky pattern (weak_hash). Review and replace if possible.

packages/ir-sdk/fern/apis/ir-types-v66/definition/webhooks.yml:105 Weak hash

medium System graph security security conf 1.00 Insecure pattern 'weak_hash' in packages/ir-sdk/src/sdk/api/resources/webhooks/types/HmacAlgorithm.ts:6

Found a known-risky pattern (weak_hash). Review and replace if possible.

packages/ir-sdk/src/sdk/api/resources/webhooks/types/HmacAlgorithm.ts:6 Weak hash

medium System graph security security conf 1.00 Insecure pattern 'weak_hash' in packages/ir-sdk/src/sdk/serialization/resources/webhooks/types/HmacAlgorithm.ts:8

Found a known-risky pattern (weak_hash). Review and replace if possible.

packages/ir-sdk/src/sdk/serialization/resources/webhooks/types/HmacAlgorithm.ts:8 Weak hash

high Security checks cicd CI/CD security conf 0.72 Dockerfile keeps pip download cache

Use `pip install --no-cache-dir ...` in container builds.

generators/python/sdk/Dockerfile:82 CI/CD securitycontainers

low Security checks quality Quality conf 0.64 5 occurrences Duplicate top-level symbol appears in a patch-style file

Keep one authoritative implementation, update imports to point at it, and remove or rename the duplicate symbol.

5 files, 5 locations

seed/python-sdk/trace/src/seed/submission/types/graded_test_case_update.py:1

seed/python-sdk/trace/src/seed/submission/types/recorded_test_case_update.py:1

seed/python-sdk/trace/src/seed/submission/types/workspace_submission_update.py:1

seed/python-sdk/trace/src/seed/submission/types/workspace_traced_update.py:1

seed/ruby-sdk-v2/trace/lib/seed/submission/types/code_execution_update.rb:1

low Security checks quality Quality conf 0.60 30 occurrences Duplicated implementation block across source files

Duplicate implementation blocks are maintenance debt. Keep them visible, but they are not a high-severity defect unless the duplicated logic is security-sensitive or drifting.

12 files, 14 locations

generators/cli/sdk/src/openapi/help.rs:9, 228 (2 hits)

generators/go-v2/model/src/union/UndiscriminatedUnionGenerator.ts:12, 104 (2 hits)

docker/seed/Dockerfile.php:19

generators/cli/sdk/src/graphql/commands.rs:35

generators/cli/sdk/src/openapi/binding.rs:141

generators/cli/sdk/src/websocket/error.rs:97

generators/csharp/base/src/asIs/RawClient.Template.cs:246

generators/csharp/model/src/proto/WellKnownProtoValueGenerator.ts:57

duplicationquality

high Security checks quality Quality conf 0.62 9 occurrences Source file name looks like an AI patch artifact

Rename it to the domain concept it implements or merge it into the existing module it was meant to change.

9 files, 9 locations

seed/python-sdk/trace/src/seed/submission/types/code_execution_update.py:1

seed/python-sdk/trace/src/seed/submission/types/graded_test_case_update.py:1

seed/python-sdk/trace/src/seed/submission/types/recorded_test_case_update.py:1

seed/python-sdk/trace/src/seed/submission/types/workspace_submission_update.py:1

seed/python-sdk/trace/src/seed/submission/types/workspace_traced_update.py:1

seed/ruby-sdk-v2/trace/lib/seed/submission/types/code_execution_update.rb:1

seed/rust-sdk/trace/src/api/types/submission_code_execution_update.rs:1

seed/rust-sdk/trace/src/api/types/submission_test_submission_update.rs:1

low System graph quality Maintenance conf 1.00 148 TODO/FIXME markers

High count of TODO/FIXME/HACK markers — track them as issues so they're not forgotten.

low System graph hardware Coverage conf 1.00 Containers defined but no K8s/orchestration manifest found

Repo has Dockerfiles/compose but no Kubernetes/Nomad manifests. If the target deployment is K8s, the manifests may live in a separate ops repo.

Deployment

low System graph quality Integrity conf 1.00 Near-duplicate function bodies in 1666 places

Functions with the same first-5-line body hash: seed/python-sdk/no-content-response/src/seed/contacts/client.py:with_raw_response, seed/python-sdk/no-content-response/src/seed/contacts/client.py:with_raw_response, seed/python-sdk/union-query-parameters/src/seed/events/client.py:with_raw_response, s…

duplicatesduplication

low System graph quality Integrity conf 1.00 Near-duplicate function bodies in 177 places

Functions with the same first-5-line body hash: seed/python-sdk/no-content-response/src/seed/core/client_wrapper.py:async_get_headers, seed/python-sdk/nullable-request-body/src/seed/core/client_wrapper.py:async_get_headers, seed/python-sdk/union-query-parameters/src/seed/core/client_wrapper.py:asyn…

duplicatesduplication

low System graph quality Integrity conf 1.00 2 occurrences Near-duplicate function bodies in 180 places

Functions with the same first-5-line body hash: seed/python-sdk/no-content-response/src/seed/core/client_wrapper.py:get_custom_headers, seed/python-sdk/nullable-request-body/src/seed/core/client_wrapper.py:get_custom_headers, seed/python-sdk/union-query-parameters/src/seed/core/client_wrapper.py:ge…

2 occurrences

repo-level (2 hits)

duplicatesduplication

low System graph quality Integrity conf 1.00 2 occurrences Near-duplicate function bodies in 182 places

Functions with the same first-5-line body hash: seed/python-sdk/no-content-response/src/seed/core/client_wrapper.py:get_timeout, seed/python-sdk/nullable-request-body/src/seed/core/client_wrapper.py:get_timeout, seed/python-sdk/union-query-parameters/src/seed/core/client_wrapper.py:get_timeout, see…

2 occurrences

repo-level (2 hits)

duplicatesduplication

low System graph quality Integrity conf 1.00 8 occurrences Near-duplicate function bodies in 185 places

Functions with the same first-5-line body hash: seed/python-sdk/no-content-response/src/seed/core/http_client.py:remove_omit_from_dict, seed/python-sdk/nullable-request-body/src/seed/core/http_client.py:remove_omit_from_dict, seed/python-sdk/union-query-parameters/src/seed/core/http_client.py:remov…

8 occurrences

repo-level (8 hits)

duplicatesduplication

low System graph quality Integrity conf 1.00 3 occurrences Near-duplicate function bodies in 2 places

Functions with the same first-5-line body hash: seed/python-sdk/no-content-response/src/seed/client.py:contacts, seed/python-sdk/no-content-response/src/seed/client.py:contacts This is *the* AI-coder failure mode (4× more duplication in vibe-coded repos — see https://jw.hn/ai-code-hygiene). Consol…

3 occurrences

repo-level (3 hits)

duplicatesduplication

low System graph quality Integrity conf 1.00 Near-duplicate function bodies in 370 places

Functions with the same first-5-line body hash: seed/python-sdk/no-content-response/src/seed/core/http_client.py:get_base_url, seed/python-sdk/no-content-response/src/seed/core/http_client.py:get_base_url, seed/python-sdk/nullable-request-body/src/seed/core/http_client.py:get_base_url, seed/python-…

duplicatesduplication

low System graph quality Integrity conf 1.00 Near-duplicate function bodies in 4 places

Functions with the same first-5-line body hash: seed/python-sdk/no-content-response/src/seed/contacts/client.py:get, seed/python-sdk/no-content-response/src/seed/contacts/client.py:get, seed/python-sdk/no-content-response/src/seed/contacts/raw_client.py:get, seed/python-sdk/no-content-response/src/…

duplicatesduplication

low System graph quality Integrity conf 1.00 Near-duplicate function bodies in 740 places

Functions with the same first-5-line body hash: seed/python-sdk/no-content-response/src/seed/core/http_client.py:request, seed/python-sdk/no-content-response/src/seed/core/http_client.py:stream, seed/python-sdk/no-content-response/src/seed/core/http_client.py:request, seed/python-sdk/no-content-res…

duplicatesduplication

low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `accentPrimaryDeprecated` in packages/cli/configuration-loader/src/docs-yml/__test__/convertColorsConfiguration.test.ts:53

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

old markerDead code

low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `accentPrimaryDeprecated` in packages/cli/configuration-loader/src/docs-yml/convertColorsConfiguration.ts:11

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

old markerDead code

low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `accentPrimaryDeprecated` in packages/cli/configuration/src/docs-yml/schemas/sdk/api/resources/docs/types/ColorsConfiguration.ts:14

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

old markerDead code

low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `accentPrimaryDeprecated` in packages/cli/configuration/src/docs-yml/schemas/sdk/serialization/resources/docs/types/ColorsConfiguration.ts:13

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

old markerDead code

low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `accentPrimaryDeprecated` in packages/cli/yaml/docs-validator/src/rules/accent-color-contrast/index.ts:35

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

old markerDead code

low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `application_v1` in packages/cli/generation/ir-generator-tests/src/ir/__test__/casingsGenerator.test.ts:214

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

old markerDead code

low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `application_v1` in packages/commons/casings-generator/src/CasingsGenerator.ts:129

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

old markerDead code

low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `broker_v1` in packages/cli/cli-v2/src/migrator/__test__/customerConfigs.test.ts:786

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

old markerDead code

low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `create_problem_request_v2` in seed/python-sdk/trace/src/seed/v2/problem/types/__init__.py:16

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

old markerDead code

low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `create_problem_request_v2` in seed/python-sdk/trace/src/seed/v2/v3/problem/types/__init__.py:16

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

old markerDead code

low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `eleven_monolingual_v1` in packages/cli/register/src/ai-example-enhancer/__test__/filterHelpers.test.ts:155

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

old markerDead code

low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `exception_v2` in seed/python-sdk/trace/src/seed/submission/types/__init__.py:30

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

old markerDead code

low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `exception_v2` in seed/python-sdk/trace/src/seed/submission/types/actual_result.py:12

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

old markerDead code

low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `exception_v2` in seed/python-sdk/trace/src/seed/submission/types/test_case_grade.py:11

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

old markerDead code

low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `exception_v2` in seed/python-sdk/trace/src/seed/submission/types/test_case_non_hidden_grade.py:11

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

old markerDead code

low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `exception_v2` in seed/python-sdk/trace/src/seed/submission/types/workspace_run_details.py:10

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

old markerDead code

low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `exception_v2` in seed/python-sdk/trace/src/seed/submission/types/workspace_submission_status.py:13

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

old markerDead code

low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `exception_v2` in seed/python-sdk/trace/src/seed/submission/types/workspace_submission_update_info.py:13

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

old markerDead code

low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `file_info_v2` in seed/python-sdk/trace/src/seed/v2/problem/types/default_provided_file.py:11

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

old markerDead code

low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `file_info_v2` in seed/python-sdk/trace/src/seed/v2/problem/types/files.py:7

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

old markerDead code

low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `file_info_v2` in seed/python-sdk/trace/src/seed/v2/problem/types/get_basic_solution_file_response.py:10

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

old markerDead code

low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `file_info_v2` in seed/python-sdk/trace/src/seed/v2/v3/problem/types/default_provided_file.py:11

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

old markerDead code

low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `file_info_v2` in seed/python-sdk/trace/src/seed/v2/v3/problem/types/files.py:7

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

old markerDead code

low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `file_info_v2` in seed/python-sdk/trace/src/seed/v2/v3/problem/types/get_basic_solution_file_response.py:10

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

old markerDead code

low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `G_old` in packages/generator-cli/src/__test__/replay-squash-merge.test.ts:61

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

old markerDead code

low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `lightweight_problem_info_v2` in seed/python-sdk/trace/src/seed/v2/problem/client.py:9

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

old markerDead code

low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `lightweight_problem_info_v2` in seed/python-sdk/trace/src/seed/v2/problem/raw_client.py:14

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

old markerDead code

low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `lightweight_problem_info_v2` in seed/python-sdk/trace/src/seed/v2/v3/problem/client.py:9

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

old markerDead code

low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `lightweight_problem_info_v2` in seed/python-sdk/trace/src/seed/v2/v3/problem/raw_client.py:14

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

old markerDead code

low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `model_v1` in seed/python-sdk/file-upload/exclude_types_from_init_exports/src/seed/service/types/model_type.py:5

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

old markerDead code

low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `model_v1` in seed/python-sdk/file-upload/no-custom-config/src/seed/service/types/model_type.py:5

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

old markerDead code

low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `model_v1` in seed/python-sdk/file-upload/use_typeddict_requests/src/seed/service/types/model_type.py:5

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

old markerDead code

low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `nOld` in packages/generator-cli/src/__test__/block-merger.test.ts:12

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

old markerDead code

low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `page_v2` in packages/cli/configuration-loader/src/docs-yml/__test__/navigationUtils.test.ts:2031

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

old markerDead code

low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `problem_info_v2` in seed/python-sdk/trace/src/seed/submission/types/submission_status_v2.py:12

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

old markerDead code

low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `problem_info_v2` in seed/python-sdk/trace/src/seed/submission/types/test_submission_status_v2.py:12

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

old markerDead code

low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `setCoerceEnumsToLiteralsDeprecated` in packages/cli/cli-migrations/src/migrations/2.0.0-rc0/update-settings-defaults/migration.ts:70

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

old markerDead code

low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `setNewSettingsDefaultsDeprecated` in packages/cli/cli-migrations/src/migrations/1.0.0/update-settings-defaults/migration.ts:70

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

old markerDead code

low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `test_case_v2` in seed/python-sdk/trace/src/seed/v2/problem/types/create_problem_request_v2.py:15

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

old markerDead code

low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `test_case_v2` in seed/python-sdk/trace/src/seed/v2/problem/types/get_generated_test_case_file_request.py:12

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

old markerDead code

low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `test_case_v2` in seed/python-sdk/trace/src/seed/v2/problem/types/problem_info_v2.py:17

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

old markerDead code

low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `test_case_v2` in seed/python-sdk/trace/src/seed/v2/v3/problem/types/create_problem_request_v2.py:15

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

old markerDead code

low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `test_case_v2` in seed/python-sdk/trace/src/seed/v2/v3/problem/types/get_generated_test_case_file_request.py:12

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

old markerDead code

low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `test_case_v2` in seed/python-sdk/trace/src/seed/v2/v3/problem/types/problem_info_v2.py:17

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

old markerDead code

low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `trace_response_v2` in seed/python-sdk/trace/src/seed/admin/client.py:13

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

old markerDead code

low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `trace_response_v2` in seed/python-sdk/trace/src/seed/admin/raw_client.py:19

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

old markerDead code

low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `trace_response_v2` in seed/python-sdk/trace/src/seed/submission/types/trace_responses_page_v2.py:11

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

old markerDead code

low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `user_v1` in seed/python-sdk/cli-multi-spec-namespaced/src/seed/v1/client.py:8

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

old markerDead code

low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `user_v1` in seed/python-sdk/cli-multi-spec-namespaced/src/seed/v1/raw_client.py:12

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

old markerDead code

low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `user_v1` in seed/python-sdk/cli-multi-spec-namespaced/src/seed/v1/types/__init__.py:9

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

old markerDead code

low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `user_v2` in seed/python-sdk/cli-multi-spec-namespaced/src/seed/v2/client.py:8

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

old markerDead code

low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `user_v2` in seed/python-sdk/cli-multi-spec-namespaced/src/seed/v2/raw_client.py:12

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

old markerDead code

low System graph quality Integrity conf 1.00 Old/deprecated-named symbol `user_v2` in seed/python-sdk/cli-multi-spec-namespaced/src/seed/v2/types/__init__.py:9

Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version.

old markerDead code

low System graph cicd CI/CD security conf 1.00 package.json defines install-time lifecycle scripts

preinstall/install/postinstall/prepare scripts execute during dependency installation. Review them carefully for network calls, obfuscation, shell execution, or credential access.

package.json CI/CD securitySupply chainNpm

low System graph frontend Frontend quality conf 1.00 Stray `console.log` in TS/JS — packages/cli/api-importers/openapi/openapi-ir-parser/src/openapi/v3/extensions/fernExtensions.ts:392

Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable. Why: Hygiene — easy to leak debug output. Rule id: fq.console-leak

Fq console leak

low System graph frontend Frontend quality conf 1.00 Stray `console.log` in TS/JS — packages/cli/cli-migrations/src/migrations/0.15.0-rc0/update-directory-structure/__test__/update-directory-structure.test.ts:28

Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable. Why: Hygiene — easy to leak debug output. Rule id: fq.console-leak

Fq console leak

low System graph frontend Frontend quality conf 1.00 Stray `console.log` in TS/JS — packages/cli/cli-migrations/src/migrations/0.41.0-rc0/require-generators-yml/__test__/require-generators-yml.test.ts:31

Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable. Why: Hygiene — easy to leak debug output. Rule id: fq.console-leak

Fq console leak

low System graph frontend Frontend quality conf 1.00 Stray `console.log` in TS/JS — packages/cli/cli-migrations/src/migrations/0.54.0-rc0/use-generators-yml-specs/__test__/use-generators-yml-specs.test.ts:42

Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable. Why: Hygiene — easy to leak debug output. Rule id: fq.console-leak

Fq console leak

low System graph frontend Frontend quality conf 1.00 Stray `console.log` in TS/JS — packages/cli/cli-migrations/src/migrations/0.82.1/add-path-parameter-order-setting/__test__/add-path-parameter-order-setting.test.ts:39

Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable. Why: Hygiene — easy to leak debug output. Rule id: fq.console-leak

Fq console leak

low System graph frontend Frontend quality conf 1.00 Stray `console.log` in TS/JS — packages/cli/cli-migrations/src/migrations/1.0.0/update-settings-defaults/__test__/update-settings-defaults.test.ts:43

Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable. Why: Hygiene — easy to leak debug output. Rule id: fq.console-leak

Fq console leak

low System graph frontend Frontend quality conf 1.00 Stray `console.log` in TS/JS — packages/cli/cli-migrations/src/migrations/2.0.0-rc0/update-settings-defaults/__test__/update-settings-defaults.test.ts:38

Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable. Why: Hygiene — easy to leak debug output. Rule id: fq.console-leak

Fq console leak

low System graph frontend Frontend quality conf 1.00 Stray `console.log` in TS/JS — packages/cli/cli-migrations/src/migrations/2.13.0/migrate-deprecated-generator-api-settings/__test__/migrate-deprecated-generator-api-settings.test.ts:33

Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable. Why: Hygiene — easy to leak debug output. Rule id: fq.console-leak

Fq console leak

low System graph frontend Frontend quality conf 1.00 Stray `console.log` in TS/JS — packages/cli/cli-migrations/src/migrations/3.0.0/enable-smart-casing/__test__/enable-smart-casing.test.ts:32

Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable. Why: Hygiene — easy to leak debug output. Rule id: fq.console-leak

Fq console leak

low System graph frontend Frontend quality conf 1.00 Stray `console.log` in TS/JS — packages/cli/cli/src/commands/upgrade/migrations/loader.ts:242

Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable. Why: Hygiene — easy to leak debug output. Rule id: fq.console-leak

Fq console leak

low System graph frontend Frontend quality conf 1.00 Stray `console.log` in TS/JS — packages/cli/docs-markdown-utils/src/__test__/replaceReferencedCode.test.ts:134

Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable. Why: Hygiene — easy to leak debug output. Rule id: fq.console-leak

Fq console leak

low System graph frontend Frontend quality conf 1.00 Stray `console.log` in TS/JS — packages/cli/docs-markdown-utils/src/__test__/stripMdxComments.test.ts:109

Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable. Why: Hygiene — easy to leak debug output. Rule id: fq.console-leak

Fq console leak

low System graph frontend Frontend quality conf 1.00 Stray `console.log` in TS/JS — packages/cli/docs-resolver/src/__test__/fixtures/dry/fern/fibonacci.js:4

Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable. Why: Hygiene — easy to leak debug output. Rule id: fq.console-leak

Fq console leak

low System graph frontend Frontend quality conf 1.00 Stray `console.log` in TS/JS — packages/cli/docs-resolver/src/utils/__test__/custom-icon.test.ts:205

Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable. Why: Hygiene — easy to leak debug output. Rule id: fq.console-leak

Fq console leak

low System graph frontend Frontend quality conf 1.00 Stray `console.log` in TS/JS — packages/cli/ete-tests/src/tests/generate/fernignore.test.ts:21

Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable. Why: Hygiene — easy to leak debug output. Rule id: fq.console-leak

Fq console leak

low System graph frontend Frontend quality conf 1.00 Stray `console.log` in TS/JS — packages/cli/ete-tests/src/tests/generate/fixtures/docs/fern/js/custom.js:1

Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable. Why: Hygiene — easy to leak debug output. Rule id: fq.console-leak

Fq console leak

low System graph frontend Frontend quality conf 1.00 Stray `console.log` in TS/JS — packages/cli/ete-tests/src/tests/generate/generate.test.ts:83

Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable. Why: Hygiene — easy to leak debug output. Rule id: fq.console-leak

Fq console leak

low System graph frontend Frontend quality conf 1.00 Stray `console.log` in TS/JS — packages/cli/register/src/ir-to-fdr-converter/__test__/openapi-from-flag.test.ts:1512

Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable. Why: Hygiene — easy to leak debug output. Rule id: fq.console-leak

Fq console leak

low System graph frontend Frontend quality conf 1.00 Stray `console.log` in TS/JS — packages/cli/yaml/docs-validator/src/rules/valid-openapi-examples/__test__/null-anyof-repro.test.ts:86

Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable. Why: Hygiene — easy to leak debug output. Rule id: fq.console-leak

Fq console leak

low System graph frontend Frontend quality conf 1.00 Stray `console.log` in TS/JS — packages/cli/yaml/loader/src/YamlConfigLoader.ts:65

Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable. Why: Hygiene — easy to leak debug output. Rule id: fq.console-leak

Fq console leak

low System graph frontend Frontend quality conf 1.00 Stray `console.log` in TS/JS — packages/commons/core-utils/src/__tests__/validateAgainstJsonSchema.test.ts:870

Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable. Why: Hygiene — easy to leak debug output. Rule id: fq.console-leak

Fq console leak

low System graph frontend Frontend quality conf 1.00 Stray `console.log` in TS/JS — packages/commons/github/src/createOrUpdatePullRequest.ts:45

Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable. Why: Hygiene — easy to leak debug output. Rule id: fq.console-leak

Fq console leak

low System graph frontend Frontend quality conf 1.00 Stray `console.log` in TS/JS — packages/commons/github/src/deleteBranch.ts:13

Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable. Why: Hygiene — easy to leak debug output. Rule id: fq.console-leak

Fq console leak

low System graph frontend Frontend quality conf 1.00 Stray `console.log` in TS/JS — packages/commons/github/src/getOrUpdateBranch.ts:13

Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable. Why: Hygiene — easy to leak debug output. Rule id: fq.console-leak

Fq console leak

low System graph frontend Frontend quality conf 1.00 Stray `console.log` in TS/JS — packages/commons/test-utils/src/__test__/diffSampleIr/diffSampleIr.test.ts:45

Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable. Why: Hygiene — easy to leak debug output. Rule id: fq.console-leak

Fq console leak

low System graph frontend Frontend quality conf 1.00 Stray `console.log` in TS/JS — packages/generator-cli/src/__e2e__/chunking-large-diff.e2e.test.ts:258

Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable. Why: Hygiene — easy to leak debug output. Rule id: fq.console-leak

Fq console leak

low System graph frontend Frontend quality conf 1.00 Stray `console.log` in TS/JS — packages/generator-cli/src/github/GitHub.ts:137

Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable. Why: Hygiene — easy to leak debug output. Rule id: fq.console-leak

Fq console leak

low System graph frontend Frontend quality conf 1.00 Stray `console.log` in TS/JS — packages/migrations-base/src/utils.ts:232

Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable. Why: Hygiene — easy to leak debug output. Rule id: fq.console-leak

Fq console leak

low System graph frontend Frontend quality conf 1.00 Stray `console.log` in TS/JS — packages/scripts/src/cli.ts:43

Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable. Why: Hygiene — easy to leak debug output. Rule id: fq.console-leak

Fq console leak

low System graph frontend Frontend quality conf 1.00 Stray `console.log` in TS/JS — packages/seed/src/cli.ts:191

Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable. Why: Hygiene — easy to leak debug output. Rule id: fq.console-leak

Fq console leak

low System graph frontend Frontend quality conf 1.00 Stray `console.log` in TS/JS — packages/seed/src/commands/run/runWithCustomFixture.ts:63

Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable. Why: Hygiene — easy to leak debug output. Rule id: fq.console-leak

Fq console leak

low System graph frontend Frontend quality conf 1.00 Stray `console.log` in TS/JS — packages/seed/src/commands/test-remote-local/command.ts:213

Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable. Why: Hygiene — easy to leak debug output. Rule id: fq.console-leak

Fq console leak

low System graph frontend Frontend quality conf 1.00 Stray `console.log` in TS/JS — scripts/release-setup.ts:29

Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable. Why: Hygiene — easy to leak debug output. Rule id: fq.console-leak

Fq console leak

low System graph frontend Frontend quality conf 1.00 Stray `console.log` in TS/JS — scripts/release-workflow.ts:23

Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable. Why: Hygiene — easy to leak debug output. Rule id: fq.console-leak

Fq console leak

low System graph frontend Frontend quality conf 1.00 Stray `console.log` in TS/JS — scripts/release.ts:120

Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable. Why: Hygiene — easy to leak debug output. Rule id: fq.console-leak

Fq console leak

low System graph frontend Frontend quality conf 1.00 Stray `console.log` in TS/JS — scripts/validate-cli-dependencies.js:37

Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable. Why: Hygiene — easy to leak debug output. Rule id: fq.console-leak

Fq console leak

low System graph api Wiring conf 1.00 Unused endpoint: GET /

`packages/cli/docs-preview/src/runPreviewServer.ts` declares `GET /` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consumes it.

Unused endpoint

low System graph api Wiring conf 1.00 Unused endpoint: GET /openapi.json

`packages/cli/ete-tests/src/utils/setupOpenAPIServer.ts` declares `GET /openapi.json` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consu…

Unused endpoint

low System graph api Wiring conf 1.00 Unused endpoint: POST /v2/registry/docs/load-with-url

`packages/cli/docs-preview/src/runAppPreviewServer.ts` declares `POST /v2/registry/docs/load-with-url` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or docu…

Unused endpoint

low System graph api Wiring conf 1.00 Unused endpoint: USE /_next

`packages/cli/docs-preview/src/runPreviewServer.ts` declares `USE /_next` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consumes it.

Unused endpoint

low System graph quality Complexity conf 1.00 Very large file: packages/cli/api-importers/openapi/openapi-ir-parser/src/schema/convertSchemas.ts (2037 lines)