{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "scanner-f43be27ccfc691d0", "name": "TODO/FIXME marker in shipping code \u2014 jest.config.js:25", "shortDescription": {"text": "TODO/FIXME marker in shipping code \u2014 jest.config.js:25"}, "fullDescription": {"text": "Track in /reviews or /issues, not as a code comment that rots.\n\nWhy: Drift control \u2014 shouldn't be the same as Quality TODO scanner.\nRule id: fq.todo-marker"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-419906bf00c1ffc0", "name": "Stray `console.log` in TS/JS \u2014 tests/schema-consistency/zodVarcharConsistency.test.ts:333", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 tests/schema-consistency/zodVarcharConsistency.test.ts:333"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1aaeff9c071020f9", "name": "Stray `console.log` in TS/JS \u2014 scripts/generate-management-fee-billings.ts:40", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/generate-management-fee-billings.ts:40"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7282d85293644b76", "name": "Stray `console.log` in TS/JS \u2014 scripts/insert-test-data.js:11", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/insert-test-data.js:11"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-bf3ee25db4257115", "name": "Stray `console.log` in TS/JS \u2014 scripts/backfill-shiharai-payment-method.ts:93", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/backfill-shiharai-payment-method.ts:93"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7a001dabfcfafcaa", "name": "Stray `console.log` in TS/JS \u2014 scripts/fix-html-escaped-data.ts:135", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/fix-html-escaped-data.ts:135"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fafa40f2f28ad97f", "name": "Stray `console.log` in TS/JS \u2014 scripts/migrate-from-legacy.ts:103", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/migrate-from-legacy.ts:103"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-935cba6b60d7252c", "name": "Stray `console.log` in TS/JS \u2014 scripts/check-legacy-data.ts:49", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/check-legacy-data.ts:49"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6e3588005880bb57", "name": "Stray `console.log` in TS/JS \u2014 scripts/backfill-fee-master-codes.ts:136", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/backfill-fee-master-codes.ts:136"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1221036760b1f3bd", "name": "Stray `console.log` in TS/JS \u2014 scripts/create-test-users.js:51", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/create-test-users.js:51"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-27bd9f5eaf120350", "name": "Stray `console.log` in TS/JS \u2014 scripts/backfill-konryu-establishment.ts:108", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/backfill-konryu-establishment.ts:108"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d5dab783581658e5", "name": "Stray `console.log` in TS/JS \u2014 scripts/backfill-area-name.ts:34", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/backfill-area-name.ts:34"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ee657b15bfb255e0", "name": "Stray `console.log` in TS/JS \u2014 scripts/swagger.js:10", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/swagger.js:10"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3de7c7c35145f392", "name": "Stray `console.log` in TS/JS \u2014 scripts/import-collective-burials.ts:147", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/import-collective-burials.ts:147"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d805015db46f419f", "name": "Stray `console.log` in TS/JS \u2014 scripts/copy-document-assets.js:39", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/copy-document-assets.js:39"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c97b5eddd681380e", "name": "Stray `console.log` in TS/JS \u2014 scripts/backfill-collective-burial-schedule.ts:54", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/backfill-collective-burial-schedule.ts:54"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ea5ead6e72149b63", "name": "Stray `console.log` in TS/JS \u2014 scripts/cleanup-legacy-data.ts:78", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/cleanup-legacy-data.ts:78"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-538077096d1918f6", "name": "Stray `console.log` in TS/JS \u2014 scripts/recalculate-payment-status.ts:109", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/recalculate-payment-status.ts:109"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0187b442c22efed0", "name": "Stray `console.log` in TS/JS \u2014 scripts/investigate-payment.ts:30", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/investigate-payment.ts:30"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d935e37769e5a4c6", "name": "Stray `console.log` in TS/JS \u2014 scripts/backfill-legacy-value-cleanup.ts:164", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/backfill-legacy-value-cleanup.ts:164"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c19c259934d4d730", "name": "TODO/FIXME marker in shipping code \u2014 scripts/generate-collective-burial-invoices.ts:130", "shortDescription": {"text": "TODO/FIXME marker in shipping code \u2014 scripts/generate-collective-burial-invoices.ts:130"}, "fullDescription": {"text": "Track in /reviews or /issues, not as a code comment that rots.\n\nWhy: Drift control \u2014 shouldn't be the same as Quality TODO scanner.\nRule id: fq.todo-marker"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b02bebf2234e71b2", "name": "Stray `console.log` in TS/JS \u2014 scripts/generate-collective-burial-invoices.ts:37", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/generate-collective-burial-invoices.ts:37"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6a70c5af63880fb9", "name": "Stray `console.log` in TS/JS \u2014 scripts/test-prisma.js:11", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/test-prisma.js:11"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5bb213a684891ede", "name": "Stray `console.log` in TS/JS \u2014 scripts/query-legacy.ts:48", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/query-legacy.ts:48"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d1b110e8bfec96be", "name": "Stray `console.log` in TS/JS \u2014 scripts/backfill-display-number.ts:31", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/backfill-display-number.ts:31"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0c8a707ba23c754a", "name": "Stray `console.log` in TS/JS \u2014 scripts/verify-migration.ts:714", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/verify-migration.ts:714"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f5dddf84394eed8d", "name": "Stray `console.log` in TS/JS \u2014 prisma/seed.ts:106", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 prisma/seed.ts:106"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-429993e91853e57a", "name": "Stray `console.log` in TS/JS \u2014 prisma/seedMasters.ts:234", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 prisma/seedMasters.ts:234"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8b96c336280b64f7", "name": "Privileged port 12 in use", "shortDescription": {"text": "Privileged port 12 in use"}, "fullDescription": {"text": "Port 12 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-541ed531690d480e", "name": "Privileged port 10 in use", "shortDescription": {"text": "Privileged port 10 in use"}, "fullDescription": {"text": "Port 10 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer."}, "properties": {"scanner": "scanner-primary", "layer": "network", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8987d6d1c30c7202", "name": "Docker base image is tag-pinned but not digest-pinned: node:20-alpine", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: node:20-alpine"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a35c6a00f751880f", "name": "Docker base image is tag-pinned but not digest-pinned: node:20-slim", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: node:20-slim"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-aa5acaa49eb8315b", "name": "Containers defined but no K8s/orchestration manifest found", "shortDescription": {"text": "Containers defined but no K8s/orchestration manifest found"}, "fullDescription": {"text": "Repo has Dockerfiles/compose but no Kubernetes/Nomad manifests. If the target deployment is K8s, the manifests may live in a separate ops repo."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1a9fcfd9f25f05f5", "name": "Runtime dotenv file present in repo: .env.render", "shortDescription": {"text": "Runtime dotenv file present in repo: .env.render"}, "fullDescription": {"text": "`.env.render` looks like a runtime dotenv file. It contains secret-looking assignments for SUPABASE_SERVICE_ROLE_KEY. Move real values to a secret manager and keep only `.env.example` style templates in source control."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-98e92236aa646b9a", "name": "Possible secret in scripts/create-test-users.js", "shortDescription": {"text": "Possible secret in scripts/create-test-users.js"}, "fullDescription": {"text": "Detected pattern matching password_literal. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-1a0d194994d4082f", "name": "Possible secret in src/utils/sentry.ts", "shortDescription": {"text": "Possible secret in src/utils/sentry.ts"}, "fullDescription": {"text": "Detected pattern matching password_literal. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-27924aa79fa4a517", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v6 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7f1e4527e6fecffa", "name": "GitHub Action tracks a moving branch", "shortDescription": {"text": "GitHub Action tracks a moving branch"}, "fullDescription": {"text": "aquasecurity/trivy-action@master can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "high", "confidence": 1.0}}, {"id": "scanner-cb639d9a10a47b23", "name": "package.json defines install-time lifecycle scripts", "shortDescription": {"text": "package.json defines install-time lifecycle scripts"}, "fullDescription": {"text": "preinstall/install/postinstall/prepare scripts execute during dependency installation. Review them carefully for network calls, obfuscation, shell execution, or credential access."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fb9c68d7863eae05", "name": "Very large file: tests/plots/plotController.test.ts (2967 lines)", "shortDescription": {"text": "Very large file: tests/plots/plotController.test.ts (2967 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9509a6cdf5153ee6", "name": "Very large file: src/plots/controllers/updatePlot.ts (1762 lines)", "shortDescription": {"text": "Very large file: src/plots/controllers/updatePlot.ts (1762 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-141b30a41e03817b", "name": "No license file detected", "shortDescription": {"text": "No license file detected"}, "fullDescription": {"text": "No LICENSE/COPYING/NOTICE file was found. Generated repositories often omit licensing, which blocks reuse and automated intake."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3ab5d313dda8e5f9", "name": "Debug logging residue appears in source files", "shortDescription": {"text": "Debug logging residue appears in source files"}, "fullDescription": {"text": "Found 161 console/debugger/print-style debug statements in non-test source. This is a common fast-generation residue before production cleanup."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2d0c7b7ab8f8aacf", "name": "Critical user flow still appears backed by mock or placeholder data", "shortDescription": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "fullDescription": {"text": "A payment/auth/admin/order/billing-style flow contains mock, fake, TODO, dummy, or placeholder markers in runtime source. In the Fable corpus this is a high-leverage completeness smell: the app can look finished while the money, identity, or tenant flow is still scaffolded."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-749d4bc1bd66df5f", "name": "Agent instructions exist but release-hardening basics are missing", "shortDescription": {"text": "Agent instructions exist but release-hardening basics are missing"}, "fullDescription": {"text": "AI-coder instruction files were found, but the repo is missing license. Treat this as a contract gap: the agent is guided, but the generated output is not yet guarded by the controls that make it repeatable."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ea8f3013f588db25", "name": "Shallow git history limits provenance confidence", "shortDescription": {"text": "Shallow git history limits provenance confidence"}, "fullDescription": {"text": "The repository is a shallow clone. Origin/evolution analysis cannot distinguish fresh generation, imported legacy code, or long-lived human code with high confidence."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8424db9c75e04ba4", "name": "Very short observed git history", "shortDescription": {"text": "Very short observed git history"}, "fullDescription": {"text": "The repo has multiple source files but two or fewer visible commits. This is not a failure by itself, but it lowers confidence in evolution-based diagnosis."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-4830cde1ac281527", "name": "Legacy-named symbol `withLegacy` in scripts/investigate-payment.ts:13", "shortDescription": {"text": "Legacy-named symbol `withLegacy` in scripts/investigate-payment.ts:13"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-644d0b5c8ea67c0b", "name": "Legacy-named symbol `skipLegacy` in scripts/verify-migration.ts:87", "shortDescription": {"text": "Legacy-named symbol `skipLegacy` in scripts/verify-migration.ts:87"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e0235c306da38983", "name": "Commented-code block (5 lines) in scripts/verify-migration.ts:135", "shortDescription": {"text": "Commented-code block (5 lines) in scripts/verify-migration.ts:135"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2da929063c705c7c", "name": "Commented-code block (6 lines) in src/billings/billingService.ts:64", "shortDescription": {"text": "Commented-code block (6 lines) in src/billings/billingService.ts:64"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-1676f6e0dae210fb", "name": "Commented-code block (5 lines) in src/plots/controllers/getPlots.ts:234", "shortDescription": {"text": "Commented-code block (5 lines) in src/plots/controllers/getPlots.ts:234"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-0332675ee1104fde", "name": "Commented-code block (6 lines) in src/plots/services/historyLabels.ts:455", "shortDescription": {"text": "Commented-code block (6 lines) in src/plots/services/historyLabels.ts:455"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-371ae86e9a3c1d1c", "name": "Commented-code block (7 lines) in src/auth/authController.ts:7", "shortDescription": {"text": "Commented-code block (7 lines) in src/auth/authController.ts:7"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-7e9bfd8c4b0ca239", "name": "Commented-code block (5 lines) in src/collective-burials/collectiveBurialImportService.ts:191", "shortDescription": {"text": "Commented-code block (5 lines) in src/collective-burials/collectiveBurialImportService.ts:191"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-41ed7db335246721", "name": "Commented-code block (5 lines) in src/validations/plotValidation.ts:220", "shortDescription": {"text": "Commented-code block (5 lines) in src/validations/plotValidation.ts:220"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-1725ad65f2d68cac", "name": "Commented-code block (5 lines) in src/validations/yuchoValidation.ts:13", "shortDescription": {"text": "Commented-code block (5 lines) in src/validations/yuchoValidation.ts:13"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-bc2423c4ed526369", "name": "Commented-code block (6 lines) in src/masters/masterController.ts:1051", "shortDescription": {"text": "Commented-code block (6 lines) in src/masters/masterController.ts:1051"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-ef931a7df88cc795", "name": "Commented-code block (6 lines) in src/documents/permitPdfService.ts:118", "shortDescription": {"text": "Commented-code block (6 lines) in src/documents/permitPdfService.ts:118"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-6ad67c39ae34cae3", "name": "Unused endpoint: USE /api-docs", "shortDescription": {"text": "Unused endpoint: USE /api-docs"}, "fullDescription": {"text": "`src/index.ts` declares `USE /api-docs` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3bec7ccd0b909bea", "name": "Unused endpoint: USE /api/v1/auth", "shortDescription": {"text": "Unused endpoint: USE /api/v1/auth"}, "fullDescription": {"text": "`src/index.ts` declares `USE /api/v1/auth` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-14191d33e0c5a837", "name": "Unused endpoint: USE /api/v1/plots", "shortDescription": {"text": "Unused endpoint: USE /api/v1/plots"}, "fullDescription": {"text": "`src/index.ts` declares `USE /api/v1/plots` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-44f845f8cec8c4c7", "name": "Unused endpoint: USE /api/v1/masters", "shortDescription": {"text": "Unused endpoint: USE /api/v1/masters"}, "fullDescription": {"text": "`src/index.ts` declares `USE /api/v1/masters` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8a176d56c0f71e02", "name": "Unused endpoint: USE /api/v1/staff", "shortDescription": {"text": "Unused endpoint: USE /api/v1/staff"}, "fullDescription": {"text": "`src/index.ts` declares `USE /api/v1/staff` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b05521ec20c69ed4", "name": "Unused endpoint: USE /api/v1/collective-burials", "shortDescription": {"text": "Unused endpoint: USE /api/v1/collective-burials"}, "fullDescription": {"text": "`src/index.ts` declares `USE /api/v1/collective-burials` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ae28138444b45a80", "name": "Unused endpoint: USE /api/v1/documents", "shortDescription": {"text": "Unused endpoint: USE /api/v1/documents"}, "fullDescription": {"text": "`src/index.ts` declares `USE /api/v1/documents` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-050b3727ab2d54a2", "name": "Unused endpoint: USE /api/v1/yucho", "shortDescription": {"text": "Unused endpoint: USE /api/v1/yucho"}, "fullDescription": {"text": "`src/index.ts` declares `USE /api/v1/yucho` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-13feca1f1bce4c56", "name": "Unused endpoint: USE /api/v1/billings", "shortDescription": {"text": "Unused endpoint: USE /api/v1/billings"}, "fullDescription": {"text": "`src/index.ts` declares `USE /api/v1/billings` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-853f5b1b1f304bfc", "name": "Unused endpoint: USE /api/v1/payments", "shortDescription": {"text": "Unused endpoint: USE /api/v1/payments"}, "fullDescription": {"text": "`src/index.ts` declares `USE /api/v1/payments` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e72710ab38f6107b", "name": "Unused endpoint: USE /api/v1/customers", "shortDescription": {"text": "Unused endpoint: USE /api/v1/customers"}, "fullDescription": {"text": "`src/index.ts` declares `USE /api/v1/customers` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5baa8971ebe192a1", "name": "Unused endpoint: GET /", "shortDescription": {"text": "Unused endpoint: GET /"}, "fullDescription": {"text": "`src/billings/billingRoutes.ts` declares `GET /` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e1b7bee247ffc801", "name": "Unused endpoint: GET /summary", "shortDescription": {"text": "Unused endpoint: GET /summary"}, "fullDescription": {"text": "`src/billings/billingRoutes.ts` declares `GET /summary` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ca5756175765b49d", "name": "Unused endpoint: GET /:id", "shortDescription": {"text": "Unused endpoint: GET /:id"}, "fullDescription": {"text": "`src/billings/billingRoutes.ts` declares `GET /:id` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7a009b1a56794f45", "name": "Unused endpoint: POST /", "shortDescription": {"text": "Unused endpoint: POST /"}, "fullDescription": {"text": "`src/billings/billingRoutes.ts` declares `POST /` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8d5b2b188d08ca82", "name": "Unused endpoint: PUT /:id", "shortDescription": {"text": "Unused endpoint: PUT /:id"}, "fullDescription": {"text": "`src/billings/billingRoutes.ts` declares `PUT /:id` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7a61c112b611f4bb", "name": "Unused endpoint: DELETE /:id", "shortDescription": {"text": "Unused endpoint: DELETE /:id"}, "fullDescription": {"text": "`src/billings/billingRoutes.ts` declares `DELETE /:id` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ed349c10a5e70d85", "name": "Unused endpoint: GET /grave-classifications", "shortDescription": {"text": "Unused endpoint: GET /grave-classifications"}, "fullDescription": {"text": "`src/plots/plotRoutes.ts` declares `GET /grave-classifications` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-46bed3313c88a103", "name": "Unused endpoint: GET /inventory/summary", "shortDescription": {"text": "Unused endpoint: GET /inventory/summary"}, "fullDescription": {"text": "`src/plots/plotRoutes.ts` declares `GET /inventory/summary` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f459eec7e1bf9d49", "name": "Unused endpoint: GET /inventory/periods", "shortDescription": {"text": "Unused endpoint: GET /inventory/periods"}, "fullDescription": {"text": "`src/plots/plotRoutes.ts` declares `GET /inventory/periods` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f42333a1d9341578", "name": "Unused endpoint: GET /inventory/sections", "shortDescription": {"text": "Unused endpoint: GET /inventory/sections"}, "fullDescription": {"text": "`src/plots/plotRoutes.ts` declares `GET /inventory/sections` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-10bde490520ee55b", "name": "Unused endpoint: GET /inventory/areas", "shortDescription": {"text": "Unused endpoint: GET /inventory/areas"}, "fullDescription": {"text": "`src/plots/plotRoutes.ts` declares `GET /inventory/areas` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4dd93f39b62d6d43", "name": "Unused endpoint: POST /:id/terminate", "shortDescription": {"text": "Unused endpoint: POST /:id/terminate"}, "fullDescription": {"text": "`src/plots/plotRoutes.ts` declares `POST /:id/terminate` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-419089e7ca779e72", "name": "Unused endpoint: POST /:id/restore", "shortDescription": {"text": "Unused endpoint: POST /:id/restore"}, "fullDescription": {"text": "`src/plots/plotRoutes.ts` declares `POST /:id/restore` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-33e04c3de96eb521", "name": "Unused endpoint: POST /:id/change-contractor", "shortDescription": {"text": "Unused endpoint: POST /:id/change-contractor"}, "fullDescription": {"text": "`src/plots/plotRoutes.ts` declares `POST /:id/change-contractor` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-692e5c0243c0ad2b", "name": "Unused endpoint: GET /:id/contracts", "shortDescription": {"text": "Unused endpoint: GET /:id/contracts"}, "fullDescription": {"text": "`src/plots/plotRoutes.ts` declares `GET /:id/contracts` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-862384ab220aed3a", "name": "Unused endpoint: POST /:id/contracts", "shortDescription": {"text": "Unused endpoint: POST /:id/contracts"}, "fullDescription": {"text": "`src/plots/plotRoutes.ts` declares `POST /:id/contracts` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5be96c8424ed72fb", "name": "Unused endpoint: GET /:id/inventory", "shortDescription": {"text": "Unused endpoint: GET /:id/inventory"}, "fullDescription": {"text": "`src/plots/plotRoutes.ts` declares `GET /:id/inventory` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-23e9e1321a34ac63", "name": "Unused endpoint: GET /:id/history", "shortDescription": {"text": "Unused endpoint: GET /:id/history"}, "fullDescription": {"text": "`src/plots/plotRoutes.ts` declares `GET /:id/history` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-618721b912bad1c2", "name": "Unused endpoint: POST /login", "shortDescription": {"text": "Unused endpoint: POST /login"}, "fullDescription": {"text": "`src/auth/authRoutes.ts` declares `POST /login` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7ce17d6b092a81ca", "name": "Unused endpoint: POST /refresh", "shortDescription": {"text": "Unused endpoint: POST /refresh"}, "fullDescription": {"text": "`src/auth/authRoutes.ts` declares `POST /refresh` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-99fc36db98c134ce", "name": "Unused endpoint: POST /logout", "shortDescription": {"text": "Unused endpoint: POST /logout"}, "fullDescription": {"text": "`src/auth/authRoutes.ts` declares `POST /logout` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fd1dc91abf32142d", "name": "Unused endpoint: GET /me", "shortDescription": {"text": "Unused endpoint: GET /me"}, "fullDescription": {"text": "`src/auth/authRoutes.ts` declares `GET /me` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a569171ffb8378de", "name": "Unused endpoint: PUT /password", "shortDescription": {"text": "Unused endpoint: PUT /password"}, "fullDescription": {"text": "`src/auth/authRoutes.ts` declares `PUT /password` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-911492554a68d0c1", "name": "Unused endpoint: PUT /profile", "shortDescription": {"text": "Unused endpoint: PUT /profile"}, "fullDescription": {"text": "`src/auth/authRoutes.ts` declares `PUT /profile` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4257ec01219aa99a", "name": "Unused endpoint: POST /forgot-password", "shortDescription": {"text": "Unused endpoint: POST /forgot-password"}, "fullDescription": {"text": "`src/auth/authRoutes.ts` declares `POST /forgot-password` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-68a5d356c0cac9e3", "name": "Unused endpoint: POST /reset-password", "shortDescription": {"text": "Unused endpoint: POST /reset-password"}, "fullDescription": {"text": "`src/auth/authRoutes.ts` declares `POST /reset-password` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-54a13b13ab212254", "name": "Unused endpoint: PUT /:id/toggle-active", "shortDescription": {"text": "Unused endpoint: PUT /:id/toggle-active"}, "fullDescription": {"text": "`src/staff/staffRoutes.ts` declares `PUT /:id/toggle-active` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ff15dc120c9b481b", "name": "Unused endpoint: POST /:id/resend-invitation", "shortDescription": {"text": "Unused endpoint: POST /:id/resend-invitation"}, "fullDescription": {"text": "`src/staff/staffRoutes.ts` declares `POST /:id/resend-invitation` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8e4f9eae2f0a2d15", "name": "Unused endpoint: GET /stats/by-year", "shortDescription": {"text": "Unused endpoint: GET /stats/by-year"}, "fullDescription": {"text": "`src/collective-burials/collectiveBurialRoutes.ts` declares `GET /stats/by-year` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-af7508b9439d7ff3", "name": "Unused endpoint: PUT /:id/billing-status", "shortDescription": {"text": "Unused endpoint: PUT /:id/billing-status"}, "fullDescription": {"text": "`src/collective-burials/collectiveBurialRoutes.ts` declares `PUT /:id/billing-status` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b3820b42839bae7b", "name": "Unused endpoint: POST /:id/sync-count", "shortDescription": {"text": "Unused endpoint: POST /:id/sync-count"}, "fullDescription": {"text": "`src/collective-burials/collectiveBurialRoutes.ts` declares `POST /:id/sync-count` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8d3d20f440766444", "name": "Unused endpoint: GET /terminated", "shortDescription": {"text": "Unused endpoint: GET /terminated"}, "fullDescription": {"text": "`src/customers/customerRoutes.ts` declares `GET /terminated` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2c3d1d103b19a7f6", "name": "Unused endpoint: GET /all", "shortDescription": {"text": "Unused endpoint: GET /all"}, "fullDescription": {"text": "`src/masters/masterRoutes.ts` declares `GET /all` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9042112b81816d5f", "name": "Unused endpoint: GET /cemetery-type", "shortDescription": {"text": "Unused endpoint: GET /cemetery-type"}, "fullDescription": {"text": "`src/masters/masterRoutes.ts` declares `GET /cemetery-type` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7fb738d987f40d33", "name": "Unused endpoint: GET /payment-method", "shortDescription": {"text": "Unused endpoint: GET /payment-method"}, "fullDescription": {"text": "`src/masters/masterRoutes.ts` declares `GET /payment-method` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2f27701393ad4ad6", "name": "Unused endpoint: GET /tax-type", "shortDescription": {"text": "Unused endpoint: GET /tax-type"}, "fullDescription": {"text": "`src/masters/masterRoutes.ts` declares `GET /tax-type` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-339af57104f0ed23", "name": "Unused endpoint: GET /calc-type", "shortDescription": {"text": "Unused endpoint: GET /calc-type"}, "fullDescription": {"text": "`src/masters/masterRoutes.ts` declares `GET /calc-type` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5ca52b78bfa635fc", "name": "Unused endpoint: GET /billing-type", "shortDescription": {"text": "Unused endpoint: GET /billing-type"}, "fullDescription": {"text": "`src/masters/masterRoutes.ts` declares `GET /billing-type` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-10a8456052d8e483", "name": "Unused endpoint: GET /recipient-type", "shortDescription": {"text": "Unused endpoint: GET /recipient-type"}, "fullDescription": {"text": "`src/masters/masterRoutes.ts` declares `GET /recipient-type` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/23528"}, "properties": {"repository": "zaitsu82/komine-crm-backend", "repoUrl": "https://github.com/zaitsu82/komine-crm-backend", "branch": "main"}, "results": [{"ruleId": "scanner-f43be27ccfc691d0", "level": "none", "message": {"text": "TODO/FIXME marker in shipping code \u2014 jest.config.js:25"}, "properties": {"repobilityId": "243a6d4095d6d219", "scanner": "scanner-primary", "fingerprint": "f43be27ccfc691d0", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.todo-marker"]}}, {"ruleId": "scanner-419906bf00c1ffc0", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 tests/schema-consistency/zodVarcharConsistency.test.ts:333"}, "properties": {"repobilityId": "546139bd8a73569a", "scanner": "scanner-primary", "fingerprint": "419906bf00c1ffc0", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-1aaeff9c071020f9", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/generate-management-fee-billings.ts:40"}, "properties": {"repobilityId": "89a2dc38cf670cd4", "scanner": "scanner-primary", "fingerprint": "1aaeff9c071020f9", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-7282d85293644b76", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/insert-test-data.js:11"}, "properties": {"repobilityId": "6d0921bad50961d2", "scanner": "scanner-primary", "fingerprint": "7282d85293644b76", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-bf3ee25db4257115", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/backfill-shiharai-payment-method.ts:93"}, "properties": {"repobilityId": "fd8d7af718c42558", "scanner": "scanner-primary", "fingerprint": "bf3ee25db4257115", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-7a001dabfcfafcaa", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/fix-html-escaped-data.ts:135"}, "properties": {"repobilityId": "51392cf9f9b9a35d", "scanner": "scanner-primary", "fingerprint": "7a001dabfcfafcaa", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-fafa40f2f28ad97f", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/migrate-from-legacy.ts:103"}, "properties": {"repobilityId": "c8122ca446874787", "scanner": "scanner-primary", "fingerprint": "fafa40f2f28ad97f", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-935cba6b60d7252c", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/check-legacy-data.ts:49"}, "properties": {"repobilityId": "0ef3e736f8e2fb35", "scanner": "scanner-primary", "fingerprint": "935cba6b60d7252c", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-6e3588005880bb57", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/backfill-fee-master-codes.ts:136"}, "properties": {"repobilityId": "6c6c3f841fe18549", "scanner": "scanner-primary", "fingerprint": "6e3588005880bb57", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-1221036760b1f3bd", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/create-test-users.js:51"}, "properties": {"repobilityId": "efa6d731736fbac9", "scanner": "scanner-primary", "fingerprint": "1221036760b1f3bd", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-27bd9f5eaf120350", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/backfill-konryu-establishment.ts:108"}, "properties": {"repobilityId": "3fb2d20dde521ec7", "scanner": "scanner-primary", "fingerprint": "27bd9f5eaf120350", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-d5dab783581658e5", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/backfill-area-name.ts:34"}, "properties": {"repobilityId": "15f6b788bcb3d69f", "scanner": "scanner-primary", "fingerprint": "d5dab783581658e5", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-ee657b15bfb255e0", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/swagger.js:10"}, "properties": {"repobilityId": "0a4b72f3224365bc", "scanner": "scanner-primary", "fingerprint": "ee657b15bfb255e0", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-3de7c7c35145f392", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/import-collective-burials.ts:147"}, "properties": {"repobilityId": "59ad4281e2a11e7e", "scanner": "scanner-primary", "fingerprint": "3de7c7c35145f392", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-d805015db46f419f", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/copy-document-assets.js:39"}, "properties": {"repobilityId": "a7eb59fb9612c833", "scanner": "scanner-primary", "fingerprint": "d805015db46f419f", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-c97b5eddd681380e", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/backfill-collective-burial-schedule.ts:54"}, "properties": {"repobilityId": "ffef8104b3259ade", "scanner": "scanner-primary", "fingerprint": "c97b5eddd681380e", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-ea5ead6e72149b63", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/cleanup-legacy-data.ts:78"}, "properties": {"repobilityId": "480c584b41fe98f7", "scanner": "scanner-primary", "fingerprint": "ea5ead6e72149b63", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-538077096d1918f6", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/recalculate-payment-status.ts:109"}, "properties": {"repobilityId": "66253e82f8802c64", "scanner": "scanner-primary", "fingerprint": "538077096d1918f6", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-0187b442c22efed0", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/investigate-payment.ts:30"}, "properties": {"repobilityId": "8a11325f1dd8af51", "scanner": "scanner-primary", "fingerprint": "0187b442c22efed0", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-d935e37769e5a4c6", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/backfill-legacy-value-cleanup.ts:164"}, "properties": {"repobilityId": "0d25c221e8b98414", "scanner": "scanner-primary", "fingerprint": "d935e37769e5a4c6", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-c19c259934d4d730", "level": "none", "message": {"text": "TODO/FIXME marker in shipping code \u2014 scripts/generate-collective-burial-invoices.ts:130"}, "properties": {"repobilityId": "4e64b9d4d05ee9b4", "scanner": "scanner-primary", "fingerprint": "c19c259934d4d730", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.todo-marker"]}}, {"ruleId": "scanner-b02bebf2234e71b2", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/generate-collective-burial-invoices.ts:37"}, "properties": {"repobilityId": "6641a905227937b7", "scanner": "scanner-primary", "fingerprint": "b02bebf2234e71b2", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-6a70c5af63880fb9", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/test-prisma.js:11"}, "properties": {"repobilityId": "7ecf3c5c46d1e70c", "scanner": "scanner-primary", "fingerprint": "6a70c5af63880fb9", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-5bb213a684891ede", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/query-legacy.ts:48"}, "properties": {"repobilityId": "9b6e6f4efaaf5863", "scanner": "scanner-primary", "fingerprint": "5bb213a684891ede", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-d1b110e8bfec96be", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/backfill-display-number.ts:31"}, "properties": {"repobilityId": "7d9c222e72efdc70", "scanner": "scanner-primary", "fingerprint": "d1b110e8bfec96be", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-0c8a707ba23c754a", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/verify-migration.ts:714"}, "properties": {"repobilityId": "87286b037cbdd1ab", "scanner": "scanner-primary", "fingerprint": "0c8a707ba23c754a", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-f5dddf84394eed8d", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 prisma/seed.ts:106"}, "properties": {"repobilityId": "f77d7e0fb34b08e2", "scanner": "scanner-primary", "fingerprint": "f5dddf84394eed8d", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-429993e91853e57a", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 prisma/seedMasters.ts:234"}, "properties": {"repobilityId": "0010be71d95f82b0", "scanner": "scanner-primary", "fingerprint": "429993e91853e57a", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-8b96c336280b64f7", "level": "warning", "message": {"text": "Privileged port 12 in use"}, "properties": {"repobilityId": "65e7eefa33f2def4", "scanner": "scanner-primary", "fingerprint": "8b96c336280b64f7", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "swagger.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-541ed531690d480e", "level": "warning", "message": {"text": "Privileged port 10 in use"}, "properties": {"repobilityId": "735372d6b5594915", "scanner": "scanner-primary", "fingerprint": "541ed531690d480e", "layer": "network", "severity": "medium", "confidence": 1.0, "tags": ["security", "ports"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "swagger.yaml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8987d6d1c30c7202", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: node:20-alpine"}, "properties": {"repobilityId": "a9d1f07ac797ce6e", "scanner": "scanner-primary", "fingerprint": "8987d6d1c30c7202", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "Dockerfile"}, "region": {"startLine": 4}}}]}, {"ruleId": "scanner-8987d6d1c30c7202", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: node:20-alpine"}, "properties": {"repobilityId": "86d0b2bb80983d93", "scanner": "scanner-primary", "fingerprint": "8987d6d1c30c7202", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "Dockerfile"}, "region": {"startLine": 31}}}]}, {"ruleId": "scanner-8987d6d1c30c7202", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: node:20-alpine"}, "properties": {"repobilityId": "5db4bdb0d827cf62", "scanner": "scanner-primary", "fingerprint": "8987d6d1c30c7202", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "Dockerfile"}, "region": {"startLine": 70}}}]}, {"ruleId": "scanner-a35c6a00f751880f", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: node:20-slim"}, "properties": {"repobilityId": "20eeb0ce029988a7", "scanner": "scanner-primary", "fingerprint": "a35c6a00f751880f", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "Dockerfile"}, "region": {"startLine": 104}}}]}, {"ruleId": "scanner-aa5acaa49eb8315b", "level": "note", "message": {"text": "Containers defined but no K8s/orchestration manifest found"}, "properties": {"repobilityId": "b230ea9b68736081", "scanner": "scanner-primary", "fingerprint": "aa5acaa49eb8315b", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["coverage", "deployment"]}}, {"ruleId": "scanner-1a9fcfd9f25f05f5", "level": "error", "message": {"text": "Runtime dotenv file present in repo: .env.render"}, "properties": {"repobilityId": "500b478e457ba49b", "scanner": "scanner-primary", "fingerprint": "1a9fcfd9f25f05f5", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets", "config", "env-file", "runtime-env", "env_file_with_secret"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".env.render"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-98e92236aa646b9a", "level": "error", "message": {"text": "Possible secret in scripts/create-test-users.js"}, "properties": {"repobilityId": "1657ed6cf19d6f99", "scanner": "scanner-primary", "fingerprint": "98e92236aa646b9a", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/create-test-users.js"}, "region": {"startLine": 25}}}]}, {"ruleId": "scanner-98e92236aa646b9a", "level": "error", "message": {"text": "Possible secret in scripts/create-test-users.js"}, "properties": {"repobilityId": "1657ed6cf19d6f99", "scanner": "scanner-primary", "fingerprint": "98e92236aa646b9a", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/create-test-users.js"}, "region": {"startLine": 31}}}]}, {"ruleId": "scanner-98e92236aa646b9a", "level": "error", "message": {"text": "Possible secret in scripts/create-test-users.js"}, "properties": {"repobilityId": "1657ed6cf19d6f99", "scanner": "scanner-primary", "fingerprint": "98e92236aa646b9a", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/create-test-users.js"}, "region": {"startLine": 37}}}]}, {"ruleId": "scanner-98e92236aa646b9a", "level": "error", "message": {"text": "Possible secret in scripts/create-test-users.js"}, "properties": {"repobilityId": "1657ed6cf19d6f99", "scanner": "scanner-primary", "fingerprint": "98e92236aa646b9a", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "scripts/create-test-users.js"}, "region": {"startLine": 43}}}]}, {"ruleId": "scanner-1a0d194994d4082f", "level": "error", "message": {"text": "Possible secret in src/utils/sentry.ts"}, "properties": {"repobilityId": "54fd69addcf8d242", "scanner": "scanner-primary", "fingerprint": "1a0d194994d4082f", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/utils/sentry.ts"}, "region": {"startLine": 77}}}]}, {"ruleId": "scanner-1a0d194994d4082f", "level": "error", "message": {"text": "Possible secret in src/utils/sentry.ts"}, "properties": {"repobilityId": "54fd69addcf8d242", "scanner": "scanner-primary", "fingerprint": "1a0d194994d4082f", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/utils/sentry.ts"}, "region": {"startLine": 80}}}]}, {"ruleId": "scanner-1a0d194994d4082f", "level": "error", "message": {"text": "Possible secret in src/utils/sentry.ts"}, "properties": {"repobilityId": "54fd69addcf8d242", "scanner": "scanner-primary", "fingerprint": "1a0d194994d4082f", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "src/utils/sentry.ts"}, "region": {"startLine": 83}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "97a9a5de61d82fcd", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 22}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "4a63b1fd6887cae9", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 30}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "90dca2b9a9fbfb28", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 45}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "97a9a5de61d82fcd", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 58}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "4a63b1fd6887cae9", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 66}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "97a9a5de61d82fcd", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 87}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "4a63b1fd6887cae9", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 95}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "97a9a5de61d82fcd", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 116}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "4a63b1fd6887cae9", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 119}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "97a9a5de61d82fcd", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 145}}}]}, {"ruleId": "scanner-7f1e4527e6fecffa", "level": "error", "message": {"text": "GitHub Action tracks a moving branch"}, "properties": {"repobilityId": "e790d4d334398ef3", "scanner": "scanner-primary", "fingerprint": "7f1e4527e6fecffa", "layer": "cicd", "severity": "high", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 153}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "cb1a23126ead31cb", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 173}}}]}, {"ruleId": "scanner-7f1e4527e6fecffa", "level": "error", "message": {"text": "GitHub Action tracks a moving branch"}, "properties": {"repobilityId": "e790d4d334398ef3", "scanner": "scanner-primary", "fingerprint": "7f1e4527e6fecffa", "layer": "cicd", "severity": "high", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 181}}}]}, {"ruleId": "scanner-7f1e4527e6fecffa", "level": "error", "message": {"text": "GitHub Action tracks a moving branch"}, "properties": {"repobilityId": "e790d4d334398ef3", "scanner": "scanner-primary", "fingerprint": "7f1e4527e6fecffa", "layer": "cicd", "severity": "high", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 192}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "97a9a5de61d82fcd", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 211}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "4a63b1fd6887cae9", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 219}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "4effa0820a061a14", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 239}}}]}, {"ruleId": "scanner-27924aa79fa4a517", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "90dca2b9a9fbfb28", "scanner": "scanner-primary", "fingerprint": "27924aa79fa4a517", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/ci.yml"}, "region": {"startLine": 249}}}]}, {"ruleId": "scanner-cb639d9a10a47b23", "level": "note", "message": {"text": "package.json defines install-time lifecycle scripts"}, "properties": {"repobilityId": "714673743ff59cef", "scanner": "scanner-primary", "fingerprint": "cb639d9a10a47b23", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "npm", "install-scripts"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "package.json"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-fb9c68d7863eae05", "level": "note", "message": {"text": "Very large file: tests/plots/plotController.test.ts (2967 lines)"}, "properties": {"repobilityId": "c72beecb75ac328c", "scanner": "scanner-primary", "fingerprint": "fb9c68d7863eae05", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-9509a6cdf5153ee6", "level": "note", "message": {"text": "Very large file: src/plots/controllers/updatePlot.ts (1762 lines)"}, "properties": {"repobilityId": "84b9f090499e23b2", "scanner": "scanner-primary", "fingerprint": "9509a6cdf5153ee6", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-141b30a41e03817b", "level": "note", "message": {"text": "No license file detected"}, "properties": {"repobilityId": "4ef54a3f59d54745", "scanner": "scanner-primary", "fingerprint": "141b30a41e03817b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["license", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-3ab5d313dda8e5f9", "level": "note", "message": {"text": "Debug logging residue appears in source files"}, "properties": {"repobilityId": "4fa75108c9213dfb", "scanner": "scanner-primary", "fingerprint": "3ab5d313dda8e5f9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["debug", "cleanup", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-2d0c7b7ab8f8aacf", "level": "warning", "message": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "properties": {"repobilityId": "fcf7c06e52b5c6ee", "scanner": "scanner-primary", "fingerprint": "2d0c7b7ab8f8aacf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "critical-flow", "generated-repo-pattern"]}}, {"ruleId": "scanner-749d4bc1bd66df5f", "level": "warning", "message": {"text": "Agent instructions exist but release-hardening basics are missing"}, "properties": {"repobilityId": "80d7ca05f53f326c", "scanner": "scanner-primary", "fingerprint": "749d4bc1bd66df5f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-ea8f3013f588db25", "level": "note", "message": {"text": "Shallow git history limits provenance confidence"}, "properties": {"repobilityId": "2db5fec07bd31ef7", "scanner": "scanner-primary", "fingerprint": "ea8f3013f588db25", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-8424db9c75e04ba4", "level": "none", "message": {"text": "Very short observed git history"}, "properties": {"repobilityId": "7ac2059451c0812a", "scanner": "scanner-primary", "fingerprint": "8424db9c75e04ba4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-4830cde1ac281527", "level": "note", "message": {"text": "Legacy-named symbol `withLegacy` in scripts/investigate-payment.ts:13"}, "properties": {"repobilityId": "23d470151a7ab486", "scanner": "scanner-primary", "fingerprint": "4830cde1ac281527", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-644d0b5c8ea67c0b", "level": "note", "message": {"text": "Legacy-named symbol `skipLegacy` in scripts/verify-migration.ts:87"}, "properties": {"repobilityId": "fa43f4a1ab7fc42f", "scanner": "scanner-primary", "fingerprint": "644d0b5c8ea67c0b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-e0235c306da38983", "level": "none", "message": {"text": "Commented-code block (5 lines) in scripts/verify-migration.ts:135"}, "properties": {"repobilityId": "54b46661d17e3aa7", "scanner": "scanner-primary", "fingerprint": "e0235c306da38983", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-2da929063c705c7c", "level": "none", "message": {"text": "Commented-code block (6 lines) in src/billings/billingService.ts:64"}, "properties": {"repobilityId": "122cde7de0f4407f", "scanner": "scanner-primary", "fingerprint": "2da929063c705c7c", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-1676f6e0dae210fb", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/plots/controllers/getPlots.ts:234"}, "properties": {"repobilityId": "4929d32ac260910d", "scanner": "scanner-primary", "fingerprint": "1676f6e0dae210fb", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-0332675ee1104fde", "level": "none", "message": {"text": "Commented-code block (6 lines) in src/plots/services/historyLabels.ts:455"}, "properties": {"repobilityId": "f31c6be221c71ae3", "scanner": "scanner-primary", "fingerprint": "0332675ee1104fde", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-371ae86e9a3c1d1c", "level": "none", "message": {"text": "Commented-code block (7 lines) in src/auth/authController.ts:7"}, "properties": {"repobilityId": "ab2516e721006acf", "scanner": "scanner-primary", "fingerprint": "371ae86e9a3c1d1c", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-7e9bfd8c4b0ca239", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/collective-burials/collectiveBurialImportService.ts:191"}, "properties": {"repobilityId": "cdc398d5c1c0c3ca", "scanner": "scanner-primary", "fingerprint": "7e9bfd8c4b0ca239", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-41ed7db335246721", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/validations/plotValidation.ts:220"}, "properties": {"repobilityId": "2d10426827774281", "scanner": "scanner-primary", "fingerprint": "41ed7db335246721", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-1725ad65f2d68cac", "level": "none", "message": {"text": "Commented-code block (5 lines) in src/validations/yuchoValidation.ts:13"}, "properties": {"repobilityId": "90a17c2fbcff66cc", "scanner": "scanner-primary", "fingerprint": "1725ad65f2d68cac", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-bc2423c4ed526369", "level": "none", "message": {"text": "Commented-code block (6 lines) in src/masters/masterController.ts:1051"}, "properties": {"repobilityId": "b4190c9bd4cf376c", "scanner": "scanner-primary", "fingerprint": "bc2423c4ed526369", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-ef931a7df88cc795", "level": "none", "message": {"text": "Commented-code block (6 lines) in src/documents/permitPdfService.ts:118"}, "properties": {"repobilityId": "1e7f2fe9d7d507f5", "scanner": "scanner-primary", "fingerprint": "ef931a7df88cc795", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-6ad67c39ae34cae3", "level": "note", "message": {"text": "Unused endpoint: USE /api-docs"}, "properties": {"repobilityId": "e075c8abbc6c1ee6", "scanner": "scanner-primary", "fingerprint": "6ad67c39ae34cae3", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-3bec7ccd0b909bea", "level": "note", "message": {"text": "Unused endpoint: USE /api/v1/auth"}, "properties": {"repobilityId": "b8a343029188ec17", "scanner": "scanner-primary", "fingerprint": "3bec7ccd0b909bea", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-14191d33e0c5a837", "level": "note", "message": {"text": "Unused endpoint: USE /api/v1/plots"}, "properties": {"repobilityId": "cf243699a0acf586", "scanner": "scanner-primary", "fingerprint": "14191d33e0c5a837", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-44f845f8cec8c4c7", "level": "note", "message": {"text": "Unused endpoint: USE /api/v1/masters"}, "properties": {"repobilityId": "58b92adfafd0d5f0", "scanner": "scanner-primary", "fingerprint": "44f845f8cec8c4c7", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-8a176d56c0f71e02", "level": "note", "message": {"text": "Unused endpoint: USE /api/v1/staff"}, "properties": {"repobilityId": "b54158cdc533e207", "scanner": "scanner-primary", "fingerprint": "8a176d56c0f71e02", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-b05521ec20c69ed4", "level": "note", "message": {"text": "Unused endpoint: USE /api/v1/collective-burials"}, "properties": {"repobilityId": "ad81044d87238b73", "scanner": "scanner-primary", "fingerprint": "b05521ec20c69ed4", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-ae28138444b45a80", "level": "note", "message": {"text": "Unused endpoint: USE /api/v1/documents"}, "properties": {"repobilityId": "abfdf5351803d44f", "scanner": "scanner-primary", "fingerprint": "ae28138444b45a80", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-050b3727ab2d54a2", "level": "note", "message": {"text": "Unused endpoint: USE /api/v1/yucho"}, "properties": {"repobilityId": "06e7700446b017c3", "scanner": "scanner-primary", "fingerprint": "050b3727ab2d54a2", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-13feca1f1bce4c56", "level": "note", "message": {"text": "Unused endpoint: USE /api/v1/billings"}, "properties": {"repobilityId": "684d25d0518831a7", "scanner": "scanner-primary", "fingerprint": "13feca1f1bce4c56", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-853f5b1b1f304bfc", "level": "note", "message": {"text": "Unused endpoint: USE /api/v1/payments"}, "properties": {"repobilityId": "cbefbfc173fcb317", "scanner": "scanner-primary", "fingerprint": "853f5b1b1f304bfc", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-e72710ab38f6107b", "level": "note", "message": {"text": "Unused endpoint: USE /api/v1/customers"}, "properties": {"repobilityId": "25335ae27be0ba2d", "scanner": "scanner-primary", "fingerprint": "e72710ab38f6107b", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-5baa8971ebe192a1", "level": "note", "message": {"text": "Unused endpoint: GET /"}, "properties": {"repobilityId": "3d06e14a251f8028", "scanner": "scanner-primary", "fingerprint": "5baa8971ebe192a1", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-e1b7bee247ffc801", "level": "note", "message": {"text": "Unused endpoint: GET /summary"}, "properties": {"repobilityId": "0732a62a93fae35f", "scanner": "scanner-primary", "fingerprint": "e1b7bee247ffc801", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-ca5756175765b49d", "level": "note", "message": {"text": "Unused endpoint: GET /:id"}, "properties": {"repobilityId": "9cee6fe3c4d22c27", "scanner": "scanner-primary", "fingerprint": "ca5756175765b49d", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-7a009b1a56794f45", "level": "note", "message": {"text": "Unused endpoint: POST /"}, "properties": {"repobilityId": "363e1a54e9f3c3fb", "scanner": "scanner-primary", "fingerprint": "7a009b1a56794f45", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-8d5b2b188d08ca82", "level": "note", "message": {"text": "Unused endpoint: PUT /:id"}, "properties": {"repobilityId": "c9b3f10c6d257af8", "scanner": "scanner-primary", "fingerprint": "8d5b2b188d08ca82", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-7a61c112b611f4bb", "level": "note", "message": {"text": "Unused endpoint: DELETE /:id"}, "properties": {"repobilityId": "7ac51d9c975c1040", "scanner": "scanner-primary", "fingerprint": "7a61c112b611f4bb", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-ed349c10a5e70d85", "level": "note", "message": {"text": "Unused endpoint: GET /grave-classifications"}, "properties": {"repobilityId": "ff29cc8298a45618", "scanner": "scanner-primary", "fingerprint": "ed349c10a5e70d85", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-46bed3313c88a103", "level": "note", "message": {"text": "Unused endpoint: GET /inventory/summary"}, "properties": {"repobilityId": "bf0b23355ab92d44", "scanner": "scanner-primary", "fingerprint": "46bed3313c88a103", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-f459eec7e1bf9d49", "level": "note", "message": {"text": "Unused endpoint: GET /inventory/periods"}, "properties": {"repobilityId": "8d7c0b5200636456", "scanner": "scanner-primary", "fingerprint": "f459eec7e1bf9d49", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-f42333a1d9341578", "level": "note", "message": {"text": "Unused endpoint: GET /inventory/sections"}, "properties": {"repobilityId": "2da7b6b4162112eb", "scanner": "scanner-primary", "fingerprint": "f42333a1d9341578", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-10bde490520ee55b", "level": "note", "message": {"text": "Unused endpoint: GET /inventory/areas"}, "properties": {"repobilityId": "d5ab8c4c4c0fb604", "scanner": "scanner-primary", "fingerprint": "10bde490520ee55b", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-4dd93f39b62d6d43", "level": "note", "message": {"text": "Unused endpoint: POST /:id/terminate"}, "properties": {"repobilityId": "64e6c3346cee83ee", "scanner": "scanner-primary", "fingerprint": "4dd93f39b62d6d43", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-419089e7ca779e72", "level": "note", "message": {"text": "Unused endpoint: POST /:id/restore"}, "properties": {"repobilityId": "ebac9b892952e40a", "scanner": "scanner-primary", "fingerprint": "419089e7ca779e72", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-33e04c3de96eb521", "level": "note", "message": {"text": "Unused endpoint: POST /:id/change-contractor"}, "properties": {"repobilityId": "43fec589cd27d7d4", "scanner": "scanner-primary", "fingerprint": "33e04c3de96eb521", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-692e5c0243c0ad2b", "level": "note", "message": {"text": "Unused endpoint: GET /:id/contracts"}, "properties": {"repobilityId": "ee81a413fdcfdbf8", "scanner": "scanner-primary", "fingerprint": "692e5c0243c0ad2b", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-862384ab220aed3a", "level": "note", "message": {"text": "Unused endpoint: POST /:id/contracts"}, "properties": {"repobilityId": "50387e8a2e633018", "scanner": "scanner-primary", "fingerprint": "862384ab220aed3a", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-5be96c8424ed72fb", "level": "note", "message": {"text": "Unused endpoint: GET /:id/inventory"}, "properties": {"repobilityId": "cc640d99c07bc96b", "scanner": "scanner-primary", "fingerprint": "5be96c8424ed72fb", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-23e9e1321a34ac63", "level": "note", "message": {"text": "Unused endpoint: GET /:id/history"}, "properties": {"repobilityId": "78a4e7b47bfee702", "scanner": "scanner-primary", "fingerprint": "23e9e1321a34ac63", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-618721b912bad1c2", "level": "note", "message": {"text": "Unused endpoint: POST /login"}, "properties": {"repobilityId": "76baaf7b4176030d", "scanner": "scanner-primary", "fingerprint": "618721b912bad1c2", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-7ce17d6b092a81ca", "level": "note", "message": {"text": "Unused endpoint: POST /refresh"}, "properties": {"repobilityId": "5648bd688e259f51", "scanner": "scanner-primary", "fingerprint": "7ce17d6b092a81ca", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-99fc36db98c134ce", "level": "note", "message": {"text": "Unused endpoint: POST /logout"}, "properties": {"repobilityId": "6a15b2cde0c8d90b", "scanner": "scanner-primary", "fingerprint": "99fc36db98c134ce", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-fd1dc91abf32142d", "level": "note", "message": {"text": "Unused endpoint: GET /me"}, "properties": {"repobilityId": "770f30e2d71154b2", "scanner": "scanner-primary", "fingerprint": "fd1dc91abf32142d", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-a569171ffb8378de", "level": "note", "message": {"text": "Unused endpoint: PUT /password"}, "properties": {"repobilityId": "18264be37efc1a60", "scanner": "scanner-primary", "fingerprint": "a569171ffb8378de", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-911492554a68d0c1", "level": "note", "message": {"text": "Unused endpoint: PUT /profile"}, "properties": {"repobilityId": "2428483e9caa40de", "scanner": "scanner-primary", "fingerprint": "911492554a68d0c1", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-4257ec01219aa99a", "level": "note", "message": {"text": "Unused endpoint: POST /forgot-password"}, "properties": {"repobilityId": "06cd1520a99423cc", "scanner": "scanner-primary", "fingerprint": "4257ec01219aa99a", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-68a5d356c0cac9e3", "level": "note", "message": {"text": "Unused endpoint: POST /reset-password"}, "properties": {"repobilityId": "a464524c47b61a52", "scanner": "scanner-primary", "fingerprint": "68a5d356c0cac9e3", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-54a13b13ab212254", "level": "note", "message": {"text": "Unused endpoint: PUT /:id/toggle-active"}, "properties": {"repobilityId": "5ebb6aef52b5cb51", "scanner": "scanner-primary", "fingerprint": "54a13b13ab212254", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-ff15dc120c9b481b", "level": "note", "message": {"text": "Unused endpoint: POST /:id/resend-invitation"}, "properties": {"repobilityId": "f767f3ca81c36c20", "scanner": "scanner-primary", "fingerprint": "ff15dc120c9b481b", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-8e4f9eae2f0a2d15", "level": "note", "message": {"text": "Unused endpoint: GET /stats/by-year"}, "properties": {"repobilityId": "7bc097cfee7c6995", "scanner": "scanner-primary", "fingerprint": "8e4f9eae2f0a2d15", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-af7508b9439d7ff3", "level": "note", "message": {"text": "Unused endpoint: PUT /:id/billing-status"}, "properties": {"repobilityId": "1a5a966989a9d516", "scanner": "scanner-primary", "fingerprint": "af7508b9439d7ff3", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-b3820b42839bae7b", "level": "note", "message": {"text": "Unused endpoint: POST /:id/sync-count"}, "properties": {"repobilityId": "e32af4f89c9acd57", "scanner": "scanner-primary", "fingerprint": "b3820b42839bae7b", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-8d3d20f440766444", "level": "note", "message": {"text": "Unused endpoint: GET /terminated"}, "properties": {"repobilityId": "cbf3c652204a6015", "scanner": "scanner-primary", "fingerprint": "8d3d20f440766444", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-2c3d1d103b19a7f6", "level": "note", "message": {"text": "Unused endpoint: GET /all"}, "properties": {"repobilityId": "db19e25aea68abb3", "scanner": "scanner-primary", "fingerprint": "2c3d1d103b19a7f6", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-9042112b81816d5f", "level": "note", "message": {"text": "Unused endpoint: GET /cemetery-type"}, "properties": {"repobilityId": "9e2835e34c738f70", "scanner": "scanner-primary", "fingerprint": "9042112b81816d5f", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-7fb738d987f40d33", "level": "note", "message": {"text": "Unused endpoint: GET /payment-method"}, "properties": {"repobilityId": "e686210ccc8ede66", "scanner": "scanner-primary", "fingerprint": "7fb738d987f40d33", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-2f27701393ad4ad6", "level": "note", "message": {"text": "Unused endpoint: GET /tax-type"}, "properties": {"repobilityId": "aee2afab07a75fc1", "scanner": "scanner-primary", "fingerprint": "2f27701393ad4ad6", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-339af57104f0ed23", "level": "note", "message": {"text": "Unused endpoint: GET /calc-type"}, "properties": {"repobilityId": "c8c5ea32516019d3", "scanner": "scanner-primary", "fingerprint": "339af57104f0ed23", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-5ca52b78bfa635fc", "level": "note", "message": {"text": "Unused endpoint: GET /billing-type"}, "properties": {"repobilityId": "a7eacecc3f707547", "scanner": "scanner-primary", "fingerprint": "5ca52b78bfa635fc", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-10a8456052d8e483", "level": "note", "message": {"text": "Unused endpoint: GET /recipient-type"}, "properties": {"repobilityId": "ecc146ba869ea2e2", "scanner": "scanner-primary", "fingerprint": "10a8456052d8e483", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}]}]}