{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "scanner-04bc4063661fccf9", "name": "Possibly dead Python function: run_nowcast", "shortDescription": {"text": "Possibly dead Python function: run_nowcast"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e2c053416915cba7", "name": "Possibly dead Python function: run_backtest", "shortDescription": {"text": "Possibly dead Python function: run_backtest"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-18c9d165e756b99a", "name": "Possibly dead Python function: run_status", "shortDescription": {"text": "Possibly dead Python function: run_status"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ee719a1105b692e1", "name": "Possibly dead Python function: make_estimator", "shortDescription": {"text": "Possibly dead Python function: make_estimator"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8eb055dcf6f9c301", "name": "Possibly dead Python function: cmd_cache", "shortDescription": {"text": "Possibly dead Python function: cmd_cache"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-bd41c9d10dbaa03f", "name": "Possibly dead Python function: cmd_variants", "shortDescription": {"text": "Possibly dead Python function: cmd_variants"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-11cb0d1cc8aa4907", "name": "Possibly dead Python function: cmd_candidates", "shortDescription": {"text": "Possibly dead Python function: cmd_candidates"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f89d1178c4625f51", "name": "Possibly dead Python function: start_run", "shortDescription": {"text": "Possibly dead Python function: start_run"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4fb314c11e426b05", "name": "Possibly dead Python function: write_nowcasts", "shortDescription": {"text": "Possibly dead Python function: write_nowcasts"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6687fb7e57eba52e", "name": "Possibly dead Python function: write_panel_vintage", "shortDescription": {"text": "Possibly dead Python function: write_panel_vintage"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d223cf3b17c013ad", "name": "Possibly dead Python function: write_news", "shortDescription": {"text": "Possibly dead Python function: write_news"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-89b38edb4956acab", "name": "Possibly dead Python function: write_backtest", "shortDescription": {"text": "Possibly dead Python function: write_backtest"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-bc6b397d721fa323", "name": "Possibly dead Python function: read_nowcasts", "shortDescription": {"text": "Possibly dead Python function: read_nowcasts"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8651b5f529056a0f", "name": "Possibly dead Python function: latest_vintage_run_id", "shortDescription": {"text": "Possibly dead Python function: latest_vintage_run_id"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-154a05257495f518", "name": "Possibly dead Python function: read_panel_vintage", "shortDescription": {"text": "Possibly dead Python function: read_panel_vintage"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-506be2b95088f5d3", "name": "git log failed \u2014 history analysis incomplete", "shortDescription": {"text": "git log failed \u2014 history analysis incomplete"}, "fullDescription": {"text": "fatal: not a git repository (or any parent up to mount point /data)\nStopping at filesystem boundary (GIT_DISCOVERY_ACROSS_FILESYSTEM not set)."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-9710c8d059e53154", "name": "No frontend routes/components detected", "shortDescription": {"text": "No frontend routes/components detected"}, "fullDescription": {"text": "No React/Vue/Next routes were found. This is fine for backend-only repos."}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-09fd4b6577f6ccc8", "name": "Insecure pattern 'exec_used' in experiments.py:423", "shortDescription": {"text": "Insecure pattern 'exec_used' in experiments.py:423"}, "fullDescription": {"text": "Found a known-risky pattern (exec_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-6372cebde0220094", "name": "No auth library detected", "shortDescription": {"text": "No auth library detected"}, "fullDescription": {"text": "The scanner did not find any standard auth library (JWT, OAuth, NextAuth, Auth0, etc.). The repo has auth/admin/session surface indicators, so auth may live in custom code, in a separate service, or be missing."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4601e3ad3bb28677", "name": "No CI/CD pipelines detected", "shortDescription": {"text": "No CI/CD pipelines detected"}, "fullDescription": {"text": "No GitHub Actions, GitLab CI, or CircleCI configs found. Without CI you can't gate deploys on tests/lints."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c850d07ec8f7a0d7", "name": "Very large file: nz_gdp_nowcast_v2.py (1113 lines)", "shortDescription": {"text": "Very large file: nz_gdp_nowcast_v2.py (1113 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ea3b5e389d8c9c0f", "name": "Low test-to-source ratio", "shortDescription": {"text": "Low test-to-source ratio"}, "fullDescription": {"text": "1 tests / 10 src (ratio 0.10)."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-141b30a41e03817b", "name": "No license file detected", "shortDescription": {"text": "No license file detected"}, "fullDescription": {"text": "No LICENSE/COPYING/NOTICE file was found. Generated repositories often omit licensing, which blocks reuse and automated intake."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3ab5d313dda8e5f9", "name": "Debug logging residue appears in source files", "shortDescription": {"text": "Debug logging residue appears in source files"}, "fullDescription": {"text": "Found 41 console/debugger/print-style debug statements in non-test source. This is a common fast-generation residue before production cleanup."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b9088664ace7f748", "name": "Composite production-readiness gap", "shortDescription": {"text": "Composite production-readiness gap"}, "fullDescription": {"text": "Multiple low-cost hardening controls are missing together: license, ci, tests. Opus verification showed these co-occurring gaps are a better readiness signal than reading each flag in isolation."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ff789cbf27b4bca5", "name": "Legacy-named symbol `nz_gdp_nowcast_v2` in dfm_backtest.py:19", "shortDescription": {"text": "Legacy-named symbol `nz_gdp_nowcast_v2` in dfm_backtest.py:19"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e3a62def6fe28409", "name": "Legacy-named symbol `nz_gdp_nowcast_v2` in news_engine.py:23", "shortDescription": {"text": "Legacy-named symbol `nz_gdp_nowcast_v2` in news_engine.py:23"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f3af220876b4af6a", "name": "Legacy-named symbol `nz_gdp_nowcast_v2` in make_comparison_plot.py:14", "shortDescription": {"text": "Legacy-named symbol `nz_gdp_nowcast_v2` in make_comparison_plot.py:14"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-cf0f73938100afa1", "name": "Commented-code block (5 lines) in make_comparison_plot.py:39", "shortDescription": {"text": "Commented-code block (5 lines) in make_comparison_plot.py:39"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-d6e0845541b64622", "name": "Commented-code block (6 lines) in nz_gdp_nowcast_v2.py:487", "shortDescription": {"text": "Commented-code block (6 lines) in nz_gdp_nowcast_v2.py:487"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-a7279c7887135dd2", "name": "Legacy-named symbol `nz_gdp_nowcast_v2` in make_dashboard.py:24", "shortDescription": {"text": "Legacy-named symbol `nz_gdp_nowcast_v2` in make_dashboard.py:24"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a344bc76b2bd0e5e", "name": "Legacy-named symbol `nz_gdp_nowcast_v2` in experiments.py:27", "shortDescription": {"text": "Legacy-named symbol `nz_gdp_nowcast_v2` in experiments.py:27"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a026b2e50936889a", "name": "Legacy-named symbol `nowcast_legacy` in nzgdp_db.py:102", "shortDescription": {"text": "Legacy-named symbol `nowcast_legacy` in nzgdp_db.py:102"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-834270e363bcec26", "name": "Legacy-named symbol `nz_gdp_nowcast_v2` in make_correction_view.py:21", "shortDescription": {"text": "Legacy-named symbol `nz_gdp_nowcast_v2` in make_correction_view.py:21"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2c04133e54348533", "name": "Near-duplicate function bodies in 2 places", "shortDescription": {"text": "Near-duplicate function bodies in 2 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\nnz_gdp_nowcast_v2.py:fit_bridge_model, nz_gdp_nowcast_v2.py:fit_bridge\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/17374"}, "properties": {"repository": "prmaiacap/nowcast", "repoUrl": "https://github.com/prmaiacap/nowcast", "branch": "main"}, "results": [{"ruleId": "scanner-04bc4063661fccf9", "level": "note", "message": {"text": "Possibly dead Python function: run_nowcast"}, "properties": {"repobilityId": "95c5da3e11afb40b", "scanner": "scanner-primary", "fingerprint": "04bc4063661fccf9", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "nz_gdp_nowcast_v2.py:894"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e2c053416915cba7", "level": "note", "message": {"text": "Possibly dead Python function: run_backtest"}, "properties": {"repobilityId": "bdb78942af68669d", "scanner": "scanner-primary", "fingerprint": "e2c053416915cba7", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "nz_gdp_nowcast_v2.py:1013"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-18c9d165e756b99a", "level": "note", "message": {"text": "Possibly dead Python function: run_status"}, "properties": {"repobilityId": "f30833846b8db815", "scanner": "scanner-primary", "fingerprint": "18c9d165e756b99a", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "nz_gdp_nowcast_v2.py:1055"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ee719a1105b692e1", "level": "note", "message": {"text": "Possibly dead Python function: make_estimator"}, "properties": {"repobilityId": "211352ded5bf46e1", "scanner": "scanner-primary", "fingerprint": "ee719a1105b692e1", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "experiments.py:118"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8eb055dcf6f9c301", "level": "note", "message": {"text": "Possibly dead Python function: cmd_cache"}, "properties": {"repobilityId": "a5dcf9efe6d6b878", "scanner": "scanner-primary", "fingerprint": "8eb055dcf6f9c301", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "experiments.py:339"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-bd41c9d10dbaa03f", "level": "note", "message": {"text": "Possibly dead Python function: cmd_variants"}, "properties": {"repobilityId": "4621bbdbde00ab61", "scanner": "scanner-primary", "fingerprint": "bd41c9d10dbaa03f", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "experiments.py:345"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-11cb0d1cc8aa4907", "level": "note", "message": {"text": "Possibly dead Python function: cmd_candidates"}, "properties": {"repobilityId": "1dbdfb5e94ca1585", "scanner": "scanner-primary", "fingerprint": "11cb0d1cc8aa4907", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "experiments.py:363"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f89d1178c4625f51", "level": "note", "message": {"text": "Possibly dead Python function: start_run"}, "properties": {"repobilityId": "05c5ab6aebf14bdd", "scanner": "scanner-primary", "fingerprint": "f89d1178c4625f51", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "nzgdp_db.py:179"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4fb314c11e426b05", "level": "note", "message": {"text": "Possibly dead Python function: write_nowcasts"}, "properties": {"repobilityId": "4fb03cc65a271412", "scanner": "scanner-primary", "fingerprint": "4fb314c11e426b05", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "nzgdp_db.py:193"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6687fb7e57eba52e", "level": "note", "message": {"text": "Possibly dead Python function: write_panel_vintage"}, "properties": {"repobilityId": "082dfe4c75d97138", "scanner": "scanner-primary", "fingerprint": "6687fb7e57eba52e", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "nzgdp_db.py:212"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d223cf3b17c013ad", "level": "note", "message": {"text": "Possibly dead Python function: write_news"}, "properties": {"repobilityId": "15f4682d97968b4b", "scanner": "scanner-primary", "fingerprint": "d223cf3b17c013ad", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "nzgdp_db.py:228"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-89b38edb4956acab", "level": "note", "message": {"text": "Possibly dead Python function: write_backtest"}, "properties": {"repobilityId": "ef399018bf6653d3", "scanner": "scanner-primary", "fingerprint": "89b38edb4956acab", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "nzgdp_db.py:242"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-bc6b397d721fa323", "level": "note", "message": {"text": "Possibly dead Python function: read_nowcasts"}, "properties": {"repobilityId": "b96a5ec687d732a0", "scanner": "scanner-primary", "fingerprint": "bc6b397d721fa323", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "nzgdp_db.py:255"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8651b5f529056a0f", "level": "note", "message": {"text": "Possibly dead Python function: latest_vintage_run_id"}, "properties": {"repobilityId": "c7452cd61dc65b96", "scanner": "scanner-primary", "fingerprint": "8651b5f529056a0f", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "nzgdp_db.py:262"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-154a05257495f518", "level": "note", "message": {"text": "Possibly dead Python function: read_panel_vintage"}, "properties": {"repobilityId": "fd35438a2775d917", "scanner": "scanner-primary", "fingerprint": "154a05257495f518", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "nzgdp_db.py:274"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-506be2b95088f5d3", "level": "none", "message": {"text": "git log failed \u2014 history analysis incomplete"}, "properties": {"repobilityId": "b424308a11bb9b22", "scanner": "scanner-primary", "fingerprint": "506be2b95088f5d3", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["git", "tooling"]}}, {"ruleId": "scanner-9710c8d059e53154", "level": "none", "message": {"text": "No frontend routes/components detected"}, "properties": {"repobilityId": "44ca61485762e494", "scanner": "scanner-primary", "fingerprint": "9710c8d059e53154", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["coverage"]}}, {"ruleId": "scanner-09fd4b6577f6ccc8", "level": "error", "message": {"text": "Insecure pattern 'exec_used' in experiments.py:423"}, "properties": {"repobilityId": "47219d73a62af791", "scanner": "scanner-primary", "fingerprint": "09fd4b6577f6ccc8", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "exec_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "experiments.py"}, "region": {"startLine": 423}}}]}, {"ruleId": "scanner-6372cebde0220094", "level": "warning", "message": {"text": "No auth library detected"}, "properties": {"repobilityId": "a5b6035a5bbf8054", "scanner": "scanner-primary", "fingerprint": "6372cebde0220094", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["coverage", "auth"]}}, {"ruleId": "scanner-4601e3ad3bb28677", "level": "warning", "message": {"text": "No CI/CD pipelines detected"}, "properties": {"repobilityId": "c3ee439bce2bc51e", "scanner": "scanner-primary", "fingerprint": "4601e3ad3bb28677", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["coverage"]}}, {"ruleId": "scanner-c850d07ec8f7a0d7", "level": "note", "message": {"text": "Very large file: nz_gdp_nowcast_v2.py (1113 lines)"}, "properties": {"repobilityId": "ab2ad8f1d3fd191b", "scanner": "scanner-primary", "fingerprint": "c850d07ec8f7a0d7", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-ea3b5e389d8c9c0f", "level": "note", "message": {"text": "Low test-to-source ratio"}, "properties": {"repobilityId": "ef7b2552cc00a375", "scanner": "scanner-primary", "fingerprint": "ea3b5e389d8c9c0f", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["tests"]}}, {"ruleId": "scanner-141b30a41e03817b", "level": "note", "message": {"text": "No license file detected"}, "properties": {"repobilityId": "5abddb738c61064b", "scanner": "scanner-primary", "fingerprint": "141b30a41e03817b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["license", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-3ab5d313dda8e5f9", "level": "note", "message": {"text": "Debug logging residue appears in source files"}, "properties": {"repobilityId": "c55c4a3eda6429e0", "scanner": "scanner-primary", "fingerprint": "3ab5d313dda8e5f9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["debug", "cleanup", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-b9088664ace7f748", "level": "warning", "message": {"text": "Composite production-readiness gap"}, "properties": {"repobilityId": "d0e30a0d53c35233", "scanner": "scanner-primary", "fingerprint": "b9088664ace7f748", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["production-readiness", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-ff789cbf27b4bca5", "level": "note", "message": {"text": "Legacy-named symbol `nz_gdp_nowcast_v2` in dfm_backtest.py:19"}, "properties": {"repobilityId": "bb8db7171cdae53c", "scanner": "scanner-primary", "fingerprint": "ff789cbf27b4bca5", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-e3a62def6fe28409", "level": "note", "message": {"text": "Legacy-named symbol `nz_gdp_nowcast_v2` in news_engine.py:23"}, "properties": {"repobilityId": "cbc3c81fea82dfb6", "scanner": "scanner-primary", "fingerprint": "e3a62def6fe28409", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-f3af220876b4af6a", "level": "note", "message": {"text": "Legacy-named symbol `nz_gdp_nowcast_v2` in make_comparison_plot.py:14"}, "properties": {"repobilityId": "a830ff0b0999f8e5", "scanner": "scanner-primary", "fingerprint": "f3af220876b4af6a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-cf0f73938100afa1", "level": "none", "message": {"text": "Commented-code block (5 lines) in make_comparison_plot.py:39"}, "properties": {"repobilityId": "7df2c23f8c494fc2", "scanner": "scanner-primary", "fingerprint": "cf0f73938100afa1", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-d6e0845541b64622", "level": "none", "message": {"text": "Commented-code block (6 lines) in nz_gdp_nowcast_v2.py:487"}, "properties": {"repobilityId": "d6a3b66b0a80cca5", "scanner": "scanner-primary", "fingerprint": "d6e0845541b64622", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-a7279c7887135dd2", "level": "note", "message": {"text": "Legacy-named symbol `nz_gdp_nowcast_v2` in make_dashboard.py:24"}, "properties": {"repobilityId": "3f9569e893a6a906", "scanner": "scanner-primary", "fingerprint": "a7279c7887135dd2", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-a344bc76b2bd0e5e", "level": "note", "message": {"text": "Legacy-named symbol `nz_gdp_nowcast_v2` in experiments.py:27"}, "properties": {"repobilityId": "8d58585695fc9321", "scanner": "scanner-primary", "fingerprint": "a344bc76b2bd0e5e", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-a026b2e50936889a", "level": "note", "message": {"text": "Legacy-named symbol `nowcast_legacy` in nzgdp_db.py:102"}, "properties": {"repobilityId": "05b82fb95649edbb", "scanner": "scanner-primary", "fingerprint": "a026b2e50936889a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-834270e363bcec26", "level": "note", "message": {"text": "Legacy-named symbol `nz_gdp_nowcast_v2` in make_correction_view.py:21"}, "properties": {"repobilityId": "aca4155cc76e4a16", "scanner": "scanner-primary", "fingerprint": "834270e363bcec26", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "b29f186934a63138", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "c4f257eea0652391", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "0c514bfa89aba181", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}]}]}