{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "scanner-020a8bf0d6f5663c", "name": "`truncate` class without `title=` for hover reveal \u2014 frontend/src/components/theme/ThemeListScreen.tsx:381", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 frontend/src/components/theme/ThemeListScreen.tsx:381"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-9e0f7bd160dcba06", "name": "`truncate` class without `title=` for hover reveal \u2014 frontend/src/components/influencer/InfluencerDashboard.tsx:459", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 frontend/src/components/influencer/InfluencerDashboard.tsx:459"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-7a5a05a0ca40f603", "name": "`truncate` class without `title=` for hover reveal \u2014 frontend/src/components/influencer/InfluencerRestaurantForm.tsx:271", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 frontend/src/components/influencer/InfluencerRestaurantForm.tsx:271"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-905220b595abe054", "name": "`truncate` class without `title=` for hover reveal \u2014 frontend/src/components/home/DiscoveryHome.tsx:757", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 frontend/src/components/home/DiscoveryHome.tsx:757"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-c1a1bb35acd98579", "name": "`truncate` class without `title=` for hover reveal \u2014 frontend/src/components/admin/AdminPage.tsx:331", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 frontend/src/components/admin/AdminPage.tsx:331"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b403345afc6d1fbc", "name": "`truncate` class without `title=` for hover reveal \u2014 frontend/src/components/social/SocialScreen.tsx:483", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 frontend/src/components/social/SocialScreen.tsx:483"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-82886b5374a43053", "name": "`truncate` class without `title=` for hover reveal \u2014 frontend/src/components/account/AccountScreen.tsx:440", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 frontend/src/components/account/AccountScreen.tsx:440"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-e1d5293004fc8e40", "name": "`truncate` class without `title=` for hover reveal \u2014 frontend/src/components/user/UserProfileModal.tsx:139", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 frontend/src/components/user/UserProfileModal.tsx:139"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-1cef42f0aec75dce", "name": "`truncate` class without `title=` for hover reveal \u2014 frontend/src/components/user/PublicProfileScreen.tsx:191", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 frontend/src/components/user/PublicProfileScreen.tsx:191"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-20297e9e5925a486", "name": "`truncate` class without `title=` for hover reveal \u2014 frontend/src/components/swipe/SwipeCard.tsx:230", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 frontend/src/components/swipe/SwipeCard.tsx:230"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b12fac9ef283f1d0", "name": "`truncate` class without `title=` for hover reveal \u2014 frontend/src/components/map/SimpleMapViewMapbox.tsx:1839", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 frontend/src/components/map/SimpleMapViewMapbox.tsx:1839"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2ba94ca3b6a314e5", "name": "Stray `console.log` in TS/JS \u2014 backend/scripts/seed-users.ts:34", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 backend/scripts/seed-users.ts:34"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a0d04b947119bd2f", "name": "Stray `console.log` in TS/JS \u2014 backend/scripts/reseed-restaurants.ts:57", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 backend/scripts/reseed-restaurants.ts:57"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-096eb71aee85e4e1", "name": "Stray `console.log` in TS/JS \u2014 backend/scripts/seed-restaurants-2.ts:30", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 backend/scripts/seed-restaurants-2.ts:30"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ae31eb3ff6d5db02", "name": "Stray `console.log` in TS/JS \u2014 backend/scripts/cleanup-restaurants-direct.ts:68", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 backend/scripts/cleanup-restaurants-direct.ts:68"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-41e5b68de7e9a06c", "name": "Stray `console.log` in TS/JS \u2014 backend/scripts/cleanup-restaurants.ts:58", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 backend/scripts/cleanup-restaurants.ts:58"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-87ff956b917cbead", "name": "Stray `console.log` in TS/JS \u2014 backend/scripts/seed-restaurants.ts:291", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 backend/scripts/seed-restaurants.ts:291"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a5bb9f0a59661268", "name": "Stray `console.log` in TS/JS \u2014 backend/scripts/seed-restaurants-bulk.ts:526", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 backend/scripts/seed-restaurants-bulk.ts:526"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-abcb148a61a5ef25", "name": "Stray `console.log` in TS/JS \u2014 backend/scripts/create-posts-table.ts:45", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 backend/scripts/create-posts-table.ts:45"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7afe7e65a7415a37", "name": "Stray `console.log` in TS/JS \u2014 backend/src/index.ts:272", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 backend/src/index.ts:272"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e23038cdd70a43dc", "name": "Stray `console.log` in TS/JS \u2014 backend/src/scripts/migrate-v2.ts:64", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 backend/src/scripts/migrate-v2.ts:64"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8f2150acc0fe3e0b", "name": "Stray `console.log` in TS/JS \u2014 backend/src/scripts/rebuild-url-index.ts:34", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 backend/src/scripts/rebuild-url-index.ts:34"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a6ac67e2a3b21241", "name": "Stray `console.log` in TS/JS \u2014 backend/src/scripts/create-v2-tables.ts:27", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 backend/src/scripts/create-v2-tables.ts:27"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-308ab79566c8dc1b", "name": "Stray `console.log` in TS/JS \u2014 backend/src/scripts/create-deleted-accounts-table.ts:31", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 backend/src/scripts/create-deleted-accounts-table.ts:31"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-70cab76d9e6bc27b", "name": "Stray `console.log` in TS/JS \u2014 backend/src/scripts/fix-stock-visibility.ts:26", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 backend/src/scripts/fix-stock-visibility.ts:26"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-783c8bfd15b963c8", "name": "Stray `console.log` in TS/JS \u2014 backend/src/routes/admin.ts:34", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 backend/src/routes/admin.ts:34"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-cc4d071036925394", "name": "Insecure pattern 'direct_innerhtml_assignment' in frontend/public/swipe-demo.html:408", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in frontend/public/swipe-demo.html:408"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-fa1e02d6fb36d0a8", "name": "Possible secret in frontend/src/i18n/en.ts", "shortDescription": {"text": "Possible secret in frontend/src/i18n/en.ts"}, "fullDescription": {"text": "Detected pattern matching password_literal. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-cc184c798736a039", "name": "Possible secret in frontend/src/i18n/ja.ts", "shortDescription": {"text": "Possible secret in frontend/src/i18n/ja.ts"}, "fullDescription": {"text": "Detected pattern matching password_literal. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-6ddaeef0f0062456", "name": "Insecure pattern 'local_storage_auth_token' in frontend/src/components/admin/AdminPage.tsx:428", "shortDescription": {"text": "Insecure pattern 'local_storage_auth_token' in frontend/src/components/admin/AdminPage.tsx:428"}, "fullDescription": {"text": "Found a known-risky pattern (local_storage_auth_token). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-94888c41c8b9750b", "name": "Insecure pattern 'local_storage_auth_token' in frontend/src/context/AuthContext.tsx:73", "shortDescription": {"text": "Insecure pattern 'local_storage_auth_token' in frontend/src/context/AuthContext.tsx:73"}, "fullDescription": {"text": "Found a known-risky pattern (local_storage_auth_token). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-60dc9492badeb897", "name": "Insecure pattern 'direct_innerhtml_assignment' in docs/u/index.html:173", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/u/index.html:173"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4bbb0ac686bb3daf", "name": "Possible secret in backend/scripts/seed-users.ts", "shortDescription": {"text": "Possible secret in backend/scripts/seed-users.ts"}, "fullDescription": {"text": "Detected pattern matching password_literal. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-013a4668d44a865f", "name": "Possible secret in backend/scripts/reseed-restaurants.ts", "shortDescription": {"text": "Possible secret in backend/scripts/reseed-restaurants.ts"}, "fullDescription": {"text": "Detected pattern matching password_literal. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-3923a1157d68c0c9", "name": "Possible secret in backend/scripts/seed-restaurants-2.ts", "shortDescription": {"text": "Possible secret in backend/scripts/seed-restaurants-2.ts"}, "fullDescription": {"text": "Detected pattern matching password_literal. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-47132fcd5bf4c8ea", "name": "Possible secret in backend/scripts/cleanup-restaurants.ts", "shortDescription": {"text": "Possible secret in backend/scripts/cleanup-restaurants.ts"}, "fullDescription": {"text": "Detected pattern matching password_literal. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-f9c8fafa53f86ae3", "name": "Possible secret in backend/scripts/seed-restaurants.ts", "shortDescription": {"text": "Possible secret in backend/scripts/seed-restaurants.ts"}, "fullDescription": {"text": "Detected pattern matching password_literal. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-ca4cd0274e71828e", "name": "Possible secret in backend/scripts/seed-restaurants-bulk.ts", "shortDescription": {"text": "Possible secret in backend/scripts/seed-restaurants-bulk.ts"}, "fullDescription": {"text": "Detected pattern matching password_literal. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-4601e3ad3bb28677", "name": "No CI/CD pipelines detected", "shortDescription": {"text": "No CI/CD pipelines detected"}, "fullDescription": {"text": "No GitHub Actions, GitLab CI, or CircleCI configs found. Without CI you can't gate deploys on tests/lints."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-027ff47ed367cda8", "name": "Very large file: frontend/src/components/home/DiscoveryHome.tsx (2949 lines)", "shortDescription": {"text": "Very large file: frontend/src/components/home/DiscoveryHome.tsx (2949 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a2c8017228f083f2", "name": "Very large file: frontend/src/components/account/AccountScreen.tsx (1571 lines)", "shortDescription": {"text": "Very large file: frontend/src/components/account/AccountScreen.tsx (1571 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9d612dcc3ce61cae", "name": "Very large file: frontend/src/components/map/SimpleMapViewMapbox.tsx (1983 lines)", "shortDescription": {"text": "Very large file: frontend/src/components/map/SimpleMapViewMapbox.tsx (1983 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4495f0e2b67f6a4f", "name": "Very large file: backend/src/services/dynamo.ts (1653 lines)", "shortDescription": {"text": "Very large file: backend/src/services/dynamo.ts (1653 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6893a6c8b0861585", "name": "Very low test-to-source ratio", "shortDescription": {"text": "Very low test-to-source ratio"}, "fullDescription": {"text": "0 test file(s) for 94 source file(s) (ratio 0.00). Consider adding integration or unit tests for critical paths."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-141b30a41e03817b", "name": "No license file detected", "shortDescription": {"text": "No license file detected"}, "fullDescription": {"text": "No LICENSE/COPYING/NOTICE file was found. Generated repositories often omit licensing, which blocks reuse and automated intake."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3ab5d313dda8e5f9", "name": "Debug logging residue appears in source files", "shortDescription": {"text": "Debug logging residue appears in source files"}, "fullDescription": {"text": "Found 110 console/debugger/print-style debug statements in non-test source. This is a common fast-generation residue before production cleanup."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-72b2a6250083a784", "name": "Placeholder or mock-heavy implementation detected", "shortDescription": {"text": "Placeholder or mock-heavy implementation detected"}, "fullDescription": {"text": "Found 181 placeholder/mock markers across 19 source files. This often means the repo looks complete while core flows still use generated scaffolding or fake data."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2d0c7b7ab8f8aacf", "name": "Critical user flow still appears backed by mock or placeholder data", "shortDescription": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "fullDescription": {"text": "A payment/auth/admin/order/billing-style flow contains mock, fake, TODO, dummy, or placeholder markers in runtime source. In the Fable corpus this is a high-leverage completeness smell: the app can look finished while the money, identity, or tenant flow is still scaffolded."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b9088664ace7f748", "name": "Composite production-readiness gap", "shortDescription": {"text": "Composite production-readiness gap"}, "fullDescription": {"text": "Multiple low-cost hardening controls are missing together: license, ci, tests. Opus verification showed these co-occurring gaps are a better readiness signal than reading each flag in isolation."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ea8f3013f588db25", "name": "Shallow git history limits provenance confidence", "shortDescription": {"text": "Shallow git history limits provenance confidence"}, "fullDescription": {"text": "The repository is a shallow clone. Origin/evolution analysis cannot distinguish fresh generation, imported legacy code, or long-lived human code with high confidence."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8424db9c75e04ba4", "name": "Very short observed git history", "shortDescription": {"text": "Very short observed git history"}, "fullDescription": {"text": "The repo has multiple source files but two or fewer visible commits. This is not a failure by itself, but it lowers confidence in evolution-based diagnosis."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-cfb6bd22e8dfd528", "name": "`fetch()` without try/.catch or AbortSignal \u2014 frontend/public/sw.js:74", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 frontend/public/sw.js:74"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a673e971bcefe03a", "name": "Commented-code block (6 lines) in frontend/src/utils/api.ts:44", "shortDescription": {"text": "Commented-code block (6 lines) in frontend/src/utils/api.ts:44"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-d21c1cab1688e4bd", "name": "`fetch()` without try/.catch or AbortSignal \u2014 frontend/src/utils/api.ts:51", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 frontend/src/utils/api.ts:51"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cca882e05d499ee5", "name": "Commented-code block (5 lines) in frontend/src/components/home/DiscoveryHome.tsx:2322", "shortDescription": {"text": "Commented-code block (5 lines) in frontend/src/components/home/DiscoveryHome.tsx:2322"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-9f20b65d01afcb07", "name": "`fetch()` without try/.catch or AbortSignal \u2014 frontend/src/components/admin/AdminPage.tsx:400", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 frontend/src/components/admin/AdminPage.tsx:400"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-1658d068225b0c29", "name": "Commented-code block (5 lines) in frontend/src/components/social/SocialScreen.tsx:68", "shortDescription": {"text": "Commented-code block (5 lines) in frontend/src/components/social/SocialScreen.tsx:68"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-5034716dab1c1b7d", "name": "Commented-code block (11 lines) in frontend/src/components/account/AccountScreen.tsx:183", "shortDescription": {"text": "Commented-code block (11 lines) in frontend/src/components/account/AccountScreen.tsx:183"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-9a1e8a568a79be88", "name": "Commented-code block (5 lines) in frontend/src/components/map/SimpleMapViewMapbox.tsx:699", "shortDescription": {"text": "Commented-code block (5 lines) in frontend/src/components/map/SimpleMapViewMapbox.tsx:699"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-886a558919f8350b", "name": "`fetch()` without try/.catch or AbortSignal \u2014 frontend/src/context/AuthContext.tsx:125", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 frontend/src/context/AuthContext.tsx:125"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c20989a9077052cd", "name": "`fetch()` without try/.catch or AbortSignal \u2014 backend/scripts/seed-users.ts:42", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 backend/scripts/seed-users.ts:42"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-05688d431421377d", "name": "`fetch()` without try/.catch or AbortSignal \u2014 backend/scripts/reseed-restaurants.ts:32", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 backend/scripts/reseed-restaurants.ts:32"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-f28b41c95f61a5bd", "name": "`fetch()` without try/.catch or AbortSignal \u2014 backend/scripts/seed-restaurants-2.ts:12", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 backend/scripts/seed-restaurants-2.ts:12"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-24022794afb50c5f", "name": "Legacy-named symbol `GourmetStock_Restaurants_v2` in backend/scripts/cleanup-restaurants-direct.ts:21", "shortDescription": {"text": "Legacy-named symbol `GourmetStock_Restaurants_v2` in backend/scripts/cleanup-restaurants-direct.ts:21"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-249aa70d3614e9e4", "name": "`fetch()` without try/.catch or AbortSignal \u2014 backend/scripts/cleanup-restaurants.ts:27", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 backend/scripts/cleanup-restaurants.ts:27"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-36789994b4c12e53", "name": "`fetch()` without try/.catch or AbortSignal \u2014 backend/scripts/seed-restaurants.ts:15", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 backend/scripts/seed-restaurants.ts:15"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-0205141584ada5b7", "name": "`fetch()` without try/.catch or AbortSignal \u2014 backend/scripts/seed-restaurants-bulk.ts:460", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 backend/scripts/seed-restaurants-bulk.ts:460"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-afaff9885fe9b0dc", "name": "Commented-code block (5 lines) in backend/src/index.ts:37", "shortDescription": {"text": "Commented-code block (5 lines) in backend/src/index.ts:37"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-8afecfaf0c382328", "name": "Legacy-named symbol `Restaurants_v2` in backend/src/scripts/migrate-v2.ts:7", "shortDescription": {"text": "Legacy-named symbol `Restaurants_v2` in backend/src/scripts/migrate-v2.ts:7"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4de01b1703b3236a", "name": "Legacy-named symbol `GourmetStock_Restaurants_v2` in backend/src/scripts/rebuild-url-index.ts:23", "shortDescription": {"text": "Legacy-named symbol `GourmetStock_Restaurants_v2` in backend/src/scripts/rebuild-url-index.ts:23"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0805c04fc966e257", "name": "Legacy-named symbol `GourmetStock_Restaurants_v2` in backend/src/scripts/create-v2-tables.ts:7", "shortDescription": {"text": "Legacy-named symbol `GourmetStock_Restaurants_v2` in backend/src/scripts/create-v2-tables.ts:7"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fa373e6866c9ce83", "name": "Legacy-named symbol `GourmetStock_Restaurants_v2` in backend/src/scripts/fix-stock-visibility.ts:21", "shortDescription": {"text": "Legacy-named symbol `GourmetStock_Restaurants_v2` in backend/src/scripts/fix-stock-visibility.ts:21"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-59504510b16b0405", "name": "Commented-code block (9 lines) in backend/src/routes/upload.ts:170", "shortDescription": {"text": "Commented-code block (9 lines) in backend/src/routes/upload.ts:170"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-aca66fdff21d282c", "name": "Legacy-named symbol `GourmetStock_Restaurants_v2` in backend/src/services/dynamo.ts:39", "shortDescription": {"text": "Legacy-named symbol `GourmetStock_Restaurants_v2` in backend/src/services/dynamo.ts:39"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-001fb6b614f3612b", "name": "Commented-code block (6 lines) in backend/src/services/dynamo.ts:822", "shortDescription": {"text": "Commented-code block (6 lines) in backend/src/services/dynamo.ts:822"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b97fab367a626ee8", "name": "Commented-code block (5 lines) in backend/src/services/cognito.ts:41", "shortDescription": {"text": "Commented-code block (5 lines) in backend/src/services/cognito.ts:41"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-5fa5af25316da646", "name": "16 env vars used in code but missing from .env.example", "shortDescription": {"text": "16 env vars used in code but missing from .env.example"}, "fullDescription": {"text": "Drift between code and config docs. The first few: `AI_PROVIDER`, `API_URL`, `AWS_REGION`, `CLOUDFLARE_ACCOUNT_ID`, `CLOUDFLARE_STREAM_CUSTOMER_CODE`, `CLOUDFLARE_STREAM_TOKEN`, `CONCURRENCY`, `GEMINI_API_KEY` + 8 more. Add them (with a placeholder/comment) to .env.example so onboarding doesn't break."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2305c0b4474010c2", "name": "Dangling fetch: GET /sounds/whoosh.mp3 (frontend/src/components/swipe/SwipeScreen.tsx:37)", "shortDescription": {"text": "Dangling fetch: GET /sounds/whoosh.mp3 (frontend/src/components/swipe/SwipeScreen.tsx:37)"}, "fullDescription": {"text": "`frontend/src/components/swipe/SwipeScreen.tsx:37` calls `GET /sounds/whoosh.mp3` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/sounds/whoosh.mp3`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-326cbecf5c33ad2c", "name": "Dangling fetch: POST https://api.cloudflare.com/client/v4/accounts/${accountId}/stream/direct_upload (backend/src/routes", "shortDescription": {"text": "Dangling fetch: POST https://api.cloudflare.com/client/v4/accounts/${accountId}/stream/direct_upload (backend/src/routes/upload.ts:44)"}, "fullDescription": {"text": "`backend/src/routes/upload.ts:44` calls `POST https://api.cloudflare.com/client/v4/accounts/${accountId}/stream/direct_upload` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/https:/api.cloudflare.com/client/v4/accounts/<p>/stream/direct_upload`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-02244319177462ac", "name": "Dangling fetch: POST https://api.cloudflare.com/client/v4/accounts/${accountId}/stream/${uid}/token (backend/src/routes/", "shortDescription": {"text": "Dangling fetch: POST https://api.cloudflare.com/client/v4/accounts/${accountId}/stream/${uid}/token (backend/src/routes/upload.ts:130)"}, "fullDescription": {"text": "`backend/src/routes/upload.ts:130` calls `POST https://api.cloudflare.com/client/v4/accounts/${accountId}/stream/${uid}/token` but no backend route matches that path. This is a runtime 404 waiting to happen.\n\nTool: fetch\nNormalized path used for matching: `/https:/api.cloudflare.com/client/v4/accounts/<p>/stream/<p>/token`\nIf this points at an external API, prefix it with `https://` so the matcher skips it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "high", "confidence": 1.0}}, {"id": "scanner-dde3adb27bf7eebe", "name": "Unused endpoint: USE /api", "shortDescription": {"text": "Unused endpoint: USE /api"}, "fullDescription": {"text": "`backend/src/index.ts` declares `USE /api` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6eb452fbfb454d20", "name": "Unused endpoint: USE /api/auth", "shortDescription": {"text": "Unused endpoint: USE /api/auth"}, "fullDescription": {"text": "`backend/src/index.ts` declares `USE /api/auth` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-09363389b05467a5", "name": "Unused endpoint: USE /api/auth/email", "shortDescription": {"text": "Unused endpoint: USE /api/auth/email"}, "fullDescription": {"text": "`backend/src/index.ts` declares `USE /api/auth/email` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ae7434431094d11e", "name": "Unused endpoint: USE /api/auth/account", "shortDescription": {"text": "Unused endpoint: USE /api/auth/account"}, "fullDescription": {"text": "`backend/src/index.ts` declares `USE /api/auth/account` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-23484756c682aed5", "name": "Unused endpoint: USE /api/auth/password", "shortDescription": {"text": "Unused endpoint: USE /api/auth/password"}, "fullDescription": {"text": "`backend/src/index.ts` declares `USE /api/auth/password` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4e538b2d45183817", "name": "Unused endpoint: USE /api/upload/video", "shortDescription": {"text": "Unused endpoint: USE /api/upload/video"}, "fullDescription": {"text": "`backend/src/index.ts` declares `USE /api/upload/video` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-07c14f50613141e0", "name": "Unused endpoint: USE /api/influencer", "shortDescription": {"text": "Unused endpoint: USE /api/influencer"}, "fullDescription": {"text": "`backend/src/index.ts` declares `USE /api/influencer` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e6c42c2627e519e8", "name": "Unused endpoint: USE /api/feedback", "shortDescription": {"text": "Unused endpoint: USE /api/feedback"}, "fullDescription": {"text": "`backend/src/index.ts` declares `USE /api/feedback` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-446fe4b6ad1a4ff9", "name": "Unused endpoint: USE /api/public", "shortDescription": {"text": "Unused endpoint: USE /api/public"}, "fullDescription": {"text": "`backend/src/index.ts` declares `USE /api/public` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d93a530ce10d47d9", "name": "Unused endpoint: USE /api/admin", "shortDescription": {"text": "Unused endpoint: USE /api/admin"}, "fullDescription": {"text": "`backend/src/index.ts` declares `USE /api/admin` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3931d3c7e0a7c00f", "name": "Unused endpoint: USE /api/concierge", "shortDescription": {"text": "Unused endpoint: USE /api/concierge"}, "fullDescription": {"text": "`backend/src/index.ts` declares `USE /api/concierge` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d0f2ece6e65b9aac", "name": "Unused endpoint: USE /api/community", "shortDescription": {"text": "Unused endpoint: USE /api/community"}, "fullDescription": {"text": "`backend/src/index.ts` declares `USE /api/community` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8d16b1bb2723f51e", "name": "Unused endpoint: POST /signup", "shortDescription": {"text": "Unused endpoint: POST /signup"}, "fullDescription": {"text": "`backend/src/routes/auth.ts` declares `POST /signup` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e26074453f93d403", "name": "Unused endpoint: POST /confirm", "shortDescription": {"text": "Unused endpoint: POST /confirm"}, "fullDescription": {"text": "`backend/src/routes/auth.ts` declares `POST /confirm` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-618721b912bad1c2", "name": "Unused endpoint: POST /login", "shortDescription": {"text": "Unused endpoint: POST /login"}, "fullDescription": {"text": "`backend/src/routes/auth.ts` declares `POST /login` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7ce17d6b092a81ca", "name": "Unused endpoint: POST /refresh", "shortDescription": {"text": "Unused endpoint: POST /refresh"}, "fullDescription": {"text": "`backend/src/routes/auth.ts` declares `POST /refresh` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-99fc36db98c134ce", "name": "Unused endpoint: POST /logout", "shortDescription": {"text": "Unused endpoint: POST /logout"}, "fullDescription": {"text": "`backend/src/routes/auth.ts` declares `POST /logout` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4257ec01219aa99a", "name": "Unused endpoint: POST /forgot-password", "shortDescription": {"text": "Unused endpoint: POST /forgot-password"}, "fullDescription": {"text": "`backend/src/routes/auth.ts` declares `POST /forgot-password` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-68a5d356c0cac9e3", "name": "Unused endpoint: POST /reset-password", "shortDescription": {"text": "Unused endpoint: POST /reset-password"}, "fullDescription": {"text": "`backend/src/routes/auth.ts` declares `POST /reset-password` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fd1dc91abf32142d", "name": "Unused endpoint: GET /me", "shortDescription": {"text": "Unused endpoint: GET /me"}, "fullDescription": {"text": "`backend/src/routes/auth.ts` declares `GET /me` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9389a2e5f3470276", "name": "Unused endpoint: PUT /nickname", "shortDescription": {"text": "Unused endpoint: PUT /nickname"}, "fullDescription": {"text": "`backend/src/routes/auth.ts` declares `PUT /nickname` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c006a88188fa17bf", "name": "Unused endpoint: PUT /email", "shortDescription": {"text": "Unused endpoint: PUT /email"}, "fullDescription": {"text": "`backend/src/routes/auth.ts` declares `PUT /email` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b3d745ad52d0121b", "name": "Unused endpoint: POST /email/verify", "shortDescription": {"text": "Unused endpoint: POST /email/verify"}, "fullDescription": {"text": "`backend/src/routes/auth.ts` declares `POST /email/verify` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8effa1d0824d6b07", "name": "Unused endpoint: POST /email/resend", "shortDescription": {"text": "Unused endpoint: POST /email/resend"}, "fullDescription": {"text": "`backend/src/routes/auth.ts` declares `POST /email/resend` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4fe9bb486644f008", "name": "Unused endpoint: POST /change-password", "shortDescription": {"text": "Unused endpoint: POST /change-password"}, "fullDescription": {"text": "`backend/src/routes/auth.ts` declares `POST /change-password` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d4186216041d91fb", "name": "Unused endpoint: DELETE /account", "shortDescription": {"text": "Unused endpoint: DELETE /account"}, "fullDescription": {"text": "`backend/src/routes/auth.ts` declares `DELETE /account` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1cfd9f656e297f89", "name": "Unused endpoint: GET /profile/:userId", "shortDescription": {"text": "Unused endpoint: GET /profile/:userId"}, "fullDescription": {"text": "`backend/src/routes/public.ts` declares `GET /profile/:userId` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-beea3ec1bacb0fdf", "name": "Unused endpoint: POST /upload/video", "shortDescription": {"text": "Unused endpoint: POST /upload/video"}, "fullDescription": {"text": "`backend/src/routes/upload.ts` declares `POST /upload/video` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c4a761518bd13e22", "name": "Unused endpoint: POST /upload/video-token", "shortDescription": {"text": "Unused endpoint: POST /upload/video-token"}, "fullDescription": {"text": "`backend/src/routes/upload.ts` declares `POST /upload/video-token` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b08bc6d100c97c0c", "name": "Unused endpoint: POST /upload/presign", "shortDescription": {"text": "Unused endpoint: POST /upload/presign"}, "fullDescription": {"text": "`backend/src/routes/upload.ts` declares `POST /upload/presign` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-723bb1ce19a4343f", "name": "Unused endpoint: DELETE /upload/*key", "shortDescription": {"text": "Unused endpoint: DELETE /upload/*key"}, "fullDescription": {"text": "`backend/src/routes/upload.ts` declares `DELETE /upload/*key` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7a009b1a56794f45", "name": "Unused endpoint: POST /", "shortDescription": {"text": "Unused endpoint: POST /"}, "fullDescription": {"text": "`backend/src/routes/concierge.ts` declares `POST /` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6578ca0022bf9033", "name": "Unused endpoint: POST /recall", "shortDescription": {"text": "Unused endpoint: POST /recall"}, "fullDescription": {"text": "`backend/src/routes/concierge.ts` declares `POST /recall` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6195d9c0f56c4cb6", "name": "Unused endpoint: GET /posts", "shortDescription": {"text": "Unused endpoint: GET /posts"}, "fullDescription": {"text": "`backend/src/routes/community.ts` declares `GET /posts` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d38eae0b19ee450e", "name": "Unused endpoint: POST /posts", "shortDescription": {"text": "Unused endpoint: POST /posts"}, "fullDescription": {"text": "`backend/src/routes/community.ts` declares `POST /posts` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1b403565fcfddd19", "name": "Unused endpoint: POST /posts/:area/:createdAt/like", "shortDescription": {"text": "Unused endpoint: POST /posts/:area/:createdAt/like"}, "fullDescription": {"text": "`backend/src/routes/community.ts` declares `POST /posts/:area/:createdAt/like` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0cc80d072f74ab0b", "name": "Unused endpoint: POST /posts/:area/:createdAt/report", "shortDescription": {"text": "Unused endpoint: POST /posts/:area/:createdAt/report"}, "fullDescription": {"text": "`backend/src/routes/community.ts` declares `POST /posts/:area/:createdAt/report` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8c80fa229e2c2800", "name": "Unused endpoint: DELETE /posts/:area/:createdAt", "shortDescription": {"text": "Unused endpoint: DELETE /posts/:area/:createdAt"}, "fullDescription": {"text": "`backend/src/routes/community.ts` declares `DELETE /posts/:area/:createdAt` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2595b39638e5c045", "name": "Unused endpoint: GET /profile", "shortDescription": {"text": "Unused endpoint: GET /profile"}, "fullDescription": {"text": "`backend/src/routes/influencer.ts` declares `GET /profile` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-911492554a68d0c1", "name": "Unused endpoint: PUT /profile", "shortDescription": {"text": "Unused endpoint: PUT /profile"}, "fullDescription": {"text": "`backend/src/routes/influencer.ts` declares `PUT /profile` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e080739ac0ec63e3", "name": "Unused endpoint: GET /restaurants", "shortDescription": {"text": "Unused endpoint: GET /restaurants"}, "fullDescription": {"text": "`backend/src/routes/influencer.ts` declares `GET /restaurants` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-edc2d240c75b6a5a", "name": "Unused endpoint: PUT /restaurants/:id", "shortDescription": {"text": "Unused endpoint: PUT /restaurants/:id"}, "fullDescription": {"text": "`backend/src/routes/influencer.ts` declares `PUT /restaurants/:id` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-bf08d22a7b57158f", "name": "Unused endpoint: PATCH /restaurants/:id/visibility", "shortDescription": {"text": "Unused endpoint: PATCH /restaurants/:id/visibility"}, "fullDescription": {"text": "`backend/src/routes/influencer.ts` declares `PATCH /restaurants/:id/visibility` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fe65219f64b6ab7e", "name": "Unused endpoint: DELETE /restaurants/:id", "shortDescription": {"text": "Unused endpoint: DELETE /restaurants/:id"}, "fullDescription": {"text": "`backend/src/routes/influencer.ts` declares `DELETE /restaurants/:id` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8a5df198a79af21f", "name": "Unused endpoint: GET /:id/public", "shortDescription": {"text": "Unused endpoint: GET /:id/public"}, "fullDescription": {"text": "`backend/src/routes/influencer.ts` declares `GET /:id/public` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-cfb198dfc4e7c2f5", "name": "Unused endpoint: GET /:id/restaurants", "shortDescription": {"text": "Unused endpoint: GET /:id/restaurants"}, "fullDescription": {"text": "`backend/src/routes/influencer.ts` declares `GET /:id/restaurants` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0505ac433c96634b", "name": "Unused endpoint: GET /restaurants/feed", "shortDescription": {"text": "Unused endpoint: GET /restaurants/feed"}, "fullDescription": {"text": "`backend/src/routes/data.ts` declares `GET /restaurants/feed` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f62a5fa6c8394011", "name": "Unused endpoint: GET /restaurants/filter", "shortDescription": {"text": "Unused endpoint: GET /restaurants/filter"}, "fullDescription": {"text": "`backend/src/routes/data.ts` declares `GET /restaurants/filter` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1ec2594c1320702c", "name": "Unused endpoint: GET /restaurants/nearby", "shortDescription": {"text": "Unused endpoint: GET /restaurants/nearby"}, "fullDescription": {"text": "`backend/src/routes/data.ts` declares `GET /restaurants/nearby` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e28c74cad32c2502", "name": "Unused endpoint: GET /restaurants/following", "shortDescription": {"text": "Unused endpoint: GET /restaurants/following"}, "fullDescription": {"text": "`backend/src/routes/data.ts` declares `GET /restaurants/following` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code \u2014 consider removing or documenting who consumes it."}, "properties": {"scanner": "scanner-primary", "layer": "api", "severity": "low", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/20068"}, "properties": {"repository": "soybeans02/stoguru", "repoUrl": "https://github.com/soybeans02/stoguru", "branch": "main"}, "results": [{"ruleId": "scanner-020a8bf0d6f5663c", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 frontend/src/components/theme/ThemeListScreen.tsx:381"}, "properties": {"repobilityId": "15391a983c2bdb12", "scanner": "scanner-primary", "fingerprint": "020a8bf0d6f5663c", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-9e0f7bd160dcba06", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 frontend/src/components/influencer/InfluencerDashboard.tsx:459"}, "properties": {"repobilityId": "dd37da60cbf8609b", "scanner": "scanner-primary", "fingerprint": "9e0f7bd160dcba06", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-7a5a05a0ca40f603", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 frontend/src/components/influencer/InfluencerRestaurantForm.tsx:271"}, "properties": {"repobilityId": "c9c83d38634c3450", "scanner": "scanner-primary", "fingerprint": "7a5a05a0ca40f603", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-905220b595abe054", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 frontend/src/components/home/DiscoveryHome.tsx:757"}, "properties": {"repobilityId": "6c2c91ae2eebde75", "scanner": "scanner-primary", "fingerprint": "905220b595abe054", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-c1a1bb35acd98579", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 frontend/src/components/admin/AdminPage.tsx:331"}, "properties": {"repobilityId": "1558fc0756aedf90", "scanner": "scanner-primary", "fingerprint": "c1a1bb35acd98579", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-b403345afc6d1fbc", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 frontend/src/components/social/SocialScreen.tsx:483"}, "properties": {"repobilityId": "61c2a61d3379da0f", "scanner": "scanner-primary", "fingerprint": "b403345afc6d1fbc", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-82886b5374a43053", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 frontend/src/components/account/AccountScreen.tsx:440"}, "properties": {"repobilityId": "4402b50dc39c5285", "scanner": "scanner-primary", "fingerprint": "82886b5374a43053", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-e1d5293004fc8e40", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 frontend/src/components/user/UserProfileModal.tsx:139"}, "properties": {"repobilityId": "759ac6d4388ff1fb", "scanner": "scanner-primary", "fingerprint": "e1d5293004fc8e40", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-1cef42f0aec75dce", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 frontend/src/components/user/PublicProfileScreen.tsx:191"}, "properties": {"repobilityId": "a20d1f4071728c47", "scanner": "scanner-primary", "fingerprint": "1cef42f0aec75dce", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-20297e9e5925a486", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 frontend/src/components/swipe/SwipeCard.tsx:230"}, "properties": {"repobilityId": "68d0a1930d54d4b1", "scanner": "scanner-primary", "fingerprint": "20297e9e5925a486", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-b12fac9ef283f1d0", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 frontend/src/components/map/SimpleMapViewMapbox.tsx:1839"}, "properties": {"repobilityId": "98cefb945f25b4ad", "scanner": "scanner-primary", "fingerprint": "b12fac9ef283f1d0", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-2ba94ca3b6a314e5", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 backend/scripts/seed-users.ts:34"}, "properties": {"repobilityId": "6593802adb852083", "scanner": "scanner-primary", "fingerprint": "2ba94ca3b6a314e5", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-a0d04b947119bd2f", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 backend/scripts/reseed-restaurants.ts:57"}, "properties": {"repobilityId": "b2d6cbebb1451fc8", "scanner": "scanner-primary", "fingerprint": "a0d04b947119bd2f", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-096eb71aee85e4e1", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 backend/scripts/seed-restaurants-2.ts:30"}, "properties": {"repobilityId": "e5f304ba6a3deeb0", "scanner": "scanner-primary", "fingerprint": "096eb71aee85e4e1", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-ae31eb3ff6d5db02", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 backend/scripts/cleanup-restaurants-direct.ts:68"}, "properties": {"repobilityId": "81d8c93a5a8738ad", "scanner": "scanner-primary", "fingerprint": "ae31eb3ff6d5db02", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-41e5b68de7e9a06c", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 backend/scripts/cleanup-restaurants.ts:58"}, "properties": {"repobilityId": "381b0d0c07f5804a", "scanner": "scanner-primary", "fingerprint": "41e5b68de7e9a06c", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-87ff956b917cbead", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 backend/scripts/seed-restaurants.ts:291"}, "properties": {"repobilityId": "9bbf71fcfd37d5ac", "scanner": "scanner-primary", "fingerprint": "87ff956b917cbead", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-a5bb9f0a59661268", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 backend/scripts/seed-restaurants-bulk.ts:526"}, "properties": {"repobilityId": "59ae327ad24af262", "scanner": "scanner-primary", "fingerprint": "a5bb9f0a59661268", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-abcb148a61a5ef25", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 backend/scripts/create-posts-table.ts:45"}, "properties": {"repobilityId": "2662c4da81230367", "scanner": "scanner-primary", "fingerprint": "abcb148a61a5ef25", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-7afe7e65a7415a37", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 backend/src/index.ts:272"}, "properties": {"repobilityId": "db2171a39601fa41", "scanner": "scanner-primary", "fingerprint": "7afe7e65a7415a37", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-e23038cdd70a43dc", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 backend/src/scripts/migrate-v2.ts:64"}, "properties": {"repobilityId": "2c89de2db7b26996", "scanner": "scanner-primary", "fingerprint": "e23038cdd70a43dc", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-8f2150acc0fe3e0b", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 backend/src/scripts/rebuild-url-index.ts:34"}, "properties": {"repobilityId": "29e499c40347084c", "scanner": "scanner-primary", "fingerprint": "8f2150acc0fe3e0b", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-a6ac67e2a3b21241", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 backend/src/scripts/create-v2-tables.ts:27"}, "properties": {"repobilityId": "825739b75feec7ca", "scanner": "scanner-primary", "fingerprint": "a6ac67e2a3b21241", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-308ab79566c8dc1b", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 backend/src/scripts/create-deleted-accounts-table.ts:31"}, "properties": {"repobilityId": "9e9a5889e60c926f", "scanner": "scanner-primary", "fingerprint": "308ab79566c8dc1b", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-70cab76d9e6bc27b", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 backend/src/scripts/fix-stock-visibility.ts:26"}, "properties": {"repobilityId": "c8ca3f3ce9990d6d", "scanner": "scanner-primary", "fingerprint": "70cab76d9e6bc27b", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-783c8bfd15b963c8", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 backend/src/routes/admin.ts:34"}, "properties": {"repobilityId": "572a8fbc4ab346cd", "scanner": "scanner-primary", "fingerprint": "783c8bfd15b963c8", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-cc4d071036925394", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in frontend/public/swipe-demo.html:408"}, "properties": {"repobilityId": "4898b1c1960d67ca", "scanner": "scanner-primary", "fingerprint": "cc4d071036925394", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/public/swipe-demo.html"}, "region": {"startLine": 408}}}]}, {"ruleId": "scanner-fa1e02d6fb36d0a8", "level": "error", "message": {"text": "Possible secret in frontend/src/i18n/en.ts"}, "properties": {"repobilityId": "49b628fc3b022a18", "scanner": "scanner-primary", "fingerprint": "fa1e02d6fb36d0a8", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/src/i18n/en.ts"}, "region": {"startLine": 109}}}]}, {"ruleId": "scanner-fa1e02d6fb36d0a8", "level": "error", "message": {"text": "Possible secret in frontend/src/i18n/en.ts"}, "properties": {"repobilityId": "49b628fc3b022a18", "scanner": "scanner-primary", "fingerprint": "fa1e02d6fb36d0a8", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/src/i18n/en.ts"}, "region": {"startLine": 111}}}]}, {"ruleId": "scanner-fa1e02d6fb36d0a8", "level": "error", "message": {"text": "Possible secret in frontend/src/i18n/en.ts"}, "properties": {"repobilityId": "49b628fc3b022a18", "scanner": "scanner-primary", "fingerprint": "fa1e02d6fb36d0a8", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/src/i18n/en.ts"}, "region": {"startLine": 382}}}]}, {"ruleId": "scanner-fa1e02d6fb36d0a8", "level": "error", "message": {"text": "Possible secret in frontend/src/i18n/en.ts"}, "properties": {"repobilityId": "49b628fc3b022a18", "scanner": "scanner-primary", "fingerprint": "fa1e02d6fb36d0a8", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/src/i18n/en.ts"}, "region": {"startLine": 392}}}]}, {"ruleId": "scanner-cc184c798736a039", "level": "error", "message": {"text": "Possible secret in frontend/src/i18n/ja.ts"}, "properties": {"repobilityId": "c9593681436f6c7f", "scanner": "scanner-primary", "fingerprint": "cc184c798736a039", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/src/i18n/ja.ts"}, "region": {"startLine": 114}}}]}, {"ruleId": "scanner-cc184c798736a039", "level": "error", "message": {"text": "Possible secret in frontend/src/i18n/ja.ts"}, "properties": {"repobilityId": "c9593681436f6c7f", "scanner": "scanner-primary", "fingerprint": "cc184c798736a039", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/src/i18n/ja.ts"}, "region": {"startLine": 398}}}]}, {"ruleId": "scanner-cc184c798736a039", "level": "error", "message": {"text": "Possible secret in frontend/src/i18n/ja.ts"}, "properties": {"repobilityId": "c9593681436f6c7f", "scanner": "scanner-primary", "fingerprint": "cc184c798736a039", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/src/i18n/ja.ts"}, "region": {"startLine": 408}}}]}, {"ruleId": "scanner-6ddaeef0f0062456", "level": "warning", "message": {"text": "Insecure pattern 'local_storage_auth_token' in frontend/src/components/admin/AdminPage.tsx:428"}, "properties": {"repobilityId": "50c07a581fb64983", "scanner": "scanner-primary", "fingerprint": "6ddaeef0f0062456", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "local_storage_auth_token"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/src/components/admin/AdminPage.tsx"}, "region": {"startLine": 428}}}]}, {"ruleId": "scanner-94888c41c8b9750b", "level": "warning", "message": {"text": "Insecure pattern 'local_storage_auth_token' in frontend/src/context/AuthContext.tsx:73"}, "properties": {"repobilityId": "d12fead5a479e3ec", "scanner": "scanner-primary", "fingerprint": "94888c41c8b9750b", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "local_storage_auth_token"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "frontend/src/context/AuthContext.tsx"}, "region": {"startLine": 73}}}]}, {"ruleId": "scanner-60dc9492badeb897", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in docs/u/index.html:173"}, "properties": {"repobilityId": "003e36113dd01839", "scanner": "scanner-primary", "fingerprint": "60dc9492badeb897", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "docs/u/index.html"}, "region": {"startLine": 173}}}]}, {"ruleId": "scanner-4bbb0ac686bb3daf", "level": "error", "message": {"text": "Possible secret in backend/scripts/seed-users.ts"}, "properties": {"repobilityId": "341a84fa0517e2ed", "scanner": "scanner-primary", "fingerprint": "4bbb0ac686bb3daf", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "backend/scripts/seed-users.ts"}, "region": {"startLine": 14}}}]}, {"ruleId": "scanner-4bbb0ac686bb3daf", "level": "error", "message": {"text": "Possible secret in backend/scripts/seed-users.ts"}, "properties": {"repobilityId": "341a84fa0517e2ed", "scanner": "scanner-primary", "fingerprint": "4bbb0ac686bb3daf", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "backend/scripts/seed-users.ts"}, "region": {"startLine": 15}}}]}, {"ruleId": "scanner-4bbb0ac686bb3daf", "level": "error", "message": {"text": "Possible secret in backend/scripts/seed-users.ts"}, "properties": {"repobilityId": "341a84fa0517e2ed", "scanner": "scanner-primary", "fingerprint": "4bbb0ac686bb3daf", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "backend/scripts/seed-users.ts"}, "region": {"startLine": 16}}}]}, {"ruleId": "scanner-4bbb0ac686bb3daf", "level": "error", "message": {"text": "Possible secret in backend/scripts/seed-users.ts"}, "properties": {"repobilityId": "341a84fa0517e2ed", "scanner": "scanner-primary", "fingerprint": "4bbb0ac686bb3daf", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "backend/scripts/seed-users.ts"}, "region": {"startLine": 17}}}]}, {"ruleId": "scanner-4bbb0ac686bb3daf", "level": "error", "message": {"text": "Possible secret in backend/scripts/seed-users.ts"}, "properties": {"repobilityId": "341a84fa0517e2ed", "scanner": "scanner-primary", "fingerprint": "4bbb0ac686bb3daf", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "backend/scripts/seed-users.ts"}, "region": {"startLine": 18}}}]}, {"ruleId": "scanner-013a4668d44a865f", "level": "error", "message": {"text": "Possible secret in backend/scripts/reseed-restaurants.ts"}, "properties": {"repobilityId": "cbf6c5f9a4dac85e", "scanner": "scanner-primary", "fingerprint": "013a4668d44a865f", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "backend/scripts/reseed-restaurants.ts"}, "region": {"startLine": 24}}}]}, {"ruleId": "scanner-013a4668d44a865f", "level": "error", "message": {"text": "Possible secret in backend/scripts/reseed-restaurants.ts"}, "properties": {"repobilityId": "cbf6c5f9a4dac85e", "scanner": "scanner-primary", "fingerprint": "013a4668d44a865f", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "backend/scripts/reseed-restaurants.ts"}, "region": {"startLine": 25}}}]}, {"ruleId": "scanner-013a4668d44a865f", "level": "error", "message": {"text": "Possible secret in backend/scripts/reseed-restaurants.ts"}, "properties": {"repobilityId": "cbf6c5f9a4dac85e", "scanner": "scanner-primary", "fingerprint": "013a4668d44a865f", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "backend/scripts/reseed-restaurants.ts"}, "region": {"startLine": 26}}}]}, {"ruleId": "scanner-013a4668d44a865f", "level": "error", "message": {"text": "Possible secret in backend/scripts/reseed-restaurants.ts"}, "properties": {"repobilityId": "cbf6c5f9a4dac85e", "scanner": "scanner-primary", "fingerprint": "013a4668d44a865f", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "backend/scripts/reseed-restaurants.ts"}, "region": {"startLine": 27}}}]}, {"ruleId": "scanner-013a4668d44a865f", "level": "error", "message": {"text": "Possible secret in backend/scripts/reseed-restaurants.ts"}, "properties": {"repobilityId": "cbf6c5f9a4dac85e", "scanner": "scanner-primary", "fingerprint": "013a4668d44a865f", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "backend/scripts/reseed-restaurants.ts"}, "region": {"startLine": 28}}}]}, {"ruleId": "scanner-3923a1157d68c0c9", "level": "error", "message": {"text": "Possible secret in backend/scripts/seed-restaurants-2.ts"}, "properties": {"repobilityId": "c4939fe82ddca73b", "scanner": "scanner-primary", "fingerprint": "3923a1157d68c0c9", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "backend/scripts/seed-restaurants-2.ts"}, "region": {"startLine": 54}}}]}, {"ruleId": "scanner-3923a1157d68c0c9", "level": "error", "message": {"text": "Possible secret in backend/scripts/seed-restaurants-2.ts"}, "properties": {"repobilityId": "c4939fe82ddca73b", "scanner": "scanner-primary", "fingerprint": "3923a1157d68c0c9", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "backend/scripts/seed-restaurants-2.ts"}, "region": {"startLine": 64}}}]}, {"ruleId": "scanner-3923a1157d68c0c9", "level": "error", "message": {"text": "Possible secret in backend/scripts/seed-restaurants-2.ts"}, "properties": {"repobilityId": "c4939fe82ddca73b", "scanner": "scanner-primary", "fingerprint": "3923a1157d68c0c9", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "backend/scripts/seed-restaurants-2.ts"}, "region": {"startLine": 74}}}]}, {"ruleId": "scanner-3923a1157d68c0c9", "level": "error", "message": {"text": "Possible secret in backend/scripts/seed-restaurants-2.ts"}, "properties": {"repobilityId": "c4939fe82ddca73b", "scanner": "scanner-primary", "fingerprint": "3923a1157d68c0c9", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "backend/scripts/seed-restaurants-2.ts"}, "region": {"startLine": 84}}}]}, {"ruleId": "scanner-3923a1157d68c0c9", "level": "error", "message": {"text": "Possible secret in backend/scripts/seed-restaurants-2.ts"}, "properties": {"repobilityId": "c4939fe82ddca73b", "scanner": "scanner-primary", "fingerprint": "3923a1157d68c0c9", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "backend/scripts/seed-restaurants-2.ts"}, "region": {"startLine": 94}}}]}, {"ruleId": "scanner-47132fcd5bf4c8ea", "level": "error", "message": {"text": "Possible secret in backend/scripts/cleanup-restaurants.ts"}, "properties": {"repobilityId": "a43010fe7fff5011", "scanner": "scanner-primary", "fingerprint": "47132fcd5bf4c8ea", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "backend/scripts/cleanup-restaurants.ts"}, "region": {"startLine": 19}}}]}, {"ruleId": "scanner-47132fcd5bf4c8ea", "level": "error", "message": {"text": "Possible secret in backend/scripts/cleanup-restaurants.ts"}, "properties": {"repobilityId": "a43010fe7fff5011", "scanner": "scanner-primary", "fingerprint": "47132fcd5bf4c8ea", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "backend/scripts/cleanup-restaurants.ts"}, "region": {"startLine": 20}}}]}, {"ruleId": "scanner-47132fcd5bf4c8ea", "level": "error", "message": {"text": "Possible secret in backend/scripts/cleanup-restaurants.ts"}, "properties": {"repobilityId": "a43010fe7fff5011", "scanner": "scanner-primary", "fingerprint": "47132fcd5bf4c8ea", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "backend/scripts/cleanup-restaurants.ts"}, "region": {"startLine": 21}}}]}, {"ruleId": "scanner-47132fcd5bf4c8ea", "level": "error", "message": {"text": "Possible secret in backend/scripts/cleanup-restaurants.ts"}, "properties": {"repobilityId": "a43010fe7fff5011", "scanner": "scanner-primary", "fingerprint": "47132fcd5bf4c8ea", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "backend/scripts/cleanup-restaurants.ts"}, "region": {"startLine": 22}}}]}, {"ruleId": "scanner-47132fcd5bf4c8ea", "level": "error", "message": {"text": "Possible secret in backend/scripts/cleanup-restaurants.ts"}, "properties": {"repobilityId": "a43010fe7fff5011", "scanner": "scanner-primary", "fingerprint": "47132fcd5bf4c8ea", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "backend/scripts/cleanup-restaurants.ts"}, "region": {"startLine": 23}}}]}, {"ruleId": "scanner-f9c8fafa53f86ae3", "level": "error", "message": {"text": "Possible secret in backend/scripts/seed-restaurants.ts"}, "properties": {"repobilityId": "5addf4f2ece69fc5", "scanner": "scanner-primary", "fingerprint": "f9c8fafa53f86ae3", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "backend/scripts/seed-restaurants.ts"}, "region": {"startLine": 261}}}]}, {"ruleId": "scanner-f9c8fafa53f86ae3", "level": "error", "message": {"text": "Possible secret in backend/scripts/seed-restaurants.ts"}, "properties": {"repobilityId": "5addf4f2ece69fc5", "scanner": "scanner-primary", "fingerprint": "f9c8fafa53f86ae3", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "backend/scripts/seed-restaurants.ts"}, "region": {"startLine": 262}}}]}, {"ruleId": "scanner-f9c8fafa53f86ae3", "level": "error", "message": {"text": "Possible secret in backend/scripts/seed-restaurants.ts"}, "properties": {"repobilityId": "5addf4f2ece69fc5", "scanner": "scanner-primary", "fingerprint": "f9c8fafa53f86ae3", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "backend/scripts/seed-restaurants.ts"}, "region": {"startLine": 263}}}]}, {"ruleId": "scanner-f9c8fafa53f86ae3", "level": "error", "message": {"text": "Possible secret in backend/scripts/seed-restaurants.ts"}, "properties": {"repobilityId": "5addf4f2ece69fc5", "scanner": "scanner-primary", "fingerprint": "f9c8fafa53f86ae3", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "backend/scripts/seed-restaurants.ts"}, "region": {"startLine": 264}}}]}, {"ruleId": "scanner-f9c8fafa53f86ae3", "level": "error", "message": {"text": "Possible secret in backend/scripts/seed-restaurants.ts"}, "properties": {"repobilityId": "5addf4f2ece69fc5", "scanner": "scanner-primary", "fingerprint": "f9c8fafa53f86ae3", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "backend/scripts/seed-restaurants.ts"}, "region": {"startLine": 265}}}]}, {"ruleId": "scanner-ca4cd0274e71828e", "level": "error", "message": {"text": "Possible secret in backend/scripts/seed-restaurants-bulk.ts"}, "properties": {"repobilityId": "5fc0d51822b12e12", "scanner": "scanner-primary", "fingerprint": "ca4cd0274e71828e", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "backend/scripts/seed-restaurants-bulk.ts"}, "region": {"startLine": 24}}}]}, {"ruleId": "scanner-ca4cd0274e71828e", "level": "error", "message": {"text": "Possible secret in backend/scripts/seed-restaurants-bulk.ts"}, "properties": {"repobilityId": "5fc0d51822b12e12", "scanner": "scanner-primary", "fingerprint": "ca4cd0274e71828e", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "backend/scripts/seed-restaurants-bulk.ts"}, "region": {"startLine": 25}}}]}, {"ruleId": "scanner-ca4cd0274e71828e", "level": "error", "message": {"text": "Possible secret in backend/scripts/seed-restaurants-bulk.ts"}, "properties": {"repobilityId": "5fc0d51822b12e12", "scanner": "scanner-primary", "fingerprint": "ca4cd0274e71828e", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "backend/scripts/seed-restaurants-bulk.ts"}, "region": {"startLine": 26}}}]}, {"ruleId": "scanner-ca4cd0274e71828e", "level": "error", "message": {"text": "Possible secret in backend/scripts/seed-restaurants-bulk.ts"}, "properties": {"repobilityId": "5fc0d51822b12e12", "scanner": "scanner-primary", "fingerprint": "ca4cd0274e71828e", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "backend/scripts/seed-restaurants-bulk.ts"}, "region": {"startLine": 27}}}]}, {"ruleId": "scanner-ca4cd0274e71828e", "level": "error", "message": {"text": "Possible secret in backend/scripts/seed-restaurants-bulk.ts"}, "properties": {"repobilityId": "5fc0d51822b12e12", "scanner": "scanner-primary", "fingerprint": "ca4cd0274e71828e", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "backend/scripts/seed-restaurants-bulk.ts"}, "region": {"startLine": 28}}}]}, {"ruleId": "scanner-4601e3ad3bb28677", "level": "warning", "message": {"text": "No CI/CD pipelines detected"}, "properties": {"repobilityId": "c3ee439bce2bc51e", "scanner": "scanner-primary", "fingerprint": "4601e3ad3bb28677", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["coverage"]}}, {"ruleId": "scanner-027ff47ed367cda8", "level": "note", "message": {"text": "Very large file: frontend/src/components/home/DiscoveryHome.tsx (2949 lines)"}, "properties": {"repobilityId": "d5ae8e1dc6b249d8", "scanner": "scanner-primary", "fingerprint": "027ff47ed367cda8", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-a2c8017228f083f2", "level": "note", "message": {"text": "Very large file: frontend/src/components/account/AccountScreen.tsx (1571 lines)"}, "properties": {"repobilityId": "10449ae81ab0bfa2", "scanner": "scanner-primary", "fingerprint": "a2c8017228f083f2", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-9d612dcc3ce61cae", "level": "note", "message": {"text": "Very large file: frontend/src/components/map/SimpleMapViewMapbox.tsx (1983 lines)"}, "properties": {"repobilityId": "141a857a823060e3", "scanner": "scanner-primary", "fingerprint": "9d612dcc3ce61cae", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-4495f0e2b67f6a4f", "level": "note", "message": {"text": "Very large file: backend/src/services/dynamo.ts (1653 lines)"}, "properties": {"repobilityId": "035400a47edc0855", "scanner": "scanner-primary", "fingerprint": "4495f0e2b67f6a4f", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-6893a6c8b0861585", "level": "warning", "message": {"text": "Very low test-to-source ratio"}, "properties": {"repobilityId": "54a7de3f06314bf0", "scanner": "scanner-primary", "fingerprint": "6893a6c8b0861585", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["tests", "coverage"]}}, {"ruleId": "scanner-141b30a41e03817b", "level": "note", "message": {"text": "No license file detected"}, "properties": {"repobilityId": "8c51c772b64003b1", "scanner": "scanner-primary", "fingerprint": "141b30a41e03817b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["license", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-3ab5d313dda8e5f9", "level": "note", "message": {"text": "Debug logging residue appears in source files"}, "properties": {"repobilityId": "2407b7cf10cbfe4d", "scanner": "scanner-primary", "fingerprint": "3ab5d313dda8e5f9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["debug", "cleanup", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-72b2a6250083a784", "level": "warning", "message": {"text": "Placeholder or mock-heavy implementation detected"}, "properties": {"repobilityId": "1025d47f196493ae", "scanner": "scanner-primary", "fingerprint": "72b2a6250083a784", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "incomplete", "generated-repo-pattern"]}}, {"ruleId": "scanner-2d0c7b7ab8f8aacf", "level": "warning", "message": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "properties": {"repobilityId": "afd98b29df3cf671", "scanner": "scanner-primary", "fingerprint": "2d0c7b7ab8f8aacf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "critical-flow", "generated-repo-pattern"]}}, {"ruleId": "scanner-b9088664ace7f748", "level": "warning", "message": {"text": "Composite production-readiness gap"}, "properties": {"repobilityId": "9d35a585df3d54b7", "scanner": "scanner-primary", "fingerprint": "b9088664ace7f748", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["production-readiness", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-ea8f3013f588db25", "level": "note", "message": {"text": "Shallow git history limits provenance confidence"}, "properties": {"repobilityId": "f6d86a1cf07d08f2", "scanner": "scanner-primary", "fingerprint": "ea8f3013f588db25", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-8424db9c75e04ba4", "level": "none", "message": {"text": "Very short observed git history"}, "properties": {"repobilityId": "60371f953d69cb64", "scanner": "scanner-primary", "fingerprint": "8424db9c75e04ba4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-cfb6bd22e8dfd528", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 frontend/public/sw.js:74"}, "properties": {"repobilityId": "e19d163de99371bb", "scanner": "scanner-primary", "fingerprint": "cfb6bd22e8dfd528", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-a673e971bcefe03a", "level": "none", "message": {"text": "Commented-code block (6 lines) in frontend/src/utils/api.ts:44"}, "properties": {"repobilityId": "417467f593e81ec8", "scanner": "scanner-primary", "fingerprint": "a673e971bcefe03a", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-d21c1cab1688e4bd", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 frontend/src/utils/api.ts:51"}, "properties": {"repobilityId": "67d44d20bba57eb7", "scanner": "scanner-primary", "fingerprint": "d21c1cab1688e4bd", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-cca882e05d499ee5", "level": "none", "message": {"text": "Commented-code block (5 lines) in frontend/src/components/home/DiscoveryHome.tsx:2322"}, "properties": {"repobilityId": "a32bb3c1fdd10031", "scanner": "scanner-primary", "fingerprint": "cca882e05d499ee5", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-9f20b65d01afcb07", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 frontend/src/components/admin/AdminPage.tsx:400"}, "properties": {"repobilityId": "8bee23030f455e3f", "scanner": "scanner-primary", "fingerprint": "9f20b65d01afcb07", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-1658d068225b0c29", "level": "none", "message": {"text": "Commented-code block (5 lines) in frontend/src/components/social/SocialScreen.tsx:68"}, "properties": {"repobilityId": "70de88ec15d4ed2c", "scanner": "scanner-primary", "fingerprint": "1658d068225b0c29", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-5034716dab1c1b7d", "level": "none", "message": {"text": "Commented-code block (11 lines) in frontend/src/components/account/AccountScreen.tsx:183"}, "properties": {"repobilityId": "d458c1235418d948", "scanner": "scanner-primary", "fingerprint": "5034716dab1c1b7d", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-9a1e8a568a79be88", "level": "none", "message": {"text": "Commented-code block (5 lines) in frontend/src/components/map/SimpleMapViewMapbox.tsx:699"}, "properties": {"repobilityId": "61f7e21f12f96ebb", "scanner": "scanner-primary", "fingerprint": "9a1e8a568a79be88", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-886a558919f8350b", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 frontend/src/context/AuthContext.tsx:125"}, "properties": {"repobilityId": "17ae57fab6fb69f6", "scanner": "scanner-primary", "fingerprint": "886a558919f8350b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-c20989a9077052cd", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 backend/scripts/seed-users.ts:42"}, "properties": {"repobilityId": "c63eb1dc9b1d7452", "scanner": "scanner-primary", "fingerprint": "c20989a9077052cd", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-05688d431421377d", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 backend/scripts/reseed-restaurants.ts:32"}, "properties": {"repobilityId": "0adbb242d93f3470", "scanner": "scanner-primary", "fingerprint": "05688d431421377d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-f28b41c95f61a5bd", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 backend/scripts/seed-restaurants-2.ts:12"}, "properties": {"repobilityId": "effcfdac4d337986", "scanner": "scanner-primary", "fingerprint": "f28b41c95f61a5bd", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-24022794afb50c5f", "level": "note", "message": {"text": "Legacy-named symbol `GourmetStock_Restaurants_v2` in backend/scripts/cleanup-restaurants-direct.ts:21"}, "properties": {"repobilityId": "16a79a1e2aaae047", "scanner": "scanner-primary", "fingerprint": "24022794afb50c5f", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-249aa70d3614e9e4", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 backend/scripts/cleanup-restaurants.ts:27"}, "properties": {"repobilityId": "a8945676a68d248e", "scanner": "scanner-primary", "fingerprint": "249aa70d3614e9e4", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-36789994b4c12e53", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 backend/scripts/seed-restaurants.ts:15"}, "properties": {"repobilityId": "138dabe2a98e99d0", "scanner": "scanner-primary", "fingerprint": "36789994b4c12e53", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-0205141584ada5b7", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 backend/scripts/seed-restaurants-bulk.ts:460"}, "properties": {"repobilityId": "ecffa7afc30874b2", "scanner": "scanner-primary", "fingerprint": "0205141584ada5b7", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-afaff9885fe9b0dc", "level": "none", "message": {"text": "Commented-code block (5 lines) in backend/src/index.ts:37"}, "properties": {"repobilityId": "9d3777cf0d6f1df4", "scanner": "scanner-primary", "fingerprint": "afaff9885fe9b0dc", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-8afecfaf0c382328", "level": "note", "message": {"text": "Legacy-named symbol `Restaurants_v2` in backend/src/scripts/migrate-v2.ts:7"}, "properties": {"repobilityId": "4b903958190b5da7", "scanner": "scanner-primary", "fingerprint": "8afecfaf0c382328", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-4de01b1703b3236a", "level": "note", "message": {"text": "Legacy-named symbol `GourmetStock_Restaurants_v2` in backend/src/scripts/rebuild-url-index.ts:23"}, "properties": {"repobilityId": "1303b7ad66d642e4", "scanner": "scanner-primary", "fingerprint": "4de01b1703b3236a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-0805c04fc966e257", "level": "note", "message": {"text": "Legacy-named symbol `GourmetStock_Restaurants_v2` in backend/src/scripts/create-v2-tables.ts:7"}, "properties": {"repobilityId": "f17439ef77104e92", "scanner": "scanner-primary", "fingerprint": "0805c04fc966e257", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-fa373e6866c9ce83", "level": "note", "message": {"text": "Legacy-named symbol `GourmetStock_Restaurants_v2` in backend/src/scripts/fix-stock-visibility.ts:21"}, "properties": {"repobilityId": "4023567713e6a4a9", "scanner": "scanner-primary", "fingerprint": "fa373e6866c9ce83", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-59504510b16b0405", "level": "none", "message": {"text": "Commented-code block (9 lines) in backend/src/routes/upload.ts:170"}, "properties": {"repobilityId": "cce00efd6dd2b1df", "scanner": "scanner-primary", "fingerprint": "59504510b16b0405", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-aca66fdff21d282c", "level": "note", "message": {"text": "Legacy-named symbol `GourmetStock_Restaurants_v2` in backend/src/services/dynamo.ts:39"}, "properties": {"repobilityId": "eeb4995a304fed65", "scanner": "scanner-primary", "fingerprint": "aca66fdff21d282c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-001fb6b614f3612b", "level": "none", "message": {"text": "Commented-code block (6 lines) in backend/src/services/dynamo.ts:822"}, "properties": {"repobilityId": "15daf386560d2e0c", "scanner": "scanner-primary", "fingerprint": "001fb6b614f3612b", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-b97fab367a626ee8", "level": "none", "message": {"text": "Commented-code block (5 lines) in backend/src/services/cognito.ts:41"}, "properties": {"repobilityId": "67b61a013b23a7fe", "scanner": "scanner-primary", "fingerprint": "b97fab367a626ee8", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-5fa5af25316da646", "level": "note", "message": {"text": "16 env vars used in code but missing from .env.example"}, "properties": {"repobilityId": "e0919a3f6a45e8c2", "scanner": "scanner-primary", "fingerprint": "5fa5af25316da646", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "config-drift"]}}, {"ruleId": "scanner-2305c0b4474010c2", "level": "error", "message": {"text": "Dangling fetch: GET /sounds/whoosh.mp3 (frontend/src/components/swipe/SwipeScreen.tsx:37)"}, "properties": {"repobilityId": "2024769e13be4341", "scanner": "scanner-primary", "fingerprint": "2305c0b4474010c2", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-326cbecf5c33ad2c", "level": "error", "message": {"text": "Dangling fetch: POST https://api.cloudflare.com/client/v4/accounts/${accountId}/stream/direct_upload (backend/src/routes/upload.ts:44)"}, "properties": {"repobilityId": "3fd25040ae92c370", "scanner": "scanner-primary", "fingerprint": "326cbecf5c33ad2c", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-02244319177462ac", "level": "error", "message": {"text": "Dangling fetch: POST https://api.cloudflare.com/client/v4/accounts/${accountId}/stream/${uid}/token (backend/src/routes/upload.ts:130)"}, "properties": {"repobilityId": "e6f551c1f6c4d039", "scanner": "scanner-primary", "fingerprint": "02244319177462ac", "layer": "api", "severity": "high", "confidence": 1.0, "tags": ["wiring", "dangling-fetch", "fetch"]}}, {"ruleId": "scanner-dde3adb27bf7eebe", "level": "note", "message": {"text": "Unused endpoint: USE /api"}, "properties": {"repobilityId": "e065f5f9c943f94a", "scanner": "scanner-primary", "fingerprint": "dde3adb27bf7eebe", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-6eb452fbfb454d20", "level": "note", "message": {"text": "Unused endpoint: USE /api/auth"}, "properties": {"repobilityId": "cccae14f00e10547", "scanner": "scanner-primary", "fingerprint": "6eb452fbfb454d20", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-09363389b05467a5", "level": "note", "message": {"text": "Unused endpoint: USE /api/auth/email"}, "properties": {"repobilityId": "42be8a8b3b24ed21", "scanner": "scanner-primary", "fingerprint": "09363389b05467a5", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-ae7434431094d11e", "level": "note", "message": {"text": "Unused endpoint: USE /api/auth/account"}, "properties": {"repobilityId": "4e66cd23a38e275c", "scanner": "scanner-primary", "fingerprint": "ae7434431094d11e", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-23484756c682aed5", "level": "note", "message": {"text": "Unused endpoint: USE /api/auth/password"}, "properties": {"repobilityId": "edf742c4640c6b20", "scanner": "scanner-primary", "fingerprint": "23484756c682aed5", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-4e538b2d45183817", "level": "note", "message": {"text": "Unused endpoint: USE /api/upload/video"}, "properties": {"repobilityId": "e5aa3844efaeb5d9", "scanner": "scanner-primary", "fingerprint": "4e538b2d45183817", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-07c14f50613141e0", "level": "note", "message": {"text": "Unused endpoint: USE /api/influencer"}, "properties": {"repobilityId": "7836d547210ca42f", "scanner": "scanner-primary", "fingerprint": "07c14f50613141e0", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-e6c42c2627e519e8", "level": "note", "message": {"text": "Unused endpoint: USE /api/feedback"}, "properties": {"repobilityId": "9eace30a47cc0443", "scanner": "scanner-primary", "fingerprint": "e6c42c2627e519e8", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-446fe4b6ad1a4ff9", "level": "note", "message": {"text": "Unused endpoint: USE /api/public"}, "properties": {"repobilityId": "8a8e54cd65c2527e", "scanner": "scanner-primary", "fingerprint": "446fe4b6ad1a4ff9", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-d93a530ce10d47d9", "level": "note", "message": {"text": "Unused endpoint: USE /api/admin"}, "properties": {"repobilityId": "0fd7b508ffe65f2b", "scanner": "scanner-primary", "fingerprint": "d93a530ce10d47d9", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-3931d3c7e0a7c00f", "level": "note", "message": {"text": "Unused endpoint: USE /api/concierge"}, "properties": {"repobilityId": "9a11983c2b86a5df", "scanner": "scanner-primary", "fingerprint": "3931d3c7e0a7c00f", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-d0f2ece6e65b9aac", "level": "note", "message": {"text": "Unused endpoint: USE /api/community"}, "properties": {"repobilityId": "5f6c5bb0fa3aee18", "scanner": "scanner-primary", "fingerprint": "d0f2ece6e65b9aac", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-8d16b1bb2723f51e", "level": "note", "message": {"text": "Unused endpoint: POST /signup"}, "properties": {"repobilityId": "1c4c99853b003d34", "scanner": "scanner-primary", "fingerprint": "8d16b1bb2723f51e", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-e26074453f93d403", "level": "note", "message": {"text": "Unused endpoint: POST /confirm"}, "properties": {"repobilityId": "dbd66070f869f27f", "scanner": "scanner-primary", "fingerprint": "e26074453f93d403", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-618721b912bad1c2", "level": "note", "message": {"text": "Unused endpoint: POST /login"}, "properties": {"repobilityId": "4ff35d9a605f8ae9", "scanner": "scanner-primary", "fingerprint": "618721b912bad1c2", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-7ce17d6b092a81ca", "level": "note", "message": {"text": "Unused endpoint: POST /refresh"}, "properties": {"repobilityId": "91b1eed1554eb73a", "scanner": "scanner-primary", "fingerprint": "7ce17d6b092a81ca", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-99fc36db98c134ce", "level": "note", "message": {"text": "Unused endpoint: POST /logout"}, "properties": {"repobilityId": "509386afc3e90060", "scanner": "scanner-primary", "fingerprint": "99fc36db98c134ce", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-4257ec01219aa99a", "level": "note", "message": {"text": "Unused endpoint: POST /forgot-password"}, "properties": {"repobilityId": "d6c6aaf187e5ec4e", "scanner": "scanner-primary", "fingerprint": "4257ec01219aa99a", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-68a5d356c0cac9e3", "level": "note", "message": {"text": "Unused endpoint: POST /reset-password"}, "properties": {"repobilityId": "390cd0ae614564fc", "scanner": "scanner-primary", "fingerprint": "68a5d356c0cac9e3", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-fd1dc91abf32142d", "level": "note", "message": {"text": "Unused endpoint: GET /me"}, "properties": {"repobilityId": "0e4fb75bb5a3358b", "scanner": "scanner-primary", "fingerprint": "fd1dc91abf32142d", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-9389a2e5f3470276", "level": "note", "message": {"text": "Unused endpoint: PUT /nickname"}, "properties": {"repobilityId": "eabb13693ef88864", "scanner": "scanner-primary", "fingerprint": "9389a2e5f3470276", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-c006a88188fa17bf", "level": "note", "message": {"text": "Unused endpoint: PUT /email"}, "properties": {"repobilityId": "96b641247b6ea64c", "scanner": "scanner-primary", "fingerprint": "c006a88188fa17bf", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-b3d745ad52d0121b", "level": "note", "message": {"text": "Unused endpoint: POST /email/verify"}, "properties": {"repobilityId": "48d8dde98fa8026b", "scanner": "scanner-primary", "fingerprint": "b3d745ad52d0121b", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-8effa1d0824d6b07", "level": "note", "message": {"text": "Unused endpoint: POST /email/resend"}, "properties": {"repobilityId": "a7fb267c2ca0518b", "scanner": "scanner-primary", "fingerprint": "8effa1d0824d6b07", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-4fe9bb486644f008", "level": "note", "message": {"text": "Unused endpoint: POST /change-password"}, "properties": {"repobilityId": "466fd0f4bf1abfb7", "scanner": "scanner-primary", "fingerprint": "4fe9bb486644f008", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-d4186216041d91fb", "level": "note", "message": {"text": "Unused endpoint: DELETE /account"}, "properties": {"repobilityId": "e9763f743faa046d", "scanner": "scanner-primary", "fingerprint": "d4186216041d91fb", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-1cfd9f656e297f89", "level": "note", "message": {"text": "Unused endpoint: GET /profile/:userId"}, "properties": {"repobilityId": "768ade1022070811", "scanner": "scanner-primary", "fingerprint": "1cfd9f656e297f89", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-beea3ec1bacb0fdf", "level": "note", "message": {"text": "Unused endpoint: POST /upload/video"}, "properties": {"repobilityId": "5dc3a5218fe4b3fa", "scanner": "scanner-primary", "fingerprint": "beea3ec1bacb0fdf", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-c4a761518bd13e22", "level": "note", "message": {"text": "Unused endpoint: POST /upload/video-token"}, "properties": {"repobilityId": "94d90159ed8aacf1", "scanner": "scanner-primary", "fingerprint": "c4a761518bd13e22", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-b08bc6d100c97c0c", "level": "note", "message": {"text": "Unused endpoint: POST /upload/presign"}, "properties": {"repobilityId": "0770022f1b86a5af", "scanner": "scanner-primary", "fingerprint": "b08bc6d100c97c0c", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-723bb1ce19a4343f", "level": "note", "message": {"text": "Unused endpoint: DELETE /upload/*key"}, "properties": {"repobilityId": "1f1bf61b45f7c4c4", "scanner": "scanner-primary", "fingerprint": "723bb1ce19a4343f", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-7a009b1a56794f45", "level": "note", "message": {"text": "Unused endpoint: POST /"}, "properties": {"repobilityId": "b02bb2814a9fc71c", "scanner": "scanner-primary", "fingerprint": "7a009b1a56794f45", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-6578ca0022bf9033", "level": "note", "message": {"text": "Unused endpoint: POST /recall"}, "properties": {"repobilityId": "bef6a3813759ae3a", "scanner": "scanner-primary", "fingerprint": "6578ca0022bf9033", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-6195d9c0f56c4cb6", "level": "note", "message": {"text": "Unused endpoint: GET /posts"}, "properties": {"repobilityId": "47b8dc7de30d4f3f", "scanner": "scanner-primary", "fingerprint": "6195d9c0f56c4cb6", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-d38eae0b19ee450e", "level": "note", "message": {"text": "Unused endpoint: POST /posts"}, "properties": {"repobilityId": "982c3f294d986b4a", "scanner": "scanner-primary", "fingerprint": "d38eae0b19ee450e", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-1b403565fcfddd19", "level": "note", "message": {"text": "Unused endpoint: POST /posts/:area/:createdAt/like"}, "properties": {"repobilityId": "1bb8a6a09e8566dd", "scanner": "scanner-primary", "fingerprint": "1b403565fcfddd19", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-0cc80d072f74ab0b", "level": "note", "message": {"text": "Unused endpoint: POST /posts/:area/:createdAt/report"}, "properties": {"repobilityId": "ad860743cebfeec4", "scanner": "scanner-primary", "fingerprint": "0cc80d072f74ab0b", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-8c80fa229e2c2800", "level": "note", "message": {"text": "Unused endpoint: DELETE /posts/:area/:createdAt"}, "properties": {"repobilityId": "5d996be2a09519ca", "scanner": "scanner-primary", "fingerprint": "8c80fa229e2c2800", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-2595b39638e5c045", "level": "note", "message": {"text": "Unused endpoint: GET /profile"}, "properties": {"repobilityId": "252c6e98eefdcb6a", "scanner": "scanner-primary", "fingerprint": "2595b39638e5c045", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-911492554a68d0c1", "level": "note", "message": {"text": "Unused endpoint: PUT /profile"}, "properties": {"repobilityId": "7e62b4290d388487", "scanner": "scanner-primary", "fingerprint": "911492554a68d0c1", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-e080739ac0ec63e3", "level": "note", "message": {"text": "Unused endpoint: GET /restaurants"}, "properties": {"repobilityId": "6441ac0bd184f2ed", "scanner": "scanner-primary", "fingerprint": "e080739ac0ec63e3", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-edc2d240c75b6a5a", "level": "note", "message": {"text": "Unused endpoint: PUT /restaurants/:id"}, "properties": {"repobilityId": "b9862804e6b12f4a", "scanner": "scanner-primary", "fingerprint": "edc2d240c75b6a5a", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-bf08d22a7b57158f", "level": "note", "message": {"text": "Unused endpoint: PATCH /restaurants/:id/visibility"}, "properties": {"repobilityId": "0fca46052a77b1c1", "scanner": "scanner-primary", "fingerprint": "bf08d22a7b57158f", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-fe65219f64b6ab7e", "level": "note", "message": {"text": "Unused endpoint: DELETE /restaurants/:id"}, "properties": {"repobilityId": "7fadbc5c252f51cb", "scanner": "scanner-primary", "fingerprint": "fe65219f64b6ab7e", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-8a5df198a79af21f", "level": "note", "message": {"text": "Unused endpoint: GET /:id/public"}, "properties": {"repobilityId": "db667e986f4d48e6", "scanner": "scanner-primary", "fingerprint": "8a5df198a79af21f", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-cfb198dfc4e7c2f5", "level": "note", "message": {"text": "Unused endpoint: GET /:id/restaurants"}, "properties": {"repobilityId": "93f5c6c5de979d4f", "scanner": "scanner-primary", "fingerprint": "cfb198dfc4e7c2f5", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-0505ac433c96634b", "level": "note", "message": {"text": "Unused endpoint: GET /restaurants/feed"}, "properties": {"repobilityId": "343aa7ce8101897d", "scanner": "scanner-primary", "fingerprint": "0505ac433c96634b", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-f62a5fa6c8394011", "level": "note", "message": {"text": "Unused endpoint: GET /restaurants/filter"}, "properties": {"repobilityId": "c29b737f9b99f0c0", "scanner": "scanner-primary", "fingerprint": "f62a5fa6c8394011", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-1ec2594c1320702c", "level": "note", "message": {"text": "Unused endpoint: GET /restaurants/nearby"}, "properties": {"repobilityId": "3102e7c95e41abd5", "scanner": "scanner-primary", "fingerprint": "1ec2594c1320702c", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}, {"ruleId": "scanner-e28c74cad32c2502", "level": "note", "message": {"text": "Unused endpoint: GET /restaurants/following"}, "properties": {"repobilityId": "359f208cb28fe5a1", "scanner": "scanner-primary", "fingerprint": "e28c74cad32c2502", "layer": "api", "severity": "low", "confidence": 1.0, "tags": ["wiring", "unused-endpoint"]}}]}]}