{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "scanner-7c820ba6fde2c4c6", "name": "Stray `console.log` in TS/JS \u2014 next.config.js:56", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 next.config.js:56"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4ae83bc0023d9259", "name": "Stray `console.log` in TS/JS \u2014 scripts/notion-fill-copy.js:244", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/notion-fill-copy.js:244"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2d33d84c8160defe", "name": "Stray `console.log` in TS/JS \u2014 scripts/brevo-notion-sync.js:72", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/brevo-notion-sync.js:72"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e757f654f6cb1de4", "name": "Stray `console.log` in TS/JS \u2014 scripts/stripe-setup-lookup-keys.ts:31", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/stripe-setup-lookup-keys.ts:31"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-85332b23e5209942", "name": "Stray `console.log` in TS/JS \u2014 scripts/notion-pipeline.js:64", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/notion-pipeline.js:64"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-80cd05da371816e7", "name": "Stray `console.log` in TS/JS \u2014 scripts/notion-post.js:96", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 scripts/notion-post.js:96"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6a76726fecc4b55e", "name": "`truncate` class without `title=` for hover reveal \u2014 components/help/HelpLayout.tsx:88", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 components/help/HelpLayout.tsx:88"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-7046dee068cbc78f", "name": "`truncate` class without `title=` for hover reveal \u2014 components/help/SearchBar.tsx:151", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 components/help/SearchBar.tsx:151"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-11dea9b9cb7c82a4", "name": "\"active\" state uses light bg in a dark theme \u2014 app/components/AreaMultiSelect.tsx:207", "shortDescription": {"text": "\"active\" state uses light bg in a dark theme \u2014 app/components/AreaMultiSelect.tsx:207"}, "fullDescription": {"text": "A ternary like `active ? 'bg-white' : '...'` (or bg-gray-100/200) on a dark theme produces jarring white pills. Use a dark-emphasized active state instead \u2014 border + ring or slightly brighter dark bg. Example: `active ? 'bg-gray-800 border-gray-500 ring-1 ring-blue-500/30' : '\u2026'`.\n\nWhy: P-E in CHECKLIST.md \u2014 light bg in a dark theme is a class of regression.\nRule id: fq.active-light-bg"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-41fdc71be2cc556b", "name": "`truncate` class without `title=` for hover reveal \u2014 app/components/HotelHeader.tsx:158", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 app/components/HotelHeader.tsx:158"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-a10525848a97967a", "name": "`truncate` class without `title=` for hover reveal \u2014 app/components/NotificationBell.tsx:158", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 app/components/NotificationBell.tsx:158"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-5f45da394fb7b603", "name": "`truncate` class without `title=` for hover reveal \u2014 app/(app)/users/UsersPageClient.tsx:152", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 app/(app)/users/UsersPageClient.tsx:152"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-cfb313afc1f59ca1", "name": "`truncate` class without `title=` for hover reveal \u2014 app/(app)/analytics/_components/MemberPanel.tsx:130", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 app/(app)/analytics/_components/MemberPanel.tsx:130"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-c7b52f6a03a72645", "name": "`truncate` class without `title=` for hover reveal \u2014 app/(app)/audits/[id]/_components/AuditHeader.tsx:21", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 app/(app)/audits/[id]/_components/AuditHeader.tsx:21"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-efd394c961096242", "name": "`truncate` class without `title=` for hover reveal \u2014 app/(app)/admin/_modules/report-subscriptions/ReportSubscriptionsMo", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 app/(app)/admin/_modules/report-subscriptions/ReportSubscriptionsModule.tsx:347"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-d7fcf4acb333d45d", "name": "\"active\" state uses light bg in a dark theme \u2014 app/(app)/members/_components/MembersTable.tsx:43", "shortDescription": {"text": "\"active\" state uses light bg in a dark theme \u2014 app/(app)/members/_components/MembersTable.tsx:43"}, "fullDescription": {"text": "A ternary like `active ? 'bg-white' : '...'` (or bg-gray-100/200) on a dark theme produces jarring white pills. Use a dark-emphasized active state instead \u2014 border + ring or slightly brighter dark bg. Example: `active ? 'bg-gray-800 border-gray-500 ring-1 ring-blue-500/30' : '\u2026'`.\n\nWhy: P-E in CHECKLIST.md \u2014 light bg in a dark theme is a class of regression.\nRule id: fq.active-light-bg"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-bccc1df46ef7e6b6", "name": "`truncate` class without `title=` for hover reveal \u2014 app/(marketing)/_components/MarketingShowcase.tsx:104", "shortDescription": {"text": "`truncate` class without `title=` for hover reveal \u2014 app/(marketing)/_components/MarketingShowcase.tsx:104"}, "fullDescription": {"text": "A truncated value should reveal the full text on hover. Pass the full string via `title={...}` so the user can read it.\n\nWhy: P2 in CHECKLIST.md \u2014 truncate without hover-reveal.\nRule id: fq.truncate.no-title"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-f72098d806461565", "name": "Stray `console.log` in TS/JS \u2014 lib/logger.ts:33", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 lib/logger.ts:33"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f0e80b7358664397", "name": "Stray `console.log` in TS/JS \u2014 supabase/functions/auth-email-hook/index.ts:328", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 supabase/functions/auth-email-hook/index.ts:328"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-95cddfed93d37ec3", "name": "Insecure pattern 'eval_used' in .claude/skills/security-and-hardening/SKILL.md:50", "shortDescription": {"text": "Insecure pattern 'eval_used' in .claude/skills/security-and-hardening/SKILL.md:50"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-8482cefba70934ea", "name": "Insecure pattern 'direct_innerhtml_assignment' in .claude/skills/security-and-hardening/SKILL.md:97", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in .claude/skills/security-and-hardening/SKILL.md:97"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-4601e3ad3bb28677", "name": "No CI/CD pipelines detected", "shortDescription": {"text": "No CI/CD pipelines detected"}, "fullDescription": {"text": "No GitHub Actions, GitLab CI, or CircleCI configs found. Without CI you can't gate deploys on tests/lints."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cedd6ed14a85d018", "name": "Very large file: lib/types/database.ts (4524 lines)", "shortDescription": {"text": "Very large file: lib/types/database.ts (4524 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6893a6c8b0861585", "name": "Very low test-to-source ratio", "shortDescription": {"text": "Very low test-to-source ratio"}, "fullDescription": {"text": "17 test file(s) for 508 source file(s) (ratio 0.03). Consider adding integration or unit tests for critical paths."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-141b30a41e03817b", "name": "No license file detected", "shortDescription": {"text": "No license file detected"}, "fullDescription": {"text": "No LICENSE/COPYING/NOTICE file was found. Generated repositories often omit licensing, which blocks reuse and automated intake."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3ab5d313dda8e5f9", "name": "Debug logging residue appears in source files", "shortDescription": {"text": "Debug logging residue appears in source files"}, "fullDescription": {"text": "Found 38 console/debugger/print-style debug statements in non-test source. This is a common fast-generation residue before production cleanup."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-72b2a6250083a784", "name": "Placeholder or mock-heavy implementation detected", "shortDescription": {"text": "Placeholder or mock-heavy implementation detected"}, "fullDescription": {"text": "Found 77 placeholder/mock markers across 38 source files. This often means the repo looks complete while core flows still use generated scaffolding or fake data."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9d79c4077342a7d0", "name": "Runtime service client appears to use placeholder configuration", "shortDescription": {"text": "Runtime service client appears to use placeholder configuration"}, "fullDescription": {"text": "A runtime source file appears to wire Supabase/Firebase/AI/payment-style clients to placeholder URLs, keys, or fallback values. In the Fable corpus this often means the UI/API shape is present while the backend service is not actually configured."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2d0c7b7ab8f8aacf", "name": "Critical user flow still appears backed by mock or placeholder data", "shortDescription": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "fullDescription": {"text": "A payment/auth/admin/order/billing-style flow contains mock, fake, TODO, dummy, or placeholder markers in runtime source. In the Fable corpus this is a high-leverage completeness smell: the app can look finished while the money, identity, or tenant flow is still scaffolded."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b9088664ace7f748", "name": "Composite production-readiness gap", "shortDescription": {"text": "Composite production-readiness gap"}, "fullDescription": {"text": "Multiple low-cost hardening controls are missing together: license, ci. Opus verification showed these co-occurring gaps are a better readiness signal than reading each flag in isolation."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-749d4bc1bd66df5f", "name": "Agent instructions exist but release-hardening basics are missing", "shortDescription": {"text": "Agent instructions exist but release-hardening basics are missing"}, "fullDescription": {"text": "AI-coder instruction files were found, but the repo is missing license, ci. Treat this as a contract gap: the agent is guided, but the generated output is not yet guarded by the controls that make it repeatable."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ea8f3013f588db25", "name": "Shallow git history limits provenance confidence", "shortDescription": {"text": "Shallow git history limits provenance confidence"}, "fullDescription": {"text": "The repository is a shallow clone. Origin/evolution analysis cannot distinguish fresh generation, imported legacy code, or long-lived human code with high confidence."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8424db9c75e04ba4", "name": "Very short observed git history", "shortDescription": {"text": "Very short observed git history"}, "fullDescription": {"text": "The repo has multiple source files but two or fewer visible commits. This is not a failure by itself, but it lowers confidence in evolution-based diagnosis."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2679282aa1c484b5", "name": "Agent authority lacks a verifier contract: AGENTS.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: AGENTS.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8ffad77a71357689", "name": "Agent instruction/config may expose a secret: .claude/skills/ci-cd-and-automation/SKILL.md", "shortDescription": {"text": "Agent instruction/config may expose a secret: .claude/skills/ci-cd-and-automation/SKILL.md"}, "fullDescription": {"text": "Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-f6e8d9371bf03be3", "name": "`fetch()` without try/.catch or AbortSignal \u2014 __tests__/integration/route-authorization.test.ts:33", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 __tests__/integration/route-authorization.test.ts:33"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-6760243d1e70770b", "name": "Legacy-named symbol `rpc_team_summary_v2` in __tests__/integration/lhw-scoring.test.ts:10", "shortDescription": {"text": "Legacy-named symbol `rpc_team_summary_v2` in __tests__/integration/lhw-scoring.test.ts:10"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6cb5058420c6b9b9", "name": "Legacy-named symbol `rpc_team_summary_v2` in __tests__/integration/hotel-isolation.test.ts:226", "shortDescription": {"text": "Legacy-named symbol `rpc_team_summary_v2` in __tests__/integration/hotel-isolation.test.ts:226"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b84cc65ec2febb11", "name": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/brevo-notion-sync.js:36", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/brevo-notion-sync.js:36"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-aab6604342c26018", "name": "`fetch()` without try/.catch or AbortSignal \u2014 components/help/SearchBar.tsx:13", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 components/help/SearchBar.tsx:13"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7973a07d63ab2ddb", "name": "`fetch()` without try/.catch or AbortSignal \u2014 app/login/LoginClient.tsx:50", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 app/login/LoginClient.tsx:50"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c0906e404e9dac43", "name": "Commented-code block (6 lines) in app/api/trial/register/route.ts:93", "shortDescription": {"text": "Commented-code block (6 lines) in app/api/trial/register/route.ts:93"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-d47d7c21706f2a5e", "name": "`fetch()` without try/.catch or AbortSignal \u2014 app/api/trainings/generate-suggestions/route.ts:390", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 app/api/trainings/generate-suggestions/route.ts:390"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-63b2dc045323f7c4", "name": "`fetch()` without try/.catch or AbortSignal \u2014 app/api/reports/send-monthly/route.ts:48", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 app/api/reports/send-monthly/route.ts:48"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-fc92a8feed12cf81", "name": "`fetch()` without try/.catch or AbortSignal \u2014 app/api/reports/send-weekly/route.ts:48", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 app/api/reports/send-weekly/route.ts:48"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a268c76d18b84984", "name": "`fetch()` without try/.catch or AbortSignal \u2014 app/(app)/users/new/NewUserPageClient.tsx:72", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 app/(app)/users/new/NewUserPageClient.tsx:72"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-798ecff611fdfb8b", "name": "`fetch()` without try/.catch or AbortSignal \u2014 app/(app)/audits/[id]/_hooks/useAuditAnswers.ts:43", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 app/(app)/audits/[id]/_hooks/useAuditAnswers.ts:43"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-02d55ae2397b7485", "name": "Legacy-named symbol `rpc_team_summary_v2` in app/(app)/team/_hooks/useTeamData.ts:138", "shortDescription": {"text": "Legacy-named symbol `rpc_team_summary_v2` in app/(app)/team/_hooks/useTeamData.ts:138"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-970c8b28111b52d1", "name": "`fetch()` without try/.catch or AbortSignal \u2014 app/(app)/team/_hooks/useReauditActions.ts:152", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 app/(app)/team/_hooks/useReauditActions.ts:152"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e98543440e70a6e5", "name": "`fetch()` without try/.catch or AbortSignal \u2014 app/(app)/team/_components/TeamTargetAssignmentsCard.tsx:643", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 app/(app)/team/_components/TeamTargetAssignmentsCard.tsx:643"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-432b0227e2411a52", "name": "Legacy-named symbol `rpc_team_summary_v2` in lib/types/database.ts:4265", "shortDescription": {"text": "Legacy-named symbol `rpc_team_summary_v2` in lib/types/database.ts:4265"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-77510f47052d949d", "name": "`fetch()` without try/.catch or AbortSignal \u2014 lib/auth/activeHotelClient.ts:33", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 lib/auth/activeHotelClient.ts:33"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-c26e46cb2f3358f2", "name": "Commented-code block (5 lines) in supabase/functions/auth-email-hook/index.ts:60", "shortDescription": {"text": "Commented-code block (5 lines) in supabase/functions/auth-email-hook/index.ts:60"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-5fa5af25316da646", "name": "16 env vars used in code but missing from .env.example", "shortDescription": {"text": "16 env vars used in code but missing from .env.example"}, "fullDescription": {"text": "Drift between code and config docs. The first few: `ANTHROPIC_API_KEY`, `BREVO_API_KEY`, `CAL_WEBHOOK_SECRET`, `MYSTERY_SHOPPER_EMAIL_DOMAIN`, `NEXT_PUBLIC_VERCEL_ENV`, `NEXT_RUNTIME`, `NODE_ENV`, `NOTION_DATABASE_ID` + 8 more. Add them (with a placeholder/comment) to .env.example so onboarding doesn't break."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/21594"}, "properties": {"repository": "tradertunante/servicecontrol", "repoUrl": "https://github.com/tradertunante/servicecontrol", "branch": "main"}, "results": [{"ruleId": "scanner-7c820ba6fde2c4c6", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 next.config.js:56"}, "properties": {"repobilityId": "699344208214d086", "scanner": "scanner-primary", "fingerprint": "7c820ba6fde2c4c6", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-4ae83bc0023d9259", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/notion-fill-copy.js:244"}, "properties": {"repobilityId": "5cc2f18c12f4c2b4", "scanner": "scanner-primary", "fingerprint": "4ae83bc0023d9259", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-2d33d84c8160defe", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/brevo-notion-sync.js:72"}, "properties": {"repobilityId": "f4c3f152b44ed22c", "scanner": "scanner-primary", "fingerprint": "2d33d84c8160defe", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-e757f654f6cb1de4", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/stripe-setup-lookup-keys.ts:31"}, "properties": {"repobilityId": "2757564ce787e894", "scanner": "scanner-primary", "fingerprint": "e757f654f6cb1de4", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-85332b23e5209942", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/notion-pipeline.js:64"}, "properties": {"repobilityId": "a1e4e288c16f63d7", "scanner": "scanner-primary", "fingerprint": "85332b23e5209942", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-80cd05da371816e7", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 scripts/notion-post.js:96"}, "properties": {"repobilityId": "09b22c038bb70ba9", "scanner": "scanner-primary", "fingerprint": "80cd05da371816e7", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-6a76726fecc4b55e", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 components/help/HelpLayout.tsx:88"}, "properties": {"repobilityId": "f0f3441dd8c98d63", "scanner": "scanner-primary", "fingerprint": "6a76726fecc4b55e", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-7046dee068cbc78f", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 components/help/SearchBar.tsx:151"}, "properties": {"repobilityId": "4335f60a1431ec46", "scanner": "scanner-primary", "fingerprint": "7046dee068cbc78f", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-11dea9b9cb7c82a4", "level": "note", "message": {"text": "\"active\" state uses light bg in a dark theme \u2014 app/components/AreaMultiSelect.tsx:207"}, "properties": {"repobilityId": "51084f7e129e4e78", "scanner": "scanner-primary", "fingerprint": "11dea9b9cb7c82a4", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.active-light-bg"]}}, {"ruleId": "scanner-41fdc71be2cc556b", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 app/components/HotelHeader.tsx:158"}, "properties": {"repobilityId": "d87cc3c2ad629741", "scanner": "scanner-primary", "fingerprint": "41fdc71be2cc556b", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-a10525848a97967a", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 app/components/NotificationBell.tsx:158"}, "properties": {"repobilityId": "53fc447b7ce4b510", "scanner": "scanner-primary", "fingerprint": "a10525848a97967a", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-5f45da394fb7b603", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 app/(app)/users/UsersPageClient.tsx:152"}, "properties": {"repobilityId": "a2301ed9eda6c2da", "scanner": "scanner-primary", "fingerprint": "5f45da394fb7b603", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-cfb313afc1f59ca1", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 app/(app)/analytics/_components/MemberPanel.tsx:130"}, "properties": {"repobilityId": "fa5365d93a04103a", "scanner": "scanner-primary", "fingerprint": "cfb313afc1f59ca1", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-c7b52f6a03a72645", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 app/(app)/audits/[id]/_components/AuditHeader.tsx:21"}, "properties": {"repobilityId": "e5c7d2e519419b48", "scanner": "scanner-primary", "fingerprint": "c7b52f6a03a72645", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-efd394c961096242", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 app/(app)/admin/_modules/report-subscriptions/ReportSubscriptionsModule.tsx:347"}, "properties": {"repobilityId": "26103ff95a56ca86", "scanner": "scanner-primary", "fingerprint": "efd394c961096242", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-d7fcf4acb333d45d", "level": "note", "message": {"text": "\"active\" state uses light bg in a dark theme \u2014 app/(app)/members/_components/MembersTable.tsx:43"}, "properties": {"repobilityId": "65ae5f562feb0b59", "scanner": "scanner-primary", "fingerprint": "d7fcf4acb333d45d", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.active-light-bg"]}}, {"ruleId": "scanner-bccc1df46ef7e6b6", "level": "none", "message": {"text": "`truncate` class without `title=` for hover reveal \u2014 app/(marketing)/_components/MarketingShowcase.tsx:104"}, "properties": {"repobilityId": "947b5db014237619", "scanner": "scanner-primary", "fingerprint": "bccc1df46ef7e6b6", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["frontend-quality", "fq.truncate.no-title"]}}, {"ruleId": "scanner-f72098d806461565", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 lib/logger.ts:33"}, "properties": {"repobilityId": "828e96ab86ae12d1", "scanner": "scanner-primary", "fingerprint": "f72098d806461565", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-f0e80b7358664397", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 supabase/functions/auth-email-hook/index.ts:328"}, "properties": {"repobilityId": "febfb37bd73a7c9a", "scanner": "scanner-primary", "fingerprint": "f0e80b7358664397", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-95cddfed93d37ec3", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in .claude/skills/security-and-hardening/SKILL.md:50"}, "properties": {"repobilityId": "93b7c6441cbb4d2c", "scanner": "scanner-primary", "fingerprint": "95cddfed93d37ec3", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/security-and-hardening/SKILL.md"}, "region": {"startLine": 50}}}]}, {"ruleId": "scanner-8482cefba70934ea", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in .claude/skills/security-and-hardening/SKILL.md:97"}, "properties": {"repobilityId": "9f2f2dd12f2ee427", "scanner": "scanner-primary", "fingerprint": "8482cefba70934ea", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/security-and-hardening/SKILL.md"}, "region": {"startLine": 97}}}]}, {"ruleId": "scanner-4601e3ad3bb28677", "level": "warning", "message": {"text": "No CI/CD pipelines detected"}, "properties": {"repobilityId": "c3ee439bce2bc51e", "scanner": "scanner-primary", "fingerprint": "4601e3ad3bb28677", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["coverage"]}}, {"ruleId": "scanner-cedd6ed14a85d018", "level": "note", "message": {"text": "Very large file: lib/types/database.ts (4524 lines)"}, "properties": {"repobilityId": "ec570d2cb0d49e22", "scanner": "scanner-primary", "fingerprint": "cedd6ed14a85d018", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-6893a6c8b0861585", "level": "warning", "message": {"text": "Very low test-to-source ratio"}, "properties": {"repobilityId": "54a7de3f06314bf0", "scanner": "scanner-primary", "fingerprint": "6893a6c8b0861585", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["tests", "coverage"]}}, {"ruleId": "scanner-141b30a41e03817b", "level": "note", "message": {"text": "No license file detected"}, "properties": {"repobilityId": "a6049108ce25f0b5", "scanner": "scanner-primary", "fingerprint": "141b30a41e03817b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["license", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-3ab5d313dda8e5f9", "level": "note", "message": {"text": "Debug logging residue appears in source files"}, "properties": {"repobilityId": "bafc17063fab7f1f", "scanner": "scanner-primary", "fingerprint": "3ab5d313dda8e5f9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["debug", "cleanup", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-72b2a6250083a784", "level": "warning", "message": {"text": "Placeholder or mock-heavy implementation detected"}, "properties": {"repobilityId": "f303926222c998ae", "scanner": "scanner-primary", "fingerprint": "72b2a6250083a784", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "incomplete", "generated-repo-pattern"]}}, {"ruleId": "scanner-9d79c4077342a7d0", "level": "warning", "message": {"text": "Runtime service client appears to use placeholder configuration"}, "properties": {"repobilityId": "ca2d2ad0867afc4b", "scanner": "scanner-primary", "fingerprint": "9d79c4077342a7d0", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "runtime-config", "service-client", "generated-repo-pattern"]}}, {"ruleId": "scanner-2d0c7b7ab8f8aacf", "level": "warning", "message": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "properties": {"repobilityId": "b4b7f7748023a68e", "scanner": "scanner-primary", "fingerprint": "2d0c7b7ab8f8aacf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "critical-flow", "generated-repo-pattern"]}}, {"ruleId": "scanner-b9088664ace7f748", "level": "note", "message": {"text": "Composite production-readiness gap"}, "properties": {"repobilityId": "584e30e7b6420607", "scanner": "scanner-primary", "fingerprint": "b9088664ace7f748", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["production-readiness", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-749d4bc1bd66df5f", "level": "warning", "message": {"text": "Agent instructions exist but release-hardening basics are missing"}, "properties": {"repobilityId": "5bc193c33724bd50", "scanner": "scanner-primary", "fingerprint": "749d4bc1bd66df5f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-ea8f3013f588db25", "level": "note", "message": {"text": "Shallow git history limits provenance confidence"}, "properties": {"repobilityId": "e2c5fc1927527380", "scanner": "scanner-primary", "fingerprint": "ea8f3013f588db25", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-8424db9c75e04ba4", "level": "none", "message": {"text": "Very short observed git history"}, "properties": {"repobilityId": "99099bdab0ec87c3", "scanner": "scanner-primary", "fingerprint": "8424db9c75e04ba4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-2679282aa1c484b5", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: AGENTS.md"}, "properties": {"repobilityId": "27d579812e6be614", "scanner": "scanner-primary", "fingerprint": "2679282aa1c484b5", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "agents_md"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "AGENTS.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8ffad77a71357689", "level": "error", "message": {"text": "Agent instruction/config may expose a secret: .claude/skills/ci-cd-and-automation/SKILL.md"}, "properties": {"repobilityId": "bff0f5ea9e390907", "scanner": "scanner-primary", "fingerprint": "8ffad77a71357689", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["agent-instructions", "secrets", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/ci-cd-and-automation/SKILL.md"}, "region": {"startLine": 130}}}]}, {"ruleId": "scanner-f6e8d9371bf03be3", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 __tests__/integration/route-authorization.test.ts:33"}, "properties": {"repobilityId": "9cc3efbb41f48826", "scanner": "scanner-primary", "fingerprint": "f6e8d9371bf03be3", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-6760243d1e70770b", "level": "note", "message": {"text": "Legacy-named symbol `rpc_team_summary_v2` in __tests__/integration/lhw-scoring.test.ts:10"}, "properties": {"repobilityId": "87a0cbf8d563a58f", "scanner": "scanner-primary", "fingerprint": "6760243d1e70770b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-6cb5058420c6b9b9", "level": "note", "message": {"text": "Legacy-named symbol `rpc_team_summary_v2` in __tests__/integration/hotel-isolation.test.ts:226"}, "properties": {"repobilityId": "97024b4932271b34", "scanner": "scanner-primary", "fingerprint": "6cb5058420c6b9b9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-b84cc65ec2febb11", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 scripts/brevo-notion-sync.js:36"}, "properties": {"repobilityId": "2c91cfa88be394ed", "scanner": "scanner-primary", "fingerprint": "b84cc65ec2febb11", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-aab6604342c26018", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 components/help/SearchBar.tsx:13"}, "properties": {"repobilityId": "7b8dc417db705c17", "scanner": "scanner-primary", "fingerprint": "aab6604342c26018", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-7973a07d63ab2ddb", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 app/login/LoginClient.tsx:50"}, "properties": {"repobilityId": "854b40349ad20e43", "scanner": "scanner-primary", "fingerprint": "7973a07d63ab2ddb", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-c0906e404e9dac43", "level": "none", "message": {"text": "Commented-code block (6 lines) in app/api/trial/register/route.ts:93"}, "properties": {"repobilityId": "3fbcdfeff6b02e31", "scanner": "scanner-primary", "fingerprint": "c0906e404e9dac43", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-d47d7c21706f2a5e", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 app/api/trainings/generate-suggestions/route.ts:390"}, "properties": {"repobilityId": "bb72eae3bed55683", "scanner": "scanner-primary", "fingerprint": "d47d7c21706f2a5e", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-63b2dc045323f7c4", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 app/api/reports/send-monthly/route.ts:48"}, "properties": {"repobilityId": "a52926961569a013", "scanner": "scanner-primary", "fingerprint": "63b2dc045323f7c4", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-fc92a8feed12cf81", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 app/api/reports/send-weekly/route.ts:48"}, "properties": {"repobilityId": "2b72bf44ff59b468", "scanner": "scanner-primary", "fingerprint": "fc92a8feed12cf81", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-a268c76d18b84984", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 app/(app)/users/new/NewUserPageClient.tsx:72"}, "properties": {"repobilityId": "3a511b5ebb1f56a3", "scanner": "scanner-primary", "fingerprint": "a268c76d18b84984", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-798ecff611fdfb8b", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 app/(app)/audits/[id]/_hooks/useAuditAnswers.ts:43"}, "properties": {"repobilityId": "38bd7f87d40f6426", "scanner": "scanner-primary", "fingerprint": "798ecff611fdfb8b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-02d55ae2397b7485", "level": "note", "message": {"text": "Legacy-named symbol `rpc_team_summary_v2` in app/(app)/team/_hooks/useTeamData.ts:138"}, "properties": {"repobilityId": "93b02baf98475d4d", "scanner": "scanner-primary", "fingerprint": "02d55ae2397b7485", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-970c8b28111b52d1", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 app/(app)/team/_hooks/useReauditActions.ts:152"}, "properties": {"repobilityId": "cea0bbd726de82ad", "scanner": "scanner-primary", "fingerprint": "970c8b28111b52d1", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-e98543440e70a6e5", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 app/(app)/team/_components/TeamTargetAssignmentsCard.tsx:643"}, "properties": {"repobilityId": "091df0b845901ae4", "scanner": "scanner-primary", "fingerprint": "e98543440e70a6e5", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-432b0227e2411a52", "level": "note", "message": {"text": "Legacy-named symbol `rpc_team_summary_v2` in lib/types/database.ts:4265"}, "properties": {"repobilityId": "d201805e3821a59d", "scanner": "scanner-primary", "fingerprint": "432b0227e2411a52", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-77510f47052d949d", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 lib/auth/activeHotelClient.ts:33"}, "properties": {"repobilityId": "9ea6a9bc6b250feb", "scanner": "scanner-primary", "fingerprint": "77510f47052d949d", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-c26e46cb2f3358f2", "level": "none", "message": {"text": "Commented-code block (5 lines) in supabase/functions/auth-email-hook/index.ts:60"}, "properties": {"repobilityId": "3ba45f7007d268d8", "scanner": "scanner-primary", "fingerprint": "c26e46cb2f3358f2", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-5fa5af25316da646", "level": "note", "message": {"text": "16 env vars used in code but missing from .env.example"}, "properties": {"repobilityId": "e0919a3f6a45e8c2", "scanner": "scanner-primary", "fingerprint": "5fa5af25316da646", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "config-drift"]}}]}]}