{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "scanner-bbcb3da7fcbdb945", "name": "Possibly dead Python function: age_group_from_age", "shortDescription": {"text": "Possibly dead Python function: age_group_from_age"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e685729393d185db", "name": "Possibly dead Python function: user_exists", "shortDescription": {"text": "Possibly dead Python function: user_exists"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3b846751820545d7", "name": "Possibly dead Python function: add_user", "shortDescription": {"text": "Possibly dead Python function: add_user"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1cdb81f4f02ed651", "name": "Possibly dead Python function: update_user_level", "shortDescription": {"text": "Possibly dead Python function: update_user_level"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-20c748b60a53d9b2", "name": "Possibly dead Python function: update_points", "shortDescription": {"text": "Possibly dead Python function: update_points"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5bcb1941ac1f7d1f", "name": "Possibly dead Python function: reset_learning_results", "shortDescription": {"text": "Possibly dead Python function: reset_learning_results"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4ad7ee541c69b28e", "name": "Possibly dead Python function: delete_user_account", "shortDescription": {"text": "Possibly dead Python function: delete_user_account"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8015b8fbc5e8c932", "name": "Possibly dead Python function: reset_failed_generated_images", "shortDescription": {"text": "Possibly dead Python function: reset_failed_generated_images"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7b3c5eb29ed96b23", "name": "Possibly dead Python function: update_word_generated_image", "shortDescription": {"text": "Possibly dead Python function: update_word_generated_image"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-15dd3ff7eab6894e", "name": "Possibly dead Python function: create_vocabulary_session", "shortDescription": {"text": "Possibly dead Python function: create_vocabulary_session"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6819b8a62029b0d9", "name": "Possibly dead Python function: finish_vocabulary_session", "shortDescription": {"text": "Possibly dead Python function: finish_vocabulary_session"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fb039b953536fc00", "name": "Possibly dead Python function: create_game_session", "shortDescription": {"text": "Possibly dead Python function: create_game_session"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e066691601852931", "name": "Docker base image is tag-pinned but not digest-pinned: python:3.11-slim", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.11-slim"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6372cebde0220094", "name": "No auth library detected", "shortDescription": {"text": "No auth library detected"}, "fullDescription": {"text": "The scanner did not find any standard auth library (JWT, OAuth, NextAuth, Auth0, etc.). The repo has auth/admin/session surface indicators, so auth may live in custom code, in a separate service, or be missing."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9603dd978c7b025c", "name": "Very large file: database.py (1748 lines)", "shortDescription": {"text": "Very large file: database.py (1748 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6893a6c8b0861585", "name": "Very low test-to-source ratio", "shortDescription": {"text": "Very low test-to-source ratio"}, "fullDescription": {"text": "0 test file(s) for 3 source file(s) (ratio 0.00). Consider adding integration or unit tests for critical paths."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-141b30a41e03817b", "name": "No license file detected", "shortDescription": {"text": "No license file detected"}, "fullDescription": {"text": "No LICENSE/COPYING/NOTICE file was found. Generated repositories often omit licensing, which blocks reuse and automated intake."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b9088664ace7f748", "name": "Composite production-readiness gap", "shortDescription": {"text": "Composite production-readiness gap"}, "fullDescription": {"text": "Multiple low-cost hardening controls are missing together: license, ci, tests. Opus verification showed these co-occurring gaps are a better readiness signal than reading each flag in isolation."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-749d4bc1bd66df5f", "name": "Agent instructions exist but release-hardening basics are missing", "shortDescription": {"text": "Agent instructions exist but release-hardening basics are missing"}, "fullDescription": {"text": "AI-coder instruction files were found, but the repo is missing license, ci, tests. Treat this as a contract gap: the agent is guided, but the generated output is not yet guarded by the controls that make it repeatable."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-bf124b89fa98971a", "name": "Commented-code block (7 lines) in config.py:184", "shortDescription": {"text": "Commented-code block (7 lines) in config.py:184"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-7ba6c195720c0e45", "name": "Commented-code block (5 lines) in database.py:137", "shortDescription": {"text": "Commented-code block (5 lines) in database.py:137"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-3482f7e5dd70cd1a", "name": "6 env vars used in code but missing from .env.example", "shortDescription": {"text": "6 env vars used in code but missing from .env.example"}, "fullDescription": {"text": "Drift between code and config docs. The first few: `OPENAI_IMAGE_COST_PER_CALL`, `OPENAI_REALTIME_SESSION_COST`, `OPENAI_TTS_COST_PER_1K_CHARS`, `PORT`, `REALTIME_TOKEN_TIMEOUT_SEC`, `RENDER`. Add them (with a placeholder/comment) to .env.example so onboarding doesn't break."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2c04133e54348533", "name": "Near-duplicate function bodies in 2 places", "shortDescription": {"text": "Near-duplicate function bodies in 2 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\ndatabase.py:get_practice_word, database.py:get_review_word\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/27614"}, "properties": {"repository": "mailoleg84-sketch/telegram-miniapp", "repoUrl": "https://github.com/mailoleg84-sketch/telegram-miniapp", "branch": "main"}, "results": [{"ruleId": "scanner-bbcb3da7fcbdb945", "level": "note", "message": {"text": "Possibly dead Python function: age_group_from_age"}, "properties": {"repobilityId": "481fb5e181dcf73b", "scanner": "scanner-primary", "fingerprint": "bbcb3da7fcbdb945", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "config.py:141"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e685729393d185db", "level": "note", "message": {"text": "Possibly dead Python function: user_exists"}, "properties": {"repobilityId": "7d3d8f8e0dc0cfe8", "scanner": "scanner-primary", "fingerprint": "e685729393d185db", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "database.py:458"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3b846751820545d7", "level": "note", "message": {"text": "Possibly dead Python function: add_user"}, "properties": {"repobilityId": "eba6265a6c103852", "scanner": "scanner-primary", "fingerprint": "3b846751820545d7", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "database.py:464"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1cdb81f4f02ed651", "level": "note", "message": {"text": "Possibly dead Python function: update_user_level"}, "properties": {"repobilityId": "35b2d8bbf0dbe60f", "scanner": "scanner-primary", "fingerprint": "1cdb81f4f02ed651", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "database.py:493"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-20c748b60a53d9b2", "level": "note", "message": {"text": "Possibly dead Python function: update_points"}, "properties": {"repobilityId": "b6e065b59d90d556", "scanner": "scanner-primary", "fingerprint": "20c748b60a53d9b2", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "database.py:504"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5bcb1941ac1f7d1f", "level": "note", "message": {"text": "Possibly dead Python function: reset_learning_results"}, "properties": {"repobilityId": "5d455b2b02b83174", "scanner": "scanner-primary", "fingerprint": "5bcb1941ac1f7d1f", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "database.py:519"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4ad7ee541c69b28e", "level": "note", "message": {"text": "Possibly dead Python function: delete_user_account"}, "properties": {"repobilityId": "9e09db524f405832", "scanner": "scanner-primary", "fingerprint": "4ad7ee541c69b28e", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "database.py:540"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8015b8fbc5e8c932", "level": "note", "message": {"text": "Possibly dead Python function: reset_failed_generated_images"}, "properties": {"repobilityId": "2f7c1aebea1c8218", "scanner": "scanner-primary", "fingerprint": "8015b8fbc5e8c932", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "database.py:711"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7b3c5eb29ed96b23", "level": "note", "message": {"text": "Possibly dead Python function: update_word_generated_image"}, "properties": {"repobilityId": "9784676903cdc59a", "scanner": "scanner-primary", "fingerprint": "7b3c5eb29ed96b23", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "database.py:732"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-15dd3ff7eab6894e", "level": "note", "message": {"text": "Possibly dead Python function: create_vocabulary_session"}, "properties": {"repobilityId": "6c5301c7f05f8c61", "scanner": "scanner-primary", "fingerprint": "15dd3ff7eab6894e", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "database.py:1040"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6819b8a62029b0d9", "level": "note", "message": {"text": "Possibly dead Python function: finish_vocabulary_session"}, "properties": {"repobilityId": "0c2320d5e5a3f1d7", "scanner": "scanner-primary", "fingerprint": "6819b8a62029b0d9", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "database.py:1068"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-fb039b953536fc00", "level": "note", "message": {"text": "Possibly dead Python function: create_game_session"}, "properties": {"repobilityId": "23d74c32fa454d72", "scanner": "scanner-primary", "fingerprint": "fb039b953536fc00", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "database.py:1088"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e066691601852931", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: python:3.11-slim"}, "properties": {"repobilityId": "f391052c9bfd7e8b", "scanner": "scanner-primary", "fingerprint": "e066691601852931", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "Dockerfile"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-6372cebde0220094", "level": "warning", "message": {"text": "No auth library detected"}, "properties": {"repobilityId": "a5b6035a5bbf8054", "scanner": "scanner-primary", "fingerprint": "6372cebde0220094", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["coverage", "auth"]}}, {"ruleId": "scanner-9603dd978c7b025c", "level": "note", "message": {"text": "Very large file: database.py (1748 lines)"}, "properties": {"repobilityId": "29692af050e0a876", "scanner": "scanner-primary", "fingerprint": "9603dd978c7b025c", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-6893a6c8b0861585", "level": "warning", "message": {"text": "Very low test-to-source ratio"}, "properties": {"repobilityId": "54a7de3f06314bf0", "scanner": "scanner-primary", "fingerprint": "6893a6c8b0861585", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["tests", "coverage"]}}, {"ruleId": "scanner-141b30a41e03817b", "level": "note", "message": {"text": "No license file detected"}, "properties": {"repobilityId": "1a695837a8cda768", "scanner": "scanner-primary", "fingerprint": "141b30a41e03817b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["license", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-b9088664ace7f748", "level": "warning", "message": {"text": "Composite production-readiness gap"}, "properties": {"repobilityId": "13e1488242ec2424", "scanner": "scanner-primary", "fingerprint": "b9088664ace7f748", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["production-readiness", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-749d4bc1bd66df5f", "level": "warning", "message": {"text": "Agent instructions exist but release-hardening basics are missing"}, "properties": {"repobilityId": "24b4093f90053996", "scanner": "scanner-primary", "fingerprint": "749d4bc1bd66df5f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-bf124b89fa98971a", "level": "none", "message": {"text": "Commented-code block (7 lines) in config.py:184"}, "properties": {"repobilityId": "a9ebf2ea59db3899", "scanner": "scanner-primary", "fingerprint": "bf124b89fa98971a", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-7ba6c195720c0e45", "level": "none", "message": {"text": "Commented-code block (5 lines) in database.py:137"}, "properties": {"repobilityId": "7432be4602f1683f", "scanner": "scanner-primary", "fingerprint": "7ba6c195720c0e45", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-3482f7e5dd70cd1a", "level": "note", "message": {"text": "6 env vars used in code but missing from .env.example"}, "properties": {"repobilityId": "1da70f25aa46f6e9", "scanner": "scanner-primary", "fingerprint": "3482f7e5dd70cd1a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "config-drift"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "ec44dd11dedd5fc1", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "ec615d9434e302c4", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}]}]}