{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "scanner-9aa5ff98bde2423b", "name": "Stray `console.log` in TS/JS \u2014 packages/shell-tizen/scripts/fixtures/tizen-stub.js:39", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/shell-tizen/scripts/fixtures/tizen-stub.js:39"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1fa383bc8bccc840", "name": "Stray `console.log` in TS/JS \u2014 packages/shell-tizen/src/shell.js:3496", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/shell-tizen/src/shell.js:3496"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-058c5fa15be9845b", "name": "Stray `console.log` in TS/JS \u2014 packages/shell-tizen/src/shell.min.js:213", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/shell-tizen/src/shell.min.js:213"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-02de6c0718118216", "name": "Stray `console.log` in TS/JS \u2014 packages/shell-tizen-bootstrap/src/boot-shell.min.js:435", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/shell-tizen-bootstrap/src/boot-shell.min.js:435"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c2301556cdffd0b4", "name": "Stray `console.log` in TS/JS \u2014 packages/shell-tizen-bootstrap/src/boot-shell.src.js:2763", "shortDescription": {"text": "Stray `console.log` in TS/JS \u2014 packages/shell-tizen-bootstrap/src/boot-shell.src.js:2763"}, "fullDescription": {"text": "Replace with the toast helper, an error boundary, or remove. `console.warn` / `console.error` are acceptable.\n\nWhy: Hygiene \u2014 easy to leak debug output.\nRule id: fq.console-leak"}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9710c8d059e53154", "name": "No frontend routes/components detected", "shortDescription": {"text": "No frontend routes/components detected"}, "fullDescription": {"text": "No React/Vue/Next routes were found. This is fine for backend-only repos."}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-cf1ea311d966503d", "name": "Insecure pattern 'document_write' in release-artifacts/bootstrap/v2.0.1/README.md:27", "shortDescription": {"text": "Insecure pattern 'document_write' in release-artifacts/bootstrap/v2.0.1/README.md:27"}, "fullDescription": {"text": "Found a known-risky pattern (document_write). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7d6c84e45a7ea7a6", "name": "Insecure pattern 'node_child_process' in packages/shell-tizen/scripts/wgt-source-match.test.cjs:19", "shortDescription": {"text": "Insecure pattern 'node_child_process' in packages/shell-tizen/scripts/wgt-source-match.test.cjs:19"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-55d168f8480abfad", "name": "Insecure pattern 'node_child_process' in packages/shell-tizen/scripts/qa-seed-strip.test.cjs:34", "shortDescription": {"text": "Insecure pattern 'node_child_process' in packages/shell-tizen/scripts/qa-seed-strip.test.cjs:34"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8650728107b35ab6", "name": "Insecure pattern 'new_function_used' in packages/shell-tizen/scripts/openurl-noop.test.cjs:180", "shortDescription": {"text": "Insecure pattern 'new_function_used' in packages/shell-tizen/scripts/openurl-noop.test.cjs:180"}, "fullDescription": {"text": "Found a known-risky pattern (new_function_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-9888daf37aab1694", "name": "Insecure pattern 'new_function_used' in packages/shell-tizen/scripts/defer-watchdog.test.cjs:116", "shortDescription": {"text": "Insecure pattern 'new_function_used' in packages/shell-tizen/scripts/defer-watchdog.test.cjs:116"}, "fullDescription": {"text": "Found a known-risky pattern (new_function_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-8863383e9ce2c11c", "name": "Insecure pattern 'eval_used' in packages/shell-tizen/scripts/flat-polyfill.test.cjs:147", "shortDescription": {"text": "Insecure pattern 'eval_used' in packages/shell-tizen/scripts/flat-polyfill.test.cjs:147"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b9d592c2bab4e5ee", "name": "Insecure pattern 'new_function_used' in packages/shell-tizen/scripts/flat-polyfill.test.cjs:126", "shortDescription": {"text": "Insecure pattern 'new_function_used' in packages/shell-tizen/scripts/flat-polyfill.test.cjs:126"}, "fullDescription": {"text": "Found a known-risky pattern (new_function_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-ee2e18465aa17434", "name": "Insecure pattern 'eval_used' in packages/shell-tizen/scripts/localstorage-quota.test.cjs:171", "shortDescription": {"text": "Insecure pattern 'eval_used' in packages/shell-tizen/scripts/localstorage-quota.test.cjs:171"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-e67fd7f7f7d347c1", "name": "Insecure pattern 'new_function_used' in packages/shell-tizen/scripts/dialog-focus.test.cjs:152", "shortDescription": {"text": "Insecure pattern 'new_function_used' in packages/shell-tizen/scripts/dialog-focus.test.cjs:152"}, "fullDescription": {"text": "Found a known-risky pattern (new_function_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-72fe7224bb7383a0", "name": "Insecure pattern 'new_function_used' in packages/shell-tizen/scripts/boot-progress.test.cjs:50", "shortDescription": {"text": "Insecure pattern 'new_function_used' in packages/shell-tizen/scripts/boot-progress.test.cjs:50"}, "fullDescription": {"text": "Found a known-risky pattern (new_function_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-598984a9002a1c3d", "name": "Insecure pattern 'new_function_used' in packages/shell-tizen/scripts/plugin-syntax-transpile.test.cjs:186", "shortDescription": {"text": "Insecure pattern 'new_function_used' in packages/shell-tizen/scripts/plugin-syntax-transpile.test.cjs:186"}, "fullDescription": {"text": "Found a known-risky pattern (new_function_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-bf1799b4937efe9d", "name": "Insecure pattern 'new_function_used' in packages/shell-tizen/scripts/diag-overlay-gating.test.cjs:149", "shortDescription": {"text": "Insecure pattern 'new_function_used' in packages/shell-tizen/scripts/diag-overlay-gating.test.cjs:149"}, "fullDescription": {"text": "Found a known-risky pattern (new_function_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-33c8ae179d866d62", "name": "Insecure pattern 'eval_used' in packages/shell-tizen/scripts/plugin-config-cache.test.cjs:77", "shortDescription": {"text": "Insecure pattern 'eval_used' in packages/shell-tizen/scripts/plugin-config-cache.test.cjs:77"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-46e175348b175aa8", "name": "Insecure pattern 'new_function_used' in packages/shell-tizen/scripts/plugin-config-cache.test.cjs:85", "shortDescription": {"text": "Insecure pattern 'new_function_used' in packages/shell-tizen/scripts/plugin-config-cache.test.cjs:85"}, "fullDescription": {"text": "Found a known-risky pattern (new_function_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-b85e11373c29fec1", "name": "Insecure pattern 'new_function_used' in packages/shell-tizen/scripts/babel-preload.test.cjs:204", "shortDescription": {"text": "Insecure pattern 'new_function_used' in packages/shell-tizen/scripts/babel-preload.test.cjs:204"}, "fullDescription": {"text": "Found a known-risky pattern (new_function_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-54bed7a8ce7bd3d7", "name": "Insecure pattern 'new_function_used' in packages/shell-tizen/scripts/tx-prime.test.cjs:517", "shortDescription": {"text": "Insecure pattern 'new_function_used' in packages/shell-tizen/scripts/tx-prime.test.cjs:517"}, "fullDescription": {"text": "Found a known-risky pattern (new_function_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-1e0cabfaeaa5d4e3", "name": "Insecure pattern 'new_function_used' in packages/shell-tizen/src/shell.js:1029", "shortDescription": {"text": "Insecure pattern 'new_function_used' in packages/shell-tizen/src/shell.js:1029"}, "fullDescription": {"text": "Found a known-risky pattern (new_function_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-2ca3cb284ab26940", "name": "Insecure pattern 'direct_innerhtml_assignment' in packages/shell-tizen/src/shell.js:2649", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in packages/shell-tizen/src/shell.js:2649"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-09cbc50cfe9103c0", "name": "Insecure pattern 'domparser_html_parse' in packages/shell-tizen/src/shell.js:4149", "shortDescription": {"text": "Insecure pattern 'domparser_html_parse' in packages/shell-tizen/src/shell.js:4149"}, "fullDescription": {"text": "Found a known-risky pattern (domparser_html_parse). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-fbd178cf95d6be26", "name": "Insecure pattern 'new_function_used' in packages/shell-tizen/src/index.html:47", "shortDescription": {"text": "Insecure pattern 'new_function_used' in packages/shell-tizen/src/index.html:47"}, "fullDescription": {"text": "Found a known-risky pattern (new_function_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-8033dd64eda3bfbb", "name": "Insecure pattern 'new_function_used' in packages/shell-tizen/src/shell.min.js:209", "shortDescription": {"text": "Insecure pattern 'new_function_used' in packages/shell-tizen/src/shell.min.js:209"}, "fullDescription": {"text": "Found a known-risky pattern (new_function_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-fad9b37e97738c82", "name": "Insecure pattern 'document_write' in packages/shell-tizen/src/shell.min.js:213", "shortDescription": {"text": "Insecure pattern 'document_write' in packages/shell-tizen/src/shell.min.js:213"}, "fullDescription": {"text": "Found a known-risky pattern (document_write). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a9a65fb1e5469649", "name": "Insecure pattern 'direct_innerhtml_assignment' in packages/shell-tizen/src/shell.min.js:213", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in packages/shell-tizen/src/shell.min.js:213"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-aa9ce8e3ab8b7555", "name": "Insecure pattern 'domparser_html_parse' in packages/shell-tizen/src/shell.min.js:213", "shortDescription": {"text": "Insecure pattern 'domparser_html_parse' in packages/shell-tizen/src/shell.min.js:213"}, "fullDescription": {"text": "Found a known-risky pattern (domparser_html_parse). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-cfc046f289d780ce", "name": "Insecure pattern 'new_function_used' in packages/shell-tizen-bootstrap/scripts/iterator-resweep.test.cjs:121", "shortDescription": {"text": "Insecure pattern 'new_function_used' in packages/shell-tizen-bootstrap/scripts/iterator-resweep.test.cjs:121"}, "fullDescription": {"text": "Found a known-risky pattern (new_function_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-3cc1c2e6aad387bd", "name": "Insecure pattern 'node_child_process' in packages/shell-tizen-bootstrap/scripts/debug-variant.test.cjs:15", "shortDescription": {"text": "Insecure pattern 'node_child_process' in packages/shell-tizen-bootstrap/scripts/debug-variant.test.cjs:15"}, "fullDescription": {"text": "Found a known-risky pattern (node_child_process). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d179ae320d933c8d", "name": "Insecure pattern 'new_function_used' in packages/shell-tizen-bootstrap/scripts/defer-watchdog.test.cjs:112", "shortDescription": {"text": "Insecure pattern 'new_function_used' in packages/shell-tizen-bootstrap/scripts/defer-watchdog.test.cjs:112"}, "fullDescription": {"text": "Found a known-risky pattern (new_function_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-bf72102b77242a75", "name": "Insecure pattern 'new_function_used' in packages/shell-tizen-bootstrap/scripts/boot-progress.test.cjs:50", "shortDescription": {"text": "Insecure pattern 'new_function_used' in packages/shell-tizen-bootstrap/scripts/boot-progress.test.cjs:50"}, "fullDescription": {"text": "Found a known-risky pattern (new_function_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-76142c22be28b8a7", "name": "Insecure pattern 'new_function_used' in packages/shell-tizen-bootstrap/scripts/babel-transpile.test.cjs:114", "shortDescription": {"text": "Insecure pattern 'new_function_used' in packages/shell-tizen-bootstrap/scripts/babel-transpile.test.cjs:114"}, "fullDescription": {"text": "Found a known-risky pattern (new_function_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-05e7d2def63f6b9b", "name": "Insecure pattern 'new_function_used' in packages/shell-tizen-bootstrap/scripts/jel137-login-wedge.test.cjs:86", "shortDescription": {"text": "Insecure pattern 'new_function_used' in packages/shell-tizen-bootstrap/scripts/jel137-login-wedge.test.cjs:86"}, "fullDescription": {"text": "Found a known-risky pattern (new_function_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-e8fef374c54760bf", "name": "Insecure pattern 'new_function_used' in packages/shell-tizen-bootstrap/src/boot-shell.min.js:198", "shortDescription": {"text": "Insecure pattern 'new_function_used' in packages/shell-tizen-bootstrap/src/boot-shell.min.js:198"}, "fullDescription": {"text": "Found a known-risky pattern (new_function_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-783b6d07862c965d", "name": "Insecure pattern 'document_write' in packages/shell-tizen-bootstrap/src/boot-shell.min.js:435", "shortDescription": {"text": "Insecure pattern 'document_write' in packages/shell-tizen-bootstrap/src/boot-shell.min.js:435"}, "fullDescription": {"text": "Found a known-risky pattern (document_write). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ac5b18828b886a04", "name": "Insecure pattern 'direct_innerhtml_assignment' in packages/shell-tizen-bootstrap/src/boot-shell.min.js:435", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in packages/shell-tizen-bootstrap/src/boot-shell.min.js:435"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-160564e60d77a645", "name": "Insecure pattern 'domparser_html_parse' in packages/shell-tizen-bootstrap/src/boot-shell.min.js:435", "shortDescription": {"text": "Insecure pattern 'domparser_html_parse' in packages/shell-tizen-bootstrap/src/boot-shell.min.js:435"}, "fullDescription": {"text": "Found a known-risky pattern (domparser_html_parse). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ad1c1861dec16a0b", "name": "Insecure pattern 'new_function_used' in packages/shell-tizen-bootstrap/src/boot-shell.src.js:865", "shortDescription": {"text": "Insecure pattern 'new_function_used' in packages/shell-tizen-bootstrap/src/boot-shell.src.js:865"}, "fullDescription": {"text": "Found a known-risky pattern (new_function_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-3d7a1f07ff731d95", "name": "Insecure pattern 'document_write' in packages/shell-tizen-bootstrap/src/boot-shell.src.js:3425", "shortDescription": {"text": "Insecure pattern 'document_write' in packages/shell-tizen-bootstrap/src/boot-shell.src.js:3425"}, "fullDescription": {"text": "Found a known-risky pattern (document_write). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-83364f4991fe1f3a", "name": "Insecure pattern 'direct_innerhtml_assignment' in packages/shell-tizen-bootstrap/src/boot-shell.src.js:2117", "shortDescription": {"text": "Insecure pattern 'direct_innerhtml_assignment' in packages/shell-tizen-bootstrap/src/boot-shell.src.js:2117"}, "fullDescription": {"text": "Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-adac5c1993426651", "name": "Insecure pattern 'domparser_html_parse' in packages/shell-tizen-bootstrap/src/boot-shell.src.js:3430", "shortDescription": {"text": "Insecure pattern 'domparser_html_parse' in packages/shell-tizen-bootstrap/src/boot-shell.src.js:3430"}, "fullDescription": {"text": "Found a known-risky pattern (domparser_html_parse). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-516290374c655f1b", "name": "Insecure pattern 'new_function_used' in packages/shell-tizen-bootstrap/src/index.html:202", "shortDescription": {"text": "Insecure pattern 'new_function_used' in packages/shell-tizen-bootstrap/src/index.html:202"}, "fullDescription": {"text": "Found a known-risky pattern (new_function_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-6372cebde0220094", "name": "No auth library detected", "shortDescription": {"text": "No auth library detected"}, "fullDescription": {"text": "The scanner did not find any standard auth library (JWT, OAuth, NextAuth, Auth0, etc.). The repo has auth/admin/session surface indicators, so auth may live in custom code, in a separate service, or be missing."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-3bb02c38fa288ad1", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-75746e0469238427", "name": "GitHub Actions workflow grants broad write permissions", "shortDescription": {"text": "GitHub Actions workflow grants broad write permissions"}, "fullDescription": {"text": "CI tokens with write permissions increase blast radius when an action, dependency, or PR workflow is compromised. Prefer job-level least-privilege permissions."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-79d8c4864d733245", "name": "Very large file: packages/shell-tizen/src/shell.js (4369 lines)", "shortDescription": {"text": "Very large file: packages/shell-tizen/src/shell.js (4369 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0390dce7bc418452", "name": "Very large file: packages/shell-tizen-bootstrap/src/boot-shell.src.js (3535 lines)", "shortDescription": {"text": "Very large file: packages/shell-tizen-bootstrap/src/boot-shell.src.js (3535 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-141b30a41e03817b", "name": "No license file detected", "shortDescription": {"text": "No license file detected"}, "fullDescription": {"text": "No LICENSE/COPYING/NOTICE file was found. Generated repositories often omit licensing, which blocks reuse and automated intake."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3ab5d313dda8e5f9", "name": "Debug logging residue appears in source files", "shortDescription": {"text": "Debug logging residue appears in source files"}, "fullDescription": {"text": "Found 227 console/debugger/print-style debug statements in non-test source. This is a common fast-generation residue before production cleanup."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-72b2a6250083a784", "name": "Placeholder or mock-heavy implementation detected", "shortDescription": {"text": "Placeholder or mock-heavy implementation detected"}, "fullDescription": {"text": "Found 60 placeholder/mock markers across 23 source files. This often means the repo looks complete while core flows still use generated scaffolding or fake data."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9d79c4077342a7d0", "name": "Runtime service client appears to use placeholder configuration", "shortDescription": {"text": "Runtime service client appears to use placeholder configuration"}, "fullDescription": {"text": "A runtime source file appears to wire Supabase/Firebase/AI/payment-style clients to placeholder URLs, keys, or fallback values. In the Fable corpus this often means the UI/API shape is present while the backend service is not actually configured."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2d0c7b7ab8f8aacf", "name": "Critical user flow still appears backed by mock or placeholder data", "shortDescription": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "fullDescription": {"text": "A payment/auth/admin/order/billing-style flow contains mock, fake, TODO, dummy, or placeholder markers in runtime source. In the Fable corpus this is a high-leverage completeness smell: the app can look finished while the money, identity, or tenant flow is still scaffolded."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-11825279136b53a3", "name": "CI is configured but no tests are detected", "shortDescription": {"text": "CI is configured but no tests are detected"}, "fullDescription": {"text": "A CI pipeline exists, but the scan found no test files to gate. Opus labeled this generated-code pattern as config theater: release machinery exists, but it has little behavioral signal."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b9088664ace7f748", "name": "Composite production-readiness gap", "shortDescription": {"text": "Composite production-readiness gap"}, "fullDescription": {"text": "Multiple low-cost hardening controls are missing together: license, tests. Opus verification showed these co-occurring gaps are a better readiness signal than reading each flag in isolation."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ea8f3013f588db25", "name": "Shallow git history limits provenance confidence", "shortDescription": {"text": "Shallow git history limits provenance confidence"}, "fullDescription": {"text": "The repository is a shallow clone. Origin/evolution analysis cannot distinguish fresh generation, imported legacy code, or long-lived human code with high confidence."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8424db9c75e04ba4", "name": "Very short observed git history", "shortDescription": {"text": "Very short observed git history"}, "fullDescription": {"text": "The repo has multiple source files but two or fewer visible commits. This is not a failure by itself, but it lowers confidence in evolution-based diagnosis."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-5011420387f262ee", "name": "Commented-code block (11 lines) in packages/shell-tizen/scripts/remember-me-default.test.cjs:3", "shortDescription": {"text": "Commented-code block (11 lines) in packages/shell-tizen/scripts/remember-me-default.test.cjs:3"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-4f97e66aae75c77d", "name": "Commented-code block (10 lines) in packages/shell-tizen/scripts/late-onload.test.cjs:3", "shortDescription": {"text": "Commented-code block (10 lines) in packages/shell-tizen/scripts/late-onload.test.cjs:3"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-34e98a50e821cece", "name": "Commented-code block (9 lines) in packages/shell-tizen/scripts/creds-guard.test.cjs:4", "shortDescription": {"text": "Commented-code block (9 lines) in packages/shell-tizen/scripts/creds-guard.test.cjs:4"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-4ba314fb6e6198ee", "name": "`fetch()` without try/.catch or AbortSignal \u2014 packages/shell-tizen/scripts/creds-guard.test.cjs:510", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/shell-tizen/scripts/creds-guard.test.cjs:510"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9df26b3b1d7a394d", "name": "Commented-code block (6 lines) in packages/shell-tizen/scripts/wgt-source-match.test.cjs:2", "shortDescription": {"text": "Commented-code block (6 lines) in packages/shell-tizen/scripts/wgt-source-match.test.cjs:2"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-06bb219d96e1197f", "name": "Commented-code block (10 lines) in packages/shell-tizen/scripts/qa-seed-strip.test.cjs:4", "shortDescription": {"text": "Commented-code block (10 lines) in packages/shell-tizen/scripts/qa-seed-strip.test.cjs:4"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-c3427904b3ec2916", "name": "Commented-code block (9 lines) in packages/shell-tizen/scripts/nativeshell-apphost.test.cjs:3", "shortDescription": {"text": "Commented-code block (9 lines) in packages/shell-tizen/scripts/nativeshell-apphost.test.cjs:3"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b76a4bef013bedca", "name": "Commented-code block (6 lines) in packages/shell-tizen/scripts/volume-control.test.cjs:9", "shortDescription": {"text": "Commented-code block (6 lines) in packages/shell-tizen/scripts/volume-control.test.cjs:9"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-537064cf61e4c84f", "name": "Commented-code block (7 lines) in packages/shell-tizen/scripts/openurl-noop.test.cjs:4", "shortDescription": {"text": "Commented-code block (7 lines) in packages/shell-tizen/scripts/openurl-noop.test.cjs:4"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-4805e4d210b454cf", "name": "Commented-code block (7 lines) in packages/shell-tizen/scripts/flat-polyfill.test.cjs:4", "shortDescription": {"text": "Commented-code block (7 lines) in packages/shell-tizen/scripts/flat-polyfill.test.cjs:4"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-fda0cb8cb8113a9d", "name": "Commented-code block (10 lines) in packages/shell-tizen/scripts/localstorage-quota.test.cjs:4", "shortDescription": {"text": "Commented-code block (10 lines) in packages/shell-tizen/scripts/localstorage-quota.test.cjs:4"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-d7c757499e43c466", "name": "Commented-code block (6 lines) in packages/shell-tizen/scripts/fullscreen-noop.test.cjs:4", "shortDescription": {"text": "Commented-code block (6 lines) in packages/shell-tizen/scripts/fullscreen-noop.test.cjs:4"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-fd4a09ba86e72538", "name": "Commented-code block (5 lines) in packages/shell-tizen/scripts/system-info.test.cjs:3", "shortDescription": {"text": "Commented-code block (5 lines) in packages/shell-tizen/scripts/system-info.test.cjs:3"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-318e5d1a190f1c4a", "name": "Commented-code block (5 lines) in packages/shell-tizen/scripts/jquery-gate.test.cjs:13", "shortDescription": {"text": "Commented-code block (5 lines) in packages/shell-tizen/scripts/jquery-gate.test.cjs:13"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-66ef300ea26ca5d7", "name": "Commented-code block (9 lines) in packages/shell-tizen/scripts/js-error-tolerance.test.cjs:5", "shortDescription": {"text": "Commented-code block (9 lines) in packages/shell-tizen/scripts/js-error-tolerance.test.cjs:5"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-961deeb40d8ab26d", "name": "Commented-code block (12 lines) in packages/shell-tizen/scripts/server-url-persistence.test.cjs:4", "shortDescription": {"text": "Commented-code block (12 lines) in packages/shell-tizen/scripts/server-url-persistence.test.cjs:4"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-b2a2d012fc53f79f", "name": "Commented-code block (15 lines) in packages/shell-tizen/scripts/build_shell_min.py:43", "shortDescription": {"text": "Commented-code block (15 lines) in packages/shell-tizen/scripts/build_shell_min.py:43"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-50edf7083622a69e", "name": "Network/subprocess call without timeout or try/except \u2014 packages/shell-tizen/scripts/build_shell_min.py:92", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 packages/shell-tizen/scripts/build_shell_min.py:92"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ca24fba5b3355928", "name": "Commented-code block (8 lines) in packages/shell-tizen/scripts/dialog-focus.test.cjs:4", "shortDescription": {"text": "Commented-code block (8 lines) in packages/shell-tizen/scripts/dialog-focus.test.cjs:4"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-080cd3d00211b11e", "name": "Commented-code block (8 lines) in packages/shell-tizen/scripts/playback-controls.test.cjs:3", "shortDescription": {"text": "Commented-code block (8 lines) in packages/shell-tizen/scripts/playback-controls.test.cjs:3"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-455624a40c90d9c7", "name": "Commented-code block (7 lines) in packages/shell-tizen/scripts/select-server.test.cjs:4", "shortDescription": {"text": "Commented-code block (7 lines) in packages/shell-tizen/scripts/select-server.test.cjs:4"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-acdc7e3fdf63bf12", "name": "Commented-code block (7 lines) in packages/shell-tizen/scripts/bundle-patch.test.cjs:4", "shortDescription": {"text": "Commented-code block (7 lines) in packages/shell-tizen/scripts/bundle-patch.test.cjs:4"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-bf44b79d3d7ed383", "name": "Commented-code block (16 lines) in packages/shell-tizen/scripts/plugin-syntax-transpile.test.cjs:10", "shortDescription": {"text": "Commented-code block (16 lines) in packages/shell-tizen/scripts/plugin-syntax-transpile.test.cjs:10"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-d8792e70746da2c8", "name": "Commented-code block (7 lines) in packages/shell-tizen/scripts/network-error-recovery.test.cjs:4", "shortDescription": {"text": "Commented-code block (7 lines) in packages/shell-tizen/scripts/network-error-recovery.test.cjs:4"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-60b2b546c0505340", "name": "`fetch()` without try/.catch or AbortSignal \u2014 packages/shell-tizen/scripts/network-error-recovery.test.cjs:204", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/shell-tizen/scripts/network-error-recovery.test.cjs:204"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8f26f6418a721e45", "name": "Commented-code block (9 lines) in packages/shell-tizen/scripts/color-keys.test.cjs:5", "shortDescription": {"text": "Commented-code block (9 lines) in packages/shell-tizen/scripts/color-keys.test.cjs:5"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2e1a077a737f11fc", "name": "Commented-code block (6 lines) in packages/shell-tizen/scripts/diag-overlay-gating.test.cjs:3", "shortDescription": {"text": "Commented-code block (6 lines) in packages/shell-tizen/scripts/diag-overlay-gating.test.cjs:3"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-9423f178bfccb302", "name": "Commented-code block (7 lines) in packages/shell-tizen/scripts/lifecycle-resume.test.cjs:4", "shortDescription": {"text": "Commented-code block (7 lines) in packages/shell-tizen/scripts/lifecycle-resume.test.cjs:4"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-61ce740877d46eae", "name": "Commented-code block (9 lines) in packages/shell-tizen/scripts/plugin-config-cache.test.cjs:12", "shortDescription": {"text": "Commented-code block (9 lines) in packages/shell-tizen/scripts/plugin-config-cache.test.cjs:12"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-ab523f993219d98d", "name": "Commented-code block (10 lines) in packages/shell-tizen/scripts/babel-preload.test.cjs:4", "shortDescription": {"text": "Commented-code block (10 lines) in packages/shell-tizen/scripts/babel-preload.test.cjs:4"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-5bcb033424fdf2f9", "name": "`fetch()` without try/.catch or AbortSignal \u2014 packages/shell-tizen/scripts/babel-preload.test.cjs:194", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/shell-tizen/scripts/babel-preload.test.cjs:194"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d31337a79a5160b8", "name": "Network/subprocess call without timeout or try/except \u2014 packages/shell-tizen/scripts/verify_shell_src.py:84", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 packages/shell-tizen/scripts/verify_shell_src.py:84"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-412688637cfd6bcc", "name": "Commented-code block (8 lines) in packages/shell-tizen/scripts/web-index-cache.test.cjs:4", "shortDescription": {"text": "Commented-code block (8 lines) in packages/shell-tizen/scripts/web-index-cache.test.cjs:4"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-2a20ce64635bba37", "name": "Commented-code block (7 lines) in packages/shell-tizen/scripts/tx-prime.test.cjs:3", "shortDescription": {"text": "Commented-code block (7 lines) in packages/shell-tizen/scripts/tx-prime.test.cjs:3"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-6e81798d18921dca", "name": "Commented-code block (5 lines) in packages/shell-tizen/scripts/jsi-no-cache.test.cjs:1", "shortDescription": {"text": "Commented-code block (5 lines) in packages/shell-tizen/scripts/jsi-no-cache.test.cjs:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-3250283eb33a7c74", "name": "Commented-code block (6 lines) in packages/shell-tizen/scripts/https-certificates.test.cjs:4", "shortDescription": {"text": "Commented-code block (6 lines) in packages/shell-tizen/scripts/https-certificates.test.cjs:4"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-76685f984cd5b786", "name": "`fetch()` without try/.catch or AbortSignal \u2014 packages/shell-tizen/scripts/https-certificates.test.cjs:126", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/shell-tizen/scripts/https-certificates.test.cjs:126"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8cc2ad98559cd5cc", "name": "Commented-code block (7 lines) in packages/shell-tizen/scripts/seed-injection.test.cjs:3", "shortDescription": {"text": "Commented-code block (7 lines) in packages/shell-tizen/scripts/seed-injection.test.cjs:3"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-6b78f25d8381f76b", "name": "`fetch()` without try/.catch or AbortSignal \u2014 packages/shell-tizen/scripts/seed-injection.test.cjs:518", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/shell-tizen/scripts/seed-injection.test.cjs:518"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8e7a2869ce421e92", "name": "Commented-code block (5 lines) in packages/shell-tizen/scripts/movie-details.test.cjs:3", "shortDescription": {"text": "Commented-code block (5 lines) in packages/shell-tizen/scripts/movie-details.test.cjs:3"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-3d0730a54c12a943", "name": "Commented-code block (11 lines) in packages/shell-tizen/scripts/foreign-origin-passthrough.test.cjs:8", "shortDescription": {"text": "Commented-code block (11 lines) in packages/shell-tizen/scripts/foreign-origin-passthrough.test.cjs:8"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-a75fd1a1dcb2a14f", "name": "`fetch()` without try/.catch or AbortSignal \u2014 packages/shell-tizen/scripts/foreign-origin-passthrough.test.cjs:11", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/shell-tizen/scripts/foreign-origin-passthrough.test.cjs:11"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2cd2033df53507d9", "name": "Commented-code block (20 lines) in packages/shell-tizen/scripts/getdeviceprofile.test.cjs:3", "shortDescription": {"text": "Commented-code block (20 lines) in packages/shell-tizen/scripts/getdeviceprofile.test.cjs:3"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-de9fb1a554e018ab", "name": "Commented-code block (7 lines) in packages/shell-tizen/scripts/media-keys.test.cjs:4", "shortDescription": {"text": "Commented-code block (7 lines) in packages/shell-tizen/scripts/media-keys.test.cjs:4"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-ef7c88a75e047008", "name": "Commented-code block (5 lines) in packages/shell-tizen/scripts/fixtures/tizen-stub.js:8", "shortDescription": {"text": "Commented-code block (5 lines) in packages/shell-tizen/scripts/fixtures/tizen-stub.js:8"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-3ae8308940792d03", "name": "Commented-code block (12 lines) in packages/shell-tizen/src/shell.js:30", "shortDescription": {"text": "Commented-code block (12 lines) in packages/shell-tizen/src/shell.js:30"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-9d1c8793a27e9670", "name": "`fetch()` without try/.catch or AbortSignal \u2014 packages/shell-tizen/src/shell.js:32", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/shell-tizen/src/shell.js:32"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-14c29b245822a3d2", "name": "`fetch()` without try/.catch or AbortSignal \u2014 packages/shell-tizen/src/shell.min.js:209", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/shell-tizen/src/shell.min.js:209"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2c42c30cf9e91ea0", "name": "Commented-code block (6 lines) in packages/shell-tizen/src/qa-beacon.js:194", "shortDescription": {"text": "Commented-code block (6 lines) in packages/shell-tizen/src/qa-beacon.js:194"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-180bb2653a3d2d35", "name": "Network/subprocess call without timeout or try/except \u2014 packages/shell-tizen-bootstrap/scripts/verify_boot_shell_src.py:", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 packages/shell-tizen-bootstrap/scripts/verify_boot_shell_src.py:76"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-dc2014a2ca169a9b", "name": "Commented-code block (17 lines) in packages/shell-tizen-bootstrap/scripts/iterator-resweep.test.cjs:4", "shortDescription": {"text": "Commented-code block (17 lines) in packages/shell-tizen-bootstrap/scripts/iterator-resweep.test.cjs:4"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-6e84f3aef76beb24", "name": "Commented-code block (7 lines) in packages/shell-tizen-bootstrap/scripts/debug-variant.test.cjs:1", "shortDescription": {"text": "Commented-code block (7 lines) in packages/shell-tizen-bootstrap/scripts/debug-variant.test.cjs:1"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-d3fd2d60e304bc02", "name": "Network/subprocess call without timeout or try/except \u2014 packages/shell-tizen-bootstrap/scripts/build_bootstrap.py:194", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 packages/shell-tizen-bootstrap/scripts/build_bootstrap.py:194"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-38a9a2c70c030aad", "name": "Commented-code block (13 lines) in packages/shell-tizen-bootstrap/scripts/babel-transpile.test.cjs:4", "shortDescription": {"text": "Commented-code block (13 lines) in packages/shell-tizen-bootstrap/scripts/babel-transpile.test.cjs:4"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-da29aa8fb1fabb6a", "name": "Commented-code block (6 lines) in packages/shell-tizen-bootstrap/scripts/connect-form-parity.test.cjs:7", "shortDescription": {"text": "Commented-code block (6 lines) in packages/shell-tizen-bootstrap/scripts/connect-form-parity.test.cjs:7"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-e29d707ee1341120", "name": "Network/subprocess call without timeout or try/except \u2014 packages/shell-tizen-bootstrap/scripts/build_boot_shell.py:77", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 packages/shell-tizen-bootstrap/scripts/build_boot_shell.py:77"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ad7bd903bd311b85", "name": "Commented-code block (6 lines) in packages/shell-tizen-bootstrap/src/boot-shell.min.js:333", "shortDescription": {"text": "Commented-code block (6 lines) in packages/shell-tizen-bootstrap/src/boot-shell.min.js:333"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-f7cc4038ae876682", "name": "`fetch()` without try/.catch or AbortSignal \u2014 packages/shell-tizen-bootstrap/src/boot-shell.min.js:198", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/shell-tizen-bootstrap/src/boot-shell.min.js:198"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b975cc53a73029f6", "name": "Commented-code block (6 lines) in packages/shell-tizen-bootstrap/src/boot-shell.src.js:23", "shortDescription": {"text": "Commented-code block (6 lines) in packages/shell-tizen-bootstrap/src/boot-shell.src.js:23"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-291bdd4ce7afc667", "name": "`fetch()` without try/.catch or AbortSignal \u2014 packages/shell-tizen-bootstrap/src/boot-shell.src.js:281", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/shell-tizen-bootstrap/src/boot-shell.src.js:281"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-964426f164b1bc81", "name": "Legacy-named symbol `JellyfinShellBootstrap_v2` in packages/server-shell-drop/scripts/emit_manifest.py:11", "shortDescription": {"text": "Legacy-named symbol `JellyfinShellBootstrap_v2` in packages/server-shell-drop/scripts/emit_manifest.py:11"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2c04133e54348533", "name": "Near-duplicate function bodies in 2 places", "shortDescription": {"text": "Near-duplicate function bodies in 2 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\npackages/shell-tizen/scripts/verify_shell_src.py:resolve_esbuild, packages/shell-tizen-bootstrap/scripts/verify_boot_shell_src.py:resolve_esbuild\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/18562"}, "properties": {"repository": "RumbleCrumbleRS/JellyPlug-Tizen", "repoUrl": "https://github.com/RumbleCrumbleRS/JellyPlug-Tizen", "branch": "main"}, "results": [{"ruleId": "scanner-9aa5ff98bde2423b", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/shell-tizen/scripts/fixtures/tizen-stub.js:39"}, "properties": {"repobilityId": "7d736871284935a1", "scanner": "scanner-primary", "fingerprint": "9aa5ff98bde2423b", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-1fa383bc8bccc840", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/shell-tizen/src/shell.js:3496"}, "properties": {"repobilityId": "769d45dd1ac8e2a4", "scanner": "scanner-primary", "fingerprint": "1fa383bc8bccc840", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-058c5fa15be9845b", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/shell-tizen/src/shell.min.js:213"}, "properties": {"repobilityId": "2d1ad0d7a6059b4e", "scanner": "scanner-primary", "fingerprint": "058c5fa15be9845b", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-02de6c0718118216", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/shell-tizen-bootstrap/src/boot-shell.min.js:435"}, "properties": {"repobilityId": "704b6c6ad066c19f", "scanner": "scanner-primary", "fingerprint": "02de6c0718118216", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-c2301556cdffd0b4", "level": "note", "message": {"text": "Stray `console.log` in TS/JS \u2014 packages/shell-tizen-bootstrap/src/boot-shell.src.js:2763"}, "properties": {"repobilityId": "74bcf4d6b40ea147", "scanner": "scanner-primary", "fingerprint": "c2301556cdffd0b4", "layer": "frontend", "severity": "low", "confidence": 1.0, "tags": ["frontend-quality", "fq.console-leak"]}}, {"ruleId": "scanner-9710c8d059e53154", "level": "none", "message": {"text": "No frontend routes/components detected"}, "properties": {"repobilityId": "44ca61485762e494", "scanner": "scanner-primary", "fingerprint": "9710c8d059e53154", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["coverage"]}}, {"ruleId": "scanner-cf1ea311d966503d", "level": "note", "message": {"text": "Insecure pattern 'document_write' in release-artifacts/bootstrap/v2.0.1/README.md:27"}, "properties": {"repobilityId": "f664b8ad4f60d3cf", "scanner": "scanner-primary", "fingerprint": "cf1ea311d966503d", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["owasp", "document_write"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "release-artifacts/bootstrap/v2.0.1/README.md"}, "region": {"startLine": 27}}}]}, {"ruleId": "scanner-7d6c84e45a7ea7a6", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in packages/shell-tizen/scripts/wgt-source-match.test.cjs:19"}, "properties": {"repobilityId": "f72ffab0132d259b", "scanner": "scanner-primary", "fingerprint": "7d6c84e45a7ea7a6", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/shell-tizen/scripts/wgt-source-match.test.cjs"}, "region": {"startLine": 19}}}]}, {"ruleId": "scanner-55d168f8480abfad", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in packages/shell-tizen/scripts/qa-seed-strip.test.cjs:34"}, "properties": {"repobilityId": "5e181377ae90e62f", "scanner": "scanner-primary", "fingerprint": "55d168f8480abfad", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/shell-tizen/scripts/qa-seed-strip.test.cjs"}, "region": {"startLine": 34}}}]}, {"ruleId": "scanner-8650728107b35ab6", "level": "error", "message": {"text": "Insecure pattern 'new_function_used' in packages/shell-tizen/scripts/openurl-noop.test.cjs:180"}, "properties": {"repobilityId": "5cd4ccbb3dd4cd6b", "scanner": "scanner-primary", "fingerprint": "8650728107b35ab6", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "new_function_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/shell-tizen/scripts/openurl-noop.test.cjs"}, "region": {"startLine": 180}}}]}, {"ruleId": "scanner-9888daf37aab1694", "level": "error", "message": {"text": "Insecure pattern 'new_function_used' in packages/shell-tizen/scripts/defer-watchdog.test.cjs:116"}, "properties": {"repobilityId": "cfb0195e77dbfd24", "scanner": "scanner-primary", "fingerprint": "9888daf37aab1694", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "new_function_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/shell-tizen/scripts/defer-watchdog.test.cjs"}, "region": {"startLine": 116}}}]}, {"ruleId": "scanner-8863383e9ce2c11c", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in packages/shell-tizen/scripts/flat-polyfill.test.cjs:147"}, "properties": {"repobilityId": "1e13ae2a4457995e", "scanner": "scanner-primary", "fingerprint": "8863383e9ce2c11c", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/shell-tizen/scripts/flat-polyfill.test.cjs"}, "region": {"startLine": 147}}}]}, {"ruleId": "scanner-b9d592c2bab4e5ee", "level": "error", "message": {"text": "Insecure pattern 'new_function_used' in packages/shell-tizen/scripts/flat-polyfill.test.cjs:126"}, "properties": {"repobilityId": "d7ace1aa6608aea1", "scanner": "scanner-primary", "fingerprint": "b9d592c2bab4e5ee", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "new_function_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/shell-tizen/scripts/flat-polyfill.test.cjs"}, "region": {"startLine": 126}}}]}, {"ruleId": "scanner-ee2e18465aa17434", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in packages/shell-tizen/scripts/localstorage-quota.test.cjs:171"}, "properties": {"repobilityId": "22d8736c47b815b6", "scanner": "scanner-primary", "fingerprint": "ee2e18465aa17434", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/shell-tizen/scripts/localstorage-quota.test.cjs"}, "region": {"startLine": 171}}}]}, {"ruleId": "scanner-e67fd7f7f7d347c1", "level": "error", "message": {"text": "Insecure pattern 'new_function_used' in packages/shell-tizen/scripts/dialog-focus.test.cjs:152"}, "properties": {"repobilityId": "bfbeac6d8718c9de", "scanner": "scanner-primary", "fingerprint": "e67fd7f7f7d347c1", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "new_function_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/shell-tizen/scripts/dialog-focus.test.cjs"}, "region": {"startLine": 152}}}]}, {"ruleId": "scanner-72fe7224bb7383a0", "level": "error", "message": {"text": "Insecure pattern 'new_function_used' in packages/shell-tizen/scripts/boot-progress.test.cjs:50"}, "properties": {"repobilityId": "49ac374dd06b8e9e", "scanner": "scanner-primary", "fingerprint": "72fe7224bb7383a0", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "new_function_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/shell-tizen/scripts/boot-progress.test.cjs"}, "region": {"startLine": 50}}}]}, {"ruleId": "scanner-598984a9002a1c3d", "level": "error", "message": {"text": "Insecure pattern 'new_function_used' in packages/shell-tizen/scripts/plugin-syntax-transpile.test.cjs:186"}, "properties": {"repobilityId": "85299a5586cd4bd7", "scanner": "scanner-primary", "fingerprint": "598984a9002a1c3d", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "new_function_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/shell-tizen/scripts/plugin-syntax-transpile.test.cjs"}, "region": {"startLine": 186}}}]}, {"ruleId": "scanner-bf1799b4937efe9d", "level": "error", "message": {"text": "Insecure pattern 'new_function_used' in packages/shell-tizen/scripts/diag-overlay-gating.test.cjs:149"}, "properties": {"repobilityId": "0ab193b6cd6bbd0e", "scanner": "scanner-primary", "fingerprint": "bf1799b4937efe9d", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "new_function_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/shell-tizen/scripts/diag-overlay-gating.test.cjs"}, "region": {"startLine": 149}}}]}, {"ruleId": "scanner-33c8ae179d866d62", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in packages/shell-tizen/scripts/plugin-config-cache.test.cjs:77"}, "properties": {"repobilityId": "a933af51fb05dcaf", "scanner": "scanner-primary", "fingerprint": "33c8ae179d866d62", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/shell-tizen/scripts/plugin-config-cache.test.cjs"}, "region": {"startLine": 77}}}]}, {"ruleId": "scanner-46e175348b175aa8", "level": "error", "message": {"text": "Insecure pattern 'new_function_used' in packages/shell-tizen/scripts/plugin-config-cache.test.cjs:85"}, "properties": {"repobilityId": "9ee0a7026f19f6bd", "scanner": "scanner-primary", "fingerprint": "46e175348b175aa8", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "new_function_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/shell-tizen/scripts/plugin-config-cache.test.cjs"}, "region": {"startLine": 85}}}]}, {"ruleId": "scanner-b85e11373c29fec1", "level": "error", "message": {"text": "Insecure pattern 'new_function_used' in packages/shell-tizen/scripts/babel-preload.test.cjs:204"}, "properties": {"repobilityId": "d5b321c3b53c9b64", "scanner": "scanner-primary", "fingerprint": "b85e11373c29fec1", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "new_function_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/shell-tizen/scripts/babel-preload.test.cjs"}, "region": {"startLine": 204}}}]}, {"ruleId": "scanner-54bed7a8ce7bd3d7", "level": "error", "message": {"text": "Insecure pattern 'new_function_used' in packages/shell-tizen/scripts/tx-prime.test.cjs:517"}, "properties": {"repobilityId": "c97030f6f0a86a87", "scanner": "scanner-primary", "fingerprint": "54bed7a8ce7bd3d7", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "new_function_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/shell-tizen/scripts/tx-prime.test.cjs"}, "region": {"startLine": 517}}}]}, {"ruleId": "scanner-1e0cabfaeaa5d4e3", "level": "error", "message": {"text": "Insecure pattern 'new_function_used' in packages/shell-tizen/src/shell.js:1029"}, "properties": {"repobilityId": "2e8ff33cfc4c5290", "scanner": "scanner-primary", "fingerprint": "1e0cabfaeaa5d4e3", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "new_function_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/shell-tizen/src/shell.js"}, "region": {"startLine": 1029}}}]}, {"ruleId": "scanner-2ca3cb284ab26940", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in packages/shell-tizen/src/shell.js:2649"}, "properties": {"repobilityId": "84afdbb48f3c75e1", "scanner": "scanner-primary", "fingerprint": "2ca3cb284ab26940", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/shell-tizen/src/shell.js"}, "region": {"startLine": 2649}}}]}, {"ruleId": "scanner-09cbc50cfe9103c0", "level": "warning", "message": {"text": "Insecure pattern 'domparser_html_parse' in packages/shell-tizen/src/shell.js:4149"}, "properties": {"repobilityId": "4fd65c502ca697a6", "scanner": "scanner-primary", "fingerprint": "09cbc50cfe9103c0", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "domparser_html_parse"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/shell-tizen/src/shell.js"}, "region": {"startLine": 4149}}}]}, {"ruleId": "scanner-fbd178cf95d6be26", "level": "error", "message": {"text": "Insecure pattern 'new_function_used' in packages/shell-tizen/src/index.html:47"}, "properties": {"repobilityId": "8e5ca653c9dc9bb8", "scanner": "scanner-primary", "fingerprint": "fbd178cf95d6be26", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "new_function_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/shell-tizen/src/index.html"}, "region": {"startLine": 47}}}]}, {"ruleId": "scanner-8033dd64eda3bfbb", "level": "error", "message": {"text": "Insecure pattern 'new_function_used' in packages/shell-tizen/src/shell.min.js:209"}, "properties": {"repobilityId": "80acd6b0721a8a4b", "scanner": "scanner-primary", "fingerprint": "8033dd64eda3bfbb", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "new_function_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/shell-tizen/src/shell.min.js"}, "region": {"startLine": 209}}}]}, {"ruleId": "scanner-fad9b37e97738c82", "level": "note", "message": {"text": "Insecure pattern 'document_write' in packages/shell-tizen/src/shell.min.js:213"}, "properties": {"repobilityId": "0cbad91e4660c438", "scanner": "scanner-primary", "fingerprint": "fad9b37e97738c82", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["owasp", "document_write"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/shell-tizen/src/shell.min.js"}, "region": {"startLine": 213}}}]}, {"ruleId": "scanner-a9a65fb1e5469649", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in packages/shell-tizen/src/shell.min.js:213"}, "properties": {"repobilityId": "32639cd7fcfa178a", "scanner": "scanner-primary", "fingerprint": "a9a65fb1e5469649", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/shell-tizen/src/shell.min.js"}, "region": {"startLine": 213}}}]}, {"ruleId": "scanner-aa9ce8e3ab8b7555", "level": "warning", "message": {"text": "Insecure pattern 'domparser_html_parse' in packages/shell-tizen/src/shell.min.js:213"}, "properties": {"repobilityId": "fe23dffbd0874c42", "scanner": "scanner-primary", "fingerprint": "aa9ce8e3ab8b7555", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "domparser_html_parse"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/shell-tizen/src/shell.min.js"}, "region": {"startLine": 213}}}]}, {"ruleId": "scanner-cfc046f289d780ce", "level": "error", "message": {"text": "Insecure pattern 'new_function_used' in packages/shell-tizen-bootstrap/scripts/iterator-resweep.test.cjs:121"}, "properties": {"repobilityId": "b47f6c4fbcb5ed51", "scanner": "scanner-primary", "fingerprint": "cfc046f289d780ce", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "new_function_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/shell-tizen-bootstrap/scripts/iterator-resweep.test.cjs"}, "region": {"startLine": 121}}}]}, {"ruleId": "scanner-3cc1c2e6aad387bd", "level": "warning", "message": {"text": "Insecure pattern 'node_child_process' in packages/shell-tizen-bootstrap/scripts/debug-variant.test.cjs:15"}, "properties": {"repobilityId": "ac4d65f68b40e22b", "scanner": "scanner-primary", "fingerprint": "3cc1c2e6aad387bd", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "node_child_process"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/shell-tizen-bootstrap/scripts/debug-variant.test.cjs"}, "region": {"startLine": 15}}}]}, {"ruleId": "scanner-d179ae320d933c8d", "level": "error", "message": {"text": "Insecure pattern 'new_function_used' in packages/shell-tizen-bootstrap/scripts/defer-watchdog.test.cjs:112"}, "properties": {"repobilityId": "72ab3c83362de682", "scanner": "scanner-primary", "fingerprint": "d179ae320d933c8d", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "new_function_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/shell-tizen-bootstrap/scripts/defer-watchdog.test.cjs"}, "region": {"startLine": 112}}}]}, {"ruleId": "scanner-bf72102b77242a75", "level": "error", "message": {"text": "Insecure pattern 'new_function_used' in packages/shell-tizen-bootstrap/scripts/boot-progress.test.cjs:50"}, "properties": {"repobilityId": "facd6c49d7dbae2c", "scanner": "scanner-primary", "fingerprint": "bf72102b77242a75", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "new_function_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/shell-tizen-bootstrap/scripts/boot-progress.test.cjs"}, "region": {"startLine": 50}}}]}, {"ruleId": "scanner-76142c22be28b8a7", "level": "error", "message": {"text": "Insecure pattern 'new_function_used' in packages/shell-tizen-bootstrap/scripts/babel-transpile.test.cjs:114"}, "properties": {"repobilityId": "188a7249651bbe45", "scanner": "scanner-primary", "fingerprint": "76142c22be28b8a7", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "new_function_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/shell-tizen-bootstrap/scripts/babel-transpile.test.cjs"}, "region": {"startLine": 114}}}]}, {"ruleId": "scanner-05e7d2def63f6b9b", "level": "error", "message": {"text": "Insecure pattern 'new_function_used' in packages/shell-tizen-bootstrap/scripts/jel137-login-wedge.test.cjs:86"}, "properties": {"repobilityId": "80f7bdebc45a51b9", "scanner": "scanner-primary", "fingerprint": "05e7d2def63f6b9b", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "new_function_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/shell-tizen-bootstrap/scripts/jel137-login-wedge.test.cjs"}, "region": {"startLine": 86}}}]}, {"ruleId": "scanner-e8fef374c54760bf", "level": "error", "message": {"text": "Insecure pattern 'new_function_used' in packages/shell-tizen-bootstrap/src/boot-shell.min.js:198"}, "properties": {"repobilityId": "c2091eac974810f2", "scanner": "scanner-primary", "fingerprint": "e8fef374c54760bf", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "new_function_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/shell-tizen-bootstrap/src/boot-shell.min.js"}, "region": {"startLine": 198}}}]}, {"ruleId": "scanner-783b6d07862c965d", "level": "note", "message": {"text": "Insecure pattern 'document_write' in packages/shell-tizen-bootstrap/src/boot-shell.min.js:435"}, "properties": {"repobilityId": "f36065191395ebe3", "scanner": "scanner-primary", "fingerprint": "783b6d07862c965d", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["owasp", "document_write"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/shell-tizen-bootstrap/src/boot-shell.min.js"}, "region": {"startLine": 435}}}]}, {"ruleId": "scanner-ac5b18828b886a04", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in packages/shell-tizen-bootstrap/src/boot-shell.min.js:435"}, "properties": {"repobilityId": "94d711439386fe70", "scanner": "scanner-primary", "fingerprint": "ac5b18828b886a04", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/shell-tizen-bootstrap/src/boot-shell.min.js"}, "region": {"startLine": 435}}}]}, {"ruleId": "scanner-160564e60d77a645", "level": "warning", "message": {"text": "Insecure pattern 'domparser_html_parse' in packages/shell-tizen-bootstrap/src/boot-shell.min.js:435"}, "properties": {"repobilityId": "a2d41c86b1a19187", "scanner": "scanner-primary", "fingerprint": "160564e60d77a645", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "domparser_html_parse"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/shell-tizen-bootstrap/src/boot-shell.min.js"}, "region": {"startLine": 435}}}]}, {"ruleId": "scanner-ad1c1861dec16a0b", "level": "error", "message": {"text": "Insecure pattern 'new_function_used' in packages/shell-tizen-bootstrap/src/boot-shell.src.js:865"}, "properties": {"repobilityId": "487e5eb93e39b21b", "scanner": "scanner-primary", "fingerprint": "ad1c1861dec16a0b", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "new_function_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/shell-tizen-bootstrap/src/boot-shell.src.js"}, "region": {"startLine": 865}}}]}, {"ruleId": "scanner-3d7a1f07ff731d95", "level": "note", "message": {"text": "Insecure pattern 'document_write' in packages/shell-tizen-bootstrap/src/boot-shell.src.js:3425"}, "properties": {"repobilityId": "7a8ad888397db833", "scanner": "scanner-primary", "fingerprint": "3d7a1f07ff731d95", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["owasp", "document_write"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/shell-tizen-bootstrap/src/boot-shell.src.js"}, "region": {"startLine": 3425}}}]}, {"ruleId": "scanner-83364f4991fe1f3a", "level": "warning", "message": {"text": "Insecure pattern 'direct_innerhtml_assignment' in packages/shell-tizen-bootstrap/src/boot-shell.src.js:2117"}, "properties": {"repobilityId": "8e6ee3c5362758aa", "scanner": "scanner-primary", "fingerprint": "83364f4991fe1f3a", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "direct_innerhtml_assignment"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/shell-tizen-bootstrap/src/boot-shell.src.js"}, "region": {"startLine": 2117}}}]}, {"ruleId": "scanner-adac5c1993426651", "level": "warning", "message": {"text": "Insecure pattern 'domparser_html_parse' in packages/shell-tizen-bootstrap/src/boot-shell.src.js:3430"}, "properties": {"repobilityId": "f73b0e7be5234bdc", "scanner": "scanner-primary", "fingerprint": "adac5c1993426651", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "domparser_html_parse"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/shell-tizen-bootstrap/src/boot-shell.src.js"}, "region": {"startLine": 3430}}}]}, {"ruleId": "scanner-516290374c655f1b", "level": "error", "message": {"text": "Insecure pattern 'new_function_used' in packages/shell-tizen-bootstrap/src/index.html:202"}, "properties": {"repobilityId": "0e776004a4f4d3ec", "scanner": "scanner-primary", "fingerprint": "516290374c655f1b", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "new_function_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "packages/shell-tizen-bootstrap/src/index.html"}, "region": {"startLine": 202}}}]}, {"ruleId": "scanner-6372cebde0220094", "level": "warning", "message": {"text": "No auth library detected"}, "properties": {"repobilityId": "a5b6035a5bbf8054", "scanner": "scanner-primary", "fingerprint": "6372cebde0220094", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["coverage", "auth"]}}, {"ruleId": "scanner-3bb02c38fa288ad1", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "498c421c3a02a8ae", "scanner": "scanner-primary", "fingerprint": "3bb02c38fa288ad1", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/bootstrap-sign.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-75746e0469238427", "level": "warning", "message": {"text": "GitHub Actions workflow grants broad write permissions"}, "properties": {"repobilityId": "ad6d535d7dec6372", "scanner": "scanner-primary", "fingerprint": "75746e0469238427", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "least-privilege"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/release-tizen.yml"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-79d8c4864d733245", "level": "note", "message": {"text": "Very large file: packages/shell-tizen/src/shell.js (4369 lines)"}, "properties": {"repobilityId": "da8fd711a2c49d0f", "scanner": "scanner-primary", "fingerprint": "79d8c4864d733245", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-0390dce7bc418452", "level": "note", "message": {"text": "Very large file: packages/shell-tizen-bootstrap/src/boot-shell.src.js (3535 lines)"}, "properties": {"repobilityId": "3dacedc49c3ff3df", "scanner": "scanner-primary", "fingerprint": "0390dce7bc418452", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-141b30a41e03817b", "level": "note", "message": {"text": "No license file detected"}, "properties": {"repobilityId": "3606d7421903ac99", "scanner": "scanner-primary", "fingerprint": "141b30a41e03817b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["license", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-3ab5d313dda8e5f9", "level": "note", "message": {"text": "Debug logging residue appears in source files"}, "properties": {"repobilityId": "ca1d88cb5890706c", "scanner": "scanner-primary", "fingerprint": "3ab5d313dda8e5f9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["debug", "cleanup", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-72b2a6250083a784", "level": "warning", "message": {"text": "Placeholder or mock-heavy implementation detected"}, "properties": {"repobilityId": "31e3df9bcb8c3bbc", "scanner": "scanner-primary", "fingerprint": "72b2a6250083a784", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "incomplete", "generated-repo-pattern"]}}, {"ruleId": "scanner-9d79c4077342a7d0", "level": "warning", "message": {"text": "Runtime service client appears to use placeholder configuration"}, "properties": {"repobilityId": "6d5fdc451318a92e", "scanner": "scanner-primary", "fingerprint": "9d79c4077342a7d0", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "runtime-config", "service-client", "generated-repo-pattern"]}}, {"ruleId": "scanner-2d0c7b7ab8f8aacf", "level": "warning", "message": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "properties": {"repobilityId": "d979cfd9122a9eb1", "scanner": "scanner-primary", "fingerprint": "2d0c7b7ab8f8aacf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "critical-flow", "generated-repo-pattern"]}}, {"ruleId": "scanner-11825279136b53a3", "level": "warning", "message": {"text": "CI is configured but no tests are detected"}, "properties": {"repobilityId": "f5a86da7dade009d", "scanner": "scanner-primary", "fingerprint": "11825279136b53a3", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["tests", "ci", "config-theater", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-b9088664ace7f748", "level": "note", "message": {"text": "Composite production-readiness gap"}, "properties": {"repobilityId": "9f052450307e934f", "scanner": "scanner-primary", "fingerprint": "b9088664ace7f748", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["production-readiness", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-ea8f3013f588db25", "level": "note", "message": {"text": "Shallow git history limits provenance confidence"}, "properties": {"repobilityId": "279eb07772c668e7", "scanner": "scanner-primary", "fingerprint": "ea8f3013f588db25", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-8424db9c75e04ba4", "level": "none", "message": {"text": "Very short observed git history"}, "properties": {"repobilityId": "88ea158346dd6670", "scanner": "scanner-primary", "fingerprint": "8424db9c75e04ba4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-5011420387f262ee", "level": "none", "message": {"text": "Commented-code block (11 lines) in packages/shell-tizen/scripts/remember-me-default.test.cjs:3"}, "properties": {"repobilityId": "e807db13da6807a2", "scanner": "scanner-primary", "fingerprint": "5011420387f262ee", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-4f97e66aae75c77d", "level": "none", "message": {"text": "Commented-code block (10 lines) in packages/shell-tizen/scripts/late-onload.test.cjs:3"}, "properties": {"repobilityId": "d83532dfb3f413c9", "scanner": "scanner-primary", "fingerprint": "4f97e66aae75c77d", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-34e98a50e821cece", "level": "none", "message": {"text": "Commented-code block (9 lines) in packages/shell-tizen/scripts/creds-guard.test.cjs:4"}, "properties": {"repobilityId": "6e99e2fb9c864a27", "scanner": "scanner-primary", "fingerprint": "34e98a50e821cece", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-4ba314fb6e6198ee", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/shell-tizen/scripts/creds-guard.test.cjs:510"}, "properties": {"repobilityId": "fcac7945d38cebc6", "scanner": "scanner-primary", "fingerprint": "4ba314fb6e6198ee", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-9df26b3b1d7a394d", "level": "none", "message": {"text": "Commented-code block (6 lines) in packages/shell-tizen/scripts/wgt-source-match.test.cjs:2"}, "properties": {"repobilityId": "c47458e93ccd59cf", "scanner": "scanner-primary", "fingerprint": "9df26b3b1d7a394d", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-06bb219d96e1197f", "level": "none", "message": {"text": "Commented-code block (10 lines) in packages/shell-tizen/scripts/qa-seed-strip.test.cjs:4"}, "properties": {"repobilityId": "b16d4b26f120ade4", "scanner": "scanner-primary", "fingerprint": "06bb219d96e1197f", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-c3427904b3ec2916", "level": "none", "message": {"text": "Commented-code block (9 lines) in packages/shell-tizen/scripts/nativeshell-apphost.test.cjs:3"}, "properties": {"repobilityId": "0c2b66e4435ab0ab", "scanner": "scanner-primary", "fingerprint": "c3427904b3ec2916", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-b76a4bef013bedca", "level": "none", "message": {"text": "Commented-code block (6 lines) in packages/shell-tizen/scripts/volume-control.test.cjs:9"}, "properties": {"repobilityId": "4d91aeb8b9a32dc1", "scanner": "scanner-primary", "fingerprint": "b76a4bef013bedca", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-537064cf61e4c84f", "level": "none", "message": {"text": "Commented-code block (7 lines) in packages/shell-tizen/scripts/openurl-noop.test.cjs:4"}, "properties": {"repobilityId": "a38bd2c8856a988c", "scanner": "scanner-primary", "fingerprint": "537064cf61e4c84f", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-4805e4d210b454cf", "level": "none", "message": {"text": "Commented-code block (7 lines) in packages/shell-tizen/scripts/flat-polyfill.test.cjs:4"}, "properties": {"repobilityId": "a606d395611ae37c", "scanner": "scanner-primary", "fingerprint": "4805e4d210b454cf", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-fda0cb8cb8113a9d", "level": "none", "message": {"text": "Commented-code block (10 lines) in packages/shell-tizen/scripts/localstorage-quota.test.cjs:4"}, "properties": {"repobilityId": "9741eedf3f7b91e6", "scanner": "scanner-primary", "fingerprint": "fda0cb8cb8113a9d", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-d7c757499e43c466", "level": "none", "message": {"text": "Commented-code block (6 lines) in packages/shell-tizen/scripts/fullscreen-noop.test.cjs:4"}, "properties": {"repobilityId": "f7531fd230ed13ae", "scanner": "scanner-primary", "fingerprint": "d7c757499e43c466", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-fd4a09ba86e72538", "level": "none", "message": {"text": "Commented-code block (5 lines) in packages/shell-tizen/scripts/system-info.test.cjs:3"}, "properties": {"repobilityId": "5c26232ff0d62e2d", "scanner": "scanner-primary", "fingerprint": "fd4a09ba86e72538", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-318e5d1a190f1c4a", "level": "none", "message": {"text": "Commented-code block (5 lines) in packages/shell-tizen/scripts/jquery-gate.test.cjs:13"}, "properties": {"repobilityId": "2998d559c24a0750", "scanner": "scanner-primary", "fingerprint": "318e5d1a190f1c4a", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-66ef300ea26ca5d7", "level": "none", "message": {"text": "Commented-code block (9 lines) in packages/shell-tizen/scripts/js-error-tolerance.test.cjs:5"}, "properties": {"repobilityId": "99f170575bac070f", "scanner": "scanner-primary", "fingerprint": "66ef300ea26ca5d7", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-961deeb40d8ab26d", "level": "none", "message": {"text": "Commented-code block (12 lines) in packages/shell-tizen/scripts/server-url-persistence.test.cjs:4"}, "properties": {"repobilityId": "d4f811e78e0f5462", "scanner": "scanner-primary", "fingerprint": "961deeb40d8ab26d", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-b2a2d012fc53f79f", "level": "none", "message": {"text": "Commented-code block (15 lines) in packages/shell-tizen/scripts/build_shell_min.py:43"}, "properties": {"repobilityId": "22cc2174a5921895", "scanner": "scanner-primary", "fingerprint": "b2a2d012fc53f79f", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-50edf7083622a69e", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 packages/shell-tizen/scripts/build_shell_min.py:92"}, "properties": {"repobilityId": "9e178e945681c697", "scanner": "scanner-primary", "fingerprint": "50edf7083622a69e", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-ca24fba5b3355928", "level": "none", "message": {"text": "Commented-code block (8 lines) in packages/shell-tizen/scripts/dialog-focus.test.cjs:4"}, "properties": {"repobilityId": "eb21604e19688820", "scanner": "scanner-primary", "fingerprint": "ca24fba5b3355928", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-080cd3d00211b11e", "level": "none", "message": {"text": "Commented-code block (8 lines) in packages/shell-tizen/scripts/playback-controls.test.cjs:3"}, "properties": {"repobilityId": "5e81875b7cd09ea3", "scanner": "scanner-primary", "fingerprint": "080cd3d00211b11e", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-455624a40c90d9c7", "level": "none", "message": {"text": "Commented-code block (7 lines) in packages/shell-tizen/scripts/select-server.test.cjs:4"}, "properties": {"repobilityId": "bf8ce60a2e3db9a9", "scanner": "scanner-primary", "fingerprint": "455624a40c90d9c7", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-acdc7e3fdf63bf12", "level": "none", "message": {"text": "Commented-code block (7 lines) in packages/shell-tizen/scripts/bundle-patch.test.cjs:4"}, "properties": {"repobilityId": "4a11923cd536abd2", "scanner": "scanner-primary", "fingerprint": "acdc7e3fdf63bf12", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-bf44b79d3d7ed383", "level": "none", "message": {"text": "Commented-code block (16 lines) in packages/shell-tizen/scripts/plugin-syntax-transpile.test.cjs:10"}, "properties": {"repobilityId": "af5289f1843af41a", "scanner": "scanner-primary", "fingerprint": "bf44b79d3d7ed383", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-d8792e70746da2c8", "level": "none", "message": {"text": "Commented-code block (7 lines) in packages/shell-tizen/scripts/network-error-recovery.test.cjs:4"}, "properties": {"repobilityId": "c13c96c202de9555", "scanner": "scanner-primary", "fingerprint": "d8792e70746da2c8", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-60b2b546c0505340", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/shell-tizen/scripts/network-error-recovery.test.cjs:204"}, "properties": {"repobilityId": "8ebb62006b2fc443", "scanner": "scanner-primary", "fingerprint": "60b2b546c0505340", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-8f26f6418a721e45", "level": "none", "message": {"text": "Commented-code block (9 lines) in packages/shell-tizen/scripts/color-keys.test.cjs:5"}, "properties": {"repobilityId": "efc25499a78ab0f8", "scanner": "scanner-primary", "fingerprint": "8f26f6418a721e45", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-2e1a077a737f11fc", "level": "none", "message": {"text": "Commented-code block (6 lines) in packages/shell-tizen/scripts/diag-overlay-gating.test.cjs:3"}, "properties": {"repobilityId": "360604e0f99a6ea3", "scanner": "scanner-primary", "fingerprint": "2e1a077a737f11fc", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-9423f178bfccb302", "level": "none", "message": {"text": "Commented-code block (7 lines) in packages/shell-tizen/scripts/lifecycle-resume.test.cjs:4"}, "properties": {"repobilityId": "8c888382fbcdc4ee", "scanner": "scanner-primary", "fingerprint": "9423f178bfccb302", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-61ce740877d46eae", "level": "none", "message": {"text": "Commented-code block (9 lines) in packages/shell-tizen/scripts/plugin-config-cache.test.cjs:12"}, "properties": {"repobilityId": "d5be1c88fc621a39", "scanner": "scanner-primary", "fingerprint": "61ce740877d46eae", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-ab523f993219d98d", "level": "none", "message": {"text": "Commented-code block (10 lines) in packages/shell-tizen/scripts/babel-preload.test.cjs:4"}, "properties": {"repobilityId": "96081ca2ca457bb8", "scanner": "scanner-primary", "fingerprint": "ab523f993219d98d", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-5bcb033424fdf2f9", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/shell-tizen/scripts/babel-preload.test.cjs:194"}, "properties": {"repobilityId": "af8808fe8700e7e4", "scanner": "scanner-primary", "fingerprint": "5bcb033424fdf2f9", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-d31337a79a5160b8", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 packages/shell-tizen/scripts/verify_shell_src.py:84"}, "properties": {"repobilityId": "517416b0a72a5bcc", "scanner": "scanner-primary", "fingerprint": "d31337a79a5160b8", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-412688637cfd6bcc", "level": "none", "message": {"text": "Commented-code block (8 lines) in packages/shell-tizen/scripts/web-index-cache.test.cjs:4"}, "properties": {"repobilityId": "777c4468966535de", "scanner": "scanner-primary", "fingerprint": "412688637cfd6bcc", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-2a20ce64635bba37", "level": "none", "message": {"text": "Commented-code block (7 lines) in packages/shell-tizen/scripts/tx-prime.test.cjs:3"}, "properties": {"repobilityId": "bd9118024ad94825", "scanner": "scanner-primary", "fingerprint": "2a20ce64635bba37", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-6e81798d18921dca", "level": "none", "message": {"text": "Commented-code block (5 lines) in packages/shell-tizen/scripts/jsi-no-cache.test.cjs:1"}, "properties": {"repobilityId": "0054ab0a7c61c587", "scanner": "scanner-primary", "fingerprint": "6e81798d18921dca", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-3250283eb33a7c74", "level": "none", "message": {"text": "Commented-code block (6 lines) in packages/shell-tizen/scripts/https-certificates.test.cjs:4"}, "properties": {"repobilityId": "f73839e672b5f1bc", "scanner": "scanner-primary", "fingerprint": "3250283eb33a7c74", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-76685f984cd5b786", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/shell-tizen/scripts/https-certificates.test.cjs:126"}, "properties": {"repobilityId": "67089411978a87b0", "scanner": "scanner-primary", "fingerprint": "76685f984cd5b786", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-8cc2ad98559cd5cc", "level": "none", "message": {"text": "Commented-code block (7 lines) in packages/shell-tizen/scripts/seed-injection.test.cjs:3"}, "properties": {"repobilityId": "8d9776022183c409", "scanner": "scanner-primary", "fingerprint": "8cc2ad98559cd5cc", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-6b78f25d8381f76b", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/shell-tizen/scripts/seed-injection.test.cjs:518"}, "properties": {"repobilityId": "f1fdb7b1ef4dffbb", "scanner": "scanner-primary", "fingerprint": "6b78f25d8381f76b", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-8e7a2869ce421e92", "level": "none", "message": {"text": "Commented-code block (5 lines) in packages/shell-tizen/scripts/movie-details.test.cjs:3"}, "properties": {"repobilityId": "9f1a5dc4232321a8", "scanner": "scanner-primary", "fingerprint": "8e7a2869ce421e92", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-3d0730a54c12a943", "level": "none", "message": {"text": "Commented-code block (11 lines) in packages/shell-tizen/scripts/foreign-origin-passthrough.test.cjs:8"}, "properties": {"repobilityId": "c827ee5573563a3a", "scanner": "scanner-primary", "fingerprint": "3d0730a54c12a943", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-a75fd1a1dcb2a14f", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/shell-tizen/scripts/foreign-origin-passthrough.test.cjs:11"}, "properties": {"repobilityId": "f6739d0d464120de", "scanner": "scanner-primary", "fingerprint": "a75fd1a1dcb2a14f", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-2cd2033df53507d9", "level": "none", "message": {"text": "Commented-code block (20 lines) in packages/shell-tizen/scripts/getdeviceprofile.test.cjs:3"}, "properties": {"repobilityId": "ea16b6966afe2f7b", "scanner": "scanner-primary", "fingerprint": "2cd2033df53507d9", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-de9fb1a554e018ab", "level": "none", "message": {"text": "Commented-code block (7 lines) in packages/shell-tizen/scripts/media-keys.test.cjs:4"}, "properties": {"repobilityId": "6a0f072984916a8d", "scanner": "scanner-primary", "fingerprint": "de9fb1a554e018ab", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-ef7c88a75e047008", "level": "none", "message": {"text": "Commented-code block (5 lines) in packages/shell-tizen/scripts/fixtures/tizen-stub.js:8"}, "properties": {"repobilityId": "886842cd2f10c72e", "scanner": "scanner-primary", "fingerprint": "ef7c88a75e047008", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-3ae8308940792d03", "level": "none", "message": {"text": "Commented-code block (12 lines) in packages/shell-tizen/src/shell.js:30"}, "properties": {"repobilityId": "caa0f2dda36ea76c", "scanner": "scanner-primary", "fingerprint": "3ae8308940792d03", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-9d1c8793a27e9670", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/shell-tizen/src/shell.js:32"}, "properties": {"repobilityId": "67a397ac9785dc25", "scanner": "scanner-primary", "fingerprint": "9d1c8793a27e9670", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-14c29b245822a3d2", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/shell-tizen/src/shell.min.js:209"}, "properties": {"repobilityId": "b22e855bb4fae42b", "scanner": "scanner-primary", "fingerprint": "14c29b245822a3d2", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-2c42c30cf9e91ea0", "level": "none", "message": {"text": "Commented-code block (6 lines) in packages/shell-tizen/src/qa-beacon.js:194"}, "properties": {"repobilityId": "cbea7ab8ba193196", "scanner": "scanner-primary", "fingerprint": "2c42c30cf9e91ea0", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-180bb2653a3d2d35", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 packages/shell-tizen-bootstrap/scripts/verify_boot_shell_src.py:76"}, "properties": {"repobilityId": "d44b6d3adbeedc39", "scanner": "scanner-primary", "fingerprint": "180bb2653a3d2d35", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-dc2014a2ca169a9b", "level": "none", "message": {"text": "Commented-code block (17 lines) in packages/shell-tizen-bootstrap/scripts/iterator-resweep.test.cjs:4"}, "properties": {"repobilityId": "5da1759406fcef6e", "scanner": "scanner-primary", "fingerprint": "dc2014a2ca169a9b", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-6e84f3aef76beb24", "level": "none", "message": {"text": "Commented-code block (7 lines) in packages/shell-tizen-bootstrap/scripts/debug-variant.test.cjs:1"}, "properties": {"repobilityId": "4373f397fa23720f", "scanner": "scanner-primary", "fingerprint": "6e84f3aef76beb24", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-d3fd2d60e304bc02", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 packages/shell-tizen-bootstrap/scripts/build_bootstrap.py:194"}, "properties": {"repobilityId": "32f30f05af1880d7", "scanner": "scanner-primary", "fingerprint": "d3fd2d60e304bc02", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-38a9a2c70c030aad", "level": "none", "message": {"text": "Commented-code block (13 lines) in packages/shell-tizen-bootstrap/scripts/babel-transpile.test.cjs:4"}, "properties": {"repobilityId": "871f6bfee5622805", "scanner": "scanner-primary", "fingerprint": "38a9a2c70c030aad", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-da29aa8fb1fabb6a", "level": "none", "message": {"text": "Commented-code block (6 lines) in packages/shell-tizen-bootstrap/scripts/connect-form-parity.test.cjs:7"}, "properties": {"repobilityId": "35b1fe4507cc6b6e", "scanner": "scanner-primary", "fingerprint": "da29aa8fb1fabb6a", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-e29d707ee1341120", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 packages/shell-tizen-bootstrap/scripts/build_boot_shell.py:77"}, "properties": {"repobilityId": "e46c911279910aa9", "scanner": "scanner-primary", "fingerprint": "e29d707ee1341120", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-ad7bd903bd311b85", "level": "none", "message": {"text": "Commented-code block (6 lines) in packages/shell-tizen-bootstrap/src/boot-shell.min.js:333"}, "properties": {"repobilityId": "16e87522fe2f0a40", "scanner": "scanner-primary", "fingerprint": "ad7bd903bd311b85", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-f7cc4038ae876682", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/shell-tizen-bootstrap/src/boot-shell.min.js:198"}, "properties": {"repobilityId": "a773ba97dad42049", "scanner": "scanner-primary", "fingerprint": "f7cc4038ae876682", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-b975cc53a73029f6", "level": "none", "message": {"text": "Commented-code block (6 lines) in packages/shell-tizen-bootstrap/src/boot-shell.src.js:23"}, "properties": {"repobilityId": "1728333fc7d06db3", "scanner": "scanner-primary", "fingerprint": "b975cc53a73029f6", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-291bdd4ce7afc667", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 packages/shell-tizen-bootstrap/src/boot-shell.src.js:281"}, "properties": {"repobilityId": "3923dc07d07870f8", "scanner": "scanner-primary", "fingerprint": "291bdd4ce7afc667", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-964426f164b1bc81", "level": "note", "message": {"text": "Legacy-named symbol `JellyfinShellBootstrap_v2` in packages/server-shell-drop/scripts/emit_manifest.py:11"}, "properties": {"repobilityId": "112cf3ce2ef43b49", "scanner": "scanner-primary", "fingerprint": "964426f164b1bc81", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "bb16a181a2df2a3a", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "d1464f4517681168", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "3cee91f2788e721c", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "872aa3eea6cf398d", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}]}]}