{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "scanner-40194876f038fdfd", "name": "Possibly dead Python function: set_profile_username", "shortDescription": {"text": "Possibly dead Python function: set_profile_username"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d5802d1fad8d8c83", "name": "Possibly dead Python function: set_profile_display_name", "shortDescription": {"text": "Possibly dead Python function: set_profile_display_name"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2a15abc15e201720", "name": "Possibly dead Python function: set_profile_bio", "shortDescription": {"text": "Possibly dead Python function: set_profile_bio"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-cce69de76932bb84", "name": "Possibly dead Python function: set_profile_website_url", "shortDescription": {"text": "Possibly dead Python function: set_profile_website_url"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ec632051704d2edf", "name": "Possibly dead Python function: set_profile_github_url", "shortDescription": {"text": "Possibly dead Python function: set_profile_github_url"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-39fba492aea00937", "name": "Possibly dead Python function: set_profile_xian_profile_url", "shortDescription": {"text": "Possibly dead Python function: set_profile_xian_profile_url"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7f84b0d671e3c13d", "name": "Possibly dead Python function: remove_avatar", "shortDescription": {"text": "Possibly dead Python function: remove_avatar"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d5c76a910809c7cc", "name": "Possibly dead Python function: set_playground_target_label", "shortDescription": {"text": "Possibly dead Python function: set_playground_target_label"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-16dbfc67633945c1", "name": "Possibly dead Python function: set_playground_target_playground_id", "shortDescription": {"text": "Possibly dead Python function: set_playground_target_playground_id"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ea1d9048b7cd93b3", "name": "Possibly dead Python function: set_playground_target_default_choice", "shortDescription": {"text": "Possibly dead Python function: set_playground_target_default_choice"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-548ed5a65d96242e", "name": "Possibly dead Python function: reset_playground_target_form", "shortDescription": {"text": "Possibly dead Python function: reset_playground_target_form"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a57605c7184b44b7", "name": "Possibly dead Python function: set_target_contract_id_value", "shortDescription": {"text": "Possibly dead Python function: set_target_contract_id_value"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-c5ab5f812efda12a", "name": "Possibly dead Python function: set_relation_type_value", "shortDescription": {"text": "Possibly dead Python function: set_relation_type_value"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e448aadcbb1818c1", "name": "Possibly dead Python function: set_note_value", "shortDescription": {"text": "Possibly dead Python function: set_note_value"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5ce7ff6f40d86c45", "name": "Possibly dead Python function: cancel_edit_relation", "shortDescription": {"text": "Possibly dead Python function: cancel_edit_relation"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7806f15366d4b7b6", "name": "Possibly dead Python function: load_login_page", "shortDescription": {"text": "Possibly dead Python function: load_login_page"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-54cbea38037416b4", "name": "Possibly dead Python function: load_registration_page", "shortDescription": {"text": "Possibly dead Python function: load_registration_page"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-920f7110484765e2", "name": "Possibly dead Python function: set_search_query", "shortDescription": {"text": "Possibly dead Python function: set_search_query"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d33269196382565d", "name": "Possibly dead Python function: set_selected_category", "shortDescription": {"text": "Possibly dead Python function: set_selected_category"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0ad7e9871c979730", "name": "Possibly dead Python function: set_selected_tag", "shortDescription": {"text": "Possibly dead Python function: set_selected_tag"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-64ec8a4737c60590", "name": "Possibly dead Python function: set_selected_sort", "shortDescription": {"text": "Possibly dead Python function: set_selected_sort"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-13f9d36d8a9283f2", "name": "Possibly dead Python function: set_selected_sort", "shortDescription": {"text": "Possibly dead Python function: set_selected_sort"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-bd77ff91ec37bee3", "name": "Possibly dead Python function: set_selected_timeframe", "shortDescription": {"text": "Possibly dead Python function: set_selected_timeframe"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e8739e04c399aa25", "name": "Possibly dead Python function: set_selected_window_days", "shortDescription": {"text": "Possibly dead Python function: set_selected_window_days"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e313a72b4a8eb5d6", "name": "Possibly dead Python function: set_query", "shortDescription": {"text": "Possibly dead Python function: set_query"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-38ab2048d18ee496", "name": "Possibly dead Python function: set_selected_featured_filter", "shortDescription": {"text": "Possibly dead Python function: set_selected_featured_filter"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9710c8d059e53154", "name": "No frontend routes/components detected", "shortDescription": {"text": "No frontend routes/components detected"}, "fullDescription": {"text": "No React/Vue/Next routes were found. This is fine for backend-only repos."}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-09770e7374643379", "name": "Possible secret in contracting_hub/services/auth.py", "shortDescription": {"text": "Possible secret in contracting_hub/services/auth.py"}, "fullDescription": {"text": "Detected pattern matching password_literal. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-08102ce36cc072af", "name": "Possible secret in contracting_hub/services/bootstrap.py", "shortDescription": {"text": "Possible secret in contracting_hub/services/bootstrap.py"}, "fullDescription": {"text": "Detected pattern matching password_literal. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-6372cebde0220094", "name": "No auth library detected", "shortDescription": {"text": "No auth library detected"}, "fullDescription": {"text": "The scanner did not find any standard auth library (JWT, OAuth, NextAuth, Auth0, etc.). The repo has auth/admin/session surface indicators, so auth may live in custom code, in a separate service, or be missing."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e5b09dab12a4e2c0", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "actions/checkout@v6 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7ba1f53387aab334", "name": "Very large file: contracting_hub/states/contract_detail.py (1512 lines)", "shortDescription": {"text": "Very large file: contracting_hub/states/contract_detail.py (1512 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-6ce6f2f45b5ae786", "name": "Very large file: contracting_hub/services/bootstrap.py (1586 lines)", "shortDescription": {"text": "Very large file: contracting_hub/services/bootstrap.py (1586 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-141b30a41e03817b", "name": "No license file detected", "shortDescription": {"text": "No license file detected"}, "fullDescription": {"text": "No LICENSE/COPYING/NOTICE file was found. Generated repositories often omit licensing, which blocks reuse and automated intake."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-72b2a6250083a784", "name": "Placeholder or mock-heavy implementation detected", "shortDescription": {"text": "Placeholder or mock-heavy implementation detected"}, "fullDescription": {"text": "Found 44 placeholder/mock markers across 13 source files. This often means the repo looks complete while core flows still use generated scaffolding or fake data."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2d0c7b7ab8f8aacf", "name": "Critical user flow still appears backed by mock or placeholder data", "shortDescription": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "fullDescription": {"text": "A payment/auth/admin/order/billing-style flow contains mock, fake, TODO, dummy, or placeholder markers in runtime source. In the Fable corpus this is a high-leverage completeness smell: the app can look finished while the money, identity, or tenant flow is still scaffolded."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ea8f3013f588db25", "name": "Shallow git history limits provenance confidence", "shortDescription": {"text": "Shallow git history limits provenance confidence"}, "fullDescription": {"text": "The repository is a shallow clone. Origin/evolution analysis cannot distinguish fresh generation, imported legacy code, or long-lived human code with high confidence."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8424db9c75e04ba4", "name": "Very short observed git history", "shortDescription": {"text": "Very short observed git history"}, "fullDescription": {"text": "The repo has multiple source files but two or fewer visible commits. This is not a failure by itself, but it lowers confidence in evolution-based diagnosis."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-49db5f3bd56142c9", "name": "Legacy-named symbol `test_registration_page_renders_form_shell_and_identity_copy` in tests/integration/test_auth_pages_s", "shortDescription": {"text": "Legacy-named symbol `test_registration_page_renders_form_shell_and_identity_copy` in tests/integration/test_auth_pages_smoke.py:77"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-dd6381a2ac30c303", "name": "Legacy-named symbol `escrow_v1` in tests/integration/test_developer_kpi_aggregations.py:100", "shortDescription": {"text": "Legacy-named symbol `escrow_v1` in tests/integration/test_developer_kpi_aggregations.py:100"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e57bba67767b9aa8", "name": "Legacy-named symbol `escrow_v1` in tests/integration/test_public_developer_profile_snapshot_service.py:81", "shortDescription": {"text": "Legacy-named symbol `escrow_v1` in tests/integration/test_public_developer_profile_snapshot_service.py:81"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0f2b7da9cf473bfb", "name": "Legacy-named symbol `con_legacy` in tests/integration/test_admin_contracts_service.py:93", "shortDescription": {"text": "Legacy-named symbol `con_legacy` in tests/integration/test_admin_contracts_service.py:93"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9665a9308740ec1d", "name": "Legacy-named symbol `lint_summary_copy` in tests/integration/test_contract_lint_results_panel_component_smoke.py:62", "shortDescription": {"text": "Legacy-named symbol `lint_summary_copy` in tests/integration/test_contract_lint_results_panel_component_smoke.py:62"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3cf7cd972949a261", "name": "Legacy-named symbol `escrow_v1` in tests/integration/test_homepage_service_queries.py:69", "shortDescription": {"text": "Legacy-named symbol `escrow_v1` in tests/integration/test_homepage_service_queries.py:69"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d8c86960a078beeb", "name": "Legacy-named symbol `con_token_v2` in tests/unit/test_contract_metadata.py:22", "shortDescription": {"text": "Legacy-named symbol `con_token_v2` in tests/unit/test_contract_metadata.py:22"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a37f8a5073ed8640", "name": "Legacy-named symbol `con_escrow_v2` in tests/unit/test_admin_contract_editor_state.py:246", "shortDescription": {"text": "Legacy-named symbol `con_escrow_v2` in tests/unit/test_admin_contract_editor_state.py:246"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-486612cbaeabcb05", "name": "Legacy-named symbol `test_format_admin_contract_relation_type_label_returns_expected_copy` in tests/unit/test_admin_cont", "shortDescription": {"text": "Legacy-named symbol `test_format_admin_contract_relation_type_label_returns_expected_copy` in tests/unit/test_admin_contract_relations_service_helpers.py:36"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b8b40532e76451ac", "name": "Legacy-named symbol `preview_lint_summary_copy` in tests/unit/test_admin_contract_versions_state.py:242", "shortDescription": {"text": "Legacy-named symbol `preview_lint_summary_copy` in tests/unit/test_admin_contract_versions_state.py:242"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9167e849bfeebfd6", "name": "Legacy-named symbol `empty_copy` in contracting_hub/components/contract_related_contracts.py:76", "shortDescription": {"text": "Legacy-named symbol `empty_copy` in contracting_hub/components/contract_related_contracts.py:76"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-36e63666dfdb460d", "name": "Legacy-named symbol `lint_summary_copy` in contracting_hub/components/contract_lint_results_panel.py:19", "shortDescription": {"text": "Legacy-named symbol `lint_summary_copy` in contracting_hub/components/contract_lint_results_panel.py:19"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-766a3cfde67c2f00", "name": "Legacy-named symbol `note_empty_copy` in contracting_hub/admin/contract_relations.py:368", "shortDescription": {"text": "Legacy-named symbol `note_empty_copy` in contracting_hub/admin/contract_relations.py:368"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-24fe926d2620116d", "name": "Legacy-named symbol `con_escrow_v2` in contracting_hub/admin/contract_editor.py:519", "shortDescription": {"text": "Legacy-named symbol `con_escrow_v2` in contracting_hub/admin/contract_editor.py:519"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-dc270e500dd2b344", "name": "Legacy-named symbol `preview_lint_summary_copy` in contracting_hub/admin/contract_versions.py:611", "shortDescription": {"text": "Legacy-named symbol `preview_lint_summary_copy` in contracting_hub/admin/contract_versions.py:611"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8d17ac78b9a0b352", "name": "Legacy-named symbol `preview_lint_summary_copy` in contracting_hub/states/admin_contract_versions.py:247", "shortDescription": {"text": "Legacy-named symbol `preview_lint_summary_copy` in contracting_hub/states/admin_contract_versions.py:247"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-d2cab7198465fc16", "name": "Legacy-named symbol `engagement_login_copy` in contracting_hub/states/contract_detail.py:246", "shortDescription": {"text": "Legacy-named symbol `engagement_login_copy` in contracting_hub/states/contract_detail.py:246"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-48e96848fb725160", "name": "Legacy-named symbol `_build_empty_history_copy` in contracting_hub/states/deployment_history.py:251", "shortDescription": {"text": "Legacy-named symbol `_build_empty_history_copy` in contracting_hub/states/deployment_history.py:251"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5ae50249ebcc6af0", "name": "Legacy-named symbol `_empty_section_copy` in contracting_hub/pages/home.py:121", "shortDescription": {"text": "Legacy-named symbol `_empty_section_copy` in contracting_hub/pages/home.py:121"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-454d84e096cfe353", "name": "Legacy-named symbol `engagement_login_copy` in contracting_hub/pages/contract_detail.py:468", "shortDescription": {"text": "Legacy-named symbol `engagement_login_copy` in contracting_hub/pages/contract_detail.py:468"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-08d3b9604dac03f7", "name": "Legacy-named symbol `con_market_maker_legacy` in contracting_hub/services/bootstrap.py:475", "shortDescription": {"text": "Legacy-named symbol `con_market_maker_legacy` in contracting_hub/services/bootstrap.py:475"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-be46ea126aa5d8dc", "name": "Near-duplicate function bodies in 3 places", "shortDescription": {"text": "Near-duplicate function bodies in 3 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\ncontracting_hub/integrations/playground.py:as_payload, contracting_hub/integrations/playground.py:as_payload, contracting_hub/integrations/playground.py:as_payload\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2c04133e54348533", "name": "Near-duplicate function bodies in 2 places", "shortDescription": {"text": "Near-duplicate function bodies in 2 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\ncontracting_hub/integrations/playground.py:submit_deployment, contracting_hub/integrations/playground.py:submit_deployment\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0027e313ade46c8f", "name": "Near-duplicate function bodies in 7 places", "shortDescription": {"text": "Near-duplicate function bodies in 7 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\ncontracting_hub/states/profile_settings.py:is_authenticated, contracting_hub/states/admin_catalog_operations.py:is_authenticated, contracting_hub/states/admin_contract_relations.py:is_authenticated, contracting_hub/states/admin_contract_versions.py:is_authenticated\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-76a2f6818267a9a8", "name": "Near-duplicate function bodies in 8 places", "shortDescription": {"text": "Near-duplicate function bodies in 8 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\ncontracting_hub/states/profile_settings.py:current_identity_label, contracting_hub/states/admin_catalog_operations.py:current_identity_label, contracting_hub/states/admin_contract_relations.py:current_identity_label, contracting_hub/states/auth.py:current_identity_label\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-02525d39071dd2c7", "name": "Near-duplicate function bodies in 5 places", "shortDescription": {"text": "Near-duplicate function bodies in 5 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\ncontracting_hub/states/admin_catalog_operations.py:logout_current_user, contracting_hub/states/admin_contract_relations.py:logout_current_user, contracting_hub/states/admin_contract_versions.py:logout_current_user, contracting_hub/states/admin_contracts.py:logout_current_user\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/22976"}, "properties": {"repository": "xian-technology/xian-contracting-hub-web", "repoUrl": "https://github.com/xian-technology/xian-contracting-hub-web", "branch": "main"}, "results": [{"ruleId": "scanner-40194876f038fdfd", "level": "note", "message": {"text": "Possibly dead Python function: set_profile_username"}, "properties": {"repobilityId": "31845f0eeb94f340", "scanner": "scanner-primary", "fingerprint": "40194876f038fdfd", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "contracting_hub/states/profile_settings.py:236"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d5802d1fad8d8c83", "level": "note", "message": {"text": "Possibly dead Python function: set_profile_display_name"}, "properties": {"repobilityId": "70711c3d7148111a", "scanner": "scanner-primary", "fingerprint": "d5802d1fad8d8c83", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "contracting_hub/states/profile_settings.py:240"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2a15abc15e201720", "level": "note", "message": {"text": "Possibly dead Python function: set_profile_bio"}, "properties": {"repobilityId": "31087199af09955b", "scanner": "scanner-primary", "fingerprint": "2a15abc15e201720", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "contracting_hub/states/profile_settings.py:244"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-cce69de76932bb84", "level": "note", "message": {"text": "Possibly dead Python function: set_profile_website_url"}, "properties": {"repobilityId": "56a645ff5e3eec9d", "scanner": "scanner-primary", "fingerprint": "cce69de76932bb84", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "contracting_hub/states/profile_settings.py:248"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ec632051704d2edf", "level": "note", "message": {"text": "Possibly dead Python function: set_profile_github_url"}, "properties": {"repobilityId": "e4842d8763842449", "scanner": "scanner-primary", "fingerprint": "ec632051704d2edf", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "contracting_hub/states/profile_settings.py:252"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-39fba492aea00937", "level": "note", "message": {"text": "Possibly dead Python function: set_profile_xian_profile_url"}, "properties": {"repobilityId": "a4e1076c3b600555", "scanner": "scanner-primary", "fingerprint": "39fba492aea00937", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "contracting_hub/states/profile_settings.py:256"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7f84b0d671e3c13d", "level": "note", "message": {"text": "Possibly dead Python function: remove_avatar"}, "properties": {"repobilityId": "a03dca76d02269ab", "scanner": "scanner-primary", "fingerprint": "7f84b0d671e3c13d", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "contracting_hub/states/profile_settings.py:325"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d5c76a910809c7cc", "level": "note", "message": {"text": "Possibly dead Python function: set_playground_target_label"}, "properties": {"repobilityId": "cee5fc428398c147", "scanner": "scanner-primary", "fingerprint": "d5c76a910809c7cc", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "contracting_hub/states/profile_settings.py:347"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-16dbfc67633945c1", "level": "note", "message": {"text": "Possibly dead Python function: set_playground_target_playground_id"}, "properties": {"repobilityId": "c9e84830193a3c7d", "scanner": "scanner-primary", "fingerprint": "16dbfc67633945c1", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "contracting_hub/states/profile_settings.py:351"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ea1d9048b7cd93b3", "level": "note", "message": {"text": "Possibly dead Python function: set_playground_target_default_choice"}, "properties": {"repobilityId": "ee4035a61054fc13", "scanner": "scanner-primary", "fingerprint": "ea1d9048b7cd93b3", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "contracting_hub/states/profile_settings.py:355"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-548ed5a65d96242e", "level": "note", "message": {"text": "Possibly dead Python function: reset_playground_target_form"}, "properties": {"repobilityId": "de98dce77acbbc57", "scanner": "scanner-primary", "fingerprint": "548ed5a65d96242e", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "contracting_hub/states/profile_settings.py:359"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-a57605c7184b44b7", "level": "note", "message": {"text": "Possibly dead Python function: set_target_contract_id_value"}, "properties": {"repobilityId": "cc1fb0fb110ea0f2", "scanner": "scanner-primary", "fingerprint": "a57605c7184b44b7", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "contracting_hub/states/admin_contract_relations.py:250"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-c5ab5f812efda12a", "level": "note", "message": {"text": "Possibly dead Python function: set_relation_type_value"}, "properties": {"repobilityId": "a25a979c232716fd", "scanner": "scanner-primary", "fingerprint": "c5ab5f812efda12a", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "contracting_hub/states/admin_contract_relations.py:255"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e448aadcbb1818c1", "level": "note", "message": {"text": "Possibly dead Python function: set_note_value"}, "properties": {"repobilityId": "3dd552014b5203ed", "scanner": "scanner-primary", "fingerprint": "e448aadcbb1818c1", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "contracting_hub/states/admin_contract_relations.py:260"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5ce7ff6f40d86c45", "level": "note", "message": {"text": "Possibly dead Python function: cancel_edit_relation"}, "properties": {"repobilityId": "3589366c916331b2", "scanner": "scanner-primary", "fingerprint": "5ce7ff6f40d86c45", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "contracting_hub/states/admin_contract_relations.py:284"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7806f15366d4b7b6", "level": "note", "message": {"text": "Possibly dead Python function: load_login_page"}, "properties": {"repobilityId": "abaa9f60ae0cdc54", "scanner": "scanner-primary", "fingerprint": "7806f15366d4b7b6", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "contracting_hub/states/auth.py:92"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-54cbea38037416b4", "level": "note", "message": {"text": "Possibly dead Python function: load_registration_page"}, "properties": {"repobilityId": "f681e7177379d16f", "scanner": "scanner-primary", "fingerprint": "54cbea38037416b4", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "contracting_hub/states/auth.py:97"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-920f7110484765e2", "level": "note", "message": {"text": "Possibly dead Python function: set_search_query"}, "properties": {"repobilityId": "eb18d2f4ca943f7a", "scanner": "scanner-primary", "fingerprint": "920f7110484765e2", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "contracting_hub/states/browse.py:141"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-d33269196382565d", "level": "note", "message": {"text": "Possibly dead Python function: set_selected_category"}, "properties": {"repobilityId": "c806a471a1ab4df9", "scanner": "scanner-primary", "fingerprint": "d33269196382565d", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "contracting_hub/states/browse.py:145"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0ad7e9871c979730", "level": "note", "message": {"text": "Possibly dead Python function: set_selected_tag"}, "properties": {"repobilityId": "456dd587a066369f", "scanner": "scanner-primary", "fingerprint": "0ad7e9871c979730", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "contracting_hub/states/browse.py:149"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-64ec8a4737c60590", "level": "note", "message": {"text": "Possibly dead Python function: set_selected_sort"}, "properties": {"repobilityId": "3557e4b6447ad515", "scanner": "scanner-primary", "fingerprint": "64ec8a4737c60590", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "contracting_hub/states/browse.py:153"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-13f9d36d8a9283f2", "level": "note", "message": {"text": "Possibly dead Python function: set_selected_sort"}, "properties": {"repobilityId": "3557e4b6447ad515", "scanner": "scanner-primary", "fingerprint": "13f9d36d8a9283f2", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "contracting_hub/states/developer_leaderboard.py:124"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-bd77ff91ec37bee3", "level": "note", "message": {"text": "Possibly dead Python function: set_selected_timeframe"}, "properties": {"repobilityId": "c12901068a005a2c", "scanner": "scanner-primary", "fingerprint": "bd77ff91ec37bee3", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "contracting_hub/states/developer_leaderboard.py:128"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e8739e04c399aa25", "level": "note", "message": {"text": "Possibly dead Python function: set_selected_window_days"}, "properties": {"repobilityId": "db2bf9fde9f4faa3", "scanner": "scanner-primary", "fingerprint": "e8739e04c399aa25", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "contracting_hub/states/developer_leaderboard.py:132"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e313a72b4a8eb5d6", "level": "note", "message": {"text": "Possibly dead Python function: set_query"}, "properties": {"repobilityId": "50dcce070ed7496e", "scanner": "scanner-primary", "fingerprint": "e313a72b4a8eb5d6", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "contracting_hub/states/admin_contracts.py:193"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-38ab2048d18ee496", "level": "note", "message": {"text": "Possibly dead Python function: set_selected_featured_filter"}, "properties": {"repobilityId": "d76581b31fe7ee61", "scanner": "scanner-primary", "fingerprint": "38ab2048d18ee496", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "contracting_hub/states/admin_contracts.py:197"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9710c8d059e53154", "level": "none", "message": {"text": "No frontend routes/components detected"}, "properties": {"repobilityId": "44ca61485762e494", "scanner": "scanner-primary", "fingerprint": "9710c8d059e53154", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["coverage"]}}, {"ruleId": "scanner-09770e7374643379", "level": "error", "message": {"text": "Possible secret in contracting_hub/services/auth.py"}, "properties": {"repobilityId": "bfbb884e19e8c753", "scanner": "scanner-primary", "fingerprint": "09770e7374643379", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "contracting_hub/services/auth.py"}, "region": {"startLine": 62}}}]}, {"ruleId": "scanner-08102ce36cc072af", "level": "error", "message": {"text": "Possible secret in contracting_hub/services/bootstrap.py"}, "properties": {"repobilityId": "39e84dc4d779497a", "scanner": "scanner-primary", "fingerprint": "08102ce36cc072af", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "contracting_hub/services/bootstrap.py"}, "region": {"startLine": 296}}}]}, {"ruleId": "scanner-6372cebde0220094", "level": "warning", "message": {"text": "No auth library detected"}, "properties": {"repobilityId": "a5b6035a5bbf8054", "scanner": "scanner-primary", "fingerprint": "6372cebde0220094", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["coverage", "auth"]}}, {"ruleId": "scanner-e5b09dab12a4e2c0", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "0f16a0487cea03fc", "scanner": "scanner-primary", "fingerprint": "e5b09dab12a4e2c0", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/validate.yml"}, "region": {"startLine": 16}}}]}, {"ruleId": "scanner-e5b09dab12a4e2c0", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "0f16a0487cea03fc", "scanner": "scanner-primary", "fingerprint": "e5b09dab12a4e2c0", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/validate.yml"}, "region": {"startLine": 21}}}]}, {"ruleId": "scanner-e5b09dab12a4e2c0", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "0f16a0487cea03fc", "scanner": "scanner-primary", "fingerprint": "e5b09dab12a4e2c0", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/validate.yml"}, "region": {"startLine": 28}}}]}, {"ruleId": "scanner-e5b09dab12a4e2c0", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "0f16a0487cea03fc", "scanner": "scanner-primary", "fingerprint": "e5b09dab12a4e2c0", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/validate.yml"}, "region": {"startLine": 35}}}]}, {"ruleId": "scanner-e5b09dab12a4e2c0", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "969dd03ce9ee9f08", "scanner": "scanner-primary", "fingerprint": "e5b09dab12a4e2c0", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/validate.yml"}, "region": {"startLine": 42}}}]}, {"ruleId": "scanner-e5b09dab12a4e2c0", "level": "note", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "5f46a375168aa9a3", "scanner": "scanner-primary", "fingerprint": "e5b09dab12a4e2c0", "layer": "cicd", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/validate.yml"}, "region": {"startLine": 47}}}]}, {"ruleId": "scanner-e5b09dab12a4e2c0", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "b9ab1b7eb106dac9", "scanner": "scanner-primary", "fingerprint": "e5b09dab12a4e2c0", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/validate.yml"}, "region": {"startLine": 52}}}]}, {"ruleId": "scanner-7ba1f53387aab334", "level": "note", "message": {"text": "Very large file: contracting_hub/states/contract_detail.py (1512 lines)"}, "properties": {"repobilityId": "dcb83c037189e98f", "scanner": "scanner-primary", "fingerprint": "7ba1f53387aab334", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-6ce6f2f45b5ae786", "level": "note", "message": {"text": "Very large file: contracting_hub/services/bootstrap.py (1586 lines)"}, "properties": {"repobilityId": "b8d8c15c03143129", "scanner": "scanner-primary", "fingerprint": "6ce6f2f45b5ae786", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-141b30a41e03817b", "level": "note", "message": {"text": "No license file detected"}, "properties": {"repobilityId": "85bbbdcc35ee2942", "scanner": "scanner-primary", "fingerprint": "141b30a41e03817b", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["license", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-72b2a6250083a784", "level": "warning", "message": {"text": "Placeholder or mock-heavy implementation detected"}, "properties": {"repobilityId": "dd70072adcdcbd7f", "scanner": "scanner-primary", "fingerprint": "72b2a6250083a784", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "incomplete", "generated-repo-pattern"]}}, {"ruleId": "scanner-2d0c7b7ab8f8aacf", "level": "warning", "message": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "properties": {"repobilityId": "5b5bd588fd629337", "scanner": "scanner-primary", "fingerprint": "2d0c7b7ab8f8aacf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "critical-flow", "generated-repo-pattern"]}}, {"ruleId": "scanner-ea8f3013f588db25", "level": "note", "message": {"text": "Shallow git history limits provenance confidence"}, "properties": {"repobilityId": "ad3d9ec56ed2f253", "scanner": "scanner-primary", "fingerprint": "ea8f3013f588db25", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-8424db9c75e04ba4", "level": "none", "message": {"text": "Very short observed git history"}, "properties": {"repobilityId": "d2257359edd61a4d", "scanner": "scanner-primary", "fingerprint": "8424db9c75e04ba4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-49db5f3bd56142c9", "level": "note", "message": {"text": "Legacy-named symbol `test_registration_page_renders_form_shell_and_identity_copy` in tests/integration/test_auth_pages_smoke.py:77"}, "properties": {"repobilityId": "7ba1c2097f411e34", "scanner": "scanner-primary", "fingerprint": "49db5f3bd56142c9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-dd6381a2ac30c303", "level": "note", "message": {"text": "Legacy-named symbol `escrow_v1` in tests/integration/test_developer_kpi_aggregations.py:100"}, "properties": {"repobilityId": "661c7e54067b24c5", "scanner": "scanner-primary", "fingerprint": "dd6381a2ac30c303", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-e57bba67767b9aa8", "level": "note", "message": {"text": "Legacy-named symbol `escrow_v1` in tests/integration/test_public_developer_profile_snapshot_service.py:81"}, "properties": {"repobilityId": "5eae96987c504272", "scanner": "scanner-primary", "fingerprint": "e57bba67767b9aa8", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-0f2b7da9cf473bfb", "level": "note", "message": {"text": "Legacy-named symbol `con_legacy` in tests/integration/test_admin_contracts_service.py:93"}, "properties": {"repobilityId": "b3657c7a0fe2f690", "scanner": "scanner-primary", "fingerprint": "0f2b7da9cf473bfb", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-9665a9308740ec1d", "level": "note", "message": {"text": "Legacy-named symbol `lint_summary_copy` in tests/integration/test_contract_lint_results_panel_component_smoke.py:62"}, "properties": {"repobilityId": "1a3de87423aa040c", "scanner": "scanner-primary", "fingerprint": "9665a9308740ec1d", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-3cf7cd972949a261", "level": "note", "message": {"text": "Legacy-named symbol `escrow_v1` in tests/integration/test_homepage_service_queries.py:69"}, "properties": {"repobilityId": "4d165c35d5f9c48f", "scanner": "scanner-primary", "fingerprint": "3cf7cd972949a261", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-d8c86960a078beeb", "level": "note", "message": {"text": "Legacy-named symbol `con_token_v2` in tests/unit/test_contract_metadata.py:22"}, "properties": {"repobilityId": "9fc8603a64f5d19a", "scanner": "scanner-primary", "fingerprint": "d8c86960a078beeb", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-a37f8a5073ed8640", "level": "note", "message": {"text": "Legacy-named symbol `con_escrow_v2` in tests/unit/test_admin_contract_editor_state.py:246"}, "properties": {"repobilityId": "befce3b6a5380124", "scanner": "scanner-primary", "fingerprint": "a37f8a5073ed8640", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-486612cbaeabcb05", "level": "note", "message": {"text": "Legacy-named symbol `test_format_admin_contract_relation_type_label_returns_expected_copy` in tests/unit/test_admin_contract_relations_service_helpers.py:36"}, "properties": {"repobilityId": "29c93001d5a4f315", "scanner": "scanner-primary", "fingerprint": "486612cbaeabcb05", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-b8b40532e76451ac", "level": "note", "message": {"text": "Legacy-named symbol `preview_lint_summary_copy` in tests/unit/test_admin_contract_versions_state.py:242"}, "properties": {"repobilityId": "b5fa40dc997bbaae", "scanner": "scanner-primary", "fingerprint": "b8b40532e76451ac", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-9167e849bfeebfd6", "level": "note", "message": {"text": "Legacy-named symbol `empty_copy` in contracting_hub/components/contract_related_contracts.py:76"}, "properties": {"repobilityId": "9e7ee589276dbaf4", "scanner": "scanner-primary", "fingerprint": "9167e849bfeebfd6", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-36e63666dfdb460d", "level": "note", "message": {"text": "Legacy-named symbol `lint_summary_copy` in contracting_hub/components/contract_lint_results_panel.py:19"}, "properties": {"repobilityId": "3fff0f13d5a29a12", "scanner": "scanner-primary", "fingerprint": "36e63666dfdb460d", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-766a3cfde67c2f00", "level": "note", "message": {"text": "Legacy-named symbol `note_empty_copy` in contracting_hub/admin/contract_relations.py:368"}, "properties": {"repobilityId": "35a42bb68b319317", "scanner": "scanner-primary", "fingerprint": "766a3cfde67c2f00", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-24fe926d2620116d", "level": "note", "message": {"text": "Legacy-named symbol `con_escrow_v2` in contracting_hub/admin/contract_editor.py:519"}, "properties": {"repobilityId": "746ad77e2fefa3db", "scanner": "scanner-primary", "fingerprint": "24fe926d2620116d", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-dc270e500dd2b344", "level": "note", "message": {"text": "Legacy-named symbol `preview_lint_summary_copy` in contracting_hub/admin/contract_versions.py:611"}, "properties": {"repobilityId": "7f59a0efb707fd30", "scanner": "scanner-primary", "fingerprint": "dc270e500dd2b344", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-8d17ac78b9a0b352", "level": "note", "message": {"text": "Legacy-named symbol `preview_lint_summary_copy` in contracting_hub/states/admin_contract_versions.py:247"}, "properties": {"repobilityId": "ab7098457436f7ef", "scanner": "scanner-primary", "fingerprint": "8d17ac78b9a0b352", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-d2cab7198465fc16", "level": "note", "message": {"text": "Legacy-named symbol `engagement_login_copy` in contracting_hub/states/contract_detail.py:246"}, "properties": {"repobilityId": "4ded891e99fed0a2", "scanner": "scanner-primary", "fingerprint": "d2cab7198465fc16", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-48e96848fb725160", "level": "note", "message": {"text": "Legacy-named symbol `_build_empty_history_copy` in contracting_hub/states/deployment_history.py:251"}, "properties": {"repobilityId": "91cc183067cf575c", "scanner": "scanner-primary", "fingerprint": "48e96848fb725160", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-5ae50249ebcc6af0", "level": "note", "message": {"text": "Legacy-named symbol `_empty_section_copy` in contracting_hub/pages/home.py:121"}, "properties": {"repobilityId": "a12790fd8a5ccb27", "scanner": "scanner-primary", "fingerprint": "5ae50249ebcc6af0", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-454d84e096cfe353", "level": "note", "message": {"text": "Legacy-named symbol `engagement_login_copy` in contracting_hub/pages/contract_detail.py:468"}, "properties": {"repobilityId": "18083419b4b57ca6", "scanner": "scanner-primary", "fingerprint": "454d84e096cfe353", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-08d3b9604dac03f7", "level": "note", "message": {"text": "Legacy-named symbol `con_market_maker_legacy` in contracting_hub/services/bootstrap.py:475"}, "properties": {"repobilityId": "bb8d816af6a964c4", "scanner": "scanner-primary", "fingerprint": "08d3b9604dac03f7", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-be46ea126aa5d8dc", "level": "note", "message": {"text": "Near-duplicate function bodies in 3 places"}, "properties": {"repobilityId": "082e23701132a8d9", "scanner": "scanner-primary", "fingerprint": "be46ea126aa5d8dc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "e4aed096da632dec", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "07533ae98615952b", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "9dbc16733b276e3e", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-be46ea126aa5d8dc", "level": "note", "message": {"text": "Near-duplicate function bodies in 3 places"}, "properties": {"repobilityId": "ccbccb05a595396c", "scanner": "scanner-primary", "fingerprint": "be46ea126aa5d8dc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "e9d90002a8550d77", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-0027e313ade46c8f", "level": "note", "message": {"text": "Near-duplicate function bodies in 7 places"}, "properties": {"repobilityId": "9bacb4a39dcac592", "scanner": "scanner-primary", "fingerprint": "0027e313ade46c8f", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-76a2f6818267a9a8", "level": "note", "message": {"text": "Near-duplicate function bodies in 8 places"}, "properties": {"repobilityId": "213795c8c1c6b306", "scanner": "scanner-primary", "fingerprint": "76a2f6818267a9a8", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-76a2f6818267a9a8", "level": "note", "message": {"text": "Near-duplicate function bodies in 8 places"}, "properties": {"repobilityId": "2b448c9a42ed27a3", "scanner": "scanner-primary", "fingerprint": "76a2f6818267a9a8", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-02525d39071dd2c7", "level": "note", "message": {"text": "Near-duplicate function bodies in 5 places"}, "properties": {"repobilityId": "15f5f8a0528dbcf0", "scanner": "scanner-primary", "fingerprint": "02525d39071dd2c7", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "fc4027c4856da250", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-76a2f6818267a9a8", "level": "note", "message": {"text": "Near-duplicate function bodies in 8 places"}, "properties": {"repobilityId": "9c9361bdede98976", "scanner": "scanner-primary", "fingerprint": "76a2f6818267a9a8", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-be46ea126aa5d8dc", "level": "note", "message": {"text": "Near-duplicate function bodies in 3 places"}, "properties": {"repobilityId": "65d0d37d62a9a261", "scanner": "scanner-primary", "fingerprint": "be46ea126aa5d8dc", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "21281644bfd5980c", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}]}]}