{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "scanner-ba0b9cc9fa849a8e", "name": "Possibly dead Python function: handle_starttag", "shortDescription": {"text": "Possibly dead Python function: handle_starttag"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b339a0cd25683c35", "name": "Possibly dead Python function: handle_endtag", "shortDescription": {"text": "Possibly dead Python function: handle_endtag"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4d1544fb7a41da2b", "name": "Possibly dead Python function: handle_data", "shortDescription": {"text": "Possibly dead Python function: handle_data"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-e3e39614a22f40b1", "name": "Possibly dead Python function: cmd_refresh", "shortDescription": {"text": "Possibly dead Python function: cmd_refresh"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-324f15913cfa0602", "name": "Possibly dead Python function: cmd_dfn", "shortDescription": {"text": "Possibly dead Python function: cmd_dfn"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8c3826a910c6a8fa", "name": "Possibly dead Python function: cmd_aoid", "shortDescription": {"text": "Possibly dead Python function: cmd_aoid"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-ed8484d343683728", "name": "Possibly dead Python function: cmd_specs", "shortDescription": {"text": "Possibly dead Python function: cmd_specs"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0a11de27cbfe0c17", "name": "Possibly dead Python function: cmd_diff", "shortDescription": {"text": "Possibly dead Python function: cmd_diff"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-856766d2ae3f0e3f", "name": "Possibly dead Python function: cmd_agent_brief", "shortDescription": {"text": "Possibly dead Python function: cmd_agent_brief"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b601c73803675a0f", "name": "Possibly dead Python function: cmd_coverage_map", "shortDescription": {"text": "Possibly dead Python function: cmd_coverage_map"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-74f42962893cb12d", "name": "Possibly dead Python function: cmd_heading", "shortDescription": {"text": "Possibly dead Python function: cmd_heading"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1176e671ed65b364", "name": "Possibly dead Python function: cmd_element", "shortDescription": {"text": "Possibly dead Python function: cmd_element"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-827964e60e711bfd", "name": "Possibly dead Python function: cmd_snapshot", "shortDescription": {"text": "Possibly dead Python function: cmd_snapshot"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-1f144ffb68e83d43", "name": "Possibly dead Python function: cmd_idl", "shortDescription": {"text": "Possibly dead Python function: cmd_idl"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-06686e71df637a78", "name": "Possibly dead Python function: cmd_body", "shortDescription": {"text": "Possibly dead Python function: cmd_body"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b4155ffc7bf8f1a9", "name": "Possibly dead Python function: cmd_css", "shortDescription": {"text": "Possibly dead Python function: cmd_css"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-67f147d245af101a", "name": "Possibly dead Python function: cmd_agent_policy", "shortDescription": {"text": "Possibly dead Python function: cmd_agent_policy"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9710c8d059e53154", "name": "No frontend routes/components detected", "shortDescription": {"text": "No frontend routes/components detected"}, "fullDescription": {"text": "No React/Vue/Next routes were found. This is fine for backend-only repos."}, "properties": {"scanner": "scanner-primary", "layer": "frontend", "severity": "info", "confidence": 1.0}}, {"id": "scanner-5b1d643d3ba0882d", "name": "Insecure pattern 'eval_used' in crates/script/elidex-js/src/tests_engine_s1d.rs:106", "shortDescription": {"text": "Insecure pattern 'eval_used' in crates/script/elidex-js/src/tests_engine_s1d.rs:106"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-3a271f269ba9ef54", "name": "Insecure pattern 'eval_used' in crates/script/elidex-js/src/tests_engine_s1b.rs:215", "shortDescription": {"text": "Insecure pattern 'eval_used' in crates/script/elidex-js/src/tests_engine_s1b.rs:215"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-50487b55e6b00ed1", "name": "Insecure pattern 'eval_used' in crates/script/elidex-js/src/tests_engine_s1a.rs:51", "shortDescription": {"text": "Insecure pattern 'eval_used' in crates/script/elidex-js/src/tests_engine_s1a.rs:51"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-20afc7ec9d23dc48", "name": "Insecure pattern 'eval_used' in crates/script/elidex-js/src/tests_engine_s1c.rs:89", "shortDescription": {"text": "Insecure pattern 'eval_used' in crates/script/elidex-js/src/tests_engine_s1c.rs:89"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-3d311047f7e5630c", "name": "Insecure pattern 'eval_used' in crates/script/elidex-js/src/tests_engine_s2.rs:40", "shortDescription": {"text": "Insecure pattern 'eval_used' in crates/script/elidex-js/src/tests_engine_s2.rs:40"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-e96bce2e302e7232", "name": "Insecure pattern 'eval_used' in crates/script/elidex-js-boa/src/globals/mod.rs:473", "shortDescription": {"text": "Insecure pattern 'eval_used' in crates/script/elidex-js-boa/src/globals/mod.rs:473"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-962f29fc95224dd1", "name": "Insecure pattern 'eval_used' in crates/script/elidex-js-boa/src/globals/storage.rs:172", "shortDescription": {"text": "Insecure pattern 'eval_used' in crates/script/elidex-js-boa/src/globals/storage.rs:172"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-8a39f6c7dc2fc1ac", "name": "Insecure pattern 'eval_used' in crates/script/elidex-js-boa/src/globals/document/mod.rs:559", "shortDescription": {"text": "Insecure pattern 'eval_used' in crates/script/elidex-js-boa/src/globals/document/mod.rs:559"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-f9301049b82ab7b9", "name": "Insecure pattern 'eval_used' in crates/script/elidex-js-boa/src/globals/window/encoding.rs:22", "shortDescription": {"text": "Insecure pattern 'eval_used' in crates/script/elidex-js-boa/src/globals/window/encoding.rs:22"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-0921116a18e58122", "name": "Insecure pattern 'eval_used' in crates/script/elidex-js-boa/src/globals/window/dom_parser.rs:519", "shortDescription": {"text": "Insecure pattern 'eval_used' in crates/script/elidex-js-boa/src/globals/window/dom_parser.rs:519"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-a088f1d27f652808", "name": "Insecure pattern 'document_write' in crates/tools/elidex-crawler/src/analyzer/js.rs:12", "shortDescription": {"text": "Insecure pattern 'document_write' in crates/tools/elidex-crawler/src/analyzer/js.rs:12"}, "fullDescription": {"text": "Found a known-risky pattern (document_write). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a0b0a10a2203bed0", "name": "Insecure pattern 'document_write' in crates/tools/elidex-crawler/src/analyzer/html.rs:173", "shortDescription": {"text": "Insecure pattern 'document_write' in crates/tools/elidex-crawler/src/analyzer/html.rs:173"}, "fullDescription": {"text": "Found a known-risky pattern (document_write). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a9a94fba84eb96fd", "name": "Insecure pattern 'eval_used' in crates/shell/elidex-shell/src/lib.rs:369", "shortDescription": {"text": "Insecure pattern 'eval_used' in crates/shell/elidex-shell/src/lib.rs:369"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-15910a12da66fc27", "name": "Insecure pattern 'eval_used' in crates/shell/elidex-shell/src/pipeline.rs:83", "shortDescription": {"text": "Insecure pattern 'eval_used' in crates/shell/elidex-shell/src/pipeline.rs:83"}, "fullDescription": {"text": "Found a known-risky pattern (eval_used). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}, {"id": "scanner-374bc0c2a2f3fa4b", "name": "Insecure pattern 'cors_wildcard' in crates/net/elidex-net/src/preflight/validator.rs:427", "shortDescription": {"text": "Insecure pattern 'cors_wildcard' in crates/net/elidex-net/src/preflight/validator.rs:427"}, "fullDescription": {"text": "Found a known-risky pattern (cors_wildcard). Review and replace if possible."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-65aa740cba4a4a73", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "github/codeql-action/init@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-397ffb69fd282511", "name": "GitHub Action is tag-pinned rather than SHA-pinned", "shortDescription": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "fullDescription": {"text": "taiki-e/install-action@v2 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA."}, "properties": {"scanner": "scanner-primary", "layer": "cicd", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ef2fa36b22abc3c6", "name": "Very large file: crates/layout/elidex-layout-multicol/src/tests/mid_break_flow.rs (1271 lines)", "shortDescription": {"text": "Very large file: crates/layout/elidex-layout-multicol/src/tests/mid_break_flow.rs (1271 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-58047123b26214bd", "name": "Very large file: crates/layout/elidex-layout-block/src/inline/mod.rs (1351 lines)", "shortDescription": {"text": "Very large file: crates/layout/elidex-layout-block/src/inline/mod.rs (1351 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-dca715cce1cb4a71", "name": "Very large file: crates/script/elidex-js/src/vm/vm_api.rs (1157 lines)", "shortDescription": {"text": "Very large file: crates/script/elidex-js/src/vm/vm_api.rs (1157 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f7f01d1817878f3a", "name": "Very large file: crates/script/elidex-js/src/vm/globals.rs (1360 lines)", "shortDescription": {"text": "Very large file: crates/script/elidex-js/src/vm/globals.rs (1360 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3a8cefb60adbe20a", "name": "Very large file: crates/script/elidex-js/src/vm/well_known.rs (1574 lines)", "shortDescription": {"text": "Very large file: crates/script/elidex-js/src/vm/well_known.rs (1574 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-774df6a9a2dcd4d1", "name": "Very large file: crates/script/elidex-js/src/vm/dispatch.rs (1112 lines)", "shortDescription": {"text": "Very large file: crates/script/elidex-js/src/vm/dispatch.rs (1112 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fae1b34d260a6d26", "name": "Very large file: crates/script/elidex-js/src/vm/interpreter.rs (1366 lines)", "shortDescription": {"text": "Very large file: crates/script/elidex-js/src/vm/interpreter.rs (1366 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5695d20d77957993", "name": "Very large file: crates/script/elidex-js/src/vm/mod.rs (2546 lines)", "shortDescription": {"text": "Very large file: crates/script/elidex-js/src/vm/mod.rs (2546 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4c9f11f51c2158db", "name": "Very large file: crates/script/elidex-js/src/vm/object_kind.rs (1553 lines)", "shortDescription": {"text": "Very large file: crates/script/elidex-js/src/vm/object_kind.rs (1553 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-45d7a855c6db6e33", "name": "Very large file: crates/script/elidex-js/src/vm/host_data.rs (1901 lines)", "shortDescription": {"text": "Very large file: crates/script/elidex-js/src/vm/host_data.rs (1901 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-dc15a8fb26c00f84", "name": "Very large file: crates/script/elidex-js/src/vm/tests/tests_file_api.rs (1773 lines)", "shortDescription": {"text": "Very large file: crates/script/elidex-js/src/vm/tests/tests_file_api.rs (1773 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b76ba7cc05c7520e", "name": "Very large file: crates/script/elidex-js/src/vm/gc/collect.rs (1870 lines)", "shortDescription": {"text": "Very large file: crates/script/elidex-js/src/vm/gc/collect.rs (1870 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-dc91d43cd691fc80", "name": "Very large file: crates/script/elidex-js/src/vm/gc/trace.rs (1187 lines)", "shortDescription": {"text": "Very large file: crates/script/elidex-js/src/vm/gc/trace.rs (1187 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-fd697cbd4d3b4af4", "name": "Very large file: crates/core/elidex-ecs/src/dom/mod.rs (1255 lines)", "shortDescription": {"text": "Very large file: crates/core/elidex-ecs/src/dom/mod.rs (1255 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f814e492516fc2d9", "name": "Very large file: crates/dom/elidex-dom-api/src/traversal.rs (1479 lines)", "shortDescription": {"text": "Very large file: crates/dom/elidex-dom-api/src/traversal.rs (1479 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-bc9b290e84d13d5a", "name": "Very large file: crates/dom/elidex-dom-api/src/focus.rs (1362 lines)", "shortDescription": {"text": "Very large file: crates/dom/elidex-dom-api/src/focus.rs (1362 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3ab5d313dda8e5f9", "name": "Debug logging residue appears in source files", "shortDescription": {"text": "Debug logging residue appears in source files"}, "fullDescription": {"text": "Found 127 console/debugger/print-style debug statements in non-test source. This is a common fast-generation residue before production cleanup."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-72b2a6250083a784", "name": "Placeholder or mock-heavy implementation detected", "shortDescription": {"text": "Placeholder or mock-heavy implementation detected"}, "fullDescription": {"text": "Found 127 placeholder/mock markers across 50 source files. This often means the repo looks complete while core flows still use generated scaffolding or fake data."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2d0c7b7ab8f8aacf", "name": "Critical user flow still appears backed by mock or placeholder data", "shortDescription": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "fullDescription": {"text": "A payment/auth/admin/order/billing-style flow contains mock, fake, TODO, dummy, or placeholder markers in runtime source. In the Fable corpus this is a high-leverage completeness smell: the app can look finished while the money, identity, or tenant flow is still scaffolded."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-ea8f3013f588db25", "name": "Shallow git history limits provenance confidence", "shortDescription": {"text": "Shallow git history limits provenance confidence"}, "fullDescription": {"text": "The repository is a shallow clone. Origin/evolution analysis cannot distinguish fresh generation, imported legacy code, or long-lived human code with high confidence."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8424db9c75e04ba4", "name": "Very short observed git history", "shortDescription": {"text": "Very short observed git history"}, "fullDescription": {"text": "The repo has multiple source files but two or fewer visible commits. This is not a failure by itself, but it lowers confidence in evolution-based diagnosis."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-afddf68df74d40e9", "name": "Agent authority lacks a verifier contract: .claude/skills/external-converge/project.md", "shortDescription": {"text": "Agent authority lacks a verifier contract: .claude/skills/external-converge/project.md"}, "fullDescription": {"text": "This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-e725d2ab884fbd49", "name": "Multiple root agent instruction files without precedence", "shortDescription": {"text": "Multiple root agent instruction files without precedence"}, "fullDescription": {"text": "The repo has multiple top-level AI-coder instruction files. Without precedence rules, different agents may follow different policies."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-a7fff5d3197b88c0", "name": "Commented-code block (6 lines) in .claude/tools/_webref/extractor.py:75", "shortDescription": {"text": "Commented-code block (6 lines) in .claude/tools/_webref/extractor.py:75"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-0118d434b4c768ed", "name": "Commented-code block (5 lines) in .claude/tools/_webref/cli.py:252", "shortDescription": {"text": "Commented-code block (5 lines) in .claude/tools/_webref/cli.py:252"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-95a53c4bc497fbf8", "name": "Commented-code block (7 lines) in .claude/tools/_webref/cache.py:70", "shortDescription": {"text": "Commented-code block (7 lines) in .claude/tools/_webref/cache.py:70"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-8215fb887204855f", "name": "Commented-code block (7 lines) in .claude/tools/_webref/resolver.py:23", "shortDescription": {"text": "Commented-code block (7 lines) in .claude/tools/_webref/resolver.py:23"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-17b50624f2df23d9", "name": "Commented-code block (8 lines) in .claude/tools/_webref/commands/aoid.py:20", "shortDescription": {"text": "Commented-code block (8 lines) in .claude/tools/_webref/commands/aoid.py:20"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-aabe392e99649715", "name": "Commented-code block (10 lines) in .claude/tools/_webref/commands/body.py:26", "shortDescription": {"text": "Commented-code block (10 lines) in .claude/tools/_webref/commands/body.py:26"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-ee987b8effcb09b6", "name": "Commented-code block (7 lines) in .claude/skills/elidex-plan-review/grep_pass.py:40", "shortDescription": {"text": "Commented-code block (7 lines) in .claude/skills/elidex-plan-review/grep_pass.py:40"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-d84e2c2f4128da34", "name": "Commented-code block (6 lines) in .claude/skills/elidex-plan-review/preflight.py:78", "shortDescription": {"text": "Commented-code block (6 lines) in .claude/skills/elidex-plan-review/preflight.py:78"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/19258"}, "properties": {"repository": "send/elidex", "repoUrl": "https://github.com/send/elidex", "branch": "main"}, "results": [{"ruleId": "scanner-ba0b9cc9fa849a8e", "level": "note", "message": {"text": "Possibly dead Python function: handle_starttag"}, "properties": {"repobilityId": "3bf216d149959ebf", "scanner": "scanner-primary", "fingerprint": "ba0b9cc9fa849a8e", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/tools/_webref/extractor.py:145"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b339a0cd25683c35", "level": "note", "message": {"text": "Possibly dead Python function: handle_endtag"}, "properties": {"repobilityId": "7eb6f3decafc1766", "scanner": "scanner-primary", "fingerprint": "b339a0cd25683c35", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/tools/_webref/extractor.py:230"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4d1544fb7a41da2b", "level": "note", "message": {"text": "Possibly dead Python function: handle_data"}, "properties": {"repobilityId": "3a673a278f4fc1e6", "scanner": "scanner-primary", "fingerprint": "4d1544fb7a41da2b", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/tools/_webref/extractor.py:264"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e3e39614a22f40b1", "level": "note", "message": {"text": "Possibly dead Python function: cmd_refresh"}, "properties": {"repobilityId": "31c19b7b4b453346", "scanner": "scanner-primary", "fingerprint": "e3e39614a22f40b1", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/tools/_webref/commands/refresh.py:14"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-324f15913cfa0602", "level": "note", "message": {"text": "Possibly dead Python function: cmd_dfn"}, "properties": {"repobilityId": "f6e78a35b9565941", "scanner": "scanner-primary", "fingerprint": "324f15913cfa0602", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/tools/_webref/commands/dfn.py:11"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8c3826a910c6a8fa", "level": "note", "message": {"text": "Possibly dead Python function: cmd_aoid"}, "properties": {"repobilityId": "017ad5c6b810ca4c", "scanner": "scanner-primary", "fingerprint": "8c3826a910c6a8fa", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/tools/_webref/commands/aoid.py:11"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-ed8484d343683728", "level": "note", "message": {"text": "Possibly dead Python function: cmd_specs"}, "properties": {"repobilityId": "0998ab931769c7ac", "scanner": "scanner-primary", "fingerprint": "ed8484d343683728", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/tools/_webref/commands/specs.py:9"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-0a11de27cbfe0c17", "level": "note", "message": {"text": "Possibly dead Python function: cmd_diff"}, "properties": {"repobilityId": "113843338462d178", "scanner": "scanner-primary", "fingerprint": "0a11de27cbfe0c17", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/tools/_webref/commands/diff.py:12"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-856766d2ae3f0e3f", "level": "note", "message": {"text": "Possibly dead Python function: cmd_agent_brief"}, "properties": {"repobilityId": "7bfca04fa383cc26", "scanner": "scanner-primary", "fingerprint": "856766d2ae3f0e3f", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/tools/_webref/commands/agent_brief.py:16"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b601c73803675a0f", "level": "note", "message": {"text": "Possibly dead Python function: cmd_coverage_map"}, "properties": {"repobilityId": "955bfa842c9ad3ef", "scanner": "scanner-primary", "fingerprint": "b601c73803675a0f", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/tools/_webref/commands/coverage_map.py:35"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-74f42962893cb12d", "level": "note", "message": {"text": "Possibly dead Python function: cmd_heading"}, "properties": {"repobilityId": "ed1e452125299715", "scanner": "scanner-primary", "fingerprint": "74f42962893cb12d", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/tools/_webref/commands/heading.py:12"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1176e671ed65b364", "level": "note", "message": {"text": "Possibly dead Python function: cmd_element"}, "properties": {"repobilityId": "03b9db8cc00f8b79", "scanner": "scanner-primary", "fingerprint": "1176e671ed65b364", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/tools/_webref/commands/element.py:11"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-827964e60e711bfd", "level": "note", "message": {"text": "Possibly dead Python function: cmd_snapshot"}, "properties": {"repobilityId": "275ab734533cf296", "scanner": "scanner-primary", "fingerprint": "827964e60e711bfd", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/tools/_webref/commands/snapshot.py:11"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-1f144ffb68e83d43", "level": "note", "message": {"text": "Possibly dead Python function: cmd_idl"}, "properties": {"repobilityId": "08f5654a84e58f6f", "scanner": "scanner-primary", "fingerprint": "1f144ffb68e83d43", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/tools/_webref/commands/idl.py:21"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-06686e71df637a78", "level": "note", "message": {"text": "Possibly dead Python function: cmd_body"}, "properties": {"repobilityId": "2303ee64450cd26d", "scanner": "scanner-primary", "fingerprint": "06686e71df637a78", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/tools/_webref/commands/body.py:18"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b4155ffc7bf8f1a9", "level": "note", "message": {"text": "Possibly dead Python function: cmd_css"}, "properties": {"repobilityId": "fbcb18e8cf967ade", "scanner": "scanner-primary", "fingerprint": "b4155ffc7bf8f1a9", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/tools/_webref/commands/css.py:25"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-67f147d245af101a", "level": "note", "message": {"text": "Possibly dead Python function: cmd_agent_policy"}, "properties": {"repobilityId": "0e3857abf5671e6f", "scanner": "scanner-primary", "fingerprint": "67f147d245af101a", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/tools/_webref/commands/agent_policy.py:35"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9710c8d059e53154", "level": "none", "message": {"text": "No frontend routes/components detected"}, "properties": {"repobilityId": "44ca61485762e494", "scanner": "scanner-primary", "fingerprint": "9710c8d059e53154", "layer": "frontend", "severity": "info", "confidence": 1.0, "tags": ["coverage"]}}, {"ruleId": "scanner-5b1d643d3ba0882d", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in crates/script/elidex-js/src/tests_engine_s1d.rs:106"}, "properties": {"repobilityId": "541f6030a90552fd", "scanner": "scanner-primary", "fingerprint": "5b1d643d3ba0882d", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "crates/script/elidex-js/src/tests_engine_s1d.rs"}, "region": {"startLine": 106}}}]}, {"ruleId": "scanner-3a271f269ba9ef54", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in crates/script/elidex-js/src/tests_engine_s1b.rs:215"}, "properties": {"repobilityId": "6ad30203e347df55", "scanner": "scanner-primary", "fingerprint": "3a271f269ba9ef54", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "crates/script/elidex-js/src/tests_engine_s1b.rs"}, "region": {"startLine": 215}}}]}, {"ruleId": "scanner-50487b55e6b00ed1", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in crates/script/elidex-js/src/tests_engine_s1a.rs:51"}, "properties": {"repobilityId": "e4ec5ba2f5ebbd4a", "scanner": "scanner-primary", "fingerprint": "50487b55e6b00ed1", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "crates/script/elidex-js/src/tests_engine_s1a.rs"}, "region": {"startLine": 51}}}]}, {"ruleId": "scanner-20afc7ec9d23dc48", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in crates/script/elidex-js/src/tests_engine_s1c.rs:89"}, "properties": {"repobilityId": "04093cceac2bfa9b", "scanner": "scanner-primary", "fingerprint": "20afc7ec9d23dc48", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "crates/script/elidex-js/src/tests_engine_s1c.rs"}, "region": {"startLine": 89}}}]}, {"ruleId": "scanner-3d311047f7e5630c", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in crates/script/elidex-js/src/tests_engine_s2.rs:40"}, "properties": {"repobilityId": "150fd61478ca3555", "scanner": "scanner-primary", "fingerprint": "3d311047f7e5630c", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "crates/script/elidex-js/src/tests_engine_s2.rs"}, "region": {"startLine": 40}}}]}, {"ruleId": "scanner-e96bce2e302e7232", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in crates/script/elidex-js-boa/src/globals/mod.rs:473"}, "properties": {"repobilityId": "9832d4704ac198fd", "scanner": "scanner-primary", "fingerprint": "e96bce2e302e7232", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "crates/script/elidex-js-boa/src/globals/mod.rs"}, "region": {"startLine": 473}}}]}, {"ruleId": "scanner-962f29fc95224dd1", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in crates/script/elidex-js-boa/src/globals/storage.rs:172"}, "properties": {"repobilityId": "7055e593d080742b", "scanner": "scanner-primary", "fingerprint": "962f29fc95224dd1", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "crates/script/elidex-js-boa/src/globals/storage.rs"}, "region": {"startLine": 172}}}]}, {"ruleId": "scanner-8a39f6c7dc2fc1ac", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in crates/script/elidex-js-boa/src/globals/document/mod.rs:559"}, "properties": {"repobilityId": "42a1da1d2734d04b", "scanner": "scanner-primary", "fingerprint": "8a39f6c7dc2fc1ac", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "crates/script/elidex-js-boa/src/globals/document/mod.rs"}, "region": {"startLine": 559}}}]}, {"ruleId": "scanner-f9301049b82ab7b9", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in crates/script/elidex-js-boa/src/globals/window/encoding.rs:22"}, "properties": {"repobilityId": "adf27fbe70d2c74e", "scanner": "scanner-primary", "fingerprint": "f9301049b82ab7b9", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "crates/script/elidex-js-boa/src/globals/window/encoding.rs"}, "region": {"startLine": 22}}}]}, {"ruleId": "scanner-0921116a18e58122", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in crates/script/elidex-js-boa/src/globals/window/dom_parser.rs:519"}, "properties": {"repobilityId": "89963e05d0506267", "scanner": "scanner-primary", "fingerprint": "0921116a18e58122", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "crates/script/elidex-js-boa/src/globals/window/dom_parser.rs"}, "region": {"startLine": 519}}}]}, {"ruleId": "scanner-a088f1d27f652808", "level": "note", "message": {"text": "Insecure pattern 'document_write' in crates/tools/elidex-crawler/src/analyzer/js.rs:12"}, "properties": {"repobilityId": "390621b385984aaf", "scanner": "scanner-primary", "fingerprint": "a088f1d27f652808", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["owasp", "document_write"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "crates/tools/elidex-crawler/src/analyzer/js.rs"}, "region": {"startLine": 12}}}]}, {"ruleId": "scanner-a0b0a10a2203bed0", "level": "note", "message": {"text": "Insecure pattern 'document_write' in crates/tools/elidex-crawler/src/analyzer/html.rs:173"}, "properties": {"repobilityId": "a3e13ac4631118ab", "scanner": "scanner-primary", "fingerprint": "a0b0a10a2203bed0", "layer": "security", "severity": "low", "confidence": 1.0, "tags": ["owasp", "document_write"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "crates/tools/elidex-crawler/src/analyzer/html.rs"}, "region": {"startLine": 173}}}]}, {"ruleId": "scanner-a9a94fba84eb96fd", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in crates/shell/elidex-shell/src/lib.rs:369"}, "properties": {"repobilityId": "7c55c2c595461884", "scanner": "scanner-primary", "fingerprint": "a9a94fba84eb96fd", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "crates/shell/elidex-shell/src/lib.rs"}, "region": {"startLine": 369}}}]}, {"ruleId": "scanner-15910a12da66fc27", "level": "error", "message": {"text": "Insecure pattern 'eval_used' in crates/shell/elidex-shell/src/pipeline.rs:83"}, "properties": {"repobilityId": "e42db54a7407eb33", "scanner": "scanner-primary", "fingerprint": "15910a12da66fc27", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["owasp", "eval_used"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "crates/shell/elidex-shell/src/pipeline.rs"}, "region": {"startLine": 83}}}]}, {"ruleId": "scanner-374bc0c2a2f3fa4b", "level": "warning", "message": {"text": "Insecure pattern 'cors_wildcard' in crates/net/elidex-net/src/preflight/validator.rs:427"}, "properties": {"repobilityId": "ef0dae90b8819b62", "scanner": "scanner-primary", "fingerprint": "374bc0c2a2f3fa4b", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["owasp", "cors_wildcard"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "crates/net/elidex-net/src/preflight/validator.rs"}, "region": {"startLine": 427}}}]}, {"ruleId": "scanner-65aa740cba4a4a73", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "7640466c92034bac", "scanner": "scanner-primary", "fingerprint": "65aa740cba4a4a73", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/codeql.yml"}, "region": {"startLine": 36}}}]}, {"ruleId": "scanner-65aa740cba4a4a73", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "3130c0a2c5ea460e", "scanner": "scanner-primary", "fingerprint": "65aa740cba4a4a73", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/codeql.yml"}, "region": {"startLine": 42}}}]}, {"ruleId": "scanner-397ffb69fd282511", "level": "warning", "message": {"text": "GitHub Action is tag-pinned rather than SHA-pinned"}, "properties": {"repobilityId": "8673af1d13f5917c", "scanner": "scanner-primary", "fingerprint": "397ffb69fd282511", "layer": "cicd", "severity": "medium", "confidence": 1.0, "tags": ["supply-chain", "github-actions", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/audit.yml"}, "region": {"startLine": 21}}}]}, {"ruleId": "scanner-ef2fa36b22abc3c6", "level": "note", "message": {"text": "Very large file: crates/layout/elidex-layout-multicol/src/tests/mid_break_flow.rs (1271 lines)"}, "properties": {"repobilityId": "86946daf063ca634", "scanner": "scanner-primary", "fingerprint": "ef2fa36b22abc3c6", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-58047123b26214bd", "level": "note", "message": {"text": "Very large file: crates/layout/elidex-layout-block/src/inline/mod.rs (1351 lines)"}, "properties": {"repobilityId": "8a69d7a34f26580e", "scanner": "scanner-primary", "fingerprint": "58047123b26214bd", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-dca715cce1cb4a71", "level": "note", "message": {"text": "Very large file: crates/script/elidex-js/src/vm/vm_api.rs (1157 lines)"}, "properties": {"repobilityId": "f36b582aa81e4f3e", "scanner": "scanner-primary", "fingerprint": "dca715cce1cb4a71", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-f7f01d1817878f3a", "level": "note", "message": {"text": "Very large file: crates/script/elidex-js/src/vm/globals.rs (1360 lines)"}, "properties": {"repobilityId": "745af91ad07c7133", "scanner": "scanner-primary", "fingerprint": "f7f01d1817878f3a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-3a8cefb60adbe20a", "level": "note", "message": {"text": "Very large file: crates/script/elidex-js/src/vm/well_known.rs (1574 lines)"}, "properties": {"repobilityId": "58567325bf4ed1ed", "scanner": "scanner-primary", "fingerprint": "3a8cefb60adbe20a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-774df6a9a2dcd4d1", "level": "note", "message": {"text": "Very large file: crates/script/elidex-js/src/vm/dispatch.rs (1112 lines)"}, "properties": {"repobilityId": "223e6f7ecac667c8", "scanner": "scanner-primary", "fingerprint": "774df6a9a2dcd4d1", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-fae1b34d260a6d26", "level": "note", "message": {"text": "Very large file: crates/script/elidex-js/src/vm/interpreter.rs (1366 lines)"}, "properties": {"repobilityId": "4aff886cbee271e5", "scanner": "scanner-primary", "fingerprint": "fae1b34d260a6d26", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-5695d20d77957993", "level": "note", "message": {"text": "Very large file: crates/script/elidex-js/src/vm/mod.rs (2546 lines)"}, "properties": {"repobilityId": "bf0cbfe2a0014433", "scanner": "scanner-primary", "fingerprint": "5695d20d77957993", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-4c9f11f51c2158db", "level": "note", "message": {"text": "Very large file: crates/script/elidex-js/src/vm/object_kind.rs (1553 lines)"}, "properties": {"repobilityId": "8cbd5c921711dd51", "scanner": "scanner-primary", "fingerprint": "4c9f11f51c2158db", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-45d7a855c6db6e33", "level": "note", "message": {"text": "Very large file: crates/script/elidex-js/src/vm/host_data.rs (1901 lines)"}, "properties": {"repobilityId": "8f56ac74e06c5267", "scanner": "scanner-primary", "fingerprint": "45d7a855c6db6e33", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-dc15a8fb26c00f84", "level": "note", "message": {"text": "Very large file: crates/script/elidex-js/src/vm/tests/tests_file_api.rs (1773 lines)"}, "properties": {"repobilityId": "0ad6ff8943b80d61", "scanner": "scanner-primary", "fingerprint": "dc15a8fb26c00f84", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-b76ba7cc05c7520e", "level": "note", "message": {"text": "Very large file: crates/script/elidex-js/src/vm/gc/collect.rs (1870 lines)"}, "properties": {"repobilityId": "542626408e6828f5", "scanner": "scanner-primary", "fingerprint": "b76ba7cc05c7520e", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-dc91d43cd691fc80", "level": "note", "message": {"text": "Very large file: crates/script/elidex-js/src/vm/gc/trace.rs (1187 lines)"}, "properties": {"repobilityId": "d54ea73ab8df2db9", "scanner": "scanner-primary", "fingerprint": "dc91d43cd691fc80", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-fd697cbd4d3b4af4", "level": "note", "message": {"text": "Very large file: crates/core/elidex-ecs/src/dom/mod.rs (1255 lines)"}, "properties": {"repobilityId": "a47c6ba980ff3536", "scanner": "scanner-primary", "fingerprint": "fd697cbd4d3b4af4", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-f814e492516fc2d9", "level": "note", "message": {"text": "Very large file: crates/dom/elidex-dom-api/src/traversal.rs (1479 lines)"}, "properties": {"repobilityId": "bbad988ae66d7f78", "scanner": "scanner-primary", "fingerprint": "f814e492516fc2d9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-bc9b290e84d13d5a", "level": "note", "message": {"text": "Very large file: crates/dom/elidex-dom-api/src/focus.rs (1362 lines)"}, "properties": {"repobilityId": "beb9b0dbdf244971", "scanner": "scanner-primary", "fingerprint": "bc9b290e84d13d5a", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-3ab5d313dda8e5f9", "level": "note", "message": {"text": "Debug logging residue appears in source files"}, "properties": {"repobilityId": "75049951e38814c0", "scanner": "scanner-primary", "fingerprint": "3ab5d313dda8e5f9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["debug", "cleanup", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-72b2a6250083a784", "level": "warning", "message": {"text": "Placeholder or mock-heavy implementation detected"}, "properties": {"repobilityId": "3e6ccfbfee85e408", "scanner": "scanner-primary", "fingerprint": "72b2a6250083a784", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "incomplete", "generated-repo-pattern"]}}, {"ruleId": "scanner-2d0c7b7ab8f8aacf", "level": "warning", "message": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "properties": {"repobilityId": "f33ff9f07a4947c9", "scanner": "scanner-primary", "fingerprint": "2d0c7b7ab8f8aacf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "critical-flow", "generated-repo-pattern"]}}, {"ruleId": "scanner-ea8f3013f588db25", "level": "note", "message": {"text": "Shallow git history limits provenance confidence"}, "properties": {"repobilityId": "18ca7a6cf197e9bd", "scanner": "scanner-primary", "fingerprint": "ea8f3013f588db25", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-8424db9c75e04ba4", "level": "none", "message": {"text": "Very short observed git history"}, "properties": {"repobilityId": "922c7cdf40f18e59", "scanner": "scanner-primary", "fingerprint": "8424db9c75e04ba4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["provenance", "git-history", "generated-repo-pattern"]}}, {"ruleId": "scanner-afddf68df74d40e9", "level": "warning", "message": {"text": "Agent authority lacks a verifier contract: .claude/skills/external-converge/project.md"}, "properties": {"repobilityId": "4258d3fc07cd0a5b", "scanner": "scanner-primary", "fingerprint": "afddf68df74d40e9", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["agent-instructions", "verification", "claude_instruction"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".claude/skills/external-converge/project.md"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-e725d2ab884fbd49", "level": "note", "message": {"text": "Multiple root agent instruction files without precedence"}, "properties": {"repobilityId": "1953db6c89508d22", "scanner": "scanner-primary", "fingerprint": "e725d2ab884fbd49", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["agent-instructions", "governance"]}}, {"ruleId": "scanner-a7fff5d3197b88c0", "level": "none", "message": {"text": "Commented-code block (6 lines) in .claude/tools/_webref/extractor.py:75"}, "properties": {"repobilityId": "2e2aa45ca8e3cec6", "scanner": "scanner-primary", "fingerprint": "a7fff5d3197b88c0", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-0118d434b4c768ed", "level": "none", "message": {"text": "Commented-code block (5 lines) in .claude/tools/_webref/cli.py:252"}, "properties": {"repobilityId": "b63ed31f9b2b73c8", "scanner": "scanner-primary", "fingerprint": "0118d434b4c768ed", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-95a53c4bc497fbf8", "level": "none", "message": {"text": "Commented-code block (7 lines) in .claude/tools/_webref/cache.py:70"}, "properties": {"repobilityId": "9d73b0e963249872", "scanner": "scanner-primary", "fingerprint": "95a53c4bc497fbf8", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-8215fb887204855f", "level": "none", "message": {"text": "Commented-code block (7 lines) in .claude/tools/_webref/resolver.py:23"}, "properties": {"repobilityId": "aefdcb74f1ce24de", "scanner": "scanner-primary", "fingerprint": "8215fb887204855f", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-17b50624f2df23d9", "level": "none", "message": {"text": "Commented-code block (8 lines) in .claude/tools/_webref/commands/aoid.py:20"}, "properties": {"repobilityId": "3a2474d7fdb71b08", "scanner": "scanner-primary", "fingerprint": "17b50624f2df23d9", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-aabe392e99649715", "level": "none", "message": {"text": "Commented-code block (10 lines) in .claude/tools/_webref/commands/body.py:26"}, "properties": {"repobilityId": "39097ec87919ca34", "scanner": "scanner-primary", "fingerprint": "aabe392e99649715", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-ee987b8effcb09b6", "level": "none", "message": {"text": "Commented-code block (7 lines) in .claude/skills/elidex-plan-review/grep_pass.py:40"}, "properties": {"repobilityId": "7732eb21c49c15b9", "scanner": "scanner-primary", "fingerprint": "ee987b8effcb09b6", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-d84e2c2f4128da34", "level": "none", "message": {"text": "Commented-code block (6 lines) in .claude/skills/elidex-plan-review/preflight.py:78"}, "properties": {"repobilityId": "88be5000d2ab0457", "scanner": "scanner-primary", "fingerprint": "d84e2c2f4128da34", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}]}]}