{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "scanner-58d0c32a40f29012", "name": "Possibly dead Python function: cmd_validate", "shortDescription": {"text": "Possibly dead Python function: cmd_validate"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-cd4a6b2ab7f0ce03", "name": "Possibly dead Python function: cmd_list", "shortDescription": {"text": "Possibly dead Python function: cmd_list"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-62edda9421322117", "name": "Possibly dead Python function: cmd_ports", "shortDescription": {"text": "Possibly dead Python function: cmd_ports"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2b9e4ed0d32589c5", "name": "Possibly dead Python function: cmd_generate", "shortDescription": {"text": "Possibly dead Python function: cmd_generate"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5cc3f2b3e3348c79", "name": "Possibly dead Python function: cmd_credentials", "shortDescription": {"text": "Possibly dead Python function: cmd_credentials"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7a22b3d2fb235266", "name": "Possibly dead Python function: lnd_ring_enabled", "shortDescription": {"text": "Possibly dead Python function: lnd_ring_enabled"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-39183d4a38e5032e", "name": "Possibly dead Python function: build_cashu_wallet", "shortDescription": {"text": "Possibly dead Python function: build_cashu_wallet"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-361ab4419010ce1f", "name": "Possibly dead Python function: build_claimer", "shortDescription": {"text": "Possibly dead Python function: build_claimer"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-4d487e9667865d07", "name": "Possibly dead Python function: build_cashu", "shortDescription": {"text": "Possibly dead Python function: build_cashu"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-f46e9d01346ba543", "name": "Possibly dead Python function: build_fedimint", "shortDescription": {"text": "Possibly dead Python function: build_fedimint"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8a9ce80a73722e1f", "name": "Possibly dead Python function: build_cashupayserver", "shortDescription": {"text": "Possibly dead Python function: build_cashupayserver"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-db488acc6216ac44", "name": "Possibly dead Python function: build_ark", "shortDescription": {"text": "Possibly dead Python function: build_ark"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-9260206ef0f8ece4", "name": "Possibly dead Python function: build_fulcrum", "shortDescription": {"text": "Possibly dead Python function: build_fulcrum"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-67cd4733d8bfc9bd", "name": "Possibly dead Python function: build_miner", "shortDescription": {"text": "Possibly dead Python function: build_miner"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-805594f91e3aaa90", "name": "Possibly dead Python function: build_bitcoind", "shortDescription": {"text": "Possibly dead Python function: build_bitcoind"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-48f9e70c22ec9c6b", "name": "Possibly dead Python function: build_woocommerce", "shortDescription": {"text": "Possibly dead Python function: build_woocommerce"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-b44e32385ba6935f", "name": "Possibly dead Python function: build_mempool", "shortDescription": {"text": "Possibly dead Python function: build_mempool"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-5947234fcfb47086", "name": "Possibly dead Python function: stub", "shortDescription": {"text": "Possibly dead Python function: stub"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-43935419babc7815", "name": "Possibly dead Python function: deco", "shortDescription": {"text": "Possibly dead Python function: deco"}, "fullDescription": {"text": "No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler."}, "properties": {"scanner": "scanner-primary", "layer": "software", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3797b4066d4bdf4f", "name": "Dockerfile runs as root: images/mutinynet-bitcoind/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: images/mutinynet-bitcoind/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-b7e396db3982f62e", "name": "Docker base image is tag-pinned but not digest-pinned: debian:bookworm-slim", "shortDescription": {"text": "Docker base image is tag-pinned but not digest-pinned: debian:bookworm-slim"}, "fullDescription": {"text": "Container tags can be retagged upstream. Pin production base images to a reviewed digest (`image@sha256:...`) when reproducibility and supply-chain integrity matter."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "low", "confidence": 1.0}}, {"id": "scanner-14bf7619cfa47d37", "name": "Dockerfile runs as root: argus/claimer_src/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: argus/claimer_src/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-87da3c3372ee7499", "name": "Dockerfile runs as root: argus/signet_miner/Dockerfile", "shortDescription": {"text": "Dockerfile runs as root: argus/signet_miner/Dockerfile"}, "fullDescription": {"text": "No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image."}, "properties": {"scanner": "scanner-primary", "layer": "hardware", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-d343b77b18b48423", "name": "Possible secret in argus/builders/ark.py", "shortDescription": {"text": "Possible secret in argus/builders/ark.py"}, "fullDescription": {"text": "Detected pattern matching password_literal. Rotate the credential and move to a secret manager."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "critical", "confidence": 1.0}}, {"id": "scanner-6372cebde0220094", "name": "No auth library detected", "shortDescription": {"text": "No auth library detected"}, "fullDescription": {"text": "The scanner did not find any standard auth library (JWT, OAuth, NextAuth, Auth0, etc.). The repo has auth/admin/session surface indicators, so auth may live in custom code, in a separate service, or be missing."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-9afb8b63628a31b5", "name": "Very large file: argus/config.py (1582 lines)", "shortDescription": {"text": "Very large file: argus/config.py (1582 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-10c17061f404301f", "name": "Very large file: argus/signet_miner/test_framework/messages.py (1913 lines)", "shortDescription": {"text": "Very large file: argus/signet_miner/test_framework/messages.py (1913 lines)"}, "fullDescription": {"text": "Files with >800 lines often hide complexity hotspots and discourage tests."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-3ab5d313dda8e5f9", "name": "Debug logging residue appears in source files", "shortDescription": {"text": "Debug logging residue appears in source files"}, "fullDescription": {"text": "Found 23 console/debugger/print-style debug statements in non-test source. This is a common fast-generation residue before production cleanup."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-2d0c7b7ab8f8aacf", "name": "Critical user flow still appears backed by mock or placeholder data", "shortDescription": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "fullDescription": {"text": "A payment/auth/admin/order/billing-style flow contains mock, fake, TODO, dummy, or placeholder markers in runtime source. In the Fable corpus this is a high-leverage completeness smell: the app can look finished while the money, identity, or tenant flow is still scaffolded."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-a06e101b4f7a4d77", "name": "Legacy-named symbol `test_contact_page_shows_email_and_copy` in tests/test_web.py:967", "shortDescription": {"text": "Legacy-named symbol `test_contact_page_shows_email_and_copy` in tests/test_web.py:967"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-66f1a71a647fbe67", "name": "Commented-code block (5 lines) in tests/test_ark.py:31", "shortDescription": {"text": "Commented-code block (5 lines) in tests/test_ark.py:31"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-4b6a968e2e66b64b", "name": "Commented-code block (6 lines) in argus/tor.py:224", "shortDescription": {"text": "Commented-code block (6 lines) in argus/tor.py:224"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-4b1e523e17b0a404", "name": "Commented-code block (5 lines) in argus/shared.py:70", "shortDescription": {"text": "Commented-code block (5 lines) in argus/shared.py:70"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-18be82f42f4b9d7b", "name": "Commented-code block (7 lines) in argus/web_gen.py:87", "shortDescription": {"text": "Commented-code block (7 lines) in argus/web_gen.py:87"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-43ce69ad3362d503", "name": "Commented-code block (5 lines) in argus/config.py:137", "shortDescription": {"text": "Commented-code block (5 lines) in argus/config.py:137"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-7fdd8d609b817e6d", "name": "Commented-code block (7 lines) in argus/ark_cln.py:45", "shortDescription": {"text": "Commented-code block (7 lines) in argus/ark_cln.py:45"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-315bd9f65da68c8c", "name": "Commented-code block (6 lines) in argus/bitcart.py:56", "shortDescription": {"text": "Commented-code block (6 lines) in argus/bitcart.py:56"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-171b03952d75590f", "name": "Commented-code block (6 lines) in argus/reset.py:171", "shortDescription": {"text": "Commented-code block (6 lines) in argus/reset.py:171"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-3f521ff44866401f", "name": "Commented-code block (9 lines) in argus/constants.py:88", "shortDescription": {"text": "Commented-code block (9 lines) in argus/constants.py:88"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-fe07b45998660c85", "name": "Commented-code block (5 lines) in argus/ports.py:56", "shortDescription": {"text": "Commented-code block (5 lines) in argus/ports.py:56"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-a73dd984ef5caad3", "name": "Network/subprocess call without timeout or try/except \u2014 argus/claimer_src/claim.py:206", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 argus/claimer_src/claim.py:206"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-8aab554cb2c87959", "name": "Legacy-named symbol `run_cli_dkg_v2` in argus/builders/fedimint.py:60", "shortDescription": {"text": "Legacy-named symbol `run_cli_dkg_v2` in argus/builders/fedimint.py:60"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-8dce2ba752480652", "name": "Commented-code block (7 lines) in argus/builders/fedimint.py:179", "shortDescription": {"text": "Commented-code block (7 lines) in argus/builders/fedimint.py:179"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-657e98adf62b85a4", "name": "Commented-code block (5 lines) in argus/builders/_captaind_template.py:37", "shortDescription": {"text": "Commented-code block (5 lines) in argus/builders/_captaind_template.py:37"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-aec5de2a32906cfd", "name": "Commented-code block (5 lines) in argus/builders/ark.py:79", "shortDescription": {"text": "Commented-code block (5 lines) in argus/builders/ark.py:79"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-4e529ee71555a274", "name": "Commented-code block (6 lines) in argus/builders/bitcoind.py:165", "shortDescription": {"text": "Commented-code block (6 lines) in argus/builders/bitcoind.py:165"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-a138453c89f1bfe7", "name": "Commented-code block (7 lines) in argus/builders/woocommerce.py:256", "shortDescription": {"text": "Commented-code block (7 lines) in argus/builders/woocommerce.py:256"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-bb94e0adac3d7826", "name": "Commented-code block (7 lines) in argus/builders/lnd.py:155", "shortDescription": {"text": "Commented-code block (7 lines) in argus/builders/lnd.py:155"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-7c15b5e3bdeac920", "name": "Commented-code block (6 lines) in argus/builders/mempool.py:20", "shortDescription": {"text": "Commented-code block (6 lines) in argus/builders/mempool.py:20"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-210cb53b5c83c4e2", "name": "Network/subprocess call without timeout or try/except \u2014 argus/bitcart_cards/build.py:440", "shortDescription": {"text": "Network/subprocess call without timeout or try/except \u2014 argus/bitcart_cards/build.py:440"}, "fullDescription": {"text": "`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2f1fee06dd3415ff", "name": "Legacy-named symbol `deserialize_v2` in argus/signet_miner/test_framework/messages.py:303", "shortDescription": {"text": "Legacy-named symbol `deserialize_v2` in argus/signet_miner/test_framework/messages.py:303"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-7a25706511ed34f5", "name": "Commented-code block (5 lines) in argus/signet_miner/test_framework/messages.py:2", "shortDescription": {"text": "Commented-code block (5 lines) in argus/signet_miner/test_framework/messages.py:2"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-610cbb1b999b6a09", "name": "Commented-code block (5 lines) in argus/signet_miner/test_framework/script_util.py:25", "shortDescription": {"text": "Commented-code block (5 lines) in argus/signet_miner/test_framework/script_util.py:25"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-801aeee7a493aa3e", "name": "Legacy-named symbol `sign_input_legacy` in argus/signet_miner/test_framework/script.py:690", "shortDescription": {"text": "Legacy-named symbol `sign_input_legacy` in argus/signet_miner/test_framework/script.py:690"}, "fullDescription": {"text": "Names with suffixes like `_old`, `_v1`, `_deprecated` usually indicate replaced-but-not-removed code (typical AI-coder leftover). Confirm and delete, or rename if it's the active version."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-0047a0c9c3b45632", "name": "Commented-code block (7 lines) in argus/signet_miner/test_framework/script.py:898", "shortDescription": {"text": "Commented-code block (7 lines) in argus/signet_miner/test_framework/script.py:898"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-022f11a62daaa446", "name": "Commented-code block (6 lines) in argus/web/metrics.py:50", "shortDescription": {"text": "Commented-code block (6 lines) in argus/web/metrics.py:50"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-c7015fd20accdda1", "name": "Commented-code block (7 lines) in argus/web/inventory.py:359", "shortDescription": {"text": "Commented-code block (7 lines) in argus/web/inventory.py:359"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-517876dc243f9251", "name": "Commented-code block (5 lines) in argus/web/content.py:257", "shortDescription": {"text": "Commented-code block (5 lines) in argus/web/content.py:257"}, "fullDescription": {"text": "A long run of `//` or `#` lines usually means abandoned code. Delete or move to git history. Keeps the canvas + dead-code detection honest."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "info", "confidence": 1.0}}, {"id": "scanner-5ca2c723f1f6b8aa", "name": "`fetch()` without try/.catch or AbortSignal \u2014 argus/web/static/faucet.js:152", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 argus/web/static/faucet.js:152"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-7fdb36e69c78dbaf", "name": "`fetch()` without try/.catch or AbortSignal \u2014 argus/web/static/faucet-pow-worker.js:91", "shortDescription": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 argus/web/static/faucet-pow-worker.js:91"}, "fullDescription": {"text": "Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "medium", "confidence": 1.0}}, {"id": "scanner-2c04133e54348533", "name": "Near-duplicate function bodies in 2 places", "shortDescription": {"text": "Near-duplicate function bodies in 2 places"}, "fullDescription": {"text": "Functions with the same first-5-line body hash:\nargus/generate.py:generate_network, argus/generate.py:generate\n\nThis is *the* AI-coder failure mode (4\u00d7 more duplication in vibe-coded repos \u2014 see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate."}, "properties": {"scanner": "scanner-primary", "layer": "quality", "severity": "low", "confidence": 1.0}}, {"id": "scanner-95228e95d5879e6b", "name": "Flask mutation route `faucet` without `@login_required` \u2014 argus/faucet/app.py:442", "shortDescription": {"text": "Flask mutation route `faucet` without `@login_required` \u2014 argus/faucet/app.py:442"}, "fullDescription": {"text": "Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent."}, "properties": {"scanner": "scanner-primary", "layer": "security", "severity": "high", "confidence": 1.0}}]}}, "automationDetails": {"id": "repobility/24486"}, "properties": {"repository": "BareBits/bitcoin_argus", "repoUrl": "https://github.com/BareBits/bitcoin_argus", "branch": "main"}, "results": [{"ruleId": "scanner-58d0c32a40f29012", "level": "note", "message": {"text": "Possibly dead Python function: cmd_validate"}, "properties": {"repobilityId": "e595afaaf6f22972", "scanner": "scanner-primary", "fingerprint": "58d0c32a40f29012", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "argus/cli.py:31"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-cd4a6b2ab7f0ce03", "level": "note", "message": {"text": "Possibly dead Python function: cmd_list"}, "properties": {"repobilityId": "bd09044da90857da", "scanner": "scanner-primary", "fingerprint": "cd4a6b2ab7f0ce03", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "argus/cli.py:39"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-62edda9421322117", "level": "note", "message": {"text": "Possibly dead Python function: cmd_ports"}, "properties": {"repobilityId": "417ce7d8d2c3a71d", "scanner": "scanner-primary", "fingerprint": "62edda9421322117", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "argus/cli.py:51"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-2b9e4ed0d32589c5", "level": "note", "message": {"text": "Possibly dead Python function: cmd_generate"}, "properties": {"repobilityId": "75ff4e241b80a970", "scanner": "scanner-primary", "fingerprint": "2b9e4ed0d32589c5", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "argus/cli.py:63"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5cc3f2b3e3348c79", "level": "note", "message": {"text": "Possibly dead Python function: cmd_credentials"}, "properties": {"repobilityId": "4ba52f51403498fb", "scanner": "scanner-primary", "fingerprint": "5cc3f2b3e3348c79", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "argus/cli.py:82"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-7a22b3d2fb235266", "level": "note", "message": {"text": "Possibly dead Python function: lnd_ring_enabled"}, "properties": {"repobilityId": "241505ca2dbfa81c", "scanner": "scanner-primary", "fingerprint": "7a22b3d2fb235266", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "argus/config.py:955"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-39183d4a38e5032e", "level": "note", "message": {"text": "Possibly dead Python function: build_cashu_wallet"}, "properties": {"repobilityId": "5e2f611453321972", "scanner": "scanner-primary", "fingerprint": "39183d4a38e5032e", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "argus/builders/cashu_wallet.py:24"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-361ab4419010ce1f", "level": "note", "message": {"text": "Possibly dead Python function: build_claimer"}, "properties": {"repobilityId": "fda44a7287e16e3a", "scanner": "scanner-primary", "fingerprint": "361ab4419010ce1f", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "argus/builders/claimer.py:35"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-4d487e9667865d07", "level": "note", "message": {"text": "Possibly dead Python function: build_cashu"}, "properties": {"repobilityId": "c2341d2e7dfcccf0", "scanner": "scanner-primary", "fingerprint": "4d487e9667865d07", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "argus/builders/cashu.py:18"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-f46e9d01346ba543", "level": "note", "message": {"text": "Possibly dead Python function: build_fedimint"}, "properties": {"repobilityId": "cfab188d628c18d1", "scanner": "scanner-primary", "fingerprint": "f46e9d01346ba543", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "argus/builders/fedimint.py:346"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-8a9ce80a73722e1f", "level": "note", "message": {"text": "Possibly dead Python function: build_cashupayserver"}, "properties": {"repobilityId": "1fa4c1d915ceea7c", "scanner": "scanner-primary", "fingerprint": "8a9ce80a73722e1f", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "argus/builders/cashupayserver.py:59"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-db488acc6216ac44", "level": "note", "message": {"text": "Possibly dead Python function: build_ark"}, "properties": {"repobilityId": "9193797e3c92fc5c", "scanner": "scanner-primary", "fingerprint": "db488acc6216ac44", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "argus/builders/ark.py:309"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-9260206ef0f8ece4", "level": "note", "message": {"text": "Possibly dead Python function: build_fulcrum"}, "properties": {"repobilityId": "af781113acf7295d", "scanner": "scanner-primary", "fingerprint": "9260206ef0f8ece4", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "argus/builders/fulcrum.py:38"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-67cd4733d8bfc9bd", "level": "note", "message": {"text": "Possibly dead Python function: build_miner"}, "properties": {"repobilityId": "2d7078ca27877ffd", "scanner": "scanner-primary", "fingerprint": "67cd4733d8bfc9bd", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "argus/builders/miner.py:127"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-805594f91e3aaa90", "level": "note", "message": {"text": "Possibly dead Python function: build_bitcoind"}, "properties": {"repobilityId": "2ad7ee382167e862", "scanner": "scanner-primary", "fingerprint": "805594f91e3aaa90", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "argus/builders/bitcoind.py:128"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-48f9e70c22ec9c6b", "level": "note", "message": {"text": "Possibly dead Python function: build_woocommerce"}, "properties": {"repobilityId": "7d3cf307a06f1297", "scanner": "scanner-primary", "fingerprint": "48f9e70c22ec9c6b", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "argus/builders/woocommerce.py:49"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-b44e32385ba6935f", "level": "note", "message": {"text": "Possibly dead Python function: build_mempool"}, "properties": {"repobilityId": "13562129ce9361e7", "scanner": "scanner-primary", "fingerprint": "b44e32385ba6935f", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "argus/builders/mempool.py:39"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-5947234fcfb47086", "level": "note", "message": {"text": "Possibly dead Python function: stub"}, "properties": {"repobilityId": "948246c7872999e6", "scanner": "scanner-primary", "fingerprint": "5947234fcfb47086", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "argus/faucet/pow.py:118"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-43935419babc7815", "level": "note", "message": {"text": "Possibly dead Python function: deco"}, "properties": {"repobilityId": "11da05572c448654", "scanner": "scanner-primary", "fingerprint": "43935419babc7815", "layer": "software", "severity": "low", "confidence": 1.0, "tags": ["dead-code"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "argus/faucet/approval.py:69"}, "region": {"startLine": 1}}}]}, {"ruleId": "scanner-3797b4066d4bdf4f", "level": "warning", "message": {"text": "Dockerfile runs as root: images/mutinynet-bitcoind/Dockerfile"}, "properties": {"repobilityId": "d5679b52cb127dce", "scanner": "scanner-primary", "fingerprint": "3797b4066d4bdf4f", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-b7e396db3982f62e", "level": "note", "message": {"text": "Docker base image is tag-pinned but not digest-pinned: debian:bookworm-slim"}, "properties": {"repobilityId": "b7526dd98eb3aa3d", "scanner": "scanner-primary", "fingerprint": "b7e396db3982f62e", "layer": "hardware", "severity": "low", "confidence": 1.0, "tags": ["supply-chain", "docker", "pinned-dependencies"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "images/mutinynet-bitcoind/Dockerfile"}, "region": {"startLine": 17}}}]}, {"ruleId": "scanner-14bf7619cfa47d37", "level": "warning", "message": {"text": "Dockerfile runs as root: argus/claimer_src/Dockerfile"}, "properties": {"repobilityId": "5a60276ac5a5b8ff", "scanner": "scanner-primary", "fingerprint": "14bf7619cfa47d37", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-87da3c3372ee7499", "level": "warning", "message": {"text": "Dockerfile runs as root: argus/signet_miner/Dockerfile"}, "properties": {"repobilityId": "7c68d0f24af9acb7", "scanner": "scanner-primary", "fingerprint": "87da3c3372ee7499", "layer": "hardware", "severity": "medium", "confidence": 1.0, "tags": ["security", "container"]}}, {"ruleId": "scanner-d343b77b18b48423", "level": "error", "message": {"text": "Possible secret in argus/builders/ark.py"}, "properties": {"repobilityId": "e291344944dd0fa2", "scanner": "scanner-primary", "fingerprint": "d343b77b18b48423", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "argus/builders/ark.py"}, "region": {"startLine": 214}}}]}, {"ruleId": "scanner-d343b77b18b48423", "level": "error", "message": {"text": "Possible secret in argus/builders/ark.py"}, "properties": {"repobilityId": "e291344944dd0fa2", "scanner": "scanner-primary", "fingerprint": "d343b77b18b48423", "layer": "security", "severity": "critical", "confidence": 1.0, "tags": ["secrets"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "argus/builders/ark.py"}, "region": {"startLine": 214}}}]}, {"ruleId": "scanner-6372cebde0220094", "level": "warning", "message": {"text": "No auth library detected"}, "properties": {"repobilityId": "a5b6035a5bbf8054", "scanner": "scanner-primary", "fingerprint": "6372cebde0220094", "layer": "security", "severity": "medium", "confidence": 1.0, "tags": ["coverage", "auth"]}}, {"ruleId": "scanner-9afb8b63628a31b5", "level": "note", "message": {"text": "Very large file: argus/config.py (1582 lines)"}, "properties": {"repobilityId": "f364be2a07a1be15", "scanner": "scanner-primary", "fingerprint": "9afb8b63628a31b5", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-10c17061f404301f", "level": "note", "message": {"text": "Very large file: argus/signet_miner/test_framework/messages.py (1913 lines)"}, "properties": {"repobilityId": "6c05167c43acd090", "scanner": "scanner-primary", "fingerprint": "10c17061f404301f", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["complexity"]}}, {"ruleId": "scanner-3ab5d313dda8e5f9", "level": "note", "message": {"text": "Debug logging residue appears in source files"}, "properties": {"repobilityId": "e34296156bcd2412", "scanner": "scanner-primary", "fingerprint": "3ab5d313dda8e5f9", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["debug", "cleanup", "repo-hardening", "generated-repo-pattern"]}}, {"ruleId": "scanner-2d0c7b7ab8f8aacf", "level": "warning", "message": {"text": "Critical user flow still appears backed by mock or placeholder data"}, "properties": {"repobilityId": "4d73cad6bc3b5d51", "scanner": "scanner-primary", "fingerprint": "2d0c7b7ab8f8aacf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["placeholder", "mock-data", "critical-flow", "generated-repo-pattern"]}}, {"ruleId": "scanner-a06e101b4f7a4d77", "level": "note", "message": {"text": "Legacy-named symbol `test_contact_page_shows_email_and_copy` in tests/test_web.py:967"}, "properties": {"repobilityId": "ea674e1a8dd9c36a", "scanner": "scanner-primary", "fingerprint": "a06e101b4f7a4d77", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-66f1a71a647fbe67", "level": "none", "message": {"text": "Commented-code block (5 lines) in tests/test_ark.py:31"}, "properties": {"repobilityId": "d3c82e70c084207d", "scanner": "scanner-primary", "fingerprint": "66f1a71a647fbe67", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-4b6a968e2e66b64b", "level": "none", "message": {"text": "Commented-code block (6 lines) in argus/tor.py:224"}, "properties": {"repobilityId": "5dda309ca62a7d45", "scanner": "scanner-primary", "fingerprint": "4b6a968e2e66b64b", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-4b1e523e17b0a404", "level": "none", "message": {"text": "Commented-code block (5 lines) in argus/shared.py:70"}, "properties": {"repobilityId": "28819c21f7a20e0c", "scanner": "scanner-primary", "fingerprint": "4b1e523e17b0a404", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-18be82f42f4b9d7b", "level": "none", "message": {"text": "Commented-code block (7 lines) in argus/web_gen.py:87"}, "properties": {"repobilityId": "e07068e35d8d64f1", "scanner": "scanner-primary", "fingerprint": "18be82f42f4b9d7b", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-43ce69ad3362d503", "level": "none", "message": {"text": "Commented-code block (5 lines) in argus/config.py:137"}, "properties": {"repobilityId": "75052f0d7ad9851f", "scanner": "scanner-primary", "fingerprint": "43ce69ad3362d503", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-7fdd8d609b817e6d", "level": "none", "message": {"text": "Commented-code block (7 lines) in argus/ark_cln.py:45"}, "properties": {"repobilityId": "bf177890f2389542", "scanner": "scanner-primary", "fingerprint": "7fdd8d609b817e6d", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-315bd9f65da68c8c", "level": "none", "message": {"text": "Commented-code block (6 lines) in argus/bitcart.py:56"}, "properties": {"repobilityId": "231b638b06a6180f", "scanner": "scanner-primary", "fingerprint": "315bd9f65da68c8c", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-171b03952d75590f", "level": "none", "message": {"text": "Commented-code block (6 lines) in argus/reset.py:171"}, "properties": {"repobilityId": "c9329be83bd407dc", "scanner": "scanner-primary", "fingerprint": "171b03952d75590f", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-3f521ff44866401f", "level": "none", "message": {"text": "Commented-code block (9 lines) in argus/constants.py:88"}, "properties": {"repobilityId": "60655b99d7f74c76", "scanner": "scanner-primary", "fingerprint": "3f521ff44866401f", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-fe07b45998660c85", "level": "none", "message": {"text": "Commented-code block (5 lines) in argus/ports.py:56"}, "properties": {"repobilityId": "bd727cb339c4dfbb", "scanner": "scanner-primary", "fingerprint": "fe07b45998660c85", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-a73dd984ef5caad3", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 argus/claimer_src/claim.py:206"}, "properties": {"repobilityId": "40b4272c4eae90b8", "scanner": "scanner-primary", "fingerprint": "a73dd984ef5caad3", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-8aab554cb2c87959", "level": "note", "message": {"text": "Legacy-named symbol `run_cli_dkg_v2` in argus/builders/fedimint.py:60"}, "properties": {"repobilityId": "bd74c1d46aa04c49", "scanner": "scanner-primary", "fingerprint": "8aab554cb2c87959", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-8dce2ba752480652", "level": "none", "message": {"text": "Commented-code block (7 lines) in argus/builders/fedimint.py:179"}, "properties": {"repobilityId": "c1efad14dbcdc52c", "scanner": "scanner-primary", "fingerprint": "8dce2ba752480652", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-657e98adf62b85a4", "level": "none", "message": {"text": "Commented-code block (5 lines) in argus/builders/_captaind_template.py:37"}, "properties": {"repobilityId": "c0e5dbd56cab281d", "scanner": "scanner-primary", "fingerprint": "657e98adf62b85a4", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-aec5de2a32906cfd", "level": "none", "message": {"text": "Commented-code block (5 lines) in argus/builders/ark.py:79"}, "properties": {"repobilityId": "32068b6b251b7a66", "scanner": "scanner-primary", "fingerprint": "aec5de2a32906cfd", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-4e529ee71555a274", "level": "none", "message": {"text": "Commented-code block (6 lines) in argus/builders/bitcoind.py:165"}, "properties": {"repobilityId": "aa6b91eb3b38359c", "scanner": "scanner-primary", "fingerprint": "4e529ee71555a274", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-a138453c89f1bfe7", "level": "none", "message": {"text": "Commented-code block (7 lines) in argus/builders/woocommerce.py:256"}, "properties": {"repobilityId": "947d4c57216dee42", "scanner": "scanner-primary", "fingerprint": "a138453c89f1bfe7", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-bb94e0adac3d7826", "level": "none", "message": {"text": "Commented-code block (7 lines) in argus/builders/lnd.py:155"}, "properties": {"repobilityId": "177540e5a1ffbaad", "scanner": "scanner-primary", "fingerprint": "bb94e0adac3d7826", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-7c15b5e3bdeac920", "level": "none", "message": {"text": "Commented-code block (6 lines) in argus/builders/mempool.py:20"}, "properties": {"repobilityId": "d0c7cf833c1f6edf", "scanner": "scanner-primary", "fingerprint": "7c15b5e3bdeac920", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-210cb53b5c83c4e2", "level": "warning", "message": {"text": "Network/subprocess call without timeout or try/except \u2014 argus/bitcart_cards/build.py:440"}, "properties": {"repobilityId": "d50a6b8dcd0a52af", "scanner": "scanner-primary", "fingerprint": "210cb53b5c83c4e2", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-2f1fee06dd3415ff", "level": "note", "message": {"text": "Legacy-named symbol `deserialize_v2` in argus/signet_miner/test_framework/messages.py:303"}, "properties": {"repobilityId": "ef069956faf81071", "scanner": "scanner-primary", "fingerprint": "2f1fee06dd3415ff", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-7a25706511ed34f5", "level": "none", "message": {"text": "Commented-code block (5 lines) in argus/signet_miner/test_framework/messages.py:2"}, "properties": {"repobilityId": "465aa64e66e004ab", "scanner": "scanner-primary", "fingerprint": "7a25706511ed34f5", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-610cbb1b999b6a09", "level": "none", "message": {"text": "Commented-code block (5 lines) in argus/signet_miner/test_framework/script_util.py:25"}, "properties": {"repobilityId": "c1c5e9660a802f7e", "scanner": "scanner-primary", "fingerprint": "610cbb1b999b6a09", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-801aeee7a493aa3e", "level": "note", "message": {"text": "Legacy-named symbol `sign_input_legacy` in argus/signet_miner/test_framework/script.py:690"}, "properties": {"repobilityId": "0a667bb12b06d668", "scanner": "scanner-primary", "fingerprint": "801aeee7a493aa3e", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "legacy-marker", "dead-code"]}}, {"ruleId": "scanner-0047a0c9c3b45632", "level": "none", "message": {"text": "Commented-code block (7 lines) in argus/signet_miner/test_framework/script.py:898"}, "properties": {"repobilityId": "d463156293d66346", "scanner": "scanner-primary", "fingerprint": "0047a0c9c3b45632", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-022f11a62daaa446", "level": "none", "message": {"text": "Commented-code block (6 lines) in argus/web/metrics.py:50"}, "properties": {"repobilityId": "e185bc73d61fb7fa", "scanner": "scanner-primary", "fingerprint": "022f11a62daaa446", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-c7015fd20accdda1", "level": "none", "message": {"text": "Commented-code block (7 lines) in argus/web/inventory.py:359"}, "properties": {"repobilityId": "99f38cf8d9a1aab6", "scanner": "scanner-primary", "fingerprint": "c7015fd20accdda1", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-517876dc243f9251", "level": "none", "message": {"text": "Commented-code block (5 lines) in argus/web/content.py:257"}, "properties": {"repobilityId": "2fe40d1a2abd5c2b", "scanner": "scanner-primary", "fingerprint": "517876dc243f9251", "layer": "quality", "severity": "info", "confidence": 1.0, "tags": ["integrity", "commented-code", "dead-code"]}}, {"ruleId": "scanner-5ca2c723f1f6b8aa", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 argus/web/static/faucet.js:152"}, "properties": {"repobilityId": "ed2cecf002648d9b", "scanner": "scanner-primary", "fingerprint": "5ca2c723f1f6b8aa", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-7fdb36e69c78dbaf", "level": "warning", "message": {"text": "`fetch()` without try/.catch or AbortSignal \u2014 argus/web/static/faucet-pow-worker.js:91"}, "properties": {"repobilityId": "27b10c82510e186f", "scanner": "scanner-primary", "fingerprint": "7fdb36e69c78dbaf", "layer": "quality", "severity": "medium", "confidence": 1.0, "tags": ["integrity", "fragile-runtime", "robustness"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "2a71b314fbe4e15b", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "790e45449ace4fe5", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "36930d1401acae0c", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-2c04133e54348533", "level": "note", "message": {"text": "Near-duplicate function bodies in 2 places"}, "properties": {"repobilityId": "3364ae75729805e0", "scanner": "scanner-primary", "fingerprint": "2c04133e54348533", "layer": "quality", "severity": "low", "confidence": 1.0, "tags": ["integrity", "duplicate", "dry"]}}, {"ruleId": "scanner-95228e95d5879e6b", "level": "error", "message": {"text": "Flask mutation route `faucet` without `@login_required` \u2014 argus/faucet/app.py:442"}, "properties": {"repobilityId": "62bfd63b8c746207", "scanner": "scanner-primary", "fingerprint": "95228e95d5879e6b", "layer": "security", "severity": "high", "confidence": 1.0, "tags": ["auth", "owasp", "auth.flask.unauth_route"]}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "argus/faucet/app.py"}, "region": {"startLine": 442}}}]}]}]}