{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "MINED111", "name": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or ", "shortDescription": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "fullDescription": {"text": "Either narrow the exception type, log the exception with `logger.exception(...)`, or re-raise after handling."}, "properties": {"scanner": "repobility-ast-engine", "category": "quality", "severity": "medium", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "MINED109", "name": "[MINED109] Mutable default argument in `__init__` (list): `def __init__(... = []/{}/set())` \u2014 Python's default value is ", "shortDescription": {"text": "[MINED109] Mutable default argument in `__init__` (list): `def __init__(... = []/{}/set())` \u2014 Python's default value is constructed ONCE at function definition time and shared across all calls. Mutating it in one call mutates it for every f"}, "fullDescription": {"text": "Use None as the default and create the collection inside the function: `def __init__(x=None): x = x or []`"}, "properties": {"scanner": "repobility-ast-engine", "category": "quality", "severity": "medium", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "AIC004", "name": "Suspicious implementation file appears unreferenced", "shortDescription": {"text": "Suspicious implementation file appears unreferenced"}, "fullDescription": {"text": "Confirm whether this file is reachable. If not, delete it; if yes, wire it through explicit imports, routes, or entry points and add a test that proves the path executes."}, "properties": {"scanner": "repobility-ai-code-hygiene", "category": "quality", "severity": "medium", "confidence": 0.78, "cwe": "", "owasp": ""}}, {"id": "AIC001", "name": "Parallel implementation file sits beside a canonical file", "shortDescription": {"text": "Parallel implementation file sits beside a canonical file"}, "fullDescription": {"text": "Merge the intended change into the canonical file, update tests/imports, and delete the parallel implementation if it is not the active entry point."}, "properties": {"scanner": "repobility-ai-code-hygiene", "category": "quality", "severity": "medium", "confidence": 0.82, "cwe": "", "owasp": ""}}, {"id": "COMP001", "name": "[COMP001] High cognitive complexity: Function `CheckNodeTextExpectationsCollectorUpdatingIsDisabled` has cognitive compl", "shortDescription": {"text": "[COMP001] High cognitive complexity: Function `CheckNodeTextExpectationsCollectorUpdatingIsDisabled` has cognitive complexity 16 (SonarSource scale). Cognitive complexity measures how hard the function is for a human to understand \u2014 nested "}, "fullDescription": {"text": "Extract nested branches into named helper functions; flatten early-return / guard clauses; replace long if/elif chains with dispatch dicts or polymorphism. SonarQube's threshold for 'should refactor' is 15 \u2014 yours is 16."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "medium", "confidence": 0.95, "cwe": "", "owasp": ""}}, {"id": "SEC136", "name": "[SEC136] AI-typical over-broad exception handler swallowing all errors: Catch-all exception block that silently returns ", "shortDescription": {"text": "[SEC136] AI-typical over-broad exception handler swallowing all errors: Catch-all exception block that silently returns success or no-ops. AI agents reach for this pattern when a flaky test or an unfamiliar API throws \u2014 wrap, swallow, retur"}, "fullDescription": {"text": "Catch the specific exception type, log at error level with full exception info, and return a failure-shaped result. If the operation is genuinely best-effort, log at warning and document why in a comment so the next reader (or scanner) knows."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "medium", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "SEC045", "name": "[SEC045] eval()/exec() on stored or user-supplied data: eval() and exec() on data \u2014 even admin-stored data \u2014 is a latera", "shortDescription": {"text": "[SEC045] eval()/exec() on stored or user-supplied data: eval() and exec() on data \u2014 even admin-stored data \u2014 is a lateral-movement vector after any one credential compromise. Sandboxes (__builtins__ cleared) are escapable: attackers use obj"}, "fullDescription": {"text": "For literal data structures: use ast.literal_eval(text) \u2014 only parses literals, raises on code.\nFor formula evaluation: use asteval or simpleeval (purpose-built sandboxes with allow-lists).\nFor Odoo: use odoo.tools.safe_eval(expr, locals_dict, mode='exec').\nIf you genuinely need to execute admin-stored code: require explicit super-admin permission AND log every execution with a stack trace."}, "properties": {"scanner": "repobility-threat-engine", "category": "injection", "severity": "medium", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "AIC005", "name": "Duplicate top-level symbol appears in a patch-style file", "shortDescription": {"text": "Duplicate top-level symbol appears in a patch-style file"}, "fullDescription": {"text": "Keep one authoritative implementation, update imports to point at it, and remove or rename the duplicate symbol."}, "properties": {"scanner": "repobility-ai-code-hygiene", "category": "quality", "severity": "low", "confidence": 0.64, "cwe": "", "owasp": ""}}, {"id": "AIC003", "name": "Duplicated implementation block across source files", "shortDescription": {"text": "Duplicated implementation block across source files"}, "fullDescription": {"text": "Extract the shared behavior into one function/module or delete the inactive duplicate after proving which path is used."}, "properties": {"scanner": "repobility-ai-code-hygiene", "category": "quality", "severity": "low", "confidence": 0.86, "cwe": "", "owasp": ""}}, {"id": "AIC002", "name": "Source file name looks like an AI patch artifact", "shortDescription": {"text": "Source file name looks like an AI patch artifact"}, "fullDescription": {"text": "Rename it to the domain concept it implements or merge it into the existing module it was meant to change."}, "properties": {"scanner": "repobility-ai-code-hygiene", "category": "quality", "severity": "low", "confidence": 0.62, "cwe": "", "owasp": ""}}, {"id": "AIC007", "name": "Generated build artifact directory is present at repository root", "shortDescription": {"text": "Generated build artifact directory is present at repository root"}, "fullDescription": {"text": "Remove generated output from version control, add it to .gitignore and .dockerignore where relevant, and regenerate it in CI or release jobs."}, "properties": {"scanner": "repobility-ai-code-hygiene", "category": "quality", "severity": "low", "confidence": 0.7, "cwe": "", "owasp": ""}}, {"id": "SEC006", "name": "[SEC006] XSS Risk: Direct HTML injection without sanitization.", "shortDescription": {"text": "[SEC006] XSS Risk: Direct HTML injection without sanitization."}, "fullDescription": {"text": "Use textContent instead of innerHTML. Sanitize with DOMPurify."}, "properties": {"scanner": "repobility-threat-engine", "category": "injection", "severity": "low", "confidence": 0.4, "cwe": "", "owasp": ""}}, {"id": "MINED044", "name": "[MINED044] Js Console Log Prod: console.log left in code. Should be replaced with logger or removed.", "shortDescription": {"text": "[MINED044] Js Console Log Prod: console.log left in code. Should be replaced with logger or removed."}, "fullDescription": {"text": "Review and fix per the pattern semantics. See CWE-532 /  for context."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "info", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "MINED049", "name": "[MINED049] Print Pii (and 3 more): Same pattern found in 3 additional files. Review if needed.", "shortDescription": {"text": "[MINED049] Print Pii (and 3 more): Same pattern found in 3 additional files. Review if needed."}, "fullDescription": {"text": "Review and fix per the pattern semantics. See CWE-532 / A09:2021 for context."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "info", "confidence": 0.2, "cwe": "", "owasp": ""}}, {"id": "MINED002", "name": "[MINED002] Dart Null Bang (and 41 more): Same pattern found in 41 additional files. Review if needed.", "shortDescription": {"text": "[MINED002] Dart Null Bang (and 41 more): Same pattern found in 41 additional files. Review if needed."}, "fullDescription": {"text": "Review and fix per the pattern semantics. See CWE-476 /  for context."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "info", "confidence": 0.2, "cwe": "", "owasp": ""}}, {"id": "MINED043", "name": "[MINED043] Http Not Https (and 3 more): Same pattern found in 3 additional files. Review if needed.", "shortDescription": {"text": "[MINED043] Http Not Https (and 3 more): Same pattern found in 3 additional files. Review if needed."}, "fullDescription": {"text": "Review and fix per the pattern semantics. See CWE-319 / A02:2021 for context."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "info", "confidence": 0.2, "cwe": "", "owasp": ""}}, {"id": "SEC020", "name": "[SEC020] Secret Printed to Logs: Debug or diagnostic code appears to print a credential-bearing value. This is a frequen", "shortDescription": {"text": "[SEC020] Secret Printed to Logs: Debug or diagnostic code appears to print a credential-bearing value. This is a frequent AI-assisted coding failure: the helper exposes the exact value needed for troubleshooting."}, "fullDescription": {"text": "Log only redacted, hashed, or last-four-style metadata. Rotate any secret that may have reached logs."}, "properties": {"scanner": "repobility-threat-engine", "category": "credential_exposure", "severity": "info", "confidence": 0.1, "cwe": "", "owasp": ""}}, {"id": "SEC029", "name": "[SEC029] Server-Side Request Forgery (SSRF) \u2014 outbound HTTP from user input (and 3 more): Same pattern found in 3 additi", "shortDescription": {"text": "[SEC029] Server-Side Request Forgery (SSRF) \u2014 outbound HTTP from user input (and 3 more): Same pattern found in 3 additional files. Review if needed."}, "fullDescription": {"text": "Validate the URL against an allowlist BEFORE fetching:\n  ALLOWED = {'images.example.com', 'cdn.example.com'}\n  host = urlparse(url).hostname\n  if host not in ALLOWED: abort(400)\nOr use a server-side proxy (Imgproxy / serve-files-only-from-S3) that isolates outbound network access from the request handler.\nBlock private CIDRs explicitly: 10/8, 172.16/12, 192.168/16, 169.254/16."}, "properties": {"scanner": "repobility-threat-engine", "category": "ssrf", "severity": "info", "confidence": 0.2, "cwe": "", "owasp": ""}}, {"id": "MINED004", "name": "[MINED004] Weak Crypto (and 1 more): Same pattern found in 1 additional files. Review if needed.", "shortDescription": {"text": "[MINED004] Weak Crypto (and 1 more): Same pattern found in 1 additional files. Review if needed."}, "fullDescription": {"text": "Review and fix per the pattern semantics. See CWE-327 / A02:2021 for context."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "info", "confidence": 0.2, "cwe": "", "owasp": ""}}, {"id": "MINED046", "name": "[MINED046] Dart Print (and 254 more): Same pattern found in 254 additional files. Review if needed.", "shortDescription": {"text": "[MINED046] Dart Print (and 254 more): Same pattern found in 254 additional files. Review if needed."}, "fullDescription": {"text": "Review and fix per the pattern semantics. See CWE-532 /  for context."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "info", "confidence": 0.2, "cwe": "", "owasp": ""}}, {"id": "MINED106", "name": "[MINED106] Phantom test coverage: test_else1: Test function `test_else1` runs code but contains no assert / expect / sho", "shortDescription": {"text": "[MINED106] Phantom test coverage: test_else1: Test function `test_else1` runs code but contains no assert / expect / should call \u2014 it passes regardless of behaviour. Adds line coverage without verifying anything."}, "fullDescription": {"text": "Add an explicit assertion that captures the test's intent, or remove the test."}, "properties": {"scanner": "repobility-ast-engine", "category": "quality", "severity": "high", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "MINED108", "name": "[MINED108] `self.BuildIncludesGraph` used but never assigned in __init__: Method `Check` of class `LayeringChecker` read", "shortDescription": {"text": "[MINED108] `self.BuildIncludesGraph` used but never assigned in __init__: Method `Check` of class `LayeringChecker` reads `self.BuildIncludesGraph`, but no assignment to it exists in __init__ (and no class-level fallback). This raises Attri"}, "fullDescription": {"text": "Initialize `self.BuildIncludesGraph = <default>` in __init__, or add a class-level default."}, "properties": {"scanner": "repobility-ast-engine", "category": "quality", "severity": "high", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "SEC085", "name": "[SEC085] JS: child_process.exec with non-literal: child_process.exec with user-derived input enables command injection. ", "shortDescription": {"text": "[SEC085] JS: child_process.exec with non-literal: child_process.exec with user-derived input enables command injection. Ported from eslint-plugin-security detect-child-process (Apache-2.0)."}, "fullDescription": {"text": "Use execFile / spawn with separate args array; never pass shell strings."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "high", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "MINED107", "name": "[MINED107] Missing import: `http` used but not imported: The file uses `http.something(...)` but never imports `http`. T", "shortDescription": {"text": "[MINED107] Missing import: `http` used but not imported: The file uses `http.something(...)` but never imports `http`. This raises NameError at runtime the first time the line executes."}, "fullDescription": {"text": "Add `import http` at the top of the file."}, "properties": {"scanner": "repobility-ast-engine", "category": "quality", "severity": "critical", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "SEC084", "name": "[SEC084] JS: require() with non-literal: require(<variable>) loads arbitrary modules \u2014 equivalent to eval at module scop", "shortDescription": {"text": "[SEC084] JS: require() with non-literal: require(<variable>) loads arbitrary modules \u2014 equivalent to eval at module scope. Ported from eslint-plugin-security detect-non-literal-require (Apache-2.0)."}, "fullDescription": {"text": "Use static imports or a static mapping `const modules = { foo: require('./foo') }`."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "critical", "confidence": 1.0, "cwe": "", "owasp": ""}}]}}, "automationDetails": {"id": "repobility/1303"}, "properties": {"repository": "dart-lang/sdk", "repoUrl": "https://github.com/dart-lang/sdk", "branch": "main"}, "results": [{"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 133119, "scanner": "repobility-ast-engine", "fingerprint": "7d9eb36d0bde1f1c79a9034d73f36239bfe72607e508dda328f30c3ce543b928", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|7d9eb36d0bde1f1c79a9034d73f36239bfe72607e508dda328f30c3ce543b928"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "pkg/compiler/test/codesize/swarm/cacheimages.py"}, "region": {"startLine": 31}}}]}, {"ruleId": "MINED109", "level": "warning", "message": {"text": "[MINED109] Mutable default argument in `__init__` (list): `def __init__(... = []/{}/set())` \u2014 Python's default value is constructed ONCE at function definition time and shared across all calls. Mutating it in one call mutates it for every future call too."}, "properties": {"repobilityId": 133118, "scanner": "repobility-ast-engine", "fingerprint": "f85cf1ea479dc1dd07129e57820c94d9cb5fb0a1ef54b00a687805257ebc2a49", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "mutable-default-arg", "owasp": null, "cwe_ids": ["CWE-1023"], "languages": ["python"], "observations_count": 64867}, "scanner": "repobility-ast-engine", "correlation_key": "fp|f85cf1ea479dc1dd07129e57820c94d9cb5fb0a1ef54b00a687805257ebc2a49"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/dom/scripts/systemhtml.py"}, "region": {"startLine": 166}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 133117, "scanner": "repobility-ast-engine", "fingerprint": "e75b613645556d56a5670f6217e6e818295a3c128466546f1a284d32738005b6", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|e75b613645556d56a5670f6217e6e818295a3c128466546f1a284d32738005b6"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/dom/scripts/databasebuilder.py"}, "region": {"startLine": 161}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 133116, "scanner": "repobility-ast-engine", "fingerprint": "c492ca51904f48b69216ceaf7e135cfe50704b555f8c99132b95a444a668b370", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|c492ca51904f48b69216ceaf7e135cfe50704b555f8c99132b95a444a668b370"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/dom/scripts/databasebuilder.py"}, "region": {"startLine": 112}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 133115, "scanner": "repobility-ast-engine", "fingerprint": "f48491c7fd2c0a339b831cc1f3e5fdb5c68f831de5b05875c9f11f0f0a0c2ad5", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|f48491c7fd2c0a339b831cc1f3e5fdb5c68f831de5b05875c9f11f0f0a0c2ad5"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/dom/scripts/databasebuilder.py"}, "region": {"startLine": 94}}}]}, {"ruleId": "MINED109", "level": "warning", "message": {"text": "[MINED109] Mutable default argument in `__init__` (dict): `def __init__(... = []/{}/set())` \u2014 Python's default value is constructed ONCE at function definition time and shared across all calls. Mutating it in one call mutates it for every future call too."}, "properties": {"repobilityId": 133114, "scanner": "repobility-ast-engine", "fingerprint": "acd94c8dd1b4b99abaf337b71bd4645721ddf6015530ef0fff8e791e174fbbd8", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "mutable-default-arg", "owasp": null, "cwe_ids": ["CWE-1023"], "languages": ["python"], "observations_count": 64867}, "scanner": "repobility-ast-engine", "correlation_key": "fp|acd94c8dd1b4b99abaf337b71bd4645721ddf6015530ef0fff8e791e174fbbd8"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/dom/scripts/databasebuilder.py"}, "region": {"startLine": 39}}}]}, {"ruleId": "MINED109", "level": "warning", "message": {"text": "[MINED109] Mutable default argument in `__init__` (list): `def __init__(... = []/{}/set())` \u2014 Python's default value is constructed ONCE at function definition time and shared across all calls. Mutating it in one call mutates it for every future call too."}, "properties": {"repobilityId": 133113, "scanner": "repobility-ast-engine", "fingerprint": "eb28d9d77e729b3584628bce2b8dc4b55f3641c911af7be9dc2a6a33012df168", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "mutable-default-arg", "owasp": null, "cwe_ids": ["CWE-1023"], "languages": ["python"], "observations_count": 64867}, "scanner": "repobility-ast-engine", "correlation_key": "fp|eb28d9d77e729b3584628bce2b8dc4b55f3641c911af7be9dc2a6a33012df168"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/dom/scripts/databasebuilder.py"}, "region": {"startLine": 39}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 133111, "scanner": "repobility-ast-engine", "fingerprint": "44118543cec4dbca3fc4667aba1bf6596c03398dc9461ab00a7a620b1f9001f0", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|44118543cec4dbca3fc4667aba1bf6596c03398dc9461ab00a7a620b1f9001f0"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/dom/scripts/templateloader_test.py"}, "region": {"startLine": 33}}}]}, {"ruleId": "MINED109", "level": "warning", "message": {"text": "[MINED109] Mutable default argument in `_GenerateNativeBinding` (list): `def _GenerateNativeBinding(... = []/{}/set())` \u2014 Python's default value is constructed ONCE at function definition time and shared across all calls. Mutating it in one call mutates it for every future call too."}, "properties": {"repobilityId": 133103, "scanner": "repobility-ast-engine", "fingerprint": "e525fbfbfcde5ce4dc61d953cf507e9c2aa8fd7c8eecde2f25fc78b2ecdfb141", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "mutable-default-arg", "owasp": null, "cwe_ids": ["CWE-1023"], "languages": ["python"], "observations_count": 64867}, "scanner": "repobility-ast-engine", "correlation_key": "fp|e525fbfbfcde5ce4dc61d953cf507e9c2aa8fd7c8eecde2f25fc78b2ecdfb141"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/dom/scripts/systemnative.py"}, "region": {"startLine": 1009}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 133090, "scanner": "repobility-ast-engine", "fingerprint": "ae1f40d06d3f16b2f47e7f539a5a12def0a3cc377121dd2b03961db0d47f82d0", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|ae1f40d06d3f16b2f47e7f539a5a12def0a3cc377121dd2b03961db0d47f82d0"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/dom/scripts/idlnode.py"}, "region": {"startLine": 85}}}]}, {"ruleId": "MINED109", "level": "warning", "message": {"text": "[MINED109] Mutable default argument in `RunCommand` (list): `def RunCommand(... = []/{}/set())` \u2014 Python's default value is constructed ONCE at function definition time and shared across all calls. Mutating it in one call mutates it for every future call too."}, "properties": {"repobilityId": 133087, "scanner": "repobility-ast-engine", "fingerprint": "50a620b750463c3452abc6b5697f41e1205f3dfc70bba1f6bccd1e64b463f03b", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "mutable-default-arg", "owasp": null, "cwe_ids": ["CWE-1023"], "languages": ["python"], "observations_count": 64867}, "scanner": "repobility-ast-engine", "correlation_key": "fp|50a620b750463c3452abc6b5697f41e1205f3dfc70bba1f6bccd1e64b463f03b"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/dom/scripts/idlsync.py"}, "region": {"startLine": 117}}}]}, {"ruleId": "MINED109", "level": "warning", "message": {"text": "[MINED109] Mutable default argument in `FilterInterfaces` (list): `def FilterInterfaces(... = []/{}/set())` \u2014 Python's default value is constructed ONCE at function definition time and shared across all calls. Mutating it in one call mutates it for every future call too."}, "properties": {"repobilityId": 133085, "scanner": "repobility-ast-engine", "fingerprint": "d6cd2370ab8ffde5133862bf20054680b61f5820b54f1de1e5624d01e975a77c", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "mutable-default-arg", "owasp": null, "cwe_ids": ["CWE-1023"], "languages": ["python"], "observations_count": 64867}, "scanner": "repobility-ast-engine", "correlation_key": "fp|d6cd2370ab8ffde5133862bf20054680b61f5820b54f1de1e5624d01e975a77c"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/dom/scripts/dartgenerator.py"}, "region": {"startLine": 115}}}]}, {"ruleId": "MINED109", "level": "warning", "message": {"text": "[MINED109] Mutable default argument in `Load` (dict): `def Load(... = []/{}/set())` \u2014 Python's default value is constructed ONCE at function definition time and shared across all calls. Mutating it in one call mutates it for every future call too."}, "properties": {"repobilityId": 133084, "scanner": "repobility-ast-engine", "fingerprint": "7c24a1b52bf18687c965bda328427024f081aac96e1a20bfe39fecca67d7faae", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "mutable-default-arg", "owasp": null, "cwe_ids": ["CWE-1023"], "languages": ["python"], "observations_count": 64867}, "scanner": "repobility-ast-engine", "correlation_key": "fp|7c24a1b52bf18687c965bda328427024f081aac96e1a20bfe39fecca67d7faae"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/dom/scripts/templateloader.py"}, "region": {"startLine": 54}}}]}, {"ruleId": "MINED109", "level": "warning", "message": {"text": "[MINED109] Mutable default argument in `TryLoad` (dict): `def TryLoad(... = []/{}/set())` \u2014 Python's default value is constructed ONCE at function definition time and shared across all calls. Mutating it in one call mutates it for every future call too."}, "properties": {"repobilityId": 133083, "scanner": "repobility-ast-engine", "fingerprint": "ce35ba6a02684d7fed9e2b67f163c490ec7ebc83b9cc1ab45e14e83d010dd532", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "mutable-default-arg", "owasp": null, "cwe_ids": ["CWE-1023"], "languages": ["python"], "observations_count": 64867}, "scanner": "repobility-ast-engine", "correlation_key": "fp|ce35ba6a02684d7fed9e2b67f163c490ec7ebc83b9cc1ab45e14e83d010dd532"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/dom/scripts/templateloader.py"}, "region": {"startLine": 37}}}]}, {"ruleId": "MINED109", "level": "warning", "message": {"text": "[MINED109] Mutable default argument in `__init__` (dict): `def __init__(... = []/{}/set())` \u2014 Python's default value is constructed ONCE at function definition time and shared across all calls. Mutating it in one call mutates it for every future call too."}, "properties": {"repobilityId": 133082, "scanner": "repobility-ast-engine", "fingerprint": "a91c3186d06e0690e83abecfdaac4e3972f976d63a9251bba2e8f90c84fd0180", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "mutable-default-arg", "owasp": null, "cwe_ids": ["CWE-1023"], "languages": ["python"], "observations_count": 64867}, "scanner": "repobility-ast-engine", "correlation_key": "fp|a91c3186d06e0690e83abecfdaac4e3972f976d63a9251bba2e8f90c84fd0180"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/dom/scripts/templateloader.py"}, "region": {"startLine": 23}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 133074, "scanner": "repobility-ast-engine", "fingerprint": "7c985c38943ceb17b8e8f9f9802865b48b94932ad0e58347abaec81d18e1121c", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|7c985c38943ceb17b8e8f9f9802865b48b94932ad0e58347abaec81d18e1121c"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "runtime/tools/dartfuzz/update_spreadsheet.py"}, "region": {"startLine": 111}}}]}, {"ruleId": "MINED109", "level": "warning", "message": {"text": "[MINED109] Mutable default argument in `get_output_sum` (list): `def get_output_sum(... = []/{}/set())` \u2014 Python's default value is constructed ONCE at function definition time and shared across all calls. Mutating it in one call mutates it for every future call too."}, "properties": {"repobilityId": 133073, "scanner": "repobility-ast-engine", "fingerprint": "bd420fb4963335d0142b2ee43476c514a1a0914ffbe261a108291d42e267e4b0", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "mutable-default-arg", "owasp": null, "cwe_ids": ["CWE-1023"], "languages": ["python"], "observations_count": 64867}, "scanner": "repobility-ast-engine", "correlation_key": "fp|bd420fb4963335d0142b2ee43476c514a1a0914ffbe261a108291d42e267e4b0"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "runtime/tools/dartfuzz/collect_data.py"}, "region": {"startLine": 79}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 133070, "scanner": "repobility-ast-engine", "fingerprint": "63b7fc59ca5cd60f4fd8eb6dc15075069375d4ccd78e452c2a0ac538c5fc8052", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|63b7fc59ca5cd60f4fd8eb6dc15075069375d4ccd78e452c2a0ac538c5fc8052"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/utils.py"}, "region": {"startLine": 776}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 133069, "scanner": "repobility-ast-engine", "fingerprint": "c8e8c03a3b0016ca3d6dd992049d2225c186bd07aa2a83759841e45f941c6b64", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|c8e8c03a3b0016ca3d6dd992049d2225c186bd07aa2a83759841e45f941c6b64"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/utils.py"}, "region": {"startLine": 914}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 133068, "scanner": "repobility-ast-engine", "fingerprint": "c7406439f74c2d3ef4b811cfc52ba3c19358a811939974797165f8dfbc9c8217", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|c7406439f74c2d3ef4b811cfc52ba3c19358a811939974797165f8dfbc9c8217"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/utils.py"}, "region": {"startLine": 801}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 133067, "scanner": "repobility-ast-engine", "fingerprint": "b5073f418e9ca80a9441e746c7ac803bfba548a28abdc2e4d701dbe735502bd5", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|b5073f418e9ca80a9441e746c7ac803bfba548a28abdc2e4d701dbe735502bd5"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/utils.py"}, "region": {"startLine": 632}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 133066, "scanner": "repobility-ast-engine", "fingerprint": "939fe3ba6d933a324e03c946f25cfa0c4894f4f14ee1f60cb149d941499aca9d", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|939fe3ba6d933a324e03c946f25cfa0c4894f4f14ee1f60cb149d941499aca9d"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/utils.py"}, "region": {"startLine": 609}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 133065, "scanner": "repobility-ast-engine", "fingerprint": "5b0eb67a4f5f269ee7c5eb6695190b9f5492a0483954301bee62f7241cb6e368", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|5b0eb67a4f5f269ee7c5eb6695190b9f5492a0483954301bee62f7241cb6e368"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/utils.py"}, "region": {"startLine": 400}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 133042, "scanner": "repobility-ast-engine", "fingerprint": "d83fcc362c57f823d10d53c15b6f0afde953a55edbe889eb19261bbc3e0aa5e7", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|d83fcc362c57f823d10d53c15b6f0afde953a55edbe889eb19261bbc3e0aa5e7"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/minidump.py"}, "region": {"startLine": 183}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 133040, "scanner": "repobility-ast-engine", "fingerprint": "663d01680ca784b09af6dd9dc677ea77b8e740e11d7563ef0eb8d02458824e9f", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|663d01680ca784b09af6dd9dc677ea77b8e740e11d7563ef0eb8d02458824e9f"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/get_dot_git_folder.py"}, "region": {"startLine": 42}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 133039, "scanner": "repobility-ast-engine", "fingerprint": "f3c061ab61c9027c3f25df2f13921fb49f5145c8c4622510a90ad25dc11bf5a9", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|f3c061ab61c9027c3f25df2f13921fb49f5145c8c4622510a90ad25dc11bf5a9"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/make_version.py"}, "region": {"startLine": 145}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 133038, "scanner": "repobility-ast-engine", "fingerprint": "2d0a35ef3707ca61e3257fa50f9bfd5167a7040d9d95b8ec8d055d97c517ae00", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|2d0a35ef3707ca61e3257fa50f9bfd5167a7040d9d95b8ec8d055d97c517ae00"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/gn.py"}, "region": {"startLine": 704}}}]}, {"ruleId": "MINED109", "level": "warning", "message": {"text": "[MINED109] Mutable default argument in `RunGnOnConfiguredConfigurations` (dict): `def RunGnOnConfiguredConfigurations(... = []/{}/set())` \u2014 Python's default value is constructed ONCE at function definition time and shared across all calls. Mutating it in one call mutates it for every future call too."}, "properties": {"repobilityId": 133037, "scanner": "repobility-ast-engine", "fingerprint": "599c7a86a58a1d08a85913439df8be1fe1d9f3a8d978dddcfa7c250ec15ceb4c", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "mutable-default-arg", "owasp": null, "cwe_ids": ["CWE-1023"], "languages": ["python"], "observations_count": 64867}, "scanner": "repobility-ast-engine", "correlation_key": "fp|599c7a86a58a1d08a85913439df8be1fe1d9f3a8d978dddcfa7c250ec15ceb4c"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/gn.py"}, "region": {"startLine": 676}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"repobilityId": 133036, "scanner": "repobility-ast-engine", "fingerprint": "cc4a0f340dc69b373884d6d51c42dfd5100e02b5c17109891b48248695fd5f44", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|cc4a0f340dc69b373884d6d51c42dfd5100e02b5c17109891b48248695fd5f44"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/build_devtools.py"}, "region": {"startLine": 112}}}]}, {"ruleId": "AIC004", "level": "warning", "message": {"text": "Suspicious implementation file appears unreferenced"}, "properties": {"repobilityId": 133004, "scanner": "repobility-ai-code-hygiene", "fingerprint": "501b2b07f54cdd30383ebad1fcf82306563fbdaeed6cb470408ac99402b8df8d", "category": "quality", "severity": "medium", "confidence": 0.78, "triageState": "open", "verdict": "likely", "isResolved": false, "reason": "Patch-style source file has no detected inbound reference from other repository files.", "evidence": {"suffix": "new", "rule_id": "AIC004", "scanner": "repobility-ai-code-hygiene", "references": ["https://knip.dev/", "https://github.com/jendrikseipp/vulture"], "correlation_key": "fp|501b2b07f54cdd30383ebad1fcf82306563fbdaeed6cb470408ac99402b8df8d"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "pkg/front_end/parser_testcases/error_recovery/issue_45251_set_new.dart"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC004", "level": "warning", "message": {"text": "Suspicious implementation file appears unreferenced"}, "properties": {"repobilityId": 133003, "scanner": "repobility-ai-code-hygiene", "fingerprint": "9c60c932c66da9ab6e9d33969552906ccb4f730922958556a4da83c0fdb62bf6", "category": "quality", "severity": "medium", "confidence": 0.78, "triageState": "open", "verdict": "likely", "isResolved": false, "reason": "Patch-style source file has no detected inbound reference from other repository files.", "evidence": {"suffix": "new", "rule_id": "AIC004", "scanner": "repobility-ai-code-hygiene", "references": ["https://knip.dev/", "https://github.com/jendrikseipp/vulture"], "correlation_key": "fp|9c60c932c66da9ab6e9d33969552906ccb4f730922958556a4da83c0fdb62bf6"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "pkg/front_end/parser_testcases/error_recovery/issue_45251_new.dart"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC004", "level": "warning", "message": {"text": "Suspicious implementation file appears unreferenced"}, "properties": {"repobilityId": 133002, "scanner": "repobility-ai-code-hygiene", "fingerprint": "72e57facdebbd8594fe81ad65e5a4c645844d539dbf9513455023f0eca7b0514", "category": "quality", "severity": "medium", "confidence": 0.78, "triageState": "open", "verdict": "likely", "isResolved": false, "reason": "Patch-style source file has no detected inbound reference from other repository files.", "evidence": {"suffix": "new", "rule_id": "AIC004", "scanner": "repobility-ai-code-hygiene", "references": ["https://knip.dev/", "https://github.com/jendrikseipp/vulture"], "correlation_key": "fp|72e57facdebbd8594fe81ad65e5a4c645844d539dbf9513455023f0eca7b0514"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "pkg/front_end/parser_testcases/error_recovery/issue_45251_list_new.dart"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC001", "level": "warning", "message": {"text": "Parallel implementation file sits beside a canonical file"}, "properties": {"repobilityId": 133001, "scanner": "repobility-ai-code-hygiene", "fingerprint": "eb6150b6dda0f4ec0f35d14d05d178e766166b8b99844ad681ae4ba567b82093", "category": "quality", "severity": "medium", "confidence": 0.82, "triageState": "open", "verdict": "likely", "isResolved": false, "reason": "Source filename has a patch-style suffix and a same-directory canonical sibling exists.", "evidence": {"suffix": "copy", "rule_id": "AIC001", "scanner": "repobility-ai-code-hygiene", "references": ["https://arxiv.org/abs/2601.15195", "https://knip.dev/"], "canonical_file": "runtime/vm/object_graph.h", "correlation_key": "fp|eb6150b6dda0f4ec0f35d14d05d178e766166b8b99844ad681ae4ba567b82093"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "runtime/vm/object_graph_copy.h"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC001", "level": "warning", "message": {"text": "Parallel implementation file sits beside a canonical file"}, "properties": {"repobilityId": 132993, "scanner": "repobility-ai-code-hygiene", "fingerprint": "106fe7397e17d4734fce6d7332a79cebfae5141495f844e9d2256ce096125b1a", "category": "quality", "severity": "medium", "confidence": 0.82, "triageState": "open", "verdict": "likely", "isResolved": false, "reason": "Source filename has a patch-style suffix and a same-directory canonical sibling exists.", "evidence": {"suffix": "new", "rule_id": "AIC001", "scanner": "repobility-ai-code-hygiene", "references": ["https://arxiv.org/abs/2601.15195", "https://knip.dev/"], "canonical_file": "pkg/front_end/parser_testcases/error_recovery/issue_45251_set.dart", "correlation_key": "fp|106fe7397e17d4734fce6d7332a79cebfae5141495f844e9d2256ce096125b1a"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "pkg/front_end/parser_testcases/error_recovery/issue_45251_set_new.dart"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC001", "level": "warning", "message": {"text": "Parallel implementation file sits beside a canonical file"}, "properties": {"repobilityId": 132992, "scanner": "repobility-ai-code-hygiene", "fingerprint": "b1437c47162d390d1ed95f7be6cb67b0191dcdf16ac177bd3cdd6acec8c5a121", "category": "quality", "severity": "medium", "confidence": 0.82, "triageState": "open", "verdict": "likely", "isResolved": false, "reason": "Source filename has a patch-style suffix and a same-directory canonical sibling exists.", "evidence": {"suffix": "new", "rule_id": "AIC001", "scanner": "repobility-ai-code-hygiene", "references": ["https://arxiv.org/abs/2601.15195", "https://knip.dev/"], "canonical_file": "pkg/front_end/parser_testcases/error_recovery/issue_45251_list.dart", "correlation_key": "fp|b1437c47162d390d1ed95f7be6cb67b0191dcdf16ac177bd3cdd6acec8c5a121"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "pkg/front_end/parser_testcases/error_recovery/issue_45251_list_new.dart"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC001", "level": "warning", "message": {"text": "Parallel implementation file sits beside a canonical file"}, "properties": {"repobilityId": 132991, "scanner": "repobility-ai-code-hygiene", "fingerprint": "7f3fdab5e65d6e027fc2722c9f75eb4576f08647b704797f5e2b5af62af4398c", "category": "quality", "severity": "medium", "confidence": 0.82, "triageState": "open", "verdict": "likely", "isResolved": false, "reason": "Source filename has a patch-style suffix and a same-directory canonical sibling exists.", "evidence": {"suffix": "new", "rule_id": "AIC001", "scanner": "repobility-ai-code-hygiene", "references": ["https://arxiv.org/abs/2601.15195", "https://knip.dev/"], "canonical_file": "pkg/front_end/parser_testcases/error_recovery/issue_45251.dart", "correlation_key": "fp|7f3fdab5e65d6e027fc2722c9f75eb4576f08647b704797f5e2b5af62af4398c"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "pkg/front_end/parser_testcases/error_recovery/issue_45251_new.dart"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC001", "level": "warning", "message": {"text": "Parallel implementation file sits beside a canonical file"}, "properties": {"repobilityId": 132990, "scanner": "repobility-ai-code-hygiene", "fingerprint": "d06ab050c7c1133f6247a978d85f67796b47f4592d3d57b8fc556e3c9ab00b5a", "category": "quality", "severity": "medium", "confidence": 0.82, "triageState": "open", "verdict": "likely", "isResolved": false, "reason": "Source filename has a patch-style suffix and a same-directory canonical sibling exists.", "evidence": {"suffix": "new", "rule_id": "AIC001", "scanner": "repobility-ai-code-hygiene", "references": ["https://arxiv.org/abs/2601.15195", "https://knip.dev/"], "canonical_file": "pkg/dev_compiler/lib/src/kernel/compiler.dart", "correlation_key": "fp|d06ab050c7c1133f6247a978d85f67796b47f4592d3d57b8fc556e3c9ab00b5a"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "pkg/dev_compiler/lib/src/kernel/compiler_new.dart"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC001", "level": "warning", "message": {"text": "Parallel implementation file sits beside a canonical file"}, "properties": {"repobilityId": 132989, "scanner": "repobility-ai-code-hygiene", "fingerprint": "e4fa71fe7c81f10ee2ee7db9521cf73bd233eacc88f656b3ce069a3d45dabc88", "category": "quality", "severity": "medium", "confidence": 0.82, "triageState": "open", "verdict": "likely", "isResolved": false, "reason": "Source filename has a patch-style suffix and a same-directory canonical sibling exists.", "evidence": {"suffix": "new", "rule_id": "AIC001", "scanner": "repobility-ai-code-hygiene", "references": ["https://arxiv.org/abs/2601.15195", "https://knip.dev/"], "canonical_file": "pkg/compiler/lib/src/js_backend/runtime_types.dart", "correlation_key": "fp|e4fa71fe7c81f10ee2ee7db9521cf73bd233eacc88f656b3ce069a3d45dabc88"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "pkg/compiler/lib/src/js_backend/runtime_types_new.dart"}, "region": {"startLine": 1}}}]}, {"ruleId": "COMP001", "level": "warning", "message": {"text": "[COMP001] High cognitive complexity: Function `CheckNodeTextExpectationsCollectorUpdatingIsDisabled` has cognitive complexity 16 (SonarSource scale). Cognitive complexity measures how hard the function is for a human to understand \u2014 nested branches, boolean chains, and recursion all weigh in. Breakdown: else=1, for=2, if=3, nested_bonus=10."}, "properties": {"repobilityId": 132976, "scanner": "repobility-threat-engine", "fingerprint": "98905efaaca7032beedab5349d8a99ecaf8d5dec5ca664c78dd7cdebaf586e76", "category": "quality", "severity": "medium", "confidence": 0.95, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "AST-derived cognitive complexity score = 16 (severity threshold for medium: 15+).", "evidence": {"scanner": "repobility-threat-engine", "function": "CheckNodeTextExpectationsCollectorUpdatingIsDisabled", "breakdown": {"if": 3, "for": 2, "else": 1, "nested_bonus": 10}, "complexity": 16, "correlation_key": "fp|98905efaaca7032beedab5349d8a99ecaf8d5dec5ca664c78dd7cdebaf586e76"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "pkg/analyzer/PRESUBMIT.py"}, "region": {"startLine": 74}}}]}, {"ruleId": "SEC136", "level": "warning", "message": {"text": "[SEC136] AI-typical over-broad exception handler swallowing all errors: Catch-all exception block that silently returns success or no-ops. AI agents reach for this pattern when a flaky test or an unfamiliar API throws \u2014 wrap, swallow, return success. Real bugs are masked, observability is destroyed, and callers think the operation worked. CWE-396 (improperly-generalized exception). Distinct from intentional fallback because there's no log line and the success value is fabricated."}, "properties": {"repobilityId": 132969, "scanner": "repobility-threat-engine", "fingerprint": "46d2c0fb4bfa8680a836e77dd556e007f54a768ee486646c5d61782ab7e7e9eb", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": "} catch (_) {\n      return null;\n    }", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC136", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "fp|46d2c0fb4bfa8680a836e77dd556e007f54a768ee486646c5d61782ab7e7e9eb"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "pkg/analysis_server/integration_test/lsp_server/integration_tests.dart"}, "region": {"startLine": 95}}}]}, {"ruleId": "SEC136", "level": "warning", "message": {"text": "[SEC136] AI-typical over-broad exception handler swallowing all errors: Catch-all exception block that silently returns success or no-ops. AI agents reach for this pattern when a flaky test or an unfamiliar API throws \u2014 wrap, swallow, return success. Real bugs are masked, observability is destroyed, and callers think the operation worked. CWE-396 (improperly-generalized exception). Distinct from intentional fallback because there's no log line and the success value is fabricated."}, "properties": {"repobilityId": 132968, "scanner": "repobility-threat-engine", "fingerprint": "d924a37e53ce8668f95001cc21de986ebe43d211f1ef70727507fdd8ce51ec69", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": "} catch (_) {\n      return null;\n    }", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC136", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "fp|d924a37e53ce8668f95001cc21de986ebe43d211f1ef70727507fdd8ce51ec69"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "pkg/analysis_server/integration_test/lsp/abstract_lsp_over_legacy.dart"}, "region": {"startLine": 110}}}]}, {"ruleId": "SEC045", "level": "warning", "message": {"text": "[SEC045] eval()/exec() on stored or user-supplied data: eval() and exec() on data \u2014 even admin-stored data \u2014 is a lateral-movement vector after any one credential compromise. Sandboxes (__builtins__ cleared) are escapable: attackers use object introspection (().__class__.__mro__[-1].__subclasses__()) to reach os.system. CWE-95 (eval injection)."}, "properties": {"repobilityId": 132945, "scanner": "repobility-threat-engine", "fingerprint": "9dfbc3d19f0b5dcc9582e263f4a577d5ed07b9899fb596984af28b31daa4ada5", "category": "injection", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": "eval(", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC045", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "code|injection|token|11|sec045"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "pkg/front_end/testcases/dartdevc/static_interop_erasure/main_lib.dart"}, "region": {"startLine": 11}}}]}, {"ruleId": "SEC045", "level": "warning", "message": {"text": "[SEC045] eval()/exec() on stored or user-supplied data: eval() and exec() on data \u2014 even admin-stored data \u2014 is a lateral-movement vector after any one credential compromise. Sandboxes (__builtins__ cleared) are escapable: attackers use object introspection (().__class__.__mro__[-1].__subclasses__()) to reach os.system. CWE-95 (eval injection)."}, "properties": {"repobilityId": 132944, "scanner": "repobility-threat-engine", "fingerprint": "813b18326d6ae5eacea1daff9cdc6207a1357e9c6811dc5b747b446ebbe2f660", "category": "injection", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": "eval(", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC045", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "code|injection|token|20|sec045"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "benchmarks/WasmJSInterop/dart/WasmJSInterop.dart"}, "region": {"startLine": 20}}}]}, {"ruleId": "SEC045", "level": "warning", "message": {"text": "[SEC045] eval()/exec() on stored or user-supplied data: eval() and exec() on data \u2014 even admin-stored data \u2014 is a lateral-movement vector after any one credential compromise. Sandboxes (__builtins__ cleared) are escapable: attackers use object introspection (().__class__.__mro__[-1].__subclasses__()) to reach os.system. CWE-95 (eval injection)."}, "properties": {"repobilityId": 132943, "scanner": "repobility-threat-engine", "fingerprint": "39b969b6acc3ea16b106d8b1c046215386da761c63b1788dd771a8960b98f6d5", "category": "injection", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": "exec(", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC045", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "code|injection|.github/extract_deps.py|61|sec045"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/extract_deps.py"}, "region": {"startLine": 61}}}]}, {"ruleId": "AIC005", "level": "note", "message": {"text": "Duplicate top-level symbol appears in a patch-style file"}, "properties": {"repobilityId": 133034, "scanner": "repobility-ai-code-hygiene", "fingerprint": "8a4ebc894dcf7637d0cf3036b80830903ec562d16cca3b7db391b68eb0346876", "category": "quality", "severity": "low", "confidence": 0.64, "triageState": "open", "verdict": "needs_review", "isResolved": false, "reason": "Patch-style file defines a top-level symbol also defined in another source file.", "evidence": {"symbol": "Ruleset", "rule_id": "AIC005", "scanner": "repobility-ai-code-hygiene", "references": ["https://github.com/jendrikseipp/vulture", "https://knip.dev/"], "duplicate_file": "tests/language/type/conversion_ssa_test.dart", "correlation_key": "fp|8a4ebc894dcf7637d0cf3036b80830903ec562d16cca3b7db391b68eb0346876"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "pkg/compiler/lib/src/js_backend/runtime_types_new.dart"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC005", "level": "note", "message": {"text": "Duplicate top-level symbol appears in a patch-style file"}, "properties": {"repobilityId": 133033, "scanner": "repobility-ai-code-hygiene", "fingerprint": "1b061a8f1022fe0a05f851e28839df03d4a1588ec31c7b63d4d0b9821a73937d", "category": "quality", "severity": "low", "confidence": 0.64, "triageState": "open", "verdict": "needs_review", "isResolved": false, "reason": "Patch-style file defines a top-level symbol also defined in another source file.", "evidence": {"symbol": "ObjectPtr", "rule_id": "AIC005", "scanner": "repobility-ai-code-hygiene", "references": ["https://github.com/jendrikseipp/vulture", "https://knip.dev/"], "duplicate_file": "runtime/vm/tagged_pointer.h", "correlation_key": "fp|1b061a8f1022fe0a05f851e28839df03d4a1588ec31c7b63d4d0b9821a73937d"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "runtime/vm/object_graph_copy.h"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC005", "level": "note", "message": {"text": "Duplicate top-level symbol appears in a patch-style file"}, "properties": {"repobilityId": 133032, "scanner": "repobility-ai-code-hygiene", "fingerprint": "38a716218b379c87bcfd1da616d2bf98f0332bf754329628ed697b46a68510f4", "category": "quality", "severity": "low", "confidence": 0.64, "triageState": "open", "verdict": "needs_review", "isResolved": false, "reason": "Patch-style file defines a top-level symbol also defined in another source file.", "evidence": {"symbol": "Object", "rule_id": "AIC005", "scanner": "repobility-ai-code-hygiene", "references": ["https://github.com/jendrikseipp/vulture", "https://knip.dev/"], "duplicate_file": "pkg/analysis_server/integration_test/analysis/get_errors_non_standard_sdk_test.dart", "correlation_key": "fp|38a716218b379c87bcfd1da616d2bf98f0332bf754329628ed697b46a68510f4"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "pkg/dev_compiler/lib/src/kernel/compiler_new.dart"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC005", "level": "note", "message": {"text": "Duplicate top-level symbol appears in a patch-style file"}, "properties": {"repobilityId": 133031, "scanner": "repobility-ai-code-hygiene", "fingerprint": "43912033e5d72192a3d7a77829ac305fada53e5d84605a449304ba7025b0e559", "category": "quality", "severity": "low", "confidence": 0.64, "triageState": "open", "verdict": "needs_review", "isResolved": false, "reason": "Patch-style file defines a top-level symbol also defined in another source file.", "evidence": {"symbol": "Class", "rule_id": "AIC005", "scanner": "repobility-ai-code-hygiene", "references": ["https://github.com/jendrikseipp/vulture", "https://knip.dev/"], "duplicate_file": "pkg/analysis_server/integration_test/analysis/highlights_test.dart", "correlation_key": "fp|43912033e5d72192a3d7a77829ac305fada53e5d84605a449304ba7025b0e559"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "pkg/front_end/testcases/general/annotation_new.dart"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC005", "level": "note", "message": {"text": "Duplicate top-level symbol appears in a patch-style file"}, "properties": {"repobilityId": 133030, "scanner": "repobility-ai-code-hygiene", "fingerprint": "f366514e2f9bc3b4f1d47147fbbc92c9a0e69f2207c4c2e0a0e90b183827a269", "category": "quality", "severity": "low", "confidence": 0.64, "triageState": "open", "verdict": "needs_review", "isResolved": false, "reason": "Patch-style file defines a top-level symbol also defined in another source file.", "evidence": {"symbol": "Bar", "rule_id": "AIC005", "scanner": "repobility-ai-code-hygiene", "references": ["https://github.com/jendrikseipp/vulture", "https://knip.dev/"], "duplicate_file": "pkg/analysis_server/integration_test/analysis/get_library_dependencies_test.dart", "correlation_key": "fp|f366514e2f9bc3b4f1d47147fbbc92c9a0e69f2207c4c2e0a0e90b183827a269"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "pkg/front_end/testcases/general/implicit_new.dart"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 133029, "scanner": "repobility-ai-code-hygiene", "fingerprint": "38506282ea69d12271ff4b1d2bf81c077ea8f2bf58395f06300ceda6fb41f239", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "pkg/analysis_server/lib/src/flutter/flutter_notifications.dart", "duplicate_line": 18, "correlation_key": "fp|38506282ea69d12271ff4b1d2bf81c077ea8f2bf58395f06300ceda6fb41f239"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "pkg/analysis_server/lib/src/operation/operation_analysis.dart"}, "region": {"startLine": 160}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 133028, "scanner": "repobility-ai-code-hygiene", "fingerprint": "eb4416773dd5ef97a7ec0676be3be92fc2f6937f01b99fbedd50f50e04ccdd6d", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "pkg/analysis_server/lib/src/lsp/handlers/handler_call_hierarchy.dart", "duplicate_line": 152, "correlation_key": "fp|eb4416773dd5ef97a7ec0676be3be92fc2f6937f01b99fbedd50f50e04ccdd6d"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "pkg/analysis_server/lib/src/lsp/handlers/handler_type_hierarchy.dart"}, "region": {"startLine": 33}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 133027, "scanner": "repobility-ai-code-hygiene", "fingerprint": "e15afec96eeef4048a1fdbe0b915b63915ddecac5ad32a4f28c2685077cc821f", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "pkg/analysis_server/lib/src/lsp/handlers/handler_format_range.dart", "duplicate_line": 22, "correlation_key": "fp|e15afec96eeef4048a1fdbe0b915b63915ddecac5ad32a4f28c2685077cc821f"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "pkg/analysis_server/lib/src/lsp/handlers/handler_formatting.dart"}, "region": {"startLine": 21}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 133026, "scanner": "repobility-ai-code-hygiene", "fingerprint": "98d4de56674da96b7529ba794807e6c80238c9c469a6cc1c075e9ae62525103d", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "pkg/analysis_server/lib/src/lsp/handlers/handler_format_on_type.dart", "duplicate_line": 28, "correlation_key": "fp|98d4de56674da96b7529ba794807e6c80238c9c469a6cc1c075e9ae62525103d"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "pkg/analysis_server/lib/src/lsp/handlers/handler_formatting.dart"}, "region": {"startLine": 20}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 133025, "scanner": "repobility-ai-code-hygiene", "fingerprint": "c3a12283a7e3113dee8a9bd74e95052dfdf0d2715f2fb776d37ea2853d0759be", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "pkg/analysis_server/lib/src/lsp/handlers/handler_format_on_type.dart", "duplicate_line": 28, "correlation_key": "fp|c3a12283a7e3113dee8a9bd74e95052dfdf0d2715f2fb776d37ea2853d0759be"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "pkg/analysis_server/lib/src/lsp/handlers/handler_format_range.dart"}, "region": {"startLine": 21}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 133024, "scanner": "repobility-ai-code-hygiene", "fingerprint": "d7a2da08b357c9786ddd74a07aded50f2b9fafb161a48945479eced0bb95f244", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "pkg/analysis_server/lib/src/cider/document_symbols.dart", "duplicate_line": 30, "correlation_key": "fp|d7a2da08b357c9786ddd74a07aded50f2b9fafb161a48945479eced0bb95f244"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "pkg/analysis_server/lib/src/lsp/handlers/handler_document_symbols.dart"}, "region": {"startLine": 41}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 133023, "scanner": "repobility-ai-code-hygiene", "fingerprint": "7dbc57f55e94cc827ee0846ab9de52e9841e67461931fec19c0bdc10b33a8434", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "pkg/analysis_server/lib/src/lsp/handlers/custom/handler_augmentation.dart", "duplicate_line": 12, "correlation_key": "fp|7dbc57f55e94cc827ee0846ab9de52e9841e67461931fec19c0bdc10b33a8434"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "pkg/analysis_server/lib/src/lsp/handlers/custom/handler_super.dart"}, "region": {"startLine": 15}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 133022, "scanner": "repobility-ai-code-hygiene", "fingerprint": "6ff09f39a31de8d4e066b30ba3f9546e244df437e694aef2b81982a47cc754ea", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "pkg/analysis_server/lib/src/lsp/handlers/custom/handler_augmentation.dart", "duplicate_line": 12, "correlation_key": "fp|6ff09f39a31de8d4e066b30ba3f9546e244df437e694aef2b81982a47cc754ea"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "pkg/analysis_server/lib/src/lsp/handlers/custom/handler_augmented.dart"}, "region": {"startLine": 12}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 133021, "scanner": "repobility-ai-code-hygiene", "fingerprint": "383ddab3b50d40520d7424c5a762e1b2ef5bf6d02ea482eec1c0c2dc76c83c5d", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "pkg/analysis_server/lib/src/lsp/handlers/custom/editable_arguments/handler_edit_argument.dart", "duplicate_line": 47, "correlation_key": "fp|383ddab3b50d40520d7424c5a762e1b2ef5bf6d02ea482eec1c0c2dc76c83c5d"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "pkg/analysis_server/lib/src/lsp/handlers/custom/editable_arguments/handler_editable_arguments.dart"}, "region": {"startLine": 34}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 133020, "scanner": "repobility-ai-code-hygiene", "fingerprint": "4d1c5365c6a481af36cdb4f70d67d4e994f63475ea6169430f0f2605422e2348", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "pkg/analysis_server/lib/src/lsp/handlers/commands/organize_imports.dart", "duplicate_line": 20, "correlation_key": "fp|4d1c5365c6a481af36cdb4f70d67d4e994f63475ea6169430f0f2605422e2348"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "pkg/analysis_server/lib/src/lsp/handlers/commands/sort_members.dart"}, "region": {"startLine": 21}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 133019, "scanner": "repobility-ai-code-hygiene", "fingerprint": "10b7ffb732a155d53ea529afc8b3174339a4e39b590dcd39d6b3dc31de16ef01", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "pkg/analysis_server/lib/src/lsp/handlers/commands/fix_all.dart", "duplicate_line": 18, "correlation_key": "fp|10b7ffb732a155d53ea529afc8b3174339a4e39b590dcd39d6b3dc31de16ef01"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "pkg/analysis_server/lib/src/lsp/handlers/commands/sort_members.dart"}, "region": {"startLine": 13}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 133018, "scanner": "repobility-ai-code-hygiene", "fingerprint": "d87769b69747472db476cb8f18aa37b334871127daa2557f79349ec5995f5aa9", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "pkg/analysis_server/lib/src/lsp/handlers/commands/fix_all.dart", "duplicate_line": 18, "correlation_key": "fp|d87769b69747472db476cb8f18aa37b334871127daa2557f79349ec5995f5aa9"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "pkg/analysis_server/lib/src/lsp/handlers/commands/organize_imports.dart"}, "region": {"startLine": 12}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 133017, "scanner": "repobility-ai-code-hygiene", "fingerprint": "5e4f409b4f727aa949e674d98820275ddac66a7498912c171471b5f787446d11", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "pkg/analysis_server/lib/src/lsp/handlers/code_actions/analysis_options.dart", "duplicate_line": 15, "correlation_key": "fp|5e4f409b4f727aa949e674d98820275ddac66a7498912c171471b5f787446d11"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "pkg/analysis_server/lib/src/lsp/handlers/code_actions/pubspec.dart"}, "region": {"startLine": 12}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 133016, "scanner": "repobility-ai-code-hygiene", "fingerprint": "7446477c3c24b84df50e477ef22be6d61674405af65d80fcb61c5308307ba606", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "pkg/analysis_server/lib/src/lsp/handlers/code_actions/analysis_options.dart", "duplicate_line": 15, "correlation_key": "fp|7446477c3c24b84df50e477ef22be6d61674405af65d80fcb61c5308307ba606"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "pkg/analysis_server/lib/src/lsp/handlers/code_actions/plugins.dart"}, "region": {"startLine": 13}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 133015, "scanner": "repobility-ai-code-hygiene", "fingerprint": "a2f8065da21ee851cacfa433410f30481b2ead9acbc3a6deaddfcab3e4f67233", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "pkg/analysis_server/integration_test/edit/get_postfix_completion_test.dart", "duplicate_line": 14, "correlation_key": "fp|a2f8065da21ee851cacfa433410f30481b2ead9acbc3a6deaddfcab3e4f67233"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "pkg/analysis_server/integration_test/edit/is_postfix_completion_applicable_test.dart"}, "region": {"startLine": 13}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 133014, "scanner": "repobility-ai-code-hygiene", "fingerprint": "7e47920b200af2269d6a1f45ec3968afabf850895164ec9d088387ce016b7fa5", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "pkg/_fe_analyzer_shared/lib/src/scanner/string_scanner.dart", "duplicate_line": 125, "correlation_key": "fp|7e47920b200af2269d6a1f45ec3968afabf850895164ec9d088387ce016b7fa5"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "pkg/_fe_analyzer_shared/lib/src/scanner/utf8_bytes_scanner.dart"}, "region": {"startLine": 363}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 133013, "scanner": "repobility-ai-code-hygiene", "fingerprint": "8c750b218fcfc724a9e890506b4fd16f143cee106419bc2d0ca455bef7d34a2e", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "pkg/_fe_analyzer_shared/lib/src/scanner/internal_utils.dart", "duplicate_line": 35, "correlation_key": "fp|8c750b218fcfc724a9e890506b4fd16f143cee106419bc2d0ca455bef7d34a2e"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "pkg/_fe_analyzer_shared/lib/src/scanner/utf8_bytes_scanner.dart"}, "region": {"startLine": 163}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 133012, "scanner": "repobility-ai-code-hygiene", "fingerprint": "86c8fca10085ce8e812350d3a374c6a8121efc5f39d2bd530bb24f4ca6f0f438", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "pkg/_fe_analyzer_shared/lib/src/parser/type_info.dart", "duplicate_line": 329, "correlation_key": "fp|86c8fca10085ce8e812350d3a374c6a8121efc5f39d2bd530bb24f4ca6f0f438"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "pkg/_fe_analyzer_shared/lib/src/scanner/utf8_bytes_scanner.dart"}, "region": {"startLine": 143}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 133011, "scanner": "repobility-ai-code-hygiene", "fingerprint": "aa725c4310fcc48b8830e3fc883ef88f40afcc1dec04f8791ebe903f063034dc", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "pkg/_fe_analyzer_shared/lib/src/parser/type_info.dart", "duplicate_line": 329, "correlation_key": "fp|aa725c4310fcc48b8830e3fc883ef88f40afcc1dec04f8791ebe903f063034dc"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "pkg/_fe_analyzer_shared/lib/src/scanner/internal_utils.dart"}, "region": {"startLine": 29}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 133010, "scanner": "repobility-ai-code-hygiene", "fingerprint": "0c4037c2eeaa51d42820bf72d3f9ebe1769aaefea95313375e4b4dbbade087af", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "pkg/_fe_analyzer_shared/lib/src/exhaustiveness/types.dart", "duplicate_line": 154, "correlation_key": "fp|0c4037c2eeaa51d42820bf72d3f9ebe1769aaefea95313375e4b4dbbade087af"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "pkg/_fe_analyzer_shared/lib/src/exhaustiveness/types/record.dart"}, "region": {"startLine": 89}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 133009, "scanner": "repobility-ai-code-hygiene", "fingerprint": "01ba39e28b5c9575ed71f734f45cb8d800fe3bb4c4401fa47ae37764ea488f60", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "pkg/_fe_analyzer_shared/lib/src/exhaustiveness/types.dart", "duplicate_line": 68, "correlation_key": "fp|01ba39e28b5c9575ed71f734f45cb8d800fe3bb4c4401fa47ae37764ea488f60"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "pkg/_fe_analyzer_shared/lib/src/exhaustiveness/types/map.dart"}, "region": {"startLine": 56}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 133008, "scanner": "repobility-ai-code-hygiene", "fingerprint": "9fbe3944eca36cac2e7c745dd365203bd1c4a862fe0706712fb969a989de99df", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "pkg/_fe_analyzer_shared/lib/src/exhaustiveness/types/list.dart", "duplicate_line": 70, "correlation_key": "fp|9fbe3944eca36cac2e7c745dd365203bd1c4a862fe0706712fb969a989de99df"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "pkg/_fe_analyzer_shared/lib/src/exhaustiveness/types/map.dart"}, "region": {"startLine": 5}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 133007, "scanner": "repobility-ai-code-hygiene", "fingerprint": "a5bcdc72dce459b0285d8a5c27b2530540e93336e28888f9de50d48b7365392a", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "pkg/_fe_analyzer_shared/lib/src/exhaustiveness/types.dart", "duplicate_line": 65, "correlation_key": "fp|a5bcdc72dce459b0285d8a5c27b2530540e93336e28888f9de50d48b7365392a"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "pkg/_fe_analyzer_shared/lib/src/exhaustiveness/types/list.dart"}, "region": {"startLine": 155}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 133006, "scanner": "repobility-ai-code-hygiene", "fingerprint": "ec7ed480bf35fdc32210e9a4dd4090c301f46c85c51ca41692eddf468de576dd", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "pkg/front_end/testcases/late_lowering/pattern_assignment_final.dart", "duplicate_line": 1, "correlation_key": "fp|ec7ed480bf35fdc32210e9a4dd4090c301f46c85c51ca41692eddf468de576dd"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "pkg/front_end/testcases/patterns/pattern_assignment_final.dart"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 133005, "scanner": "repobility-ai-code-hygiene", "fingerprint": "c397b3e7146468682e551bc4b42b8265e4d6c5cb390024b104e4274a30052f0b", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "pkg/front_end/testcases/late_lowering/pattern_assignment_final.dart", "duplicate_line": 1, "correlation_key": "fp|c397b3e7146468682e551bc4b42b8265e4d6c5cb390024b104e4274a30052f0b"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "pkg/front_end/testcases/nnbd/assignment_final.dart"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC002", "level": "note", "message": {"text": "Source file name looks like an AI patch artifact"}, "properties": {"repobilityId": 133000, "scanner": "repobility-ai-code-hygiene", "fingerprint": "3a559ebd65403c556383cd60ee56f10dd568d3eefb0f3ef73a89c32a6f861425", "category": "quality", "severity": "low", "confidence": 0.62, "triageState": "open", "verdict": "needs_review", "isResolved": false, "reason": "Source filename contains a temporary or patch-style suffix.", "evidence": {"suffix": "final", "rule_id": "AIC002", "scanner": "repobility-ai-code-hygiene", "references": ["https://arxiv.org/abs/2601.15195"], "correlation_key": "fp|3a559ebd65403c556383cd60ee56f10dd568d3eefb0f3ef73a89c32a6f861425"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "pkg/linter/lib/src/rules/unnecessary_final.dart"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC002", "level": "note", "message": {"text": "Source file name looks like an AI patch artifact"}, "properties": {"repobilityId": 132999, "scanner": "repobility-ai-code-hygiene", "fingerprint": "a856674bdc9382ba316fee9ebcf67660d5547f6ad774d3be66762985146420ae", "category": "quality", "severity": "low", "confidence": 0.62, "triageState": "open", "verdict": "needs_review", "isResolved": false, "reason": "Source filename contains a temporary or patch-style suffix.", "evidence": {"suffix": "final", "rule_id": "AIC002", "scanner": "repobility-ai-code-hygiene", "references": ["https://arxiv.org/abs/2601.15195"], "correlation_key": "fp|a856674bdc9382ba316fee9ebcf67660d5547f6ad774d3be66762985146420ae"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "pkg/front_end/testcases/patterns/pattern_assignment_final.dart"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC002", "level": "note", "message": {"text": "Source file name looks like an AI patch artifact"}, "properties": {"repobilityId": 132998, "scanner": "repobility-ai-code-hygiene", "fingerprint": "0ecbece85bb5076d840adc2f4439b433e0dae53d3ce75dcf027804ae3a53e333", "category": "quality", "severity": "low", "confidence": 0.62, "triageState": "open", "verdict": "needs_review", "isResolved": false, "reason": "Source filename contains a temporary or patch-style suffix.", "evidence": {"suffix": "final", "rule_id": "AIC002", "scanner": "repobility-ai-code-hygiene", "references": ["https://arxiv.org/abs/2601.15195"], "correlation_key": "fp|0ecbece85bb5076d840adc2f4439b433e0dae53d3ce75dcf027804ae3a53e333"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "pkg/front_end/testcases/nnbd/assignment_final.dart"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC002", "level": "note", "message": {"text": "Source file name looks like an AI patch artifact"}, "properties": {"repobilityId": 132997, "scanner": "repobility-ai-code-hygiene", "fingerprint": "ef86692c81ee8f9891ecb54f61148f92cb319c6a1516673b590f530083e94e98", "category": "quality", "severity": "low", "confidence": 0.62, "triageState": "open", "verdict": "needs_review", "isResolved": false, "reason": "Source filename contains a temporary or patch-style suffix.", "evidence": {"suffix": "final", "rule_id": "AIC002", "scanner": "repobility-ai-code-hygiene", "references": ["https://arxiv.org/abs/2601.15195"], "correlation_key": "fp|ef86692c81ee8f9891ecb54f61148f92cb319c6a1516673b590f530083e94e98"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "pkg/front_end/testcases/late_lowering/pattern_assignment_final.dart"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC002", "level": "note", "message": {"text": "Source file name looks like an AI patch artifact"}, "properties": {"repobilityId": 132996, "scanner": "repobility-ai-code-hygiene", "fingerprint": "21d367228e64395079bc0de73b896a5471215aecfedae4fc42b0c3c3c19ed76a", "category": "quality", "severity": "low", "confidence": 0.62, "triageState": "open", "verdict": "needs_review", "isResolved": false, "reason": "Source filename contains a temporary or patch-style suffix.", "evidence": {"suffix": "rewrite", "rule_id": "AIC002", "scanner": "repobility-ai-code-hygiene", "references": ["https://arxiv.org/abs/2601.15195"], "correlation_key": "fp|21d367228e64395079bc0de73b896a5471215aecfedae4fc42b0c3c3c19ed76a"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "pkg/front_end/testcases/late_lowering/initializer_rewrite.dart"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC002", "level": "note", "message": {"text": "Source file name looks like an AI patch artifact"}, "properties": {"repobilityId": 132995, "scanner": "repobility-ai-code-hygiene", "fingerprint": "75b75ed4ec9386e9a1f6739aa04096b887cfc4117def6eed9275274031d6d145", "category": "quality", "severity": "low", "confidence": 0.62, "triageState": "open", "verdict": "needs_review", "isResolved": false, "reason": "Source filename contains a temporary or patch-style suffix.", "evidence": {"suffix": "new", "rule_id": "AIC002", "scanner": "repobility-ai-code-hygiene", "references": ["https://arxiv.org/abs/2601.15195"], "correlation_key": "fp|75b75ed4ec9386e9a1f6739aa04096b887cfc4117def6eed9275274031d6d145"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "pkg/front_end/testcases/general/implicit_new.dart"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC002", "level": "note", "message": {"text": "Source file name looks like an AI patch artifact"}, "properties": {"repobilityId": 132994, "scanner": "repobility-ai-code-hygiene", "fingerprint": "8c35c42485da9bc24e87c4430a6574933981c39eeeb7a650aa4dbfcc3f10a95f", "category": "quality", "severity": "low", "confidence": 0.62, "triageState": "open", "verdict": "needs_review", "isResolved": false, "reason": "Source filename contains a temporary or patch-style suffix.", "evidence": {"suffix": "new", "rule_id": "AIC002", "scanner": "repobility-ai-code-hygiene", "references": ["https://arxiv.org/abs/2601.15195"], "correlation_key": "fp|8c35c42485da9bc24e87c4430a6574933981c39eeeb7a650aa4dbfcc3f10a95f"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "pkg/front_end/testcases/general/annotation_new.dart"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC002", "level": "note", "message": {"text": "Source file name looks like an AI patch artifact"}, "properties": {"repobilityId": 132988, "scanner": "repobility-ai-code-hygiene", "fingerprint": "5ef6e008ebc4a986450fd515e60820fa62356fd3da9371303b0e25de793c2a9e", "category": "quality", "severity": "low", "confidence": 0.62, "triageState": "open", "verdict": "needs_review", "isResolved": false, "reason": "Source filename contains a temporary or patch-style suffix.", "evidence": {"suffix": "rewrite", "rule_id": "AIC002", "scanner": "repobility-ai-code-hygiene", "references": ["https://arxiv.org/abs/2601.15195"], "correlation_key": "fp|5ef6e008ebc4a986450fd515e60820fa62356fd3da9371303b0e25de793c2a9e"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "pkg/analyzer/lib/src/dart/resolver/ast_rewrite.dart"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC002", "level": "note", "message": {"text": "Source file name looks like an AI patch artifact"}, "properties": {"repobilityId": 132987, "scanner": "repobility-ai-code-hygiene", "fingerprint": "3724e5a20004c700ff7cbb4895210d13d5a758aa66041a30594a59019c58d965", "category": "quality", "severity": "low", "confidence": 0.62, "triageState": "open", "verdict": "needs_review", "isResolved": false, "reason": "Source filename contains a temporary or patch-style suffix.", "evidence": {"suffix": "final", "rule_id": "AIC002", "scanner": "repobility-ai-code-hygiene", "references": ["https://arxiv.org/abs/2601.15195"], "correlation_key": "fp|3724e5a20004c700ff7cbb4895210d13d5a758aa66041a30594a59019c58d965"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "pkg/analysis_server/lib/src/services/correction/dart/remove_unnecessary_final.dart"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC002", "level": "note", "message": {"text": "Source file name looks like an AI patch artifact"}, "properties": {"repobilityId": 132986, "scanner": "repobility-ai-code-hygiene", "fingerprint": "4d6818b2ea465f71169c229fd97a40c30b62545b0644cc81c9180d059261236e", "category": "quality", "severity": "low", "confidence": 0.62, "triageState": "open", "verdict": "needs_review", "isResolved": false, "reason": "Source filename contains a temporary or patch-style suffix.", "evidence": {"suffix": "final", "rule_id": "AIC002", "scanner": "repobility-ai-code-hygiene", "references": ["https://arxiv.org/abs/2601.15195"], "correlation_key": "fp|4d6818b2ea465f71169c229fd97a40c30b62545b0644cc81c9180d059261236e"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "pkg/analysis_server/lib/src/services/correction/dart/make_variable_not_final.dart"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC002", "level": "note", "message": {"text": "Source file name looks like an AI patch artifact"}, "properties": {"repobilityId": 132985, "scanner": "repobility-ai-code-hygiene", "fingerprint": "7e91f2453081ca9dc82ce280ed38ae8871e3b694dde835ef95d85699a574a9bf", "category": "quality", "severity": "low", "confidence": 0.62, "triageState": "open", "verdict": "needs_review", "isResolved": false, "reason": "Source filename contains a temporary or patch-style suffix.", "evidence": {"suffix": "final", "rule_id": "AIC002", "scanner": "repobility-ai-code-hygiene", "references": ["https://arxiv.org/abs/2601.15195"], "correlation_key": "fp|7e91f2453081ca9dc82ce280ed38ae8871e3b694dde835ef95d85699a574a9bf"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "pkg/analysis_server/lib/src/services/correction/dart/make_field_not_final.dart"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC002", "level": "note", "message": {"text": "Source file name looks like an AI patch artifact"}, "properties": {"repobilityId": 132984, "scanner": "repobility-ai-code-hygiene", "fingerprint": "500afdc7dd2e847c5afa3f96b492804e588517a4391342dd7e92e470db641d71", "category": "quality", "severity": "low", "confidence": 0.62, "triageState": "open", "verdict": "needs_review", "isResolved": false, "reason": "Source filename contains a temporary or patch-style suffix.", "evidence": {"suffix": "final", "rule_id": "AIC002", "scanner": "repobility-ai-code-hygiene", "references": ["https://arxiv.org/abs/2601.15195"], "correlation_key": "fp|500afdc7dd2e847c5afa3f96b492804e588517a4391342dd7e92e470db641d71"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "pkg/analysis_server/lib/src/services/correction/dart/make_final.dart"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC002", "level": "note", "message": {"text": "Source file name looks like an AI patch artifact"}, "properties": {"repobilityId": 132983, "scanner": "repobility-ai-code-hygiene", "fingerprint": "33cfcc593d6261e0c8af6facd1925d9e6c403707c9b7cafe0980561e21fdf4f6", "category": "quality", "severity": "low", "confidence": 0.62, "triageState": "open", "verdict": "needs_review", "isResolved": false, "reason": "Source filename contains a temporary or patch-style suffix.", "evidence": {"suffix": "fix", "rule_id": "AIC002", "scanner": "repobility-ai-code-hygiene", "references": ["https://arxiv.org/abs/2601.15195"], "correlation_key": "fp|33cfcc593d6261e0c8af6facd1925d9e6c403707c9b7cafe0980561e21fdf4f6"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "pkg/analysis_server/lib/src/services/correction/dart/ambiguous_import_fix.dart"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC002", "level": "note", "message": {"text": "Source file name looks like an AI patch artifact"}, "properties": {"repobilityId": 132982, "scanner": "repobility-ai-code-hygiene", "fingerprint": "9cc3362035a540a41bcdc9cba0dab3feb7804d788b51050c784edd23aab1c8ac", "category": "quality", "severity": "low", "confidence": 0.62, "triageState": "open", "verdict": "needs_review", "isResolved": false, "reason": "Source filename contains a temporary or patch-style suffix.", "evidence": {"suffix": "refactor", "rule_id": "AIC002", "scanner": "repobility-ai-code-hygiene", "references": ["https://arxiv.org/abs/2601.15195"], "correlation_key": "fp|9cc3362035a540a41bcdc9cba0dab3feb7804d788b51050c784edd23aab1c8ac"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "pkg/analysis_server/lib/src/lsp/handlers/commands/validate_refactor.dart"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC002", "level": "note", "message": {"text": "Source file name looks like an AI patch artifact"}, "properties": {"repobilityId": 132981, "scanner": "repobility-ai-code-hygiene", "fingerprint": "230834abb0135be93fd997237efd68a33fb85551a9650d2d4286734b9e495c45", "category": "quality", "severity": "low", "confidence": 0.62, "triageState": "open", "verdict": "needs_review", "isResolved": false, "reason": "Source filename contains a temporary or patch-style suffix.", "evidence": {"suffix": "refactor", "rule_id": "AIC002", "scanner": "repobility-ai-code-hygiene", "references": ["https://arxiv.org/abs/2601.15195"], "correlation_key": "fp|230834abb0135be93fd997237efd68a33fb85551a9650d2d4286734b9e495c45"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "pkg/analysis_server/lib/src/lsp/handlers/commands/perform_refactor.dart"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC002", "level": "note", "message": {"text": "Source file name looks like an AI patch artifact"}, "properties": {"repobilityId": 132980, "scanner": "repobility-ai-code-hygiene", "fingerprint": "54b075c1a46b914a62e8f4613e4e3d4f823c647514405b2bd16bbd324099121b", "category": "quality", "severity": "low", "confidence": 0.62, "triageState": "open", "verdict": "needs_review", "isResolved": false, "reason": "Source filename contains a temporary or patch-style suffix.", "evidence": {"suffix": "refactor", "rule_id": "AIC002", "scanner": "repobility-ai-code-hygiene", "references": ["https://arxiv.org/abs/2601.15195"], "correlation_key": "fp|54b075c1a46b914a62e8f4613e4e3d4f823c647514405b2bd16bbd324099121b"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "pkg/analysis_server/lib/src/lsp/handlers/commands/abstract_refactor.dart"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC007", "level": "note", "message": {"text": "Generated build artifact directory is present at repository root"}, "properties": {"repobilityId": 132979, "scanner": "repobility-ai-code-hygiene", "fingerprint": "9ce25f11f897b8a8b2478fd0136724866f111b604484c20a5c690bce80d94da1", "category": "quality", "severity": "low", "confidence": 0.7, "triageState": "open", "verdict": "likely", "isResolved": false, "reason": "Repository root contains a common generated artifact directory.", "evidence": {"rule_id": "AIC007", "scanner": "repobility-ai-code-hygiene", "directory": "build", "references": ["https://git-scm.com/docs/gitignore", "https://arxiv.org/abs/2601.15195"], "correlation_key": "fp|9ce25f11f897b8a8b2478fd0136724866f111b604484c20a5c690bce80d94da1"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "build"}, "region": {"startLine": 1}}}]}, {"ruleId": "SEC006", "level": "note", "message": {"text": "[SEC006] XSS Risk: Direct HTML injection without sanitization."}, "properties": {"repobilityId": 132974, "scanner": "repobility-threat-engine", "fingerprint": "f094463799c8754d17fd1b7507af8d38be93439486f466f835157164c4b44225", "category": "injection", "severity": "low", "confidence": 0.4, "triageState": "false_positive", "verdict": "likely_fp", "isResolved": true, "reason": "No user-input source (request/query/fetch/URL) found \u2014 may be static content", "evidence": {"match": ".innerHTML = d", "reason": "No user-input source (request/query/fetch/URL) found \u2014 may be static content", "rule_id": "SEC006", "scanner": "repobility-threat-engine", "confidence": 0.4, "correlation_key": "code|injection|token|87|sec006"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "pkg/analysis_server/tool/instrumentation/page/log_page.dart"}, "region": {"startLine": 87}}}]}, {"ruleId": "MINED044", "level": "none", "message": {"text": "[MINED044] Js Console Log Prod: console.log left in code. Should be replaced with logger or removed."}, "properties": {"repobilityId": 132977, "scanner": "repobility-threat-engine", "fingerprint": "3e14e97abd9790b8a839b23046dddd739bce3124f7fcf07fdf0cd4af9a4c0321", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "js-console-log-prod", "owasp": null, "cwe_ids": ["CWE-532"], "languages": ["javascript", "typescript", "tsx", "jsx"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348003+00:00", "triaged_in_corpus": 10, "observations_count": 1940833, "ai_coder_pattern_id": 102}, "scanner": "repobility-threat-engine", "correlation_key": "fp|3e14e97abd9790b8a839b23046dddd739bce3124f7fcf07fdf0cd4af9a4c0321"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "pkg/compiler/tool/used_names/used_names.js"}, "region": {"startLine": 45}}}]}, {"ruleId": "MINED049", "level": "none", "message": {"text": "[MINED049] Print Pii (and 3 more): Same pattern found in 3 additional files. Review if needed."}, "properties": {"repobilityId": 132973, "scanner": "repobility-threat-engine", "fingerprint": "71d23e8be37aca040a52b298288139d03b0a2ee5e2166ea3b7b0733498602571", "category": "quality", "severity": "info", "confidence": 0.2, "triageState": "false_positive", "verdict": "likely_fp", "isResolved": true, "reason": "Deduplicated summary only: 3 additional occurrences found. The top occurrences remain visible as actionable findings.", "evidence": {"mined": true, "mining": {"slug": "print-pii", "owasp": "A09:2021", "cwe_ids": ["CWE-532"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348015+00:00", "triaged_in_corpus": 12, "observations_count": 676566, "ai_coder_pattern_id": 26}, "scanner": "repobility-threat-engine", "aggregated": true, "correlation_key": "fp|71d23e8be37aca040a52b298288139d03b0a2ee5e2166ea3b7b0733498602571", "aggregated_count": 3}}}, {"ruleId": "MINED049", "level": "none", "message": {"text": "[MINED049] Print Pii: Logging password/token/email/ssn directly to stdout."}, "properties": {"repobilityId": 132972, "scanner": "repobility-threat-engine", "fingerprint": "f66eae1aa8be0980c37a4123d5b5f94cf7a62dad9ca3715ba9449fe0b0df9f22", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "print-pii", "owasp": "A09:2021", "cwe_ids": ["CWE-532"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348015+00:00", "triaged_in_corpus": 12, "observations_count": 676566, "ai_coder_pattern_id": 26}, "scanner": "repobility-threat-engine", "correlation_key": "fp|f66eae1aa8be0980c37a4123d5b5f94cf7a62dad9ca3715ba9449fe0b0df9f22"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "pkg/analysis_server/tool/benchmark_tools/single_benchmarks/lsp_change_requests_processing.dart"}, "region": {"startLine": 48}}}]}, {"ruleId": "MINED049", "level": "none", "message": {"text": "[MINED049] Print Pii: Logging password/token/email/ssn directly to stdout."}, "properties": {"repobilityId": 132971, "scanner": "repobility-threat-engine", "fingerprint": "1c2436dcbc43e5ee11f37df93f6c8d25097f081d581eff3faaedf35a0fc99999", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "print-pii", "owasp": "A09:2021", "cwe_ids": ["CWE-532"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348015+00:00", "triaged_in_corpus": 12, "observations_count": 676566, "ai_coder_pattern_id": 26}, "scanner": "repobility-threat-engine", "correlation_key": "fp|1c2436dcbc43e5ee11f37df93f6c8d25097f081d581eff3faaedf35a0fc99999"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "pkg/analysis_server/tool/benchmark_tools/single_benchmarks/lsp_assist_other_file_could_add_late.dart"}, "region": {"startLine": 47}}}]}, {"ruleId": "MINED049", "level": "none", "message": {"text": "[MINED049] Print Pii: Logging password/token/email/ssn directly to stdout."}, "properties": {"repobilityId": 132970, "scanner": "repobility-threat-engine", "fingerprint": "66e9f260000c6bffc18afe42cdd70538306b119c87b9dad26665d8e768cc29c8", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "print-pii", "owasp": "A09:2021", "cwe_ids": ["CWE-532"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348015+00:00", "triaged_in_corpus": 12, "observations_count": 676566, "ai_coder_pattern_id": 26}, "scanner": "repobility-threat-engine", "correlation_key": "fp|66e9f260000c6bffc18afe42cdd70538306b119c87b9dad26665d8e768cc29c8"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "pkg/analysis_server/tool/benchmark_tools/single_benchmarks/legacy_type_in_big_file_ask_for_completion.dart"}, "region": {"startLine": 48}}}]}, {"ruleId": "MINED002", "level": "none", "message": {"text": "[MINED002] Dart Null Bang (and 41 more): Same pattern found in 41 additional files. Review if needed."}, "properties": {"repobilityId": 132967, "scanner": "repobility-threat-engine", "fingerprint": "ae68df813c9d8c96785a81a5716db05f95d2662153817e4271aa90198d5ad713", "category": "quality", "severity": "info", "confidence": 0.2, "triageState": "false_positive", "verdict": "likely_fp", "isResolved": true, "reason": "Deduplicated summary only: 41 additional occurrences found. The top occurrences remain visible as actionable findings.", "evidence": {"mined": true, "mining": {"slug": "dart-null-bang", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["dart"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.347899+00:00", "triaged_in_corpus": 15, "observations_count": 1434931, "ai_coder_pattern_id": 167}, "scanner": "repobility-threat-engine", "aggregated": true, "correlation_key": "fp|ae68df813c9d8c96785a81a5716db05f95d2662153817e4271aa90198d5ad713", "aggregated_count": 41}}}, {"ruleId": "MINED043", "level": "none", "message": {"text": "[MINED043] Http Not Https (and 3 more): Same pattern found in 3 additional files. Review if needed."}, "properties": {"repobilityId": 132963, "scanner": "repobility-threat-engine", "fingerprint": "0c333dc88d2673beda07ea322592a5e2658418eeef4b48e34ddf9f62e680bdd2", "category": "quality", "severity": "info", "confidence": 0.2, "triageState": "false_positive", "verdict": "likely_fp", "isResolved": true, "reason": "Deduplicated summary only: 3 additional occurrences found. The top occurrences remain visible as actionable findings.", "evidence": {"mined": true, "mining": {"slug": "http-not-https", "owasp": "A02:2021", "cwe_ids": ["CWE-319"], "precision": 0.917, "promoted_at": "2026-05-18T14:01:32.347999+00:00", "triaged_in_corpus": 12, "observations_count": 4113831, "ai_coder_pattern_id": 15}, "scanner": "repobility-threat-engine", "aggregated": true, "correlation_key": "fp|0c333dc88d2673beda07ea322592a5e2658418eeef4b48e34ddf9f62e680bdd2", "aggregated_count": 3}}}, {"ruleId": "MINED043", "level": "none", "message": {"text": "[MINED043] Http Not Https: Hardcoded http:// (not localhost) for endpoints that handle credentials or data."}, "properties": {"repobilityId": 132962, "scanner": "repobility-threat-engine", "fingerprint": "67b1d08f95aa3b02552d9d81d29d1c5aab5e45b167ce1b258f9b84893b565810", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "http-not-https", "owasp": "A02:2021", "cwe_ids": ["CWE-319"], "precision": 0.917, "promoted_at": "2026-05-18T14:01:32.347999+00:00", "triaged_in_corpus": 12, "observations_count": 4113831, "ai_coder_pattern_id": 15}, "scanner": "repobility-threat-engine", "correlation_key": "fp|67b1d08f95aa3b02552d9d81d29d1c5aab5e45b167ce1b258f9b84893b565810"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "pkg/analyzer/PRESUBMIT.py"}, "region": {"startLine": 7}}}]}, {"ruleId": "MINED043", "level": "none", "message": {"text": "[MINED043] Http Not Https: Hardcoded http:// (not localhost) for endpoints that handle credentials or data."}, "properties": {"repobilityId": 132961, "scanner": "repobility-threat-engine", "fingerprint": "f5f92dadfd0e024dd2d34757353c4247076e9d0ca54bc292fe9601496e300b98", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "http-not-https", "owasp": "A02:2021", "cwe_ids": ["CWE-319"], "precision": 0.917, "promoted_at": "2026-05-18T14:01:32.347999+00:00", "triaged_in_corpus": 12, "observations_count": 4113831, "ai_coder_pattern_id": 15}, "scanner": "repobility-threat-engine", "correlation_key": "fp|f5f92dadfd0e024dd2d34757353c4247076e9d0ca54bc292fe9601496e300b98"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "pkg/analysis_server/PRESUBMIT.py"}, "region": {"startLine": 7}}}]}, {"ruleId": "MINED043", "level": "none", "message": {"text": "[MINED043] Http Not Https: Hardcoded http:// (not localhost) for endpoints that handle credentials or data."}, "properties": {"repobilityId": 132960, "scanner": "repobility-threat-engine", "fingerprint": "aa644d4bb1b6bb006e6f0626b4133efc2bd3a663b79434b3fdfe3dec76b927e5", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "http-not-https", "owasp": "A02:2021", "cwe_ids": ["CWE-319"], "precision": 0.917, "promoted_at": "2026-05-18T14:01:32.347999+00:00", "triaged_in_corpus": 12, "observations_count": 4113831, "ai_coder_pattern_id": 15}, "scanner": "repobility-threat-engine", "correlation_key": "fp|aa644d4bb1b6bb006e6f0626b4133efc2bd3a663b79434b3fdfe3dec76b927e5"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "pkg/_fe_analyzer_shared/PRESUBMIT.py"}, "region": {"startLine": 7}}}]}, {"ruleId": "SEC020", "level": "none", "message": {"text": "[SEC020] Secret Printed to Logs: Debug or diagnostic code appears to print a credential-bearing value. This is a frequent AI-assisted coding failure: the helper exposes the exact value needed for troubleshooting."}, "properties": {"repobilityId": 132959, "scanner": "repobility-threat-engine", "fingerprint": "e3af9d1274a466bb306da95a3c61c67f2740a1cd8c65d516076b3602cb1a633d", "category": "credential_exposure", "severity": "info", "confidence": 0.1, "triageState": "false_positive", "verdict": "likely_fp", "isResolved": true, "reason": "Safe context pattern detected", "evidence": {"match": "print('SendPort.Send.${config.name}(RunTimeRaw)", "reason": "Safe context pattern detected", "rule_id": "SEC020", "scanner": "repobility-threat-engine", "confidence": 0.1, "correlation_key": "secret|token|13|print sendport.send. config.name runtimeraw"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "benchmarks/SendPort/dart/SendPort.dart"}, "region": {"startLine": 138}}}]}, {"ruleId": "SEC029", "level": "none", "message": {"text": "[SEC029] Server-Side Request Forgery (SSRF) \u2014 outbound HTTP from user input (and 3 more): Same pattern found in 3 additional files. Review if needed."}, "properties": {"repobilityId": 132958, "scanner": "repobility-threat-engine", "fingerprint": "29f418f0b32afce9ff9545bb3e439c1b302cb3c41f56d413b872dcb5fe0b02fc", "category": "ssrf", "severity": "info", "confidence": 0.2, "triageState": "false_positive", "verdict": "likely_fp", "isResolved": true, "reason": "Deduplicated summary only: 3 additional occurrences found. The top occurrences remain visible as actionable findings.", "evidence": {"reason": "Deduplicated summary only: 3 additional occurrences found. The top occurrences remain visible as actionable findings.", "rule_id": "SEC029", "scanner": "repobility-threat-engine", "confidence": 0.2, "correlation_key": "fp|29f418f0b32afce9ff9545bb3e439c1b302cb3c41f56d413b872dcb5fe0b02fc"}}}, {"ruleId": "MINED004", "level": "none", "message": {"text": "[MINED004] Weak Crypto (and 1 more): Same pattern found in 1 additional files. Review if needed."}, "properties": {"repobilityId": 132954, "scanner": "repobility-threat-engine", "fingerprint": "a51fc5b757daa107ff993d54388f809af87b26cac35292629b20c635c24267fc", "category": "quality", "severity": "info", "confidence": 0.2, "triageState": "false_positive", "verdict": "likely_fp", "isResolved": true, "reason": "Deduplicated summary only: 1 additional occurrences found. The top occurrences remain visible as actionable findings.", "evidence": {"mined": true, "mining": {"slug": "weak-crypto", "owasp": "A02:2021", "cwe_ids": ["CWE-327"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.347906+00:00", "triaged_in_corpus": 15, "observations_count": 303181, "ai_coder_pattern_id": 13}, "scanner": "repobility-threat-engine", "aggregated": true, "correlation_key": "fp|a51fc5b757daa107ff993d54388f809af87b26cac35292629b20c635c24267fc", "aggregated_count": 1}}}, {"ruleId": "MINED046", "level": "none", "message": {"text": "[MINED046] Dart Print (and 254 more): Same pattern found in 254 additional files. Review if needed."}, "properties": {"repobilityId": 132950, "scanner": "repobility-threat-engine", "fingerprint": "8da94f86989457d62f64757c53fecdda11232683d697777266849c2f3679f9a5", "category": "quality", "severity": "info", "confidence": 0.2, "triageState": "false_positive", "verdict": "likely_fp", "isResolved": true, "reason": "Deduplicated summary only: 254 additional occurrences found. The top occurrences remain visible as actionable findings.", "evidence": {"mined": true, "mining": {"slug": "dart-print", "owasp": null, "cwe_ids": ["CWE-532"], "languages": ["dart"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348008+00:00", "triaged_in_corpus": 10, "observations_count": 1515005, "ai_coder_pattern_id": 168}, "scanner": "repobility-threat-engine", "aggregated": true, "correlation_key": "fp|8da94f86989457d62f64757c53fecdda11232683d697777266849c2f3679f9a5", "aggregated_count": 254}}}, {"ruleId": "MINED046", "level": "none", "message": {"text": "[MINED046] Dart Print: print() in Flutter goes to console. Use debugPrint / logger."}, "properties": {"repobilityId": 132949, "scanner": "repobility-threat-engine", "fingerprint": "c14fc908363caec58490304da1c45090c7393d9bc4f881aca74a007db6409b72", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "dart-print", "owasp": null, "cwe_ids": ["CWE-532"], "languages": ["dart"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348008+00:00", "triaged_in_corpus": 10, "observations_count": 1515005, "ai_coder_pattern_id": 168}, "scanner": "repobility-threat-engine", "correlation_key": "fp|c14fc908363caec58490304da1c45090c7393d9bc4f881aca74a007db6409b72"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "benchmarks/EventLoopLatencyJson/dart/latency.dart"}, "region": {"startLine": 89}}}]}, {"ruleId": "MINED046", "level": "none", "message": {"text": "[MINED046] Dart Print: print() in Flutter goes to console. Use debugPrint / logger."}, "properties": {"repobilityId": 132948, "scanner": "repobility-threat-engine", "fingerprint": "2f47c6edeb0dd57e543a5db8740365fd53a9090a3f305668df806ebcec2373fb", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "dart-print", "owasp": null, "cwe_ids": ["CWE-532"], "languages": ["dart"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348008+00:00", "triaged_in_corpus": 10, "observations_count": 1515005, "ai_coder_pattern_id": 168}, "scanner": "repobility-threat-engine", "correlation_key": "fp|2f47c6edeb0dd57e543a5db8740365fd53a9090a3f305668df806ebcec2373fb"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "benchmarks/BigIntParsePrint/dart/native_version_javascript.dart"}, "region": {"startLine": 69}}}]}, {"ruleId": "MINED046", "level": "none", "message": {"text": "[MINED046] Dart Print: print() in Flutter goes to console. Use debugPrint / logger."}, "properties": {"repobilityId": 132947, "scanner": "repobility-threat-engine", "fingerprint": "73769d3fa220fb3d68df26c00c5cc6120e2752009e5f460f7e7f2bfc4ce5f6a4", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "dart-print", "owasp": null, "cwe_ids": ["CWE-532"], "languages": ["dart"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348008+00:00", "triaged_in_corpus": 10, "observations_count": 1515005, "ai_coder_pattern_id": 168}, "scanner": "repobility-threat-engine", "correlation_key": "fp|73769d3fa220fb3d68df26c00c5cc6120e2752009e5f460f7e7f2bfc4ce5f6a4"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "benchmarks/BigIntParsePrint/dart/BigIntParsePrint.dart"}, "region": {"startLine": 77}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "[MINED106] Phantom test coverage: test_else1: Test function `test_else1` runs code but contains no assert / expect / should call \u2014 it passes regardless of behaviour. Adds line coverage without verifying anything."}, "properties": {"repobilityId": 133110, "scanner": "repobility-ast-engine", "fingerprint": "d2c15f0ed9c769aced401cffe4d30f4448643a14e5e37786ba2ef5211232a65f", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|d2c15f0ed9c769aced401cffe4d30f4448643a14e5e37786ba2ef5211232a65f"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/dom/scripts/templateloader_test.py"}, "region": {"startLine": 98}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "[MINED106] Phantom test coverage: test_if2: Test function `test_if2` runs code but contains no assert / expect / should call \u2014 it passes regardless of behaviour. Adds line coverage without verifying anything."}, "properties": {"repobilityId": 133109, "scanner": "repobility-ast-engine", "fingerprint": "561bd4d629fc460dbc7279928b6140597f940ba128cb47e596e61d6121bef510", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|561bd4d629fc460dbc7279928b6140597f940ba128cb47e596e61d6121bef510"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/dom/scripts/templateloader_test.py"}, "region": {"startLine": 92}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "[MINED106] Phantom test coverage: test_if1: Test function `test_if1` runs code but contains no assert / expect / should call \u2014 it passes regardless of behaviour. Adds line coverage without verifying anything."}, "properties": {"repobilityId": 133108, "scanner": "repobility-ast-engine", "fingerprint": "af18abdf601bb29008e690d52c7b2bee6a98782ef787b7e38423b42c10886e11", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|af18abdf601bb29008e690d52c7b2bee6a98782ef787b7e38423b42c10886e11"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/dom/scripts/templateloader_test.py"}, "region": {"startLine": 85}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "[MINED106] Phantom test coverage: test_ite2: Test function `test_ite2` runs code but contains no assert / expect / should call \u2014 it passes regardless of behaviour. Adds line coverage without verifying anything."}, "properties": {"repobilityId": 133107, "scanner": "repobility-ast-engine", "fingerprint": "2bab486d4274a8160d1f829fd9b595a98d875f6362fa6e4aec5afc2a890b1cbe", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|2bab486d4274a8160d1f829fd9b595a98d875f6362fa6e4aec5afc2a890b1cbe"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/dom/scripts/templateloader_test.py"}, "region": {"startLine": 68}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "[MINED106] Phantom test coverage: test_ite1: Test function `test_ite1` runs code but contains no assert / expect / should call \u2014 it passes regardless of behaviour. Adds line coverage without verifying anything."}, "properties": {"repobilityId": 133106, "scanner": "repobility-ast-engine", "fingerprint": "7e7975307f74e7d2351742771f840bf068fed40d31d37d45feb019ec70689dee", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|7e7975307f74e7d2351742771f840bf068fed40d31d37d45feb019ec70689dee"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/dom/scripts/templateloader_test.py"}, "region": {"startLine": 51}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "[MINED106] Phantom test coverage: test_comments: Test function `test_comments` runs code but contains no assert / expect / should call \u2014 it passes regardless of behaviour. Adds line coverage without verifying anything."}, "properties": {"repobilityId": 133105, "scanner": "repobility-ast-engine", "fingerprint": "fe67affd67330709f40f2228d7bf7375990be831d8af0043592ba993c3361036", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|fe67affd67330709f40f2228d7bf7375990be831d8af0043592ba993c3361036"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/dom/scripts/templateloader_test.py"}, "region": {"startLine": 45}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "[MINED106] Phantom test coverage: test_freevar: Test function `test_freevar` runs code but contains no assert / expect / should call \u2014 it passes regardless of behaviour. Adds line coverage without verifying anything."}, "properties": {"repobilityId": 133104, "scanner": "repobility-ast-engine", "fingerprint": "45a5faabec4fb7ada51660b6ec632870cbdbdb75630158bed91dbf7247f523c9", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|45a5faabec4fb7ada51660b6ec632870cbdbdb75630158bed91dbf7247f523c9"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/dom/scripts/templateloader_test.py"}, "region": {"startLine": 40}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "[MINED106] Phantom test coverage: test_inheritance: Test function `test_inheritance` runs code but contains no assert / expect / should call \u2014 it passes regardless of behaviour. Adds line coverage without verifying anything."}, "properties": {"repobilityId": 133101, "scanner": "repobility-ast-engine", "fingerprint": "e65ef584d386e05d96036f2240d464beaa19b1085c51ada1b587b5221289d26e", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|e65ef584d386e05d96036f2240d464beaa19b1085c51ada1b587b5221289d26e"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/dom/scripts/idlnode_test.py"}, "region": {"startLine": 375}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "[MINED106] Phantom test coverage: test_annotations: Test function `test_annotations` runs code but contains no assert / expect / should call \u2014 it passes regardless of behaviour. Adds line coverage without verifying anything."}, "properties": {"repobilityId": 133100, "scanner": "repobility-ast-engine", "fingerprint": "54e1b56730c59e0793a152cc08b538b8f3c61e150457c305751b601c65eb8dd2", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|54e1b56730c59e0793a152cc08b538b8f3c61e150457c305751b601c65eb8dd2"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/dom/scripts/idlnode_test.py"}, "region": {"startLine": 299}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "[MINED106] Phantom test coverage: test_constants: Test function `test_constants` runs code but contains no assert / expect / should call \u2014 it passes regardless of behaviour. Adds line coverage without verifying anything."}, "properties": {"repobilityId": 133099, "scanner": "repobility-ast-engine", "fingerprint": "62cea6547eae32e4df956b4a7c0bd69fae975e674fa4322fcce9cc0ab522ad0b", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|62cea6547eae32e4df956b4a7c0bd69fae975e674fa4322fcce9cc0ab522ad0b"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/dom/scripts/idlnode_test.py"}, "region": {"startLine": 231}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "[MINED106] Phantom test coverage: test_operations: Test function `test_operations` runs code but contains no assert / expect / should call \u2014 it passes regardless of behaviour. Adds line coverage without verifying anything."}, "properties": {"repobilityId": 133098, "scanner": "repobility-ast-engine", "fingerprint": "0d33f3b4828322c7335040de4b9bde348cb55faa47e2a2b6c9f9cc52c7e4a041", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|0d33f3b4828322c7335040de4b9bde348cb55faa47e2a2b6c9f9cc52c7e4a041"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/dom/scripts/idlnode_test.py"}, "region": {"startLine": 162}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "[MINED106] Phantom test coverage: test_attributes: Test function `test_attributes` runs code but contains no assert / expect / should call \u2014 it passes regardless of behaviour. Adds line coverage without verifying anything."}, "properties": {"repobilityId": 133097, "scanner": "repobility-ast-engine", "fingerprint": "d2f18602875246c8610ad110f3707f1d1dccf259253b16c0992138956417034d", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|d2f18602875246c8610ad110f3707f1d1dccf259253b16c0992138956417034d"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/dom/scripts/idlnode_test.py"}, "region": {"startLine": 123}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "[MINED106] Phantom test coverage: test_implements_statement: Test function `test_implements_statement` runs code but contains no assert / expect / should call \u2014 it passes regardless of behaviour. Adds line coverage without verifying anything."}, "properties": {"repobilityId": 133096, "scanner": "repobility-ast-engine", "fingerprint": "00a1f8edb7d0430af9e01f2470eb2e584e595498f4731675daeaf45a49cdcce9", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|00a1f8edb7d0430af9e01f2470eb2e584e595498f4731675daeaf45a49cdcce9"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/dom/scripts/idlnode_test.py"}, "region": {"startLine": 106}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "[MINED106] Phantom test coverage: test_extended_attributes: Test function `test_extended_attributes` runs code but contains no assert / expect / should call \u2014 it passes regardless of behaviour. Adds line coverage without verifying anything."}, "properties": {"repobilityId": 133095, "scanner": "repobility-ast-engine", "fingerprint": "42a129809a15bef00279f32e027be133d7704914c2f44bf4589bfc41bbbd7efb", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|42a129809a15bef00279f32e027be133d7704914c2f44bf4589bfc41bbbd7efb"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/dom/scripts/idlnode_test.py"}, "region": {"startLine": 87}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "[MINED106] Phantom test coverage: test_gcc_preprocessor: Test function `test_gcc_preprocessor` runs code but contains no assert / expect / should call \u2014 it passes regardless of behaviour. Adds line coverage without verifying anything."}, "properties": {"repobilityId": 133094, "scanner": "repobility-ast-engine", "fingerprint": "0cfa950eff34880426a212ad4873761ab2b76eb56fb7d62665ec9643aecfb335", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|0cfa950eff34880426a212ad4873761ab2b76eb56fb7d62665ec9643aecfb335"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/dom/scripts/idlnode_test.py"}, "region": {"startLine": 80}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "[MINED106] Phantom test coverage: test_empty_interface: Test function `test_empty_interface` runs code but contains no assert / expect / should call \u2014 it passes regardless of behaviour. Adds line coverage without verifying anything."}, "properties": {"repobilityId": 133093, "scanner": "repobility-ast-engine", "fingerprint": "1a5137a5d730a50bc11ba1069f665de5000ea65bad8735d9222b6a17be6764ef", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|1a5137a5d730a50bc11ba1069f665de5000ea65bad8735d9222b6a17be6764ef"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/dom/scripts/idlnode_test.py"}, "region": {"startLine": 66}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "[MINED106] Phantom test coverage: test_empty_module: Test function `test_empty_module` runs code but contains no assert / expect / should call \u2014 it passes regardless of behaviour. Adds line coverage without verifying anything."}, "properties": {"repobilityId": 133092, "scanner": "repobility-ast-engine", "fingerprint": "dd366ea76c47d6d44c5e77952dbdf59945d17d32fb79becc8d2158db3a6b7200", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|dd366ea76c47d6d44c5e77952dbdf59945d17d32fb79becc8d2158db3a6b7200"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/dom/scripts/idlnode_test.py"}, "region": {"startLine": 60}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "[MINED106] Phantom test coverage: test_rendering: Test function `test_rendering` runs code but contains no assert / expect / should call \u2014 it passes regardless of behaviour. Adds line coverage without verifying anything."}, "properties": {"repobilityId": 133091, "scanner": "repobility-ast-engine", "fingerprint": "e2b1dee7759376a21876bb88e83d00c4613ecaddc703d149f3da84cbee2e41d8", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|e2b1dee7759376a21876bb88e83d00c4613ecaddc703d149f3da84cbee2e41d8"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/dom/scripts/idlrenderer_test.py"}, "region": {"startLine": 30}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "[MINED106] Phantom test coverage: test_server_dartium: Test function `test_server_dartium` runs code but contains no assert / expect / should call \u2014 it passes regardless of behaviour. Adds line coverage without verifying anything."}, "properties": {"repobilityId": 133080, "scanner": "repobility-ast-engine", "fingerprint": "d653f32913df75194cb48e4e8e9538d2f3c8f6f91a9f30e120f2edbd710afb77", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|d653f32913df75194cb48e4e8e9538d2f3c8f6f91a9f30e120f2edbd710afb77"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/dom/dom.py"}, "region": {"startLine": 142}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "[MINED106] Phantom test coverage: test_server: Test function `test_server` runs code but contains no assert / expect / should call \u2014 it passes regardless of behaviour. Adds line coverage without verifying anything."}, "properties": {"repobilityId": 133079, "scanner": "repobility-ast-engine", "fingerprint": "bef6222f56e1c52d713700434bf5e1b399d33abd39be97064518d6577615c872", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|bef6222f56e1c52d713700434bf5e1b399d33abd39be97064518d6577615c872"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/dom/dom.py"}, "region": {"startLine": 138}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "[MINED106] Phantom test coverage: test_dart2js: Test function `test_dart2js` runs code but contains no assert / expect / should call \u2014 it passes regardless of behaviour. Adds line coverage without verifying anything."}, "properties": {"repobilityId": 133078, "scanner": "repobility-ast-engine", "fingerprint": "2426bb713f0b9f186e0887ee155f56bdcb9d3c9f824f0a095c150af1b8095a64", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|2426bb713f0b9f186e0887ee155f56bdcb9d3c9f824f0a095c150af1b8095a64"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/dom/dom.py"}, "region": {"startLine": 116}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "[MINED106] Phantom test coverage: test_chrome: Test function `test_chrome` runs code but contains no assert / expect / should call \u2014 it passes regardless of behaviour. Adds line coverage without verifying anything."}, "properties": {"repobilityId": 133077, "scanner": "repobility-ast-engine", "fingerprint": "9d3338eed9c5aa05a9197badeeaf793c41cd4c327b8a5190ef572b2ff23ac07e", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|9d3338eed9c5aa05a9197badeeaf793c41cd4c327b8a5190ef572b2ff23ac07e"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/dom/dom.py"}, "region": {"startLine": 112}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "[MINED106] Phantom test coverage: test_drt: Test function `test_drt` runs code but contains no assert / expect / should call \u2014 it passes regardless of behaviour. Adds line coverage without verifying anything."}, "properties": {"repobilityId": 133076, "scanner": "repobility-ast-engine", "fingerprint": "7236b6c4e471043e7371d29ea6bb37e0f82eb05b641cfc34402692246af75381", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|7236b6c4e471043e7371d29ea6bb37e0f82eb05b641cfc34402692246af75381"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/dom/dom.py"}, "region": {"startLine": 108}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "[MINED106] Phantom test coverage: test_ff: Test function `test_ff` runs code but contains no assert / expect / should call \u2014 it passes regardless of behaviour. Adds line coverage without verifying anything."}, "properties": {"repobilityId": 133075, "scanner": "repobility-ast-engine", "fingerprint": "271abeac8640e35c3ce97584fdbc0d40db376958d3e240d033b5b6a17bbe420f", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|271abeac8640e35c3ce97584fdbc0d40db376958d3e240d033b5b6a17bbe420f"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/dom/dom.py"}, "region": {"startLine": 104}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "[MINED108] `self.BuildIncludesGraph` used but never assigned in __init__: Method `Check` of class `LayeringChecker` reads `self.BuildIncludesGraph`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance."}, "properties": {"repobilityId": 133072, "scanner": "repobility-ast-engine", "fingerprint": "5d7faefb0b70066ce277941ce9c6f086867b31cd355ae586bb41bc5af652f6c2", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|5d7faefb0b70066ce277941ce9c6f086867b31cd355ae586bb41bc5af652f6c2"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "runtime/tools/compiler_layering_check.py"}, "region": {"startLine": 46}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "[MINED108] `self.AddAllSourcesToWorklist` used but never assigned in __init__: Method `Check` of class `LayeringChecker` reads `self.AddAllSourcesToWorklist`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance."}, "properties": {"repobilityId": 133071, "scanner": "repobility-ast-engine", "fingerprint": "b973d1723a9ac07d30c9eef6e5229b5c50f3442656cf09e0e4cf44fd20d8e248", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|b973d1723a9ac07d30c9eef6e5229b5c50f3442656cf09e0e4cf44fd20d8e248"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "runtime/tools/compiler_layering_check.py"}, "region": {"startLine": 45}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "[MINED108] `self._search_dir` used but never assigned in __init__: Method `_find_coredump_file` of class `WindowsCoreDumpArchiver` reads `self._search_dir`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance."}, "properties": {"repobilityId": 133064, "scanner": "repobility-ast-engine", "fingerprint": "4343a058c3d13139dbb74d8aaa452d369a6e6704c973779a6d8dbca5d1a32941", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|4343a058c3d13139dbb74d8aaa452d369a6e6704c973779a6d8dbca5d1a32941"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/utils.py"}, "region": {"startLine": 937}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "[MINED108] `self._search_dir` used but never assigned in __init__: Method `_find_all_coredumps` of class `WindowsCoreDumpArchiver` reads `self._search_dir`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance."}, "properties": {"repobilityId": 133063, "scanner": "repobility-ast-engine", "fingerprint": "eb5ac859a04f8cb41334febcc3104b7ce67fe209159ef3b137d73cb43de98d33", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|eb5ac859a04f8cb41334febcc3104b7ce67fe209159ef3b137d73cb43de98d33"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/utils.py"}, "region": {"startLine": 927}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "[MINED108] `self._search_dir` used but never assigned in __init__: Method `_cleanup` of class `WindowsCoreDumpArchiver` reads `self._search_dir`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance."}, "properties": {"repobilityId": 133062, "scanner": "repobility-ast-engine", "fingerprint": "bfb4e494538a6347795a55248d7f38429bcae35b978c920a3d3d9a1d8fb9414a", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|bfb4e494538a6347795a55248d7f38429bcae35b978c920a3d3d9a1d8fb9414a"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/utils.py"}, "region": {"startLine": 921}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "[MINED108] `self._dump_all_stacks` used but never assigned in __init__: Method `__exit__` of class `WindowsCoreDumpArchiver` reads `self._dump_all_stacks`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance."}, "properties": {"repobilityId": 133061, "scanner": "repobility-ast-engine", "fingerprint": "73c0a50a119111ecfe33cb7e1b38793cbae1e74d3b589b4668c4d1ce66ccebda", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|73c0a50a119111ecfe33cb7e1b38793cbae1e74d3b589b4668c4d1ce66ccebda"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/utils.py"}, "region": {"startLine": 913}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "[MINED108] `self._find_all_coredumps` used but never assigned in __init__: Method `_dump_all_stacks` of class `WindowsCoreDumpArchiver` reads `self._find_all_coredumps`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance."}, "properties": {"repobilityId": 133060, "scanner": "repobility-ast-engine", "fingerprint": "c5e2f167d106f6748b0e2ade7a761114ca086e56595d73d4590c6d8ddaf13e88", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|c5e2f167d106f6748b0e2ade7a761114ca086e56595d73d4590c6d8ddaf13e88"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/utils.py"}, "region": {"startLine": 886}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "[MINED108] `self._find_cdb` used but never assigned in __init__: Method `_dump_all_stacks` of class `WindowsCoreDumpArchiver` reads `self._find_cdb`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance."}, "properties": {"repobilityId": 133059, "scanner": "repobility-ast-engine", "fingerprint": "1291bee4753169cefa684ea8c6dd885f19590d76f6501c8ef423967c5393fe28", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|1291bee4753169cefa684ea8c6dd885f19590d76f6501c8ef423967c5393fe28"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/utils.py"}, "region": {"startLine": 882}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "[MINED108] `self._search_dir` used but never assigned in __init__: Method `_find_coredump_file` of class `PosixCoreDumpArchiver` reads `self._search_dir`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance."}, "properties": {"repobilityId": 133058, "scanner": "repobility-ast-engine", "fingerprint": "fc3b69ca798a05e9543c4d842dcaa1787b3e6ec9442b106ca2995f8b5ec001e0", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|fc3b69ca798a05e9543c4d842dcaa1787b3e6ec9442b106ca2995f8b5ec001e0"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/utils.py"}, "region": {"startLine": 830}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "[MINED108] `self._search_dir` used but never assigned in __init__: Method `_cleanup` of class `PosixCoreDumpArchiver` reads `self._search_dir`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance."}, "properties": {"repobilityId": 133057, "scanner": "repobility-ast-engine", "fingerprint": "f7d60730cc2e31a960724fd17f94e63b4f7be99f4f965f4cd5477dc0d6847c1d", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|f7d60730cc2e31a960724fd17f94e63b4f7be99f4f965f4cd5477dc0d6847c1d"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/utils.py"}, "region": {"startLine": 824}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "[MINED108] `self._tar` used but never assigned in __init__: Method `_upload` of class `BaseCoreDumpArchiver` reads `self._tar`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance."}, "properties": {"repobilityId": 133056, "scanner": "repobility-ast-engine", "fingerprint": "f5f9e19e87e16c02e9e2f894ec15ae21ada1425446806a20013dd286f3beb919", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|f5f9e19e87e16c02e9e2f894ec15ae21ada1425446806a20013dd286f3beb919"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/utils.py"}, "region": {"startLine": 767}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "[MINED108] `self._get_file_name` used but never assigned in __init__: Method `_tar` of class `BaseCoreDumpArchiver` reads `self._get_file_name`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance."}, "properties": {"repobilityId": 133055, "scanner": "repobility-ast-engine", "fingerprint": "514fa14dcc4a60a3e02ea04db4a01eef76f13f6192b8f1bf06147cafcdc8a380", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|514fa14dcc4a60a3e02ea04db4a01eef76f13f6192b8f1bf06147cafcdc8a380"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/utils.py"}, "region": {"startLine": 746}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "[MINED108] `self._get_file_name` used but never assigned in __init__: Method `_move` of class `BaseCoreDumpArchiver` reads `self._get_file_name`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance."}, "properties": {"repobilityId": 133054, "scanner": "repobility-ast-engine", "fingerprint": "f2cb76ab9026c59b94966563a79b1322aba241229df4feab94be95b69a153f91", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|f2cb76ab9026c59b94966563a79b1322aba241229df4feab94be95b69a153f91"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/utils.py"}, "region": {"startLine": 737}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "[MINED108] `self._report_missing_crashes` used but never assigned in __init__: Method `_archive` of class `BaseCoreDumpArchiver` reads `self._report_missing_crashes`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance."}, "properties": {"repobilityId": 133053, "scanner": "repobility-ast-engine", "fingerprint": "4159f3361b39f875f19859af5d1e0cd6fe3db1ae8b580148dea9786ff917d751", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|4159f3361b39f875f19859af5d1e0cd6fe3db1ae8b580148dea9786ff917d751"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/utils.py"}, "region": {"startLine": 699}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "[MINED108] `self._upload` used but never assigned in __init__: Method `_archive` of class `BaseCoreDumpArchiver` reads `self._upload`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance."}, "properties": {"repobilityId": 133052, "scanner": "repobility-ast-engine", "fingerprint": "7c25ff890062adecf18a4b6db5c9b632c271a6715f1c2ab0e251996153536a49", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|7c25ff890062adecf18a4b6db5c9b632c271a6715f1c2ab0e251996153536a49"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/utils.py"}, "region": {"startLine": 696}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "[MINED108] `self._move` used but never assigned in __init__: Method `_archive` of class `BaseCoreDumpArchiver` reads `self._move`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance."}, "properties": {"repobilityId": 133051, "scanner": "repobility-ast-engine", "fingerprint": "21d6a98e260665f22987988eeb3ff5f4257c509d9c9c98fba8b2f4e9719f7732", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|21d6a98e260665f22987988eeb3ff5f4257c509d9c9c98fba8b2f4e9719f7732"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/utils.py"}, "region": {"startLine": 689}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "[MINED108] `self._is_shard` used but never assigned in __init__: Method `_archive` of class `BaseCoreDumpArchiver` reads `self._is_shard`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance."}, "properties": {"repobilityId": 133050, "scanner": "repobility-ast-engine", "fingerprint": "d61352cbd005e4c6405404b97530ec1ff1c523dac9bb18ca4285ab4ceff6838c", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|d61352cbd005e4c6405404b97530ec1ff1c523dac9bb18ca4285ab4ceff6838c"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/utils.py"}, "region": {"startLine": 682}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "[MINED108] `self._find_coredump_file` used but never assigned in __init__: Method `_archive` of class `BaseCoreDumpArchiver` reads `self._find_coredump_file`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance."}, "properties": {"repobilityId": 133049, "scanner": "repobility-ast-engine", "fingerprint": "5197bb710d8bccc8e2ce90c46c02c42b3dfa41adab1e27b1a2206f523cbcfc54", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|5197bb710d8bccc8e2ce90c46c02c42b3dfa41adab1e27b1a2206f523cbcfc54"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/utils.py"}, "region": {"startLine": 677}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "[MINED108] `self._find_all_coredumps` used but never assigned in __init__: Method `__exit__` of class `BaseCoreDumpArchiver` reads `self._find_all_coredumps`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance."}, "properties": {"repobilityId": 133048, "scanner": "repobility-ast-engine", "fingerprint": "1af3d2fd3a3783378be67214644c7dded084223553ed74c0ec1ab62bfafa0602", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|1af3d2fd3a3783378be67214644c7dded084223553ed74c0ec1ab62bfafa0602"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/utils.py"}, "region": {"startLine": 658}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "[MINED108] `self._archive` used but never assigned in __init__: Method `__exit__` of class `BaseCoreDumpArchiver` reads `self._archive`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance."}, "properties": {"repobilityId": 133047, "scanner": "repobility-ast-engine", "fingerprint": "c5249707abdcec2db82d17a225dd41c2be9bf3c05486b2b0d619eed0f0698d27", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|c5249707abdcec2db82d17a225dd41c2be9bf3c05486b2b0d619eed0f0698d27"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/utils.py"}, "region": {"startLine": 655}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "[MINED108] `self._safe_cleanup` used but never assigned in __init__: Method `__exit__` of class `BaseCoreDumpArchiver` reads `self._safe_cleanup`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance."}, "properties": {"repobilityId": 133046, "scanner": "repobility-ast-engine", "fingerprint": "ec1c21d0b12c058584ca456c3aa951d6fa9f91e35cec391bf503c952053dd5bf", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|ec1c21d0b12c058584ca456c3aa951d6fa9f91e35cec391bf503c952053dd5bf"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/utils.py"}, "region": {"startLine": 670}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "[MINED108] `self._find_unexpected_crashes` used but never assigned in __init__: Method `__exit__` of class `BaseCoreDumpArchiver` reads `self._find_unexpected_crashes`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance."}, "properties": {"repobilityId": 133045, "scanner": "repobility-ast-engine", "fingerprint": "4a7fca61d054dd649325de1aab3fef5b4c1bfa33310ea005c99ff3c4c2e7c5b0", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|4a7fca61d054dd649325de1aab3fef5b4c1bfa33310ea005c99ff3c4c2e7c5b0"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/utils.py"}, "region": {"startLine": 645}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "[MINED108] `self._safe_cleanup` used but never assigned in __init__: Method `__enter__` of class `BaseCoreDumpArchiver` reads `self._safe_cleanup`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance."}, "properties": {"repobilityId": 133044, "scanner": "repobility-ast-engine", "fingerprint": "39c8599094e09901272dbed1cfc0ca47683df10800e87bbbbe828fe246d2168f", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|39c8599094e09901272dbed1cfc0ca47683df10800e87bbbbe828fe246d2168f"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/utils.py"}, "region": {"startLine": 640}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "[MINED108] `self._cleanup` used but never assigned in __init__: Method `_safe_cleanup` of class `BaseCoreDumpArchiver` reads `self._cleanup`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance."}, "properties": {"repobilityId": 133043, "scanner": "repobility-ast-engine", "fingerprint": "5356fca833f7a81a9d3c9d2b034cac0103bbecb8344d6df7d54c69423231326f", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|5356fca833f7a81a9d3c9d2b034cac0103bbecb8344d6df7d54c69423231326f"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/utils.py"}, "region": {"startLine": 631}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "[MINED108] `self.Read` used but never assigned in __init__: Method `GetProcessId` of class `MinidumpFile` reads `self.Read`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance."}, "properties": {"repobilityId": 133041, "scanner": "repobility-ast-engine", "fingerprint": "5b6d27f8196e4a04768e5c36720e6004a12a7eadb16538c2a23ad61fb9a97c2d", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|5b6d27f8196e4a04768e5c36720e6004a12a7eadb16538c2a23ad61fb9a97c2d"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/minidump.py"}, "region": {"startLine": 162}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "[MINED106] Phantom test coverage: test_matrix_filter: Test function `test_matrix_filter` runs code but contains no assert / expect / should call \u2014 it passes regardless of behaviour. Adds line coverage without verifying anything."}, "properties": {"repobilityId": 133035, "scanner": "repobility-ast-engine", "fingerprint": "cc5cf3c6fc80f6888191baf6b6f23a2831198611b5df4c82842266f29b428bd1", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|cc5cf3c6fc80f6888191baf6b6f23a2831198611b5df4c82842266f29b428bd1"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "PRESUBMIT.py"}, "region": {"startLine": 421}}}]}, {"ruleId": "SEC006", "level": "error", "message": {"text": "[SEC006] XSS Risk: Direct HTML injection without sanitization."}, "properties": {"repobilityId": 132975, "scanner": "repobility-threat-engine", "fingerprint": "d687b7b759041d8c7a02f5781ad8d7c6d33a8c29e6c9fd0831a1acf877c2a124", "category": "injection", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": ".innerHTML = r", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC006", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "code|injection|pkg/dwds/web/run_main.dart|46|sec006"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "pkg/dwds/web/run_main.dart"}, "region": {"startLine": 46}}}]}, {"ruleId": "MINED002", "level": "error", "message": {"text": "[MINED002] Dart Null Bang: value! throws on null. Use ?. or null check."}, "properties": {"repobilityId": 132966, "scanner": "repobility-threat-engine", "fingerprint": "46d12a7248d6956ec1ff818bd5ba7a34eba61a6eaf0cd9fd3aad23034f2ac30a", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "dart-null-bang", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["dart"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.347899+00:00", "triaged_in_corpus": 15, "observations_count": 1434931, "ai_coder_pattern_id": 167}, "scanner": "repobility-threat-engine", "correlation_key": "fp|46d12a7248d6956ec1ff818bd5ba7a34eba61a6eaf0cd9fd3aad23034f2ac30a"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "pkg/analysis_server/integration_test/analysis/error_test.dart"}, "region": {"startLine": 140}}}]}, {"ruleId": "MINED002", "level": "error", "message": {"text": "[MINED002] Dart Null Bang: value! throws on null. Use ?. or null check."}, "properties": {"repobilityId": 132965, "scanner": "repobility-threat-engine", "fingerprint": "1a7b95787da874bc5ea9c106dd5c73ff01ca9226065c6378646a1eed5a13f330", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "dart-null-bang", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["dart"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.347899+00:00", "triaged_in_corpus": 15, "observations_count": 1434931, "ai_coder_pattern_id": 167}, "scanner": "repobility-threat-engine", "correlation_key": "fp|1a7b95787da874bc5ea9c106dd5c73ff01ca9226065c6378646a1eed5a13f330"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "pkg/analysis_server/benchmark/perf/dart_analyze.dart"}, "region": {"startLine": 166}}}]}, {"ruleId": "MINED002", "level": "error", "message": {"text": "[MINED002] Dart Null Bang: value! throws on null. Use ?. or null check."}, "properties": {"repobilityId": 132964, "scanner": "repobility-threat-engine", "fingerprint": "b7b7fc8c91552b60cad316802480446ed39fb72ad6a01794bc9b0118fbebafa4", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "dart-null-bang", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["dart"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.347899+00:00", "triaged_in_corpus": 15, "observations_count": 1434931, "ai_coder_pattern_id": 167}, "scanner": "repobility-threat-engine", "correlation_key": "fp|b7b7fc8c91552b60cad316802480446ed39fb72ad6a01794bc9b0118fbebafa4"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "pkg/analysis_server/benchmark/benchmarks.dart"}, "region": {"startLine": 181}}}]}, {"ruleId": "SEC029", "level": "error", "message": {"text": "[SEC029] Server-Side Request Forgery (SSRF) \u2014 outbound HTTP from user input: Outbound HTTP request to a user-controlled URL without allowlist validation. Attackers can probe internal services (169.254.169.254 metadata, internal Kubernetes endpoints, file:// URIs), exfiltrate data, or pivot through your network. SSRF is OWASP A10:2021 and a frequent foothold in cloud breaches."}, "properties": {"repobilityId": 132957, "scanner": "repobility-threat-engine", "fingerprint": "e5a9e8f597090d26078b900b28b7d028eea244ac785fe87635798c53b7a03a34", "category": "ssrf", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": "Url(\n      U", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC029", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "fp|e5a9e8f597090d26078b900b28b7d028eea244ac785fe87635798c53b7a03a34"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "pkg/analysis_server/integration_test/lsp_server/server_test.dart"}, "region": {"startLine": 34}}}]}, {"ruleId": "SEC029", "level": "error", "message": {"text": "[SEC029] Server-Side Request Forgery (SSRF) \u2014 outbound HTTP from user input: Outbound HTTP request to a user-controlled URL without allowlist validation. Attackers can probe internal services (169.254.169.254 metadata, internal Kubernetes endpoints, file:// URIs), exfiltrate data, or pivot through your network. SSRF is OWASP A10:2021 and a frequent foothold in cloud breaches."}, "properties": {"repobilityId": 132956, "scanner": "repobility-threat-engine", "fingerprint": "87bb6848b3c2396203d236432b0b32a6b011a453d85dcbaad4d2edbc1e9d2078", "category": "ssrf", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": "Url(\n      U", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC029", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "fp|87bb6848b3c2396203d236432b0b32a6b011a453d85dcbaad4d2edbc1e9d2078"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "pkg/analysis_server/integration_test/diagnostic/get_server_port_test.dart"}, "region": {"startLine": 30}}}]}, {"ruleId": "SEC029", "level": "error", "message": {"text": "[SEC029] Server-Side Request Forgery (SSRF) \u2014 outbound HTTP from user input: Outbound HTTP request to a user-controlled URL without allowlist validation. Attackers can probe internal services (169.254.169.254 metadata, internal Kubernetes endpoints, file:// URIs), exfiltrate data, or pivot through your network. SSRF is OWASP A10:2021 and a frequent foothold in cloud breaches."}, "properties": {"repobilityId": 132955, "scanner": "repobility-threat-engine", "fingerprint": "4ead687ba9edeb81f407256b728d08d70bc34f8daa91a3387364a6435613e363", "category": "ssrf", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": "Url(r", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC029", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "fp|4ead687ba9edeb81f407256b728d08d70bc34f8daa91a3387364a6435613e363"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "benchmarks/NativeCall/native/native_functions.c"}, "region": {"startLine": 74}}}]}, {"ruleId": "MINED004", "level": "error", "message": {"text": "[MINED004] Weak Crypto: MD5/SHA1/DES/RC4 used for security context (not just checksums)."}, "properties": {"repobilityId": 132953, "scanner": "repobility-threat-engine", "fingerprint": "9910c5645bfec7dfeeae29d571dc8c6b54237e4340cb72c0a584a08105d3317c", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "weak-crypto", "owasp": "A02:2021", "cwe_ids": ["CWE-327"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.347906+00:00", "triaged_in_corpus": 15, "observations_count": 303181, "ai_coder_pattern_id": 13}, "scanner": "repobility-threat-engine", "correlation_key": "fp|9910c5645bfec7dfeeae29d571dc8c6b54237e4340cb72c0a584a08105d3317c"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "benchmarks/OmnibusDeferred/dart/OmnibusDeferred.dart"}, "region": {"startLine": 18}}}]}, {"ruleId": "MINED004", "level": "error", "message": {"text": "[MINED004] Weak Crypto: MD5/SHA1/DES/RC4 used for security context (not just checksums)."}, "properties": {"repobilityId": 132952, "scanner": "repobility-threat-engine", "fingerprint": "0a9f7f1f8d3db157cbc8f2ff9ded517154e13c46e6344a6ad85fafa6263d5565", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "weak-crypto", "owasp": "A02:2021", "cwe_ids": ["CWE-327"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.347906+00:00", "triaged_in_corpus": 15, "observations_count": 303181, "ai_coder_pattern_id": 13}, "scanner": "repobility-threat-engine", "correlation_key": "fp|0a9f7f1f8d3db157cbc8f2ff9ded517154e13c46e6344a6ad85fafa6263d5565"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "benchmarks/Omnibus/dart/Omnibus.dart"}, "region": {"startLine": 18}}}]}, {"ruleId": "MINED004", "level": "error", "message": {"text": "[MINED004] Weak Crypto: MD5/SHA1/DES/RC4 used for security context (not just checksums)."}, "properties": {"repobilityId": 132951, "scanner": "repobility-threat-engine", "fingerprint": "adda08aafc81bc7ad49c220ea25257e925cae92de77adb34ea123fa5d231daf4", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "weak-crypto", "owasp": "A02:2021", "cwe_ids": ["CWE-327"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.347906+00:00", "triaged_in_corpus": 15, "observations_count": 303181, "ai_coder_pattern_id": 13}, "scanner": "repobility-threat-engine", "correlation_key": "fp|adda08aafc81bc7ad49c220ea25257e925cae92de77adb34ea123fa5d231daf4"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "benchmarks/MD5/dart/md5.dart"}, "region": {"startLine": 17}}}]}, {"ruleId": "SEC085", "level": "error", "message": {"text": "[SEC085] JS: child_process.exec with non-literal: child_process.exec with user-derived input enables command injection. Ported from eslint-plugin-security detect-child-process (Apache-2.0)."}, "properties": {"repobilityId": 132946, "scanner": "repobility-threat-engine", "fingerprint": "844f36061beac0a51118c21e25090522e46dc144e797ca9e7a88fbc511fb6e98", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": "exec(deps_content", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC085", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "fp|844f36061beac0a51118c21e25090522e46dc144e797ca9e7a88fbc511fb6e98"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/extract_deps.py"}, "region": {"startLine": 61}}}]}, {"ruleId": "MINED107", "level": "error", "message": {"text": "[MINED107] Missing import: `http` used but not imported: The file uses `http.something(...)` but never imports `http`. This raises NameError at runtime the first time the line executes."}, "properties": {"repobilityId": 133121, "scanner": "repobility-ast-engine", "fingerprint": "2b28eb1b77a3c80d60039d8a9ac45fd5890b546698dec06a72455246e1263082", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "missing-import-python", "owasp": "A06:2021", "cwe_ids": ["CWE-1075"], "languages": ["python"], "observations_count": 2192}, "scanner": "repobility-ast-engine", "correlation_key": "fp|2b28eb1b77a3c80d60039d8a9ac45fd5890b546698dec06a72455246e1263082"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "pkg/compiler/test/codesize/swarm/appengine/main.py"}, "region": {"startLine": 480}}}]}, {"ruleId": "MINED107", "level": "error", "message": {"text": "[MINED107] Missing import: `html` used but not imported: The file uses `html.something(...)` but never imports `html`. This raises NameError at runtime the first time the line executes."}, "properties": {"repobilityId": 133120, "scanner": "repobility-ast-engine", "fingerprint": "1d2c62afb2fa22e894fa6d71cb41661a154efa9747cb342157ae9bdc05d97b40", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "missing-import-python", "owasp": "A06:2021", "cwe_ids": ["CWE-1075"], "languages": ["python"], "observations_count": 2192}, "scanner": "repobility-ast-engine", "correlation_key": "fp|1d2c62afb2fa22e894fa6d71cb41661a154efa9747cb342157ae9bdc05d97b40"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "pkg/compiler/test/codesize/swarm/appengine/main.py"}, "region": {"startLine": 212}}}]}, {"ruleId": "MINED107", "level": "error", "message": {"text": "[MINED107] Missing import: `ast` used but not imported: The file uses `ast.something(...)` but never imports `ast`. This raises NameError at runtime the first time the line executes."}, "properties": {"repobilityId": 133112, "scanner": "repobility-ast-engine", "fingerprint": "d1163893d900da940b2396540d4d01fe6b95603897866bc24603715890be67ba", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "missing-import-python", "owasp": "A06:2021", "cwe_ids": ["CWE-1075"], "languages": ["python"], "observations_count": 2192}, "scanner": "repobility-ast-engine", "correlation_key": "fp|d1163893d900da940b2396540d4d01fe6b95603897866bc24603715890be67ba"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/dom/scripts/databasebuilder.py"}, "region": {"startLine": 623}}}]}, {"ruleId": "MINED107", "level": "error", "message": {"text": "[MINED107] Missing import: `re` used but not imported: The file uses `re.something(...)` but never imports `re`. This raises NameError at runtime the first time the line executes."}, "properties": {"repobilityId": 133102, "scanner": "repobility-ast-engine", "fingerprint": "617f63817979fe77609edc2dc4bd5257b4833baff46812297a10fa7920eb655e", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "missing-import-python", "owasp": "A06:2021", "cwe_ids": ["CWE-1075"], "languages": ["python"], "observations_count": 2192}, "scanner": "repobility-ast-engine", "correlation_key": "fp|617f63817979fe77609edc2dc4bd5257b4833baff46812297a10fa7920eb655e"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/dom/scripts/systemnative.py"}, "region": {"startLine": 35}}}]}, {"ruleId": "MINED107", "level": "error", "message": {"text": "[MINED107] Missing import: `warnings` used but not imported: The file uses `warnings.something(...)` but never imports `warnings`. This raises NameError at runtime the first time the line executes."}, "properties": {"repobilityId": 133089, "scanner": "repobility-ast-engine", "fingerprint": "e1b4466278ce938ed26c9df4fda944d693fd78933f9945e2eac102de0d5ba388", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "missing-import-python", "owasp": "A06:2021", "cwe_ids": ["CWE-1075"], "languages": ["python"], "observations_count": 2192}, "scanner": "repobility-ast-engine", "correlation_key": "fp|e1b4466278ce938ed26c9df4fda944d693fd78933f9945e2eac102de0d5ba388"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/dom/scripts/idlnode.py"}, "region": {"startLine": 25}}}]}, {"ruleId": "MINED107", "level": "error", "message": {"text": "[MINED107] Missing import: `ast` used but not imported: The file uses `ast.something(...)` but never imports `ast`. This raises NameError at runtime the first time the line executes."}, "properties": {"repobilityId": 133088, "scanner": "repobility-ast-engine", "fingerprint": "0b1d9866d3fb9a89f9d2f2a76df04f7f87a052395fc70450c88184100f78a6fc", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "missing-import-python", "owasp": "A06:2021", "cwe_ids": ["CWE-1075"], "languages": ["python"], "observations_count": 2192}, "scanner": "repobility-ast-engine", "correlation_key": "fp|0b1d9866d3fb9a89f9d2f2a76df04f7f87a052395fc70450c88184100f78a6fc"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/dom/scripts/idlnode.py"}, "region": {"startLine": 430}}}]}, {"ruleId": "MINED107", "level": "error", "message": {"text": "[MINED107] Missing import: `enum` used but not imported: The file uses `enum.something(...)` but never imports `enum`. This raises NameError at runtime the first time the line executes."}, "properties": {"repobilityId": 133086, "scanner": "repobility-ast-engine", "fingerprint": "8d9695550a1653468a92ee52ccf3c8707aa0d9412ba365c1133c0ade1c88e67d", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "missing-import-python", "owasp": "A06:2021", "cwe_ids": ["CWE-1075"], "languages": ["python"], "observations_count": 2192}, "scanner": "repobility-ast-engine", "correlation_key": "fp|8d9695550a1653468a92ee52ccf3c8707aa0d9412ba365c1133c0ade1c88e67d"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/dom/scripts/database.py"}, "region": {"startLine": 252}}}]}, {"ruleId": "MINED107", "level": "error", "message": {"text": "[MINED107] Missing import: `enum` used but not imported: The file uses `enum.something(...)` but never imports `enum`. This raises NameError at runtime the first time the line executes."}, "properties": {"repobilityId": 133081, "scanner": "repobility-ast-engine", "fingerprint": "03ec6cba4839e1c2450706e30dccf8debc96e2f04bb0a77e7108e3eba9bf8762", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "missing-import-python", "owasp": "A06:2021", "cwe_ids": ["CWE-1075"], "languages": ["python"], "observations_count": 2192}, "scanner": "repobility-ast-engine", "correlation_key": "fp|03ec6cba4839e1c2450706e30dccf8debc96e2f04bb0a77e7108e3eba9bf8762"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "tools/dom/new_scripts/code_generator_dart.py"}, "region": {"startLine": 134}}}]}, {"ruleId": "SEC084", "level": "error", "message": {"text": "[SEC084] JS: require() with non-literal: require(<variable>) loads arbitrary modules \u2014 equivalent to eval at module scope. Ported from eslint-plugin-security detect-non-literal-require (Apache-2.0)."}, "properties": {"repobilityId": 132978, "scanner": "repobility-threat-engine", "fingerprint": "a5618420b0f888b5c72e8ce48270b20250987e91e94cebd2278ab53af71d4a3e", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": "require(String", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC084", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "fp|a5618420b0f888b5c72e8ce48270b20250987e91e94cebd2278ab53af71d4a3e"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "pkg/dwds/web/reloader/require_restarter.dart"}, "region": {"startLine": 71}}}]}]}]}