← Legacy view v2 (rp.*)

thesysdev/openui

https://github.com/thesysdev/openui · lang: typescript · source: both

Quality
55.9
Grade C
Security
68.9
Findings
3
0 critical · 0 high
Status
completed
May 15, 2026 11:10
info: 3
Top rules by occurrence
RuleSeverityCount
SEC020 Secret Printed to Logs high 2
SEC015 Insecure Randomness for Security medium 1
First 3 findings (severity-sorted)
info SEC015 Insecure Randomness for Security
docs/app/api/chat/route.ts:58 · conf 0.25 
[SEC015] Insecure Randomness for Security: Weak PRNG used in security-sensitive context. Output is predictable.
info SEC020 Secret Printed to Logs
benchmarks/generate-samples.ts:104 · conf 0.15 
[SEC020] Secret Printed to Logs: Debug or diagnostic code appears to print a credential-bearing value. This is a frequent AI-assisted coding failure: the helper exposes the exact value needed for tro…
info SEC020 Secret Printed to Logs
packages/openui-cli/src/commands/create-chat-app.ts:125 · conf 0.15 
[SEC020] Secret Printed to Logs: Debug or diagnostic code appears to print a credential-bearing value. This is a frequent AI-assisted coding failure: the helper exposes the exact value needed for tro…

Reading from rp.scan + rp.finding + rp.rule (unified schema, R78 series). Legacy data path unchanged. Compare with /scan/123e08d8-3e91-4965-a1c5-af6d85e7d279/.