← Legacy view v2 (rp.*)

firecrawl/firecrawl

https://github.com/firecrawl/firecrawl · lang: typescript · LOC: · source: both

Quality
73.2
Grade B
Security
75.0
Findings
8
0 critical · 0 high
Status
completed
May 15, 2026 17:13
info: 8
Top rules by occurrence
RuleSeverityCount
SEC020 Secret Printed to Logs high 4
SEC015 Insecure Randomness for Security medium 4
First 8 findings (severity-sorted)
info SEC015 Insecure Randomness for Security
· conf 0.20 
[SEC015] Insecure Randomness for Security (and 7 more): Same pattern found in 7 additional files. Review if needed.
info SEC015 Insecure Randomness for Security
apps/api/src/controllers/auth.ts:273 · conf 0.25 
[SEC015] Insecure Randomness for Security: Weak PRNG used in security-sensitive context. Output is predictable.
info SEC015 Insecure Randomness for Security
apps/api/src/scraper/scrapeURL/transformers/index.ts:185 · conf 0.25 
[SEC015] Insecure Randomness for Security: Weak PRNG used in security-sensitive context. Output is predictable.
info SEC015 Insecure Randomness for Security
apps/api/src/services/ab-test.ts:25 · conf 0.25 
[SEC015] Insecure Randomness for Security: Weak PRNG used in security-sensitive context. Output is predictable.
info SEC020 Secret Printed to Logs
· conf 0.20 
[SEC020] Secret Printed to Logs (and 5 more): Same pattern found in 5 additional files. Review if needed.
info SEC020 Secret Printed to Logs
apps/api/src/scraper/scrapeURL/engines/wikipedia/index.ts:28 · conf 0.15 
[SEC020] Secret Printed to Logs: Debug or diagnostic code appears to print a credential-bearing value. This is a frequent AI-assisted coding failure: the helper exposes the exact value needed for tro…
info SEC020 Secret Printed to Logs
examples/gemini-github-analyzer/gemini-github-analyzer.py:47 · conf 0.10 
[SEC020] Secret Printed to Logs: Debug or diagnostic code appears to print a credential-bearing value. This is a frequent AI-assisted coding failure: the helper exposes the exact value needed for tro…
info SEC020 Secret Printed to Logs
examples/mistral-small-3.1-extractor/mistral-small-3.1-extractor.py:29 · conf 0.10 
[SEC020] Secret Printed to Logs: Debug or diagnostic code appears to print a credential-bearing value. This is a frequent AI-assisted coding failure: the helper exposes the exact value needed for tro…

Reading from rp.scan + rp.finding + rp.rule (unified schema, R78 series). Legacy data path unchanged. Compare with /scan/46112e33-01b1-4ede-b119-a5ba42a086d8/.