← Legacy view v2 (rp.*)

anashilaly2003/pink-anniversary-moments

https://github.com/anashilaly2003/pink-anniversary-moments.git · lang: typescript · LOC: · source: user_submitted

Quality

53.2

Grade C-

Security

97.0

Findings

0 critical · 2 high

Status

completed

May 28, 2026 13:32

info: 5 low: 4 medium: 4 high: 2

Top rules by occurrence

Rule	Severity	Count
`MINED044` Js Console Log Prod	info	3
`CORE_NO_LICENSE` No LICENSE file	low	1
`SEC040` innerHTML XSS — template literal with server-supplied data	high	1
`MINED058` React Dangerously Set Html	info	1
`CORE_NO_README` No README file found	medium	1
`CORE_NO_CI` No CI/CD configuration found	medium	1
`WEB003` Public web service has no security.txt	medium	1
`CORE_NO_TESTS` No test files found	high	1
`WEB015` Public web app has no Content Security Policy	medium	1
`WEB011` Public web app has no humans.txt	low	1

First 15 findings (severity-sorted)

high CORE_NO_TESTS No test files found

No test files found

high SEC040 innerHTML XSS — template literal with server-supplied data

src/components/ui/chart.tsx:75 · conf 1.00

[SEC040] innerHTML XSS — template literal with server-supplied data: Setting .innerHTML with a template literal that interpolates server-supplied or user-supplied data is the canonical stored/reflect…

medium CORE_NO_CI No CI/CD configuration found

No CI/CD configuration found

medium CORE_NO_README No README file found

No README file found

medium WEB003 Public web service has no security.txt

.well-known/security.txt · conf 0.78

Public web service has no security.txt

medium WEB015 Public web app has no Content Security Policy

index.html · conf 0.70

Public web app has no Content Security Policy

low CORE_NO_LICENSE No LICENSE file

No LICENSE file

low WEB001 Public web app has no robots.txt

robots.txt · conf 0.74

Public web app has no robots.txt

low WEB002 Public web app has no sitemap

sitemap.xml · conf 0.72

Public web app has no sitemap

low WEB011 Public web app has no humans.txt

humans.txt · conf 0.50

Public web app has no humans.txt

info MINED044 Js Console Log Prod CWE-532

src/routes/__root.tsx:36 · conf 1.00

[MINED044] Js Console Log Prod: console.log left in code. Should be replaced with logger or removed.

info MINED044 Js Console Log Prod CWE-532

src/server.ts:65 · conf 1.00

[MINED044] Js Console Log Prod: console.log left in code. Should be replaced with logger or removed.

info MINED044 Js Console Log Prod CWE-532

src/start.ts:12 · conf 1.00

[MINED044] Js Console Log Prod: console.log left in code. Should be replaced with logger or removed.

info MINED054 Ts As Any CWE-704

src/routeTree.gen.ts:18 · conf 1.00

[MINED054] Ts As Any: Casting to any (as any) bypasses type checking entirely.

info MINED058 React Dangerously Set Html CWE-79

src/components/ui/chart.tsx:73 · conf 1.00

[MINED058] React Dangerously Set Html: dangerouslySetInnerHTML bypasses Reacts JSX escaping. Pair with DOMPurify or never use with user data.

Reading from rp.scan + rp.finding + rp.rule (unified schema, R78 series). Legacy data path unchanged. Compare with /scan/5108c595-bff5-4e30-932f-f36d9c6dd825/.