← Legacy view v2 (rp.*)

typecellos/blocknote

https://github.com/TypeCellOS/BlockNote · lang: typescript · LOC: · source: both

Quality
74.4
Grade B
Security
90.6
Findings
4
0 critical · 0 high
Status
completed
May 15, 2026 21:15
info: 3 low: 1
Top rules by occurrence
RuleSeverityCount
SEC015 Insecure Randomness for Security medium 3
SEC006 XSS Risk high 1
First 4 findings (severity-sorted)
low SEC006 XSS Risk
packages/core/src/blocks/defaultBlockHelpers.ts:109 · conf 0.40 
[SEC006] XSS Risk: Direct HTML injection without sanitization.
info SEC015 Insecure Randomness for Security
docs/app/demo/_components/DemoEditor.tsx:103 · conf 0.15 
[SEC015] Insecure Randomness for Security: Weak PRNG used in security-sensitive context. Output is predictable.
info SEC015 Insecure Randomness for Security
docs/app/demo/_components/utils.ts:53 · conf 0.15 
[SEC015] Insecure Randomness for Security: Weak PRNG used in security-sensitive context. Output is predictable.
info SEC015 Insecure Randomness for Security
packages/xl-ai/src/prosemirror/agent.ts:251 · conf 0.15 
[SEC015] Insecure Randomness for Security: Weak PRNG used in security-sensitive context. Output is predictable.

Reading from rp.scan + rp.finding + rp.rule (unified schema, R78 series). Legacy data path unchanged. Compare with /scan/5f7e4eb4-3fc5-4e04-b8c8-9bed19543eed/.