{"schema_version":"2","scorer_version":"0.1.0","scoring_version":"prov-5+qual-2+sec-2","generated_at":"2026-11-14T14:51:59.939288Z","repo":{"ref":{"host":"github.com","owner":"Animeliqite","name":"Diannex-VSCode"},"default_branch":"main","clone_url":"https://github.com/Animeliqite/Diannex-VSCode.git","html_url":"https://github.com/Animeliqite/Diannex-VSCode","description":"Visual Studio Code implementation for the Diannex language interpreter","stars":0,"forks":0,"is_fork":false,"is_archived":false,"is_private":false,"size_kb":54977,"primary_language":"TypeScript","license_spdx":"CC0-1.0","created_at":"2026-03-18T12:35:16Z","pushed_at":"2026-10-31T18:05:35Z","security_policy_url":null,"distribution":{"owner_created_at":"2018-05-17T18:28:24Z","owner_type":"User","release_assets":[{"name":"diannex-1.0.0.vsix","size":30671040,"download_count":1,"release_tag":"v1.0.0","url":"https://github.com/Animeliqite/Diannex-VSCode/releases/download/v1.0.0/diannex-1.0.0.vsix"}]}},"commit_sha":"dd5e45c8a8b697c008850cabcee2026218fea5e3","profile":{"lines_by_language":{"TypeScript":590,"JavaScript":505,"Shell":37},"files_by_category":{"config":11,"docs":6,"source":6,"generated":2,"other":2,"oversized":1},"source_lines":1132,"test_lines":0},"pillars":{"ai_provenance":{"score":0.0,"confidence":0.41,"coverage":1.0,"label":"possible","breakdown":{"attributed_share":0.0,"suspected_share":0.0,"estimated_share":0.0,"ai_artifacts":0.0,"flagged_work_units":0.0,"flagged_releases":null,"style_index":2.65},"summary":"Weak signals consistent with AI-assisted development. Comments and strings use phrasing typical of LLM-written code (see the coding style evidence)."},"quality":{"score":49.2,"confidence":0.9,"coverage":1.0,"label":"poor","breakdown":{"complexity":100.0,"duplication":5.0,"lint":80.2,"testing":0.0,"docs":65.0,"type_safety":100.0,"process":null},"summary":"Code quality is poor: test-to-source ratio 0.00, no CI test run detected; 0% of function code in complex or long functions; 50% duplicated lines. Weakest area: testing."},"security":{"score":47.5,"confidence":0.85,"coverage":1.0,"label":"poor","breakdown":{"secrets":100.0,"sast":31.4,"dependencies":21.9,"ci_actions":null,"posture":0.0,"scorecard":null},"summary":"Security posture is poor: 66 known vulnerabilities in 12 dependencies. Weakest area: posture."}},"analyzer_results":[{"analyzer":"sec-scorecard","pillar":"security","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":"no published OpenSSF Scorecard result for this repo"},{"analyzer":"sec-registry","pillar":"security","status":"ok","tool_version":null,"metrics":{"declared":7.0,"checked":7.0,"missing":0.0,"recent":0.0,"lookup_errors":0.0},"findings":[],"evidence":[],"data":{"phantom":false},"error":null},{"analyzer":"ai-attribution","pillar":"ai_provenance","status":"ok","tool_version":"signatures-v1","metrics":{"commits":2.0,"attributed_commits":0.0,"attributed_commit_share":0.0,"effective_loc":1145.0,"attributed_loc":0.0,"attributed_loc_share":0.0,"tools_detected":0.0},"findings":[],"evidence":[],"data":{"attributed_loc_by_commit":{},"tools":{},"monthly":{"2026-03":{"loc":848,"attributed_loc":0},"2026-10":{"loc":297,"attributed_loc":0}}},"error":null},{"analyzer":"ai-artifacts","pillar":"ai_provenance","status":"ok","tool_version":"signatures-v1","metrics":{"artifacts":0.0,"workflow_agents":0.0,"tools_configured":0.0},"findings":[],"evidence":[],"data":{"artifacts":[],"workflows":[],"tools":[]},"error":null},{"analyzer":"ai-velocity","pillar":"ai_provenance","status":"ok","tool_version":"prov-4","metrics":{"work_units":2.0,"flagged_units":0.0,"pre_ai_era_bursts":0.0,"pre_ai_era_measured_loc":0.0,"pre_ai_era_burst_loc":0.0,"measured_loc":1145.0,"flagged_loc":0.0,"flagged_loc_share":0.0,"max_loc_per_hour":212.0,"median_loc_per_hour":143.125,"pr_timed_units":0.0,"excluded_import_loc":0.0},"findings":[],"evidence":[],"data":{"flagged_loc_by_commit":{},"excluded_import_commits":[]},"error":null},{"analyzer":"ai-release-velocity","pillar":"ai_provenance","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"ai-stylometry","pillar":"ai_provenance","status":"ok","tool_version":null,"metrics":{"lines_scanned":1132.0,"index":2.65,"count:narrated_steps":0.0,"per_kloc:narrated_steps":0.0,"files:narrated_steps":0.0,"count:placeholder":0.0,"per_kloc:placeholder":0.0,"files:placeholder":0.0,"count:emoji_in_code":6.0,"per_kloc:emoji_in_code":5.3,"files:emoji_in_code":1.0,"count:assistant_voice":0.0,"per_kloc:assistant_voice":0.0,"files:assistant_voice":0.0},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-secrets","pillar":"security","status":"ok","tool_version":"gitleaks 8.30.1","metrics":{"secrets_current":0.0,"secrets_history":0.0,"secrets_nonprod":0.0,"secrets_low_confidence":0.0},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-sast","pillar":"security","status":"ok","tool_version":"opengrep 1.33.1; rules f1d2b562b414","metrics":{"findings":15.0,"findings_high":0.0,"findings_medium":15.0,"findings_low":0.0,"weighted_findings":3.75,"scanned_lines":1132.0,"parse_errors":0.0},"findings":[{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `dest` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"diannex-vscode-extension/scripts/copy-deps.js","line":5,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:diannex-vscode-extension/scripts/copy-deps.js:5"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `dest` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"diannex-vscode-extension/scripts/copy-deps.js","line":5,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:diannex-vscode-extension/scripts/copy-deps.js:5"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `src` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"diannex-vscode-extension/scripts/copy-deps.js","line":6,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:diannex-vscode-extension/scripts/copy-deps.js:6"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"diannex-vscode-extension/scripts/copy-deps.js","line":9,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:diannex-vscode-extension/scripts/copy-deps.js:9"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"diannex-vscode-extension/scripts/copy-deps.js","line":9,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:diannex-vscode-extension/scripts/copy-deps.js:9"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"diannex-vscode-extension/scripts/copy-deps.js","line":10,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:diannex-vscode-extension/scripts/copy-deps.js:10"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"diannex-vscode-extension/scripts/copy-deps.js","line":10,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:diannex-vscode-extension/scripts/copy-deps.js:10"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `src` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"diannex-vscode-extension/scripts/copy-deps.js","line":11,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:diannex-vscode-extension/scripts/copy-deps.js:11"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `src` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"diannex-vscode-extension/scripts/copy-deps.js","line":16,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:diannex-vscode-extension/scripts/copy-deps.js:16"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `dest` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"diannex-vscode-extension/scripts/copy-deps.js","line":16,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:diannex-vscode-extension/scripts/copy-deps.js:16"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `src` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"diannex-vscode-extension/scripts/copy-deps.js","line":16,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:diannex-vscode-extension/scripts/copy-deps.js:16"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `dest` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"diannex-vscode-extension/scripts/copy-server.js","line":5,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:diannex-vscode-extension/scripts/copy-server.js:5"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `src` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"diannex-vscode-extension/scripts/copy-server.js","line":6,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:diannex-vscode-extension/scripts/copy-server.js:6"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `dest` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"diannex-vscode-extension/scripts/copy-server.js","line":6,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:diannex-vscode-extension/scripts/copy-server.js:6"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `context` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"diannex-vscode-extension/src/extension.ts","line":25,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:diannex-vscode-extension/src/extension.ts:25"}],"evidence":[],"data":{"rulesets":["typescript","javascript","bash"]},"error":null},{"analyzer":"sec-deps","pillar":"security","status":"ok","tool_version":"osv-scanner version: 2.7.1","metrics":{"vulnerable_packages":12.0,"vulnerabilities":66.0,"vulns_critical":0.0,"vulns_high":33.0,"vulns_medium":26.0,"vulns_low":7.0,"vulns_unknown":0.0,"penalty":91.0},"findings":[{"rule_id":"osv/GHSA-3jxr-9vmj-r5cp","severity":"high","message":"brace-expansion@1.1.12 (npm) is affected by GHSA-3jxr-9vmj-r5cp","path":"diannex-vscode-extension/package-lock.json","line":null,"fingerprint":"brace-expansion@1.1.12 (npm):GHSA-3jxr-9vmj-r5cp"},{"rule_id":"osv/GHSA-6j4f-fj2g-mc7p","severity":"high","message":"brace-expansion@1.1.12 (npm) is affected by GHSA-6j4f-fj2g-mc7p","path":"diannex-vscode-extension/package-lock.json","line":null,"fingerprint":"brace-expansion@1.1.12 (npm):GHSA-6j4f-fj2g-mc7p"},{"rule_id":"osv/GHSA-mh99-v99m-4gvg","severity":"high","message":"brace-expansion@1.1.12 (npm) is affected by GHSA-mh99-v99m-4gvg","path":"diannex-vscode-extension/package-lock.json","line":null,"fingerprint":"brace-expansion@1.1.12 (npm):GHSA-mh99-v99m-4gvg"},{"rule_id":"osv/GHSA-qhr7-859c-m2p7","severity":"high","message":"brace-expansion@1.1.12 (npm) is affected by GHSA-qhr7-859c-m2p7","path":"diannex-vscode-extension/package-lock.json","line":null,"fingerprint":"brace-expansion@1.1.12 (npm):GHSA-qhr7-859c-m2p7"},{"rule_id":"osv/GHSA-rgw5-rvv9-x895","severity":"high","message":"brace-expansion@1.1.12 (npm) is affected by GHSA-rgw5-rvv9-x895","path":"diannex-vscode-extension/package-lock.json","line":null,"fingerprint":"brace-expansion@1.1.12 (npm):GHSA-rgw5-rvv9-x895"},{"rule_id":"osv/GHSA-3jxr-9vmj-r5cp","severity":"high","message":"brace-expansion@2.0.2 (npm) is affected by GHSA-3jxr-9vmj-r5cp","path":"diannex-vscode-extension/package-lock.json","line":null,"fingerprint":"brace-expansion@2.0.2 (npm):GHSA-3jxr-9vmj-r5cp"},{"rule_id":"osv/GHSA-6j4f-fj2g-mc7p","severity":"high","message":"brace-expansion@2.0.2 (npm) is affected by GHSA-6j4f-fj2g-mc7p","path":"diannex-vscode-extension/package-lock.json","line":null,"fingerprint":"brace-expansion@2.0.2 (npm):GHSA-6j4f-fj2g-mc7p"},{"rule_id":"osv/GHSA-mh99-v99m-4gvg","severity":"high","message":"brace-expansion@2.0.2 (npm) is affected by GHSA-mh99-v99m-4gvg","path":"diannex-vscode-extension/package-lock.json","line":null,"fingerprint":"brace-expansion@2.0.2 (npm):GHSA-mh99-v99m-4gvg"},{"rule_id":"osv/GHSA-qhr7-859c-m2p7","severity":"high","message":"brace-expansion@2.0.2 (npm) is affected by GHSA-qhr7-859c-m2p7","path":"diannex-vscode-extension/package-lock.json","line":null,"fingerprint":"brace-expansion@2.0.2 (npm):GHSA-qhr7-859c-m2p7"},{"rule_id":"osv/GHSA-rgw5-rvv9-x895","severity":"high","message":"brace-expansion@2.0.2 (npm) is affected by GHSA-rgw5-rvv9-x895","path":"diannex-vscode-extension/package-lock.json","line":null,"fingerprint":"brace-expansion@2.0.2 (npm):GHSA-rgw5-rvv9-x895"},{"rule_id":"osv/GHSA-hmw2-7cc7-3qxx","severity":"high","message":"form-data@4.0.5 (npm) is affected by GHSA-hmw2-7cc7-3qxx","path":"diannex-vscode-extension/package-lock.json","line":null,"fingerprint":"form-data@4.0.5 (npm):GHSA-hmw2-7cc7-3qxx"},{"rule_id":"osv/GHSA-22p9-wv53-3rq4","severity":"high","message":"linkify-it@3.0.3 (npm) is affected by GHSA-22p9-wv53-3rq4","path":"diannex-vscode-extension/package-lock.json","line":null,"fingerprint":"linkify-it@3.0.3 (npm):GHSA-22p9-wv53-3rq4"},{"rule_id":"osv/GHSA-v245-v573-v5vm","severity":"high","message":"linkify-it@3.0.3 (npm) is affected by GHSA-v245-v573-v5vm","path":"diannex-vscode-extension/package-lock.json","line":null,"fingerprint":"linkify-it@3.0.3 (npm):GHSA-v245-v573-v5vm"},{"rule_id":"osv/GHSA-r7fv-28h4-cvq7","severity":"high","message":"markdown-it@12.3.2 (npm) is affected by GHSA-r7fv-28h4-cvq7","path":"diannex-vscode-extension/package-lock.json","line":null,"fingerprint":"markdown-it@12.3.2 (npm):GHSA-r7fv-28h4-cvq7"},{"rule_id":"osv/GHSA-23c5-xmqv-rm74","severity":"high","message":"minimatch@3.1.2 (npm) is affected by GHSA-23c5-xmqv-rm74","path":"diannex-vscode-extension/package-lock.json","line":null,"fingerprint":"minimatch@3.1.2 (npm):GHSA-23c5-xmqv-rm74"},{"rule_id":"osv/GHSA-3ppc-4f35-3m26","severity":"high","message":"minimatch@3.1.2 (npm) is affected by GHSA-3ppc-4f35-3m26","path":"diannex-vscode-extension/package-lock.json","line":null,"fingerprint":"minimatch@3.1.2 (npm):GHSA-3ppc-4f35-3m26"},{"rule_id":"osv/GHSA-7r86-cg39-jmmj","severity":"high","message":"minimatch@3.1.2 (npm) is affected by GHSA-7r86-cg39-jmmj","path":"diannex-vscode-extension/package-lock.json","line":null,"fingerprint":"minimatch@3.1.2 (npm):GHSA-7r86-cg39-jmmj"},{"rule_id":"osv/GHSA-23c5-xmqv-rm74","severity":"high","message":"minimatch@5.1.6 (npm) is affected by GHSA-23c5-xmqv-rm74","path":"diannex-vscode-extension/package-lock.json","line":null,"fingerprint":"minimatch@5.1.6 (npm):GHSA-23c5-xmqv-rm74"},{"rule_id":"osv/GHSA-3ppc-4f35-3m26","severity":"high","message":"minimatch@5.1.6 (npm) is affected by GHSA-3ppc-4f35-3m26","path":"diannex-vscode-extension/package-lock.json","line":null,"fingerprint":"minimatch@5.1.6 (npm):GHSA-3ppc-4f35-3m26"},{"rule_id":"osv/GHSA-7r86-cg39-jmmj","severity":"high","message":"minimatch@5.1.6 (npm) is affected by GHSA-7r86-cg39-jmmj","path":"diannex-vscode-extension/package-lock.json","line":null,"fingerprint":"minimatch@5.1.6 (npm):GHSA-7r86-cg39-jmmj"},{"rule_id":"osv/GHSA-ph9p-34f9-6g65","severity":"high","message":"tmp@0.2.5 (npm) is affected by GHSA-ph9p-34f9-6g65","path":"diannex-vscode-extension/package-lock.json","line":null,"fingerprint":"tmp@0.2.5 (npm):GHSA-ph9p-34f9-6g65"},{"rule_id":"osv/GHSA-qpx9-hpmf-5gmw","severity":"high","message":"underscore@1.13.7 (npm) is affected by GHSA-qpx9-hpmf-5gmw","path":"diannex-vscode-extension/package-lock.json","line":null,"fingerprint":"underscore@1.13.7 (npm):GHSA-qpx9-hpmf-5gmw"},{"rule_id":"osv/GHSA-2m5v-pch6-74hx","severity":"high","message":"undici@7.19.1 (npm) is affected by GHSA-2m5v-pch6-74hx","path":"diannex-vscode-extension/package-lock.json","line":null,"fingerprint":"undici@7.19.1 (npm):GHSA-2m5v-pch6-74hx"},{"rule_id":"osv/GHSA-4cwx-7wf7-3272","severity":"high","message":"undici@7.19.1 (npm) is affected by GHSA-4cwx-7wf7-3272","path":"diannex-vscode-extension/package-lock.json","line":null,"fingerprint":"undici@7.19.1 (npm):GHSA-4cwx-7wf7-3272"},{"rule_id":"osv/GHSA-4w7w-5xrc-9h26","severity":"high","message":"undici@7.19.1 (npm) is affected by GHSA-4w7w-5xrc-9h26","path":"diannex-vscode-extension/package-lock.json","line":null,"fingerprint":"undici@7.19.1 (npm):GHSA-4w7w-5xrc-9h26"},{"rule_id":"osv/GHSA-f269-vfmq-vjvj","severity":"high","message":"undici@7.19.1 (npm) is affected by GHSA-f269-vfmq-vjvj","path":"diannex-vscode-extension/package-lock.json","line":null,"fingerprint":"undici@7.19.1 (npm):GHSA-f269-vfmq-vjvj"},{"rule_id":"osv/GHSA-qrxm-fqhp-jwvm","severity":"high","message":"undici@7.19.1 (npm) is affected by GHSA-qrxm-fqhp-jwvm","path":"diannex-vscode-extension/package-lock.json","line":null,"fingerprint":"undici@7.19.1 (npm):GHSA-qrxm-fqhp-jwvm"},{"rule_id":"osv/GHSA-rfgv-xxqx-mfg5","severity":"high","message":"undici@7.19.1 (npm) is affected by GHSA-rfgv-xxqx-mfg5","path":"diannex-vscode-extension/package-lock.json","line":null,"fingerprint":"undici@7.19.1 (npm):GHSA-rfgv-xxqx-mfg5"},{"rule_id":"osv/GHSA-v9p9-hfj2-hcw8","severity":"high","message":"undici@7.19.1 (npm) is affected by GHSA-v9p9-hfj2-hcw8","path":"diannex-vscode-extension/package-lock.json","line":null,"fingerprint":"undici@7.19.1 (npm):GHSA-v9p9-hfj2-hcw8"},{"rule_id":"osv/GHSA-vrm6-8vpv-qv8q","severity":"high","message":"undici@7.19.1 (npm) is affected by GHSA-vrm6-8vpv-qv8q","path":"diannex-vscode-extension/package-lock.json","line":null,"fingerprint":"undici@7.19.1 (npm):GHSA-vrm6-8vpv-qv8q"},{"rule_id":"osv/GHSA-vxpw-j846-p89q","severity":"high","message":"undici@7.19.1 (npm) is affected by GHSA-vxpw-j846-p89q","path":"diannex-vscode-extension/package-lock.json","line":null,"fingerprint":"undici@7.19.1 (npm):GHSA-vxpw-j846-p89q"},{"rule_id":"osv/GHSA-xjj6-f33q-929c","severity":"high","message":"undici@7.19.1 (npm) is affected by GHSA-xjj6-f33q-929c","path":"diannex-vscode-extension/package-lock.json","line":null,"fingerprint":"undici@7.19.1 (npm):GHSA-xjj6-f33q-929c"},{"rule_id":"osv/GHSA-w5hq-g745-h8pq","severity":"high","message":"uuid@8.3.2 (npm) is affected by GHSA-w5hq-g745-h8pq","path":"diannex-vscode-extension/package-lock.json","line":null,"fingerprint":"uuid@8.3.2 (npm):GHSA-w5hq-g745-h8pq"},{"rule_id":"osv/GHSA-f886-m6hf-6m8v","severity":"medium","message":"brace-expansion@1.1.12 (npm) is affected by GHSA-f886-m6hf-6m8v","path":"diannex-vscode-extension/package-lock.json","line":null,"fingerprint":"brace-expansion@1.1.12 (npm):GHSA-f886-m6hf-6m8v"},{"rule_id":"osv/GHSA-q2hr-2g5m-vwhr","severity":"medium","message":"brace-expansion@1.1.12 (npm) is affected by GHSA-q2hr-2g5m-vwhr","path":"diannex-vscode-extension/package-lock.json","line":null,"fingerprint":"brace-expansion@1.1.12 (npm):GHSA-q2hr-2g5m-vwhr"},{"rule_id":"osv/GHSA-f886-m6hf-6m8v","severity":"medium","message":"brace-expansion@2.0.2 (npm) is affected by GHSA-f886-m6hf-6m8v","path":"diannex-vscode-extension/package-lock.json","line":null,"fingerprint":"brace-expansion@2.0.2 (npm):GHSA-f886-m6hf-6m8v"},{"rule_id":"osv/GHSA-q2hr-2g5m-vwhr","severity":"medium","message":"brace-expansion@2.0.2 (npm) is affected by GHSA-q2hr-2g5m-vwhr","path":"diannex-vscode-extension/package-lock.json","line":null,"fingerprint":"brace-expansion@2.0.2 (npm):GHSA-q2hr-2g5m-vwhr"},{"rule_id":"osv/GHSA-253c-mchw-3w2r","severity":"medium","message":"markdown-it@12.3.2 (npm) is affected by GHSA-253c-mchw-3w2r","path":"diannex-vscode-extension/package-lock.json","line":null,"fingerprint":"markdown-it@12.3.2 (npm):GHSA-253c-mchw-3w2r"},{"rule_id":"osv/GHSA-6v5v-wf23-fmfq","severity":"medium","message":"markdown-it@12.3.2 (npm) is affected by GHSA-6v5v-wf23-fmfq","path":"diannex-vscode-extension/package-lock.json","line":null,"fingerprint":"markdown-it@12.3.2 (npm):GHSA-6v5v-wf23-fmfq"},{"rule_id":"osv/GHSA-4mjr-xmp4-gh2g","severity":"medium","message":"qs@6.14.1 (npm) is affected by GHSA-4mjr-xmp4-gh2g","path":"diannex-vscode-extension/package-lock.json","line":null,"fingerprint":"qs@6.14.1 (npm):GHSA-4mjr-xmp4-gh2g"},{"rule_id":"osv/GHSA-6pq8-jhm2-2vcw","severity":"medium","message":"qs@6.14.1 (npm) is affected by GHSA-6pq8-jhm2-2vcw","path":"diannex-vscode-extension/package-lock.json","line":null,"fingerprint":"qs@6.14.1 (npm):GHSA-6pq8-jhm2-2vcw"},{"rule_id":"osv/GHSA-q8mj-m7cp-5q26","severity":"medium","message":"qs@6.14.1 (npm) is affected by GHSA-q8mj-m7cp-5q26","path":"diannex-vscode-extension/package-lock.json","line":null,"fingerprint":"qs@6.14.1 (npm):GHSA-q8mj-m7cp-5q26"},{"rule_id":"osv/GHSA-2jfj-6hjv-fm6j","severity":"medium","message":"undici@7.19.1 (npm) is affected by GHSA-2jfj-6hjv-fm6j","path":"diannex-vscode-extension/package-lock.json","line":null,"fingerprint":"undici@7.19.1 (npm):GHSA-2jfj-6hjv-fm6j"},{"rule_id":"osv/GHSA-2mjp-6q6p-2qxm","severity":"medium","message":"undici@7.19.1 (npm) is affected by GHSA-2mjp-6q6p-2qxm","path":"diannex-vscode-extension/package-lock.json","line":null,"fingerprint":"undici@7.19.1 (npm):GHSA-2mjp-6q6p-2qxm"},{"rule_id":"osv/GHSA-3xpg-4rpp-hhhm","severity":"medium","message":"undici@7.19.1 (npm) is affected by GHSA-3xpg-4rpp-hhhm","path":"diannex-vscode-extension/package-lock.json","line":null,"fingerprint":"undici@7.19.1 (npm):GHSA-3xpg-4rpp-hhhm"},{"rule_id":"osv/GHSA-4992-7rv2-5pvq","severity":"medium","message":"undici@7.19.1 (npm) is affected by GHSA-4992-7rv2-5pvq","path":"diannex-vscode-extension/package-lock.json","line":null,"fingerprint":"undici@7.19.1 (npm):GHSA-4992-7rv2-5pvq"},{"rule_id":"osv/GHSA-4qv8-2p9j-2685","severity":"medium","message":"undici@7.19.1 (npm) is affected by GHSA-4qv8-2p9j-2685","path":"diannex-vscode-extension/package-lock.json","line":null,"fingerprint":"undici@7.19.1 (npm):GHSA-4qv8-2p9j-2685"},{"rule_id":"osv/GHSA-55wc-3pg8-jfw6","severity":"medium","message":"undici@7.19.1 (npm) is affected by GHSA-55wc-3pg8-jfw6","path":"diannex-vscode-extension/package-lock.json","line":null,"fingerprint":"undici@7.19.1 (npm):GHSA-55wc-3pg8-jfw6"},{"rule_id":"osv/GHSA-8xcm-r25x-g524","severity":"medium","message":"undici@7.19.1 (npm) is affected by GHSA-8xcm-r25x-g524","path":"diannex-vscode-extension/package-lock.json","line":null,"fingerprint":"undici@7.19.1 (npm):GHSA-8xcm-r25x-g524"},{"rule_id":"osv/GHSA-9fm3-97px-rjf6","severity":"medium","message":"undici@7.19.1 (npm) is affected by GHSA-9fm3-97px-rjf6","path":"diannex-vscode-extension/package-lock.json","line":null,"fingerprint":"undici@7.19.1 (npm):GHSA-9fm3-97px-rjf6"},{"rule_id":"osv/GHSA-f72v-6w45-q472","severity":"medium","message":"undici@7.19.1 (npm) is affected by GHSA-f72v-6w45-q472","path":"diannex-vscode-extension/package-lock.json","line":null,"fingerprint":"undici@7.19.1 (npm):GHSA-f72v-6w45-q472"},{"rule_id":"osv/GHSA-jr45-8vmc-qm54","severity":"medium","message":"undici@7.19.1 (npm) is affected by GHSA-jr45-8vmc-qm54","path":"diannex-vscode-extension/package-lock.json","line":null,"fingerprint":"undici@7.19.1 (npm):GHSA-jr45-8vmc-qm54"},{"rule_id":"osv/GHSA-m8rv-5g2x-5cg5","severity":"medium","message":"undici@7.19.1 (npm) is affected by GHSA-m8rv-5g2x-5cg5","path":"diannex-vscode-extension/package-lock.json","line":null,"fingerprint":"undici@7.19.1 (npm):GHSA-m8rv-5g2x-5cg5"},{"rule_id":"osv/GHSA-p88m-4jfj-68fv","severity":"medium","message":"undici@7.19.1 (npm) is affected by GHSA-p88m-4jfj-68fv","path":"diannex-vscode-extension/package-lock.json","line":null,"fingerprint":"undici@7.19.1 (npm):GHSA-p88m-4jfj-68fv"},{"rule_id":"osv/GHSA-phc3-fgpg-7m6h","severity":"medium","message":"undici@7.19.1 (npm) is affected by GHSA-phc3-fgpg-7m6h","path":"diannex-vscode-extension/package-lock.json","line":null,"fingerprint":"undici@7.19.1 (npm):GHSA-phc3-fgpg-7m6h"},{"rule_id":"osv/GHSA-pmjh-fq2x-6v4x","severity":"medium","message":"undici@7.19.1 (npm) is affected by GHSA-pmjh-fq2x-6v4x","path":"diannex-vscode-extension/package-lock.json","line":null,"fingerprint":"undici@7.19.1 (npm):GHSA-pmjh-fq2x-6v4x"},{"rule_id":"osv/GHSA-pr7r-676h-xcf6","severity":"medium","message":"undici@7.19.1 (npm) is affected by GHSA-pr7r-676h-xcf6","path":"diannex-vscode-extension/package-lock.json","line":null,"fingerprint":"undici@7.19.1 (npm):GHSA-pr7r-676h-xcf6"},{"rule_id":"osv/GHSA-rx4f-c7p8-82vq","severity":"medium","message":"undici@7.19.1 (npm) is affected by GHSA-rx4f-c7p8-82vq","path":"diannex-vscode-extension/package-lock.json","line":null,"fingerprint":"undici@7.19.1 (npm):GHSA-rx4f-c7p8-82vq"},{"rule_id":"osv/GHSA-v3r7-h72x-cjcm","severity":"medium","message":"undici@7.19.1 (npm) is affected by GHSA-v3r7-h72x-cjcm","path":"diannex-vscode-extension/package-lock.json","line":null,"fingerprint":"undici@7.19.1 (npm):GHSA-v3r7-h72x-cjcm"},{"rule_id":"osv/GHSA-vfgh-jcmw-g37q","severity":"low","message":"markdown-it@12.3.2 (npm) is affected by GHSA-vfgh-jcmw-g37q","path":"diannex-vscode-extension/package-lock.json","line":null,"fingerprint":"markdown-it@12.3.2 (npm):GHSA-vfgh-jcmw-g37q"},{"rule_id":"osv/GHSA-w7fw-mjwx-w883","severity":"low","message":"qs@6.14.1 (npm) is affected by GHSA-w7fw-mjwx-w883","path":"diannex-vscode-extension/package-lock.json","line":null,"fingerprint":"qs@6.14.1 (npm):GHSA-w7fw-mjwx-w883"},{"rule_id":"osv/GHSA-2gqq-gqf2-x968","severity":"low","message":"undici@7.19.1 (npm) is affected by GHSA-2gqq-gqf2-x968","path":"diannex-vscode-extension/package-lock.json","line":null,"fingerprint":"undici@7.19.1 (npm):GHSA-2gqq-gqf2-x968"},{"rule_id":"osv/GHSA-35p6-xmwp-9g52","severity":"low","message":"undici@7.19.1 (npm) is affected by GHSA-35p6-xmwp-9g52","path":"diannex-vscode-extension/package-lock.json","line":null,"fingerprint":"undici@7.19.1 (npm):GHSA-35p6-xmwp-9g52"},{"rule_id":"osv/GHSA-8436-99hf-9mmv","severity":"low","message":"undici@7.19.1 (npm) is affected by GHSA-8436-99hf-9mmv","path":"diannex-vscode-extension/package-lock.json","line":null,"fingerprint":"undici@7.19.1 (npm):GHSA-8436-99hf-9mmv"},{"rule_id":"osv/GHSA-g8m3-5g58-fq7m","severity":"low","message":"undici@7.19.1 (npm) is affected by GHSA-g8m3-5g58-fq7m","path":"diannex-vscode-extension/package-lock.json","line":null,"fingerprint":"undici@7.19.1 (npm):GHSA-g8m3-5g58-fq7m"},{"rule_id":"osv/GHSA-r53p-7pc4-xj5r","severity":"low","message":"undici@7.19.1 (npm) is affected by GHSA-r53p-7pc4-xj5r","path":"diannex-vscode-extension/package-lock.json","line":null,"fingerprint":"undici@7.19.1 (npm):GHSA-r53p-7pc4-xj5r"}],"evidence":[],"data":{"ecosystems":["npm"]},"error":null},{"analyzer":"sec-actions","pillar":"security","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-posture","pillar":"security","status":"ok","tool_version":null,"metrics":{"check:security_policy":0.0,"check:dependency_updates":0.0,"check:signed_commits":0.0,"check:lockfiles":1.0,"signed_commit_share":0.0,"unpinned_manifests":0.0},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-distribution","pillar":"security","status":"ok","tool_version":null,"metrics":{"signals":0.0,"binary_assets":0.0,"suspicious":0.0},"findings":[],"evidence":[],"data":{"signals":[],"suspicious":false,"unusual_traction":false,"metadata":true},"error":null},{"analyzer":"qual-complexity","pillar":"quality","status":"ok","tool_version":"lizard 1.25.1","metrics":{"functions":78.0,"function_nloc":881.0,"mean_ccn":3.69,"p90_ccn":13.0,"complex_functions":0.0,"long_functions":0.0,"many_param_functions":0.0,"risky_nloc_share":0.0},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"qual-duplication","pillar":"quality","status":"ok","tool_version":"repotrust-dup-w6","metrics":{"compared_lines":810.0,"duplicated_lines":405.0,"duplicated_share":0.5,"files":6.0},"findings":[],"evidence":[{"kind":"duplicate-code","description":"6+ duplicated lines: diannex-language-server/src/server.ts:54 and diannex-vscode-extension/server/server.js:26","ref":"diannex-language-server/src/server.ts","url":"https://github.com/Animeliqite/Diannex-VSCode/blob/dd5e45c8a8b697c008850cabcee2026218fea5e3/diannex-language-server/src/server.ts#L54","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: diannex-vscode-extension/server/server.js:344 and diannex-vscode-extension/server/server.js:374","ref":"diannex-vscode-extension/server/server.js","url":"https://github.com/Animeliqite/Diannex-VSCode/blob/dd5e45c8a8b697c008850cabcee2026218fea5e3/diannex-vscode-extension/server/server.js#L344","weight":0.3}],"data":{},"error":null},{"analyzer":"qual-lint","pillar":"quality","status":"ok","tool_version":"opengrep 1.33.1; rules f1d2b562b414","metrics":{"findings":1.0,"weighted_findings":1.0,"scanned_lines":1132.0,"category:best-practice":1.0},"findings":[{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"diannex-vscode-extension/src/extension.ts","line":24,"fingerprint":"javascript.lang.best-practice.lazy-load-module:diannex-vscode-extension/src/extension.ts:24"}],"evidence":[],"data":{},"error":null},{"analyzer":"qual-testing","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:has_tests":0.0,"check:test_ratio":0.0,"check:ci_present":0.0,"check:ci_runs_tests":0.0,"check:ci_runs_lint":0.0,"check:tests_cochange":0.0,"test_lines":0.0,"source_lines":1132.0,"test_ratio":0.0,"ci_files":0.0,"cochange_share":0.0,"cochange_commits":2.0},"findings":[],"evidence":[],"data":{"test_commands":[],"lint_commands":[]},"error":null},{"analyzer":"qual-docs","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:readme":1.0,"check:license":1.0,"check:contributing":0.0,"check:changelog":0.0,"readme_lines":121.0},"findings":[],"evidence":[{"kind":"docs","description":"README.md","ref":"README.md","url":null,"weight":0.0},{"kind":"docs","description":"LICENSE","ref":"LICENSE","url":null,"weight":0.0}],"data":{},"error":null},{"analyzer":"qual-type-safety","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:strict_config":1.0,"check:low_escape_density":1.0,"escapes":3.0,"escapes_per_kloc":3.0},"findings":[],"evidence":[{"kind":"typing","description":"TypeScript strict type checking: diannex-language-server/tsconfig.json","ref":"diannex-language-server/tsconfig.json","url":null,"weight":0.0}],"data":{},"error":null}],"flags":[]}