{"schema_version":"2","scorer_version":"0.1.0","scoring_version":"prov-5+qual-2+sec-2","generated_at":"2026-11-14T15:41:01.030970Z","repo":{"ref":{"host":"github.com","owner":"Freika","name":"dawarich"},"default_branch":"master","clone_url":"https://github.com/Freika/dawarich.git","html_url":"https://github.com/Freika/dawarich","description":"Your favorite self-hostable alternative to Google Timeline (Google Location History)","stars":10951,"forks":422,"is_fork":false,"is_archived":false,"is_private":false,"size_kb":141787,"primary_language":"Ruby","license_spdx":"AGPL-3.0","created_at":"2024-03-24T19:46:00Z","pushed_at":"2026-11-14T10:22:31Z","security_policy_url":null,"distribution":{"owner_created_at":"2013-03-01T13:48:52Z","owner_type":"User","release_assets":[{"name":"docker-compose.yml","size":4192,"download_count":177,"release_tag":"1.22.0","url":"https://github.com/Freika/dawarich/releases/download/1.22.0/docker-compose.yml"},{"name":"docker-compose.yml","size":4192,"download_count":80,"release_tag":"1.21.0","url":"https://github.com/Freika/dawarich/releases/download/1.21.0/docker-compose.yml"},{"name":"docker-compose.yml","size":4192,"download_count":77,"release_tag":"1.20.1","url":"https://github.com/Freika/dawarich/releases/download/1.20.1/docker-compose.yml"},{"name":"docker-compose.yml","size":4192,"download_count":76,"release_tag":"1.20.0","url":"https://github.com/Freika/dawarich/releases/download/1.20.0/docker-compose.yml"},{"name":"docker-compose.yml","size":4192,"download_count":94,"release_tag":"1.19.0","url":"https://github.com/Freika/dawarich/releases/download/1.19.0/docker-compose.yml"},{"name":"docker-compose.yml","size":4192,"download_count":52,"release_tag":"1.18.1","url":"https://github.com/Freika/dawarich/releases/download/1.18.1/docker-compose.yml"},{"name":"docker-compose.yml","size":4192,"download_count":70,"release_tag":"1.18.0","url":"https://github.com/Freika/dawarich/releases/download/1.18.0/docker-compose.yml"},{"name":"docker-compose.yml","size":4194,"download_count":86,"release_tag":"1.17.0","url":"https://github.com/Freika/dawarich/releases/download/1.17.0/docker-compose.yml"},{"name":"docker-compose.yml","size":6531,"download_count":106,"release_tag":"1.16.0","url":"https://github.com/Freika/dawarich/releases/download/1.16.0/docker-compose.yml"},{"name":"docker-compose.yml","size":6531,"download_count":174,"release_tag":"1.15.3","url":"https://github.com/Freika/dawarich/releases/download/1.15.3/docker-compose.yml"}]}},"commit_sha":"0ac68e1835cf2a091907eb55f6287714c7206a6c","profile":{"lines_by_language":{"Ruby":252061,"JavaScript":63169,"Shell":248,"SQL":98},"files_by_category":{"source":1550,"test":1526,"other":1087,"config":221,"binary":92,"vendored":23,"docs":22,"oversized":13,"generated":3},"source_lines":124535,"test_lines":191041},"pillars":{"ai_provenance":{"score":3.1,"confidence":0.95,"coverage":1.0,"label":"explicit","breakdown":{"attributed_share":0.0311,"suspected_share":0.257,"estimated_share":0.0311,"ai_artifacts":2.0,"flagged_work_units":53.0,"flagged_releases":9.0,"style_index":0.265},"summary":"Explicit AI attribution on 3% of first-party code added; an estimated 3% including velocity signals."},"quality":{"score":94.4,"confidence":0.9,"coverage":1.0,"label":"strong","breakdown":{"complexity":93.3,"duplication":82.7,"lint":94.6,"testing":100.0,"docs":100.0,"type_safety":null,"process":null},"summary":"Code quality is strong: test-to-source ratio 1.53, CI runs tests; 2% of function code in complex or long functions; 3% duplicated lines. Weakest area: duplication."},"security":{"score":50.4,"confidence":0.85,"coverage":1.0,"label":"weak","breakdown":{"secrets":69.3,"sast":63.2,"dependencies":56.7,"ci_actions":0.3,"posture":40.0,"scorecard":null},"summary":"Security posture is weak: 8 known vulnerabilities in 4 dependencies; 76 high-severity SAST findings; 28 high-severity workflow issues. Weakest area: ci actions."}},"analyzer_results":[{"analyzer":"sec-scorecard","pillar":"security","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":"no published OpenSSF Scorecard result for this repo"},{"analyzer":"sec-registry","pillar":"security","status":"ok","tool_version":null,"metrics":{"declared":8.0,"checked":8.0,"missing":0.0,"recent":0.0,"lookup_errors":0.0},"findings":[],"evidence":[],"data":{"phantom":false},"error":null},{"analyzer":"ai-attribution","pillar":"ai_provenance","status":"ok","tool_version":"signatures-v1","metrics":{"commits":4375.0,"attributed_commits":34.0,"attributed_commit_share":0.0077714285714285715,"effective_loc":577125.0,"attributed_loc":17943.0,"attributed_loc_share":0.031090318388564003,"tools_detected":2.0},"findings":[],"evidence":[{"kind":"attribution-summary","description":"Claude Code: 29 attributed commits, 17,933 lines added","ref":null,"url":null,"weight":1.0},{"kind":"attribution-summary","description":"GitHub Copilot coding agent: 5 attributed commits, 10 lines added","ref":null,"url":null,"weight":1.0},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"2532acc21b968bead74034bf805fa714b770a94d","url":"https://github.com/Freika/dawarich/commit/2532acc21b968bead74034bf805fa714b770a94d","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"89472920b4f3f58becb53738fe94ddc32fb6d0ec","url":"https://github.com/Freika/dawarich/commit/89472920b4f3f58becb53738fe94ddc32fb6d0ec","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"34acc51b4377119a9947682c699cbd00a3f4640a","url":"https://github.com/Freika/dawarich/commit/34acc51b4377119a9947682c699cbd00a3f4640a","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"49ab76461d3b9ec527a5b2f3b3ecd54f04410c23","url":"https://github.com/Freika/dawarich/commit/49ab76461d3b9ec527a5b2f3b3ecd54f04410c23","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"9c06984f716d44cb8c3415843078ef0bb0b84360","url":"https://github.com/Freika/dawarich/commit/9c06984f716d44cb8c3415843078ef0bb0b84360","weight":0.9},{"kind":"attributed-commit","description":"GitHub Copilot coding agent: trailer 'Co-authored-by: Copilot'","ref":"f048ca1c8521f17facd40ea5c5fc1616e2374099","url":"https://github.com/Freika/dawarich/commit/f048ca1c8521f17facd40ea5c5fc1616e2374099","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"77c17084402362f7e98cbb4fc88d56d18ca214ee","url":"https://github.com/Freika/dawarich/commit/77c17084402362f7e98cbb4fc88d56d18ca214ee","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-authored-by: Claude'","ref":"c366ab2da213b656cdc97fbb34304d259991c6fb","url":"https://github.com/Freika/dawarich/commit/c366ab2da213b656cdc97fbb34304d259991c6fb","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-authored-by: Claude'","ref":"ecccc50de060ede116d618e70d8a6c55e4b604de","url":"https://github.com/Freika/dawarich/commit/ecccc50de060ede116d618e70d8a6c55e4b604de","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: PR description attribution","ref":"c5bfe8215b0852ca44f84d9a73acea840d1fcbd8","url":"https://github.com/Freika/dawarich/commit/c5bfe8215b0852ca44f84d9a73acea840d1fcbd8","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: PR description attribution","ref":"e5144410473999a9496909a8d6d6736062121eb7","url":"https://github.com/Freika/dawarich/commit/e5144410473999a9496909a8d6d6736062121eb7","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: PR description attribution","ref":"96b7573d1c26627315fd558cdfb628ddf2095916","url":"https://github.com/Freika/dawarich/commit/96b7573d1c26627315fd558cdfb628ddf2095916","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: PR description attribution","ref":"b85d6e5f4f9d5ca14cc4abee35c028057465bc3c","url":"https://github.com/Freika/dawarich/commit/b85d6e5f4f9d5ca14cc4abee35c028057465bc3c","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: PR description attribution","ref":"b3b87847641e60daf6b30ac111cfb23646b5b16e","url":"https://github.com/Freika/dawarich/commit/b3b87847641e60daf6b30ac111cfb23646b5b16e","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: PR description attribution","ref":"70a904969ce7fcc01f7fbb5e078b573338992afa","url":"https://github.com/Freika/dawarich/commit/70a904969ce7fcc01f7fbb5e078b573338992afa","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: PR description attribution","ref":"a0c5733c4d019449b88a7ae4a58b785eb5d8dc57","url":"https://github.com/Freika/dawarich/commit/a0c5733c4d019449b88a7ae4a58b785eb5d8dc57","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: PR description attribution","ref":"d3759e1419ced3c5d5a73ecc22b16f3a38429b28","url":"https://github.com/Freika/dawarich/commit/d3759e1419ced3c5d5a73ecc22b16f3a38429b28","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: PR description attribution","ref":"b40b27337630ca9599804285034909e6cd4f5281","url":"https://github.com/Freika/dawarich/commit/b40b27337630ca9599804285034909e6cd4f5281","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: PR description attribution","ref":"1bae994d4a7bfa5d0a85f54f79882adc5ff73c47","url":"https://github.com/Freika/dawarich/commit/1bae994d4a7bfa5d0a85f54f79882adc5ff73c47","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: PR description attribution","ref":"02b9ebcd92f5296e34e61301436968b7ae1d8065","url":"https://github.com/Freika/dawarich/commit/02b9ebcd92f5296e34e61301436968b7ae1d8065","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: PR description attribution","ref":"c59b29e795f71d73776f0a86391f2f87df7873c2","url":"https://github.com/Freika/dawarich/commit/c59b29e795f71d73776f0a86391f2f87df7873c2","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: PR description attribution","ref":"a9d04820e5702230ce76d022fa4a91f0d84f2812","url":"https://github.com/Freika/dawarich/commit/a9d04820e5702230ce76d022fa4a91f0d84f2812","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: PR description attribution","ref":"d64dc49c8dd3fc1dd0354cac8aa9ae7ea97d2281","url":"https://github.com/Freika/dawarich/commit/d64dc49c8dd3fc1dd0354cac8aa9ae7ea97d2281","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: PR description attribution","ref":"0b0d8a7a108c4d44761bd888be5d14f412fc95c8","url":"https://github.com/Freika/dawarich/commit/0b0d8a7a108c4d44761bd888be5d14f412fc95c8","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-authored-by: Claude'","ref":"4fb78057c81cf469d27e90fe3a385d5df8636853","url":"https://github.com/Freika/dawarich/commit/4fb78057c81cf469d27e90fe3a385d5df8636853","weight":0.9}],"data":{"attributed_loc_by_commit":{"cb4dbe22e9c19a360d8d77fdaad220605031e456":0,"dc4f8f94926d797f3948c48b7a5d4484ae78fdac":1,"bfabe1a1098303a44d14b14778bf3b7c16169baa":0,"e950ab8fb870298356b5f216b4c6c400164aca08":3,"b0ff86399e8866b7e56cbb09ec93c05a4e244f8f":74,"b8483317637b75cf724fd86d42b5f9a0d836d785":0,"de75fbaac8fae1fa16783b94342b1a42520e16d6":141,"0a34795d07f1211a0c6981479cb1c2ba74056c45":278,"31ffdc8ba58dc84c616a5d7d4447d242d46f035d":904,"4fb78057c81cf469d27e90fe3a385d5df8636853":3780,"0b0d8a7a108c4d44761bd888be5d14f412fc95c8":0,"d64dc49c8dd3fc1dd0354cac8aa9ae7ea97d2281":0,"a9d04820e5702230ce76d022fa4a91f0d84f2812":11,"c59b29e795f71d73776f0a86391f2f87df7873c2":50,"02b9ebcd92f5296e34e61301436968b7ae1d8065":56,"1bae994d4a7bfa5d0a85f54f79882adc5ff73c47":0,"b40b27337630ca9599804285034909e6cd4f5281":31,"d3759e1419ced3c5d5a73ecc22b16f3a38429b28":298,"a0c5733c4d019449b88a7ae4a58b785eb5d8dc57":14,"70a904969ce7fcc01f7fbb5e078b573338992afa":101,"b3b87847641e60daf6b30ac111cfb23646b5b16e":656,"b85d6e5f4f9d5ca14cc4abee35c028057465bc3c":0,"96b7573d1c26627315fd558cdfb628ddf2095916":116,"e5144410473999a9496909a8d6d6736062121eb7":1,"c5bfe8215b0852ca44f84d9a73acea840d1fcbd8":70,"ecccc50de060ede116d618e70d8a6c55e4b604de":1653,"c366ab2da213b656cdc97fbb34304d259991c6fb":9639,"77c17084402362f7e98cbb4fc88d56d18ca214ee":36,"f048ca1c8521f17facd40ea5c5fc1616e2374099":6,"9c06984f716d44cb8c3415843078ef0bb0b84360":1,"49ab76461d3b9ec527a5b2f3b3ecd54f04410c23":0,"34acc51b4377119a9947682c699cbd00a3f4640a":0,"89472920b4f3f58becb53738fe94ddc32fb6d0ec":23,"2532acc21b968bead74034bf805fa714b770a94d":0},"tools":{"github-copilot":{"name":"GitHub Copilot coding agent","commits":5,"loc":10,"first_seen":1772156013,"last_seen":1786393153},"claude-code":{"name":"Claude Code","commits":29,"loc":17933,"first_seen":1777719228,"last_seen":1789994872}},"monthly":{"2022-04":{"loc":1199,"attributed_loc":0},"2022-08":{"loc":0,"attributed_loc":0},"2022-10":{"loc":16,"attributed_loc":0},"2022-12":{"loc":0,"attributed_loc":0},"2023-02":{"loc":163,"attributed_loc":0},"2023-05":{"loc":0,"attributed_loc":0},"2023-10":{"loc":386,"attributed_loc":0},"2023-12":{"loc":0,"attributed_loc":0},"2024-01":{"loc":35,"attributed_loc":0},"2024-03":{"loc":1680,"attributed_loc":0},"2024-04":{"loc":1397,"attributed_loc":0},"2024-05":{"loc":1376,"attributed_loc":0},"2024-06":{"loc":1269,"attributed_loc":0},"2024-07":{"loc":3500,"attributed_loc":0},"2024-08":{"loc":3329,"attributed_loc":0},"2024-09":{"loc":1804,"attributed_loc":0},"2024-10":{"loc":1615,"attributed_loc":0},"2024-11":{"loc":4461,"attributed_loc":0},"2024-12":{"loc":4290,"attributed_loc":0},"2025-01":{"loc":3652,"attributed_loc":0},"2025-02":{"loc":3168,"attributed_loc":0},"2025-03":{"loc":8416,"attributed_loc":0},"2025-04":{"loc":2913,"attributed_loc":0},"2025-05":{"loc":5536,"attributed_loc":0},"2025-06":{"loc":8681,"attributed_loc":0},"2025-07":{"loc":17542,"attributed_loc":0},"2025-08":{"loc":10175,"attributed_loc":0},"2025-09":{"loc":18265,"attributed_loc":0},"2025-10":{"loc":5807,"attributed_loc":0},"2025-11":{"loc":18793,"attributed_loc":0},"2025-12":{"loc":42409,"attributed_loc":0},"2026-01":{"loc":44797,"attributed_loc":0},"2026-02":{"loc":56590,"attributed_loc":4},"2026-03":{"loc":22335,"attributed_loc":0},"2026-04":{"loc":22963,"attributed_loc":0},"2026-05":{"loc":30482,"attributed_loc":1397},"2026-06":{"loc":35003,"attributed_loc":16476},"2026-07":{"loc":24729,"attributed_loc":36},"2026-08":{"loc":50672,"attributed_loc":7},"2026-09":{"loc":53251,"attributed_loc":23},"2026-10":{"loc":59006,"attributed_loc":0},"2026-11":{"loc":5420,"attributed_loc":0}}},"error":null},{"analyzer":"ai-artifacts","pillar":"ai_provenance","status":"ok","tool_version":"signatures-v1","metrics":{"artifacts":2.0,"workflow_agents":0.0,"tools_configured":2.0,"earliest_adoption":1756582765.0},"findings":[],"evidence":[{"kind":"ai-artifact","description":"CLAUDE.md (claude-code configuration)","ref":"CLAUDE.md","url":"https://github.com/Freika/dawarich/blob/0ac68e1835cf2a091907eb55f6287714c7206a6c/CLAUDE.md","weight":0.5},{"kind":"ai-artifact","description":"AGENTS.md (generic-agent configuration)","ref":"AGENTS.md","url":"https://github.com/Freika/dawarich/blob/0ac68e1835cf2a091907eb55f6287714c7206a6c/AGENTS.md","weight":0.5}],"data":{"artifacts":[{"tool":"claude-code","path":"CLAUDE.md","added_at":1756582765},{"tool":"generic-agent","path":"AGENTS.md","added_at":1768157463}],"workflows":[],"tools":["claude-code","generic-agent"]},"error":null},{"analyzer":"ai-velocity","pillar":"ai_provenance","status":"ok","tool_version":"prov-5","metrics":{"work_units":1208.0,"flagged_units":53.0,"pre_ai_era_bursts":0.0,"pre_ai_era_measured_loc":0.0,"pre_ai_era_burst_loc":0.0,"measured_loc":466272.0,"flagged_loc":148298.0,"flagged_loc_share":0.3180504083453435,"max_loc_per_hour":5899.43791517629,"median_loc_per_hour":129.46159868764448,"pr_timed_units":102.0,"excluded_import_loc":105272.0},"findings":[],"evidence":[{"kind":"velocity-burst","description":"3,207 lines of first-party code in ~0.5h (5,899 lines/hour, 10 commit session)","ref":"40d74728643cc5a894cccfcc59c8986441e0e87a","url":"https://github.com/Freika/dawarich/commit/40d74728643cc5a894cccfcc59c8986441e0e87a","weight":0.6},{"kind":"velocity-burst","description":"4,711 lines of first-party code in ~1.4h (3,386 lines/hour, 8 commit session)","ref":"0f221568bc00528d4cf32e9b9a9f163106be6808","url":"https://github.com/Freika/dawarich/commit/0f221568bc00528d4cf32e9b9a9f163106be6808","weight":0.6},{"kind":"velocity-burst","description":"3,222 lines of first-party code in ~1.0h (3,255 lines/hour, 2 commit session)","ref":"f9cc45d91180421e2eb6abcc542b810d0b855794","url":"https://github.com/Freika/dawarich/commit/f9cc45d91180421e2eb6abcc542b810d0b855794","weight":0.6},{"kind":"velocity-burst","description":"1,524 lines of first-party code in ~0.5h (3,048 lines/hour, 2 commit session)","ref":"e24656b08a8a2ca1f30603bfe6e8d1f32e4ab3e5","url":"https://github.com/Freika/dawarich/commit/e24656b08a8a2ca1f30603bfe6e8d1f32e4ab3e5","weight":0.6},{"kind":"velocity-burst","description":"1,216 lines of first-party code in ~0.5h (2,432 lines/hour, 1 commit session)","ref":"e2f06d343eb85ad78c4dfe858368d986983f5fdc","url":"https://github.com/Freika/dawarich/commit/e2f06d343eb85ad78c4dfe858368d986983f5fdc","weight":0.6},{"kind":"velocity-burst","description":"3,437 lines of first-party code in ~1.6h (2,176 lines/hour, 3 commit session)","ref":"8db8092bfbba8110484908c42c245e9a666383ed","url":"https://github.com/Freika/dawarich/commit/8db8092bfbba8110484908c42c245e9a666383ed","weight":0.6},{"kind":"velocity-burst","description":"1,019 lines of first-party code in ~0.5h (2,038 lines/hour, 4 commit session)","ref":"2ea81571d9a67a7740007cb2dca13374bbf42166","url":"https://github.com/Freika/dawarich/commit/2ea81571d9a67a7740007cb2dca13374bbf42166","weight":0.6},{"kind":"velocity-burst","description":"1,010 lines of first-party code in ~0.5h (2,020 lines/hour, 2 commit session)","ref":"db3425186c956d75d53e5ec119fd37f802885ee1","url":"https://github.com/Freika/dawarich/commit/db3425186c956d75d53e5ec119fd37f802885ee1","weight":0.6},{"kind":"velocity-burst","description":"2,640 lines of first-party code in ~1.8h (1,496 lines/hour, 1 commit session)","ref":"1709aa612d3df71214668dbc68fb655ab6839460","url":"https://github.com/Freika/dawarich/commit/1709aa612d3df71214668dbc68fb655ab6839460","weight":0.4489371752479924},{"kind":"velocity-burst","description":"5,557 lines of first-party code in ~3.7h (1,490 lines/hour, 40 commit session)","ref":"ecb95550a14f16da53bd540554b2170cf3271ed0","url":"https://github.com/Freika/dawarich/commit/ecb95550a14f16da53bd540554b2170cf3271ed0","weight":0.4468771407297095},{"kind":"velocity-burst","description":"7,133 lines of first-party code in ~5.0h (1,432 lines/hour, 16 commit session)","ref":"a2e8d5c208f819ea4cee8132c762881b13cfdb0f","url":"https://github.com/Freika/dawarich/commit/a2e8d5c208f819ea4cee8132c762881b13cfdb0f","weight":0.4297467365837331},{"kind":"velocity-burst","description":"6,457 lines of first-party code in ~4.6h (1,412 lines/hour, 34 commit session)","ref":"8615a35de285c1a365f930a6088535799fd336b5","url":"https://github.com/Freika/dawarich/commit/8615a35de285c1a365f930a6088535799fd336b5","weight":0.42346125819771674},{"kind":"velocity-burst","description":"2,911 lines of first-party code in ~2.2h (1,325 lines/hour, 2 commit session)","ref":"b96653dcd4d2f3ab452471f6ade380611c440787","url":"https://github.com/Freika/dawarich/commit/b96653dcd4d2f3ab452471f6ade380611c440787","weight":0.3976071835082838},{"kind":"velocity-burst","description":"5,293 lines of first-party code in ~4.0h (1,319 lines/hour, 4 commit session)","ref":"7af77f1f8b80d2efb09e9ee916672e8abd1a1876","url":"https://github.com/Freika/dawarich/commit/7af77f1f8b80d2efb09e9ee916672e8abd1a1876","weight":0.3958205234732031},{"kind":"velocity-burst","description":"2,007 lines of first-party code in ~1.5h (1,304 lines/hour, 11 commit session)","ref":"4c319923e3d50cc1cc2a38fe484ae44ee577cb63","url":"https://github.com/Freika/dawarich/commit/4c319923e3d50cc1cc2a38fe484ae44ee577cb63","weight":0.3911857065511641}],"data":{"flagged_loc_by_commit":{"4a859fb350e1f76f25e0f07708f88304ce4e9dbe":2384,"5ee3d43b1051824556d36ba0bab612aceeb7c8f7":171,"8ad0b20d3d29e1c9e0475e71c08e0104ee8b399a":3282,"599af37109eb61e924f36b88e181f03b4c4f429a":2973,"eec8706fbe19921cadef048c3c5cae33d8634782":1406,"050b98fb5de738022b1db8f28f5c785c2d70ea95":454,"1709aa612d3df71214668dbc68fb655ab6839460":2640,"07224723ede5ee87ed4373ada84718a3eb672179":2517,"78851c5f98d28666b34d0935f33321cc2e53e5eb":767,"e1f16c98a20621930b12ed2ba7aec81fc3970eef":764,"4eb130fbf1631f56844f4759faae797ee92f8561":5,"b96653dcd4d2f3ab452471f6ade380611c440787":2906,"4df4255623a5c35afd76c19d10b14933ba6a0705":2471,"76a89a93599c0ada836dc674a6240b9a9d58ba86":650,"7184f2da99852590be2d1afb52c6c1db49c6416f":47,"b4bf67df71088b1e3485d097523ff034a5c57721":8,"a880f256deeca05711f13b163bb8a160f36c09cf":2096,"49db5e4e82adb9c120cfc169f12e5efb303c7af1":2011,"b9b2ddbefb7d65c74dab1134c60639d8d2476b1e":2483,"5f78380fb2a49afc227a0556ad7e2903c42b2da7":215,"714b94c52b5fc18b1972eb79e19ffeec60a1e3fa":1301,"5533e8501af7733ca69144ae138a6b1768f4d6e5":254,"191d2ff4bdba2dac3ddfd98fc96d152a6e8837c5":814,"9dc4aa2c78ff074faf3021585b857c5f16d6a2d2":17,"7aec0232792ada7b1206f55d5d69f0896aa218f6":27,"539ea0bad9843467c911b43ad09029f6fd57513b":7,"2ace0f55d096ffd1672a30452431b605325a662a":58,"326873fb5133256df2ef82babd97f2dd4e8c7f7b":129,"2a45b1c7707d601922883c8a8778154139b311aa":1,"eb6db568323afd410624b73e06349fa6b9f5a218":24,"0ce9430d0b8783644e8eefaf7871a3b0048d4259":2069,"a6a1e306a934774ea250a00105b79d078b34ba65":75,"1ed9a310b36de10c73afd5f4c9ea52f538fdee83":369,"991e134689466772e4db9bd2411cf6718399fc98":2343,"1281b429522c90bfc1e79a9eddd1793654ad2f67":2,"ade8f155bcd8822a2bf6dd3bffa9cc10ce1b468f":1507,"17c141b61256d727ee34ddae58e4b3a1b207364a":314,"a7bd7e667a1b7300efad8d259d71b1568a9e3c7e":769,"7e8d97dcda3864abc940911a8cc066d6ac55614d":321,"54a940edd84a603f4e65646db45fb89deb9cda77":1411,"a5172cc1f4d734e90733b2434f5fad867bc92c9b":20,"5fab2274e5e3a676a2bf0a771f019e964c9d5f84":79,"1248265647254fdd1c9d40917f5fc18f94509e56":42,"3da60e2d2f03e079c5b0f1104283eb292be8f33a":471,"f11366e9332e9ea8fa7ed41d96f4171677ce60e5":159,"c21aefc08d0aaa5ee8e6840e638f5e7e41aba789":2,"39aa6bae1890c8a041c1aacc0eaba9f3fc01b615":66,"ee0f5f5c9322d81d4a711e78d278526c43383719":39,"90ab54553cb817744ed82596b95158428dd468dc":36,"b7dd7babeadabeb2fc26b3e8b3d5d21f3d74984a":50,"410e46744328c4adfb0220002bdec35212631718":15,"46355a56d8275326fdc6ab4853a5bdd8bfe3ed09":82,"38ded8dd5e9a9fa1bf2086e153711a19a3788f6e":109,"479b1b901fa63f8f61b964bc0caa590cf8847a64":34,"fbfa47f5b07a7efd0c51b283c1e254a6ae100a73":110,"f689946c547d702eea00a0a34e532d010a479d00":122,"d415815445ed86ef26e85636df5172525447a62d":383,"780f910d2e34ca0d58fb6b5946ebaab2e5df3a49":2895,"32857f7b8cd99469ceb745dd50e1eec307956bd1":49,"e31904fb99a8b7b6390ba39c179fdca287e60dd0":67,"4e58aa832bc67594d4aa66439344aa9fba7f7845":47,"0457cb22930d4ccb7564964859bc1e8383c59add":1,"8ab83f748961e7293e2da223888ffef9b9906af5":104,"4a1366f32686ddf67fffb11c49d20190aa33d660":54,"4593608edc39f4779949ee5606709a5c1a58b9db":16,"d09343288519b0a7394acf801f32892f18b1df30":11,"8896f8eaa534836b2b42f819a09aa956d98f5f75":58,"8b87bf8ef3a88acc0f29849a143d55ee5242c10c":33,"74ce2e11d70edf89fd70d555beac21f34fc8bcf6":54,"0a79f6fb875ddfeeafe9a617a279d0317ceb603d":109,"a80489b5bba84311bbad55300835656283cc7507":69,"9ae6c6c160d1e42da08705f1aeb2e40f0221762f":421,"65881b93b5c5b55a6b998512a0086b8a3d78586f":547,"b415ee3ab7f95ac3bcab39a5abe6add6f01c0ab5":107,"c95e9fd22969e96209f1d584a53b308ea078371c":46,"7eb02f5ca1ed4f8fe07861ccd871834e4c631d89":40,"8615a35de285c1a365f930a6088535799fd336b5":51,"a9baf2ba5dac4c97ce2d38369eca0e71c9783343":136,"baa24c1b78d5dcbe54cafe4fa1d695d6d2b7e3be":68,"8fa0389b392c709b0eb0804873c277876e47ab69":126,"b21c9f514f48dc0f656a53ea79fd45323c708737":42,"613b8aa93b6cbd4a76dbb2843888c425b50ea45e":269,"86919627ed424bc0a2272149d9dbf7e56c082310":206,"ea7e60bf6fce6aa9b488f7a6645ba0ab55aeffca":83,"4e05868e3f8f86003cdf04e654d26fd310142532":132,"b39a9877a24931033684fec7a303c94ba39851cc":106,"3b1942fad651163d21673d8576323569c3533ca6":371,"409765545cc94e95b2dbbc323b6ec84849236904":60,"0d0c578ede6a7aed3ee2c4dc391d136df430ab63":90,"704f8c3fc5fe6091bd3c41427b3e5c86ab7c240c":126,"90ca80e4c62ade2a9f926d8b9fa371e02074e84e":105,"100ee7b85973a72e6f6689fd15d4843b05bfa94b":51,"2c601b9c0bd49d5bfdb9433132cc5c9d59247eb7":90,"7c2e1be3605578e22299105bf836eed51bd7b720":71,"e716e014d13bbd094586b347512f69f155084783":143,"95c227bedee1d76bbc4f7f431bcfb876008b87ee":5,"1028d9202d0ad9268f2be81600bba67399c13654":40,"aabd859fa720db3136b8e510cb34ed64fb26e990":79,"812201d213bd0ccfee44cd6b8803b3d8b53af4f4":1,"c60107725f9bfbd9695bc29a0d2db3e4ff9ab9e9":974,"cc7af6f18d3836afed27e0ebfd431fe5bf0c9643":2,"dc10d653022702ef286a023999277fb6a91b27dc":1,"825cb3d0a50fc637b9c91d9d00d03e02e13552b8":129,"48a8ceba29bf3ca23adbc1796c4ad94b3ecb67c7":55,"497b50bb0f720b4f363ca5b61e2b002693d4c418":81,"d8b7c2f72dd3f87bcf421d745c7d3ad5743ec31b":116,"2d50f09ad7201d4a4672d9c882a2203b5a2dbe3c":169,"b3c6f9c3aad5bc04d34584068c2c8a616b312c3a":67,"2dc091b03ac740d8e33f794bef70fd7f512701a6":304,"78a4ba870fc816314e49cbd38fb0eea2e97b92ec":215,"1f0561ce38d638556aa11cb54c89ce008b2d266b":71,"e3e7f1e15f85da7af1ff6971577421734e107164":63,"99f5c02daedbca23eff50b3285dbfc86c2a499c9":58,"3ba20094c60c76da12a6d873f30da63ce8fdc308":49,"2d023b9cf0455cc1e8acda0c55a99079a8b20b3e":52,"db3425186c956d75d53e5ec119fd37f802885ee1":505,"df97a95a33893d0aa0250eb17dab5679ed5defb0":505,"7dd39e01edaf5bbc0efa8b5e43a333f47f351d55":834,"0bc6e69193d122db46002b889b590b794c8ce42b":105,"d9bda64b3dfa9e77d13ba07429b2b60570cceb97":26,"2ea81571d9a67a7740007cb2dca13374bbf42166":54,"e2f06d343eb85ad78c4dfe858368d986983f5fdc":1216,"5548b6c49df677721c8114a1397f785c684dc9bd":1520,"e24656b08a8a2ca1f30603bfe6e8d1f32e4ab3e5":4,"93b736c1ecb2f1a1e56cf872794f15a37802e2e6":344,"1c939e33f1359e73291dccccf26be326f287c71f":1095,"c6136b955117a3d5b28320d771b955115a10e802":1229,"8852de5d438453faac2216fb71defe61f045a3fe":227,"046c182cb9e038f545eae55332fd436e9f158f89":50,"4ceaa38857db8a0199730070b0bd0f6d18adefd2":74,"1e94e53ac395e590dda2007355c45274c13d83d7":22,"9a9690bae841adbc2b15df56c1ff570f15fc1606":125,"4cc4beb4641e693195419558c374087bb8f38c42":35,"40d74728643cc5a894cccfcc59c8986441e0e87a":6,"a0c2200d6429f0467bb329522e780bdccc6b9b95":76,"2da756eebd0b5b780f125804c5224f7d8e756868":407,"bef01d751ed84a5e8a523d7de6af0e92c5a214ab":85,"d14247a86d3ff3eeb3ef758ad71eb263563311ed":89,"e787d96a0a35f7893adf239d7c1d3e3f2c5be833":130,"5a6418f665db36efb72d28ca96ffdfdf5489c777":11,"fbc19345ce9c613c86ed1691419154c4a39d896e":188,"94bece157d64484ca74cf7545d55d944039d6833":14,"731283ebe6c19c3c84bcb83ece1f1e5ce79a38fe":76,"822503cf54bbc11f1105ce046e6b0c8ded123d5e":1,"a420a684f38f04120817479c19647578234d0868":117,"c1e371e5167e38f665b581663e73197dbaa05dfa":53,"5fbe430bbcd4a5e7263b5e65f1fc9f2e72ac2cbc":19,"b074c6b4be4df0ef7ccfe81632ce4c885c038079":16,"ba93eb45776db2de58b7ba7c86e3be6fed98f06d":10,"32cbce40e6d6ba83073d7d4032db6a56fe22dfca":56,"8b302b89df85cecf08fed16a4d5a26d172d46459":7,"831cadeab53aa8a3bbe67d464e090dc5774d8395":2461,"7f13506f991c177cfa11b4fd3c0807fd72fc39df":346,"d947f6569d66163b43fc13fbd17e1d2ad991f5c4":1698,"b1de9ea6ad02c4f5183f628c060925b336318699":3169,"7af77f1f8b80d2efb09e9ee916672e8abd1a1876":80,"c3af17c455c62263da1efd6ed1fd224095fbcf5d":3093,"f9cc45d91180421e2eb6abcc542b810d0b855794":129,"f5ecd6347a83b82d26a95b1a02de55ea384b2c6a":357,"24c6810de277c25748cb2b6c2e292d42ab0d48fa":356,"210b2ef601ef3ac2ed08cd3b51552d0e0478aa82":104,"502ff67e9dff425ae5ca1e04abb2c1babcee8d47":296,"9165da7250fa18a043be2e4cf7ba26083c5ed753":144,"22ccba00445b58afa42a5bd543a725be9ef6ee97":132,"755eb8da7c7c5f52983659d8b8de5cb38ffc8cac":384,"4365f8f7cc875c7f1f7a5c76a7426850bedd30a3":23,"1cb62574f17037368ae109bcd9c1b416c78c8a52":26,"8537da7854dc2e10f3fbf4eecae71bc842ffc615":14,"4c319923e3d50cc1cc2a38fe484ae44ee577cb63":171,"30e768e0da4f92063d099bca5a9ffff470f4c0b6":554,"a6efcf7e155f54b073771bd6c6443f2fe1717c2b":21,"e2f9c25ea030c86d956bd4c9a98330d1e2111309":347,"f6f003334390ca217817f5493f21b1b72485083d":216,"02272f14303db27171ba54d32a493787050e01ec":423,"885d9c5aa5b1cb7c8458ed895c6548b4fdad8a14":613,"948441219057fbe218a02af9ec102074bbc56f5e":218,"671745771e38a6f6d62362d63f3cb1ae27780df4":376,"540475db687575d55ca71b2c32b17b38c7f71bee":138,"1572f03cf4b6a18d284b4d946b7ee1053ceada6a":113,"8c04e4d4799b0491c0b32f98590ce05ca2d3c3d1":443,"1b77f9e81c0fc22e726e91afd362b3838dc730d8":79,"95d006deebec16f77232aad80cd1f18590207deb":61,"e904f03578f3fb0c07b4b584c902d6c22a77dc0b":2256,"176856b37288e3abf7f3b5568434499ea76180bb":1,"cda692bec586ea7538a2d6a944c80c96220f97bb":68,"d5ebd8db19d1cac663e4132abaf0ea2a9f356e65":195,"c7136c252b2e4933ef418530d4a43e66daf6b5de":230,"e213278e4bfb4793473310c21da8a0b0f6a732ce":112,"8bdcf9ef07fda23dd5c08cc62c478059d0c96b83":3452,"9e7a05b6c5895ebddf22a709129fc0f04f3236f2":44,"b2ec0a4690caf2ca552c0a97ba45957addd89d61":277,"9fe71dbf4f8bf724ea46ce272d64ae339462bea9":468,"82a7120c5ae3f20c79cfc7aaf8bf039190a596e2":323,"f6a911ad0430beadf213ac8df157ba2584000b1e":246,"ef1fe53a431ab7f9a6d293145d45a7ec9c6f79f5":104,"2d64d8c97e27f6dbcfca05df664964970de7d686":142,"1877f1ae75bde94e18e51a8e35788b78d483dfdb":98,"b8f88dfa992665dfbe1dd0e6de1bcb3cfb77ed6a":36,"d6d6bae3688d9f924cee27405c78f03379bb0c5e":62,"70f186fb7bd6dcc5b06df63b9871bfb14afd1414":10,"a56c7e57127140a83e77e57cc51b7c0b3f527048":63,"e99e7903ca823e4a90367a700f5436be4b1757c2":57,"2fbc80e966fbae62580bb4f613e0f03f4c0d18f2":13,"a2f99d35417e114a9d74f172c8eae176b45cc6ba":6,"9654b92910478aa9d673b5a06199ce20c1bc41f9":50,"7f3db47a266c8b707796787885b75205e02923a3":94,"d9c379929f3c9d8199011e38c635292bb444cdeb":607,"bfc4bbc6d16fdcef0776175372f3dad0a95c293e":290,"7765a18548292ef6349958083c8128b7543f688e":28,"963690f8f35411e192613264e5aeeebd16f8932c":203,"8fd78a1d7b6277ccdfda7f44cb91a415699c510d":99,"e388d13f7abf355013fd0360d5f52b8184638fc0":14,"05e87809a1e293e3e15fe16486d25f4c1e1ffcef":53,"24c51f874b3fb2b43e64d10f5562e6a634cc10fd":33,"efffe57551ce34eb33b933f3e7a335d5812cff73":1,"33d44be15219f7f06250d9eac2f4464d20a11311":114,"b1a06a9ad2f84b05d301ffb0a953a7d75d462a1b":2203,"596bc8884e65527b2bc4df73c67fc2539330814c":731,"83b216cf8f91e970f80112e455c36ae2ed2ba8f2":50,"49fccf873b342312d33c4dc7846c545b5fbca932":66,"463a79fa69fc476c147b95c49c5f230bb99ebe89":61,"94ab7e8d03b37b9271187ac049d0708ab7d2f5b5":85,"bcffebcb410a19aff77d2760ab8aec883b5b9189":229,"06b00fb36ad5e627152d45f69c9637dce66ffe4d":79,"ed714a8805c48b8ba4446b2b167451fffbae34e6":105,"847090ed3ab9184acec29f6e7e71489f887147b3":71,"fc9ef610658fcab1bd1fb1f71a6394e87f03052c":212,"1dbc4014c7aa85bc22016d53e399484f2ac64736":396,"4c4faf2662f0cd3e7dbe3d7e701b73a0d9221535":11,"ae85828710411b6006371f732c2d639e6d123355":29,"afd569c9e8a51cd15e47bdd7a56b04c315c5e521":8,"4ebec49cc355ef33c9ca1d2b97a2abcffe8f211c":3,"d38c7c877f713a4f59347fa7ce4a2d520c90b53b":52,"87e3e940a32d7b6c2ef6794ccf17d524de52b271":244,"8e0418db1f026df34fbe245a81ea43d06290ddf5":854,"c10b5def39ec8e9c1ba25609dc1bd9f1f5508cb0":420,"99ea82b7dad4c65182722b14eb9f327202d0a413":3,"227c5d63fa001c8aed87b0b35a1d758273c918e7":19,"74aa7043bb58705b9c3cf2509c7e16b2f066f293":38,"5e864fcd1fc6d56c5dce0e8dbf2cf71c948598cc":2386,"4e3a73aeec9d807560b67678883bf62b5c65137e":2,"6bdba23b15e895faf26dc97464aa13baf662c4e2":2,"9c07cc0e1943b5b444bb552938ec236939dfd2b9":301,"deed87af7f1e2581b8f86fe99f953e217f37ca9c":31,"187fcb9ffbdbd414f840932b6ea1ca5bd87c4899":102,"01c2b41e36d2d81de5ee9bb2cc6b24b95a9c26dd":52,"981102f2ae484f9eecc1cc4eade5e245c52fe840":488,"321effbc5c337f4706d871185878c9eeca7fc04c":470,"e6a50129f155232860a61baab45b4dc9835825d7":100,"572b9676e14f5de5fbfb63606926a65375ab2dd6":68,"260cfe02380ef43b20530e7748f8d2ff0a848c84":21,"c7c6f5b3604f8e4d44cb2be52b2972bc96ac03b8":216,"65a6092fabfb9c2838e69a05cecf757eaf8a0d43":1443,"9940f137714d57a117fa358ca6542b9085ee50cd":452,"f86548403b95372b1ccdca4e273c9c5f6bdf4481":849,"090fc6d92e48ab7e740f1d1e21f2710abf5d3a59":89,"501540cf2690eccb5ddf7ba8802fc3ea2a624c70":1158,"be7b04ffdcb14f198a70f1c51744a37156eedf07":271,"653ef1b223dfde0ce6f37e3573c96b70c60eb5a6":188,"8fc450cd4d84749f02e9e16c1ac457d654d72b3e":1564,"0f221568bc00528d4cf32e9b9a9f163106be6808":140,"990f0a9cb273595470cb4c82376c07d6b6ac62ae":117,"04d1bcd81048c6ab3b1aca06516a937da2fda4fc":777,"8db8092bfbba8110484908c42c245e9a666383ed":2543,"e4333f298a4a5dee0711b258ec9eaed43e65bc48":27,"2e43f928b4af62cd0029b6673082c5f48fc698b2":1990,"8fa641106dddc03f8a52d0165a12648942b40e87":256,"068db5d9fc9ee7e448780e6a07bacdc75248f410":76,"91ea2a0d201be8570fe54b856a25f466f8241c43":4,"51f26c6900f6b4b7ee6be28732ec5726c924cb08":206,"5e688a055672cbefb6257f0f8d520a4a0ef8c69b":181,"dc0f7c3ef0c87211c88fc38a7fccef36c6554019":64,"25115fe944f719386cc9ba179203e3ba8b59b34f":503,"2c2333a8356ef124cd3635ad54a8c3a831cc1f4f":56,"39c60e4428879b02764186651e358ccdacf574ab":44,"676378aad427299f5fd14ae3cab3c688ef4d2069":72,"90780701851ce15cc1f301b9d512ba40a7f2f54d":78,"ba6196633037112ee50c85e73054dbfb2955bf53":68,"a1c42372f24f28b649c2b7f36fea67ed32727e51":61,"fa72586d1711b69b36168a67a23d428040ebc139":12,"771c449dcd6bdb87b4d11875ed48c137cac19bf6":241,"589eae3c18150e89e06e738ff74b43e377454fa1":50,"08864ddc3946e72d9a656f0208545dc3d90fc167":22,"6fbd8e345b328eb53f78a2ab0815da518a78e99e":44,"b25e2a1ca6646b3a178095beaf914d39fd09d0ee":82,"5f70c6e0d3052592505e611c2f3a3d657721f2fd":54,"8b29a8760ae0bfca9636d59fcaed862314b1fc9b":129,"0ccf90cd7c420144a67716920d46783693a14242":22,"e57b4e966045ab521b7545bced5bb12a1066d27a":30,"06f314b4a19c0cc8dcff07a28187fa4322f39971":76,"fcc0c1f1c6e388d423c0e3fac35ec7ef571bbb99":143,"7017a4a9d9b4f117c6db3e266162cb2b18dbfd08":122,"dc592a526d1640f1feecd62aa8d58a932d7d15ea":35,"b694ada71b15861f1b95c5851070428a96677a6e":32,"5e372a59e714cc549106f43c26d1ca644d884478":38,"28439e2fa511261e6582defbb0e490d12ec10007":296,"9942375eaf25eb77f945cdca518f553401cdcfb2":35,"677ec95036dce454c44fdbb27dc37e56a997489b":167,"e7a5e29c31f2d72979903b8814b7956e54e0f916":61,"ddcc1bc356bac2c4bf4e16de89f34cc93936a61c":119,"18fc5a397cabd0f7c1957adee3614c2a9a3a459f":131,"1028f7c1b72f0b9a096d6a285b37f4a6a72a47a6":398,"af5610ccebd79e49df2dba7ee2c40456ecc81458":186,"f35786446eb94d56491564bd29212ec7d1177afd":262,"f4cde3c02cd87be2de3d05d784ab504db3bf11e8":30,"217ff3ea1ea21d7551667cfaf8950934f7349dc9":545,"f5eb1cffcd347d6cb23c042e58b3c4d7fa523ff4":478,"888148a876139194d6c24a6f10c2a2d44a117e7b":390,"b4dfb170b4aa606cc366808afcd0dd416078303b":346,"ef6a01f34ed6749751f511fea3102040b9b3ad07":94,"e091a96d1c52cbe831dd2283a6e496c8efe92d6d":238,"b85a804c74277aeef902fceeab3b9d64b8161d7d":172,"e4b8f58f734c414b8fb684abf0e90adf940be743":55,"ecb95550a14f16da53bd540554b2170cf3271ed0":99,"be5fafd466c9b27eed4161aa0d984d3786c3b4f2":290,"9189f2a7eab6c106be95ef76a15bcadd8a3781d1":124,"d400a7dab37e295ff4e3e0a6302aa9e7d82035b5":231,"608d5e7b03b8561c3a7a330c6d13911e0db3707c":303,"bd1281eb4ac883316ebdac77c62e477362d3120f":246,"7826cbc9d137acefe8b29e5a2e77f1cd39f2d2f7":94,"6d1dc7649f6ad05065d6f614adb73b351b3db2c9":225,"254ce33ecd9f38be70844b0d6c8f9a0c670c3ef6":463,"013cbdf9579c28f2243b4d8764e748e5fc51917e":263,"6b401c9e53b3472dd9efcef907a23aa6d1a735f5":194,"9406813bb8907d4dac395e6a0c069fccd8757ff8":42,"39f496c1d31d28360134ade60ea246afd1020350":20,"1a1e4085794589c116bdf5b7b52285726af0aa50":14,"f3d991d60d8068ab34bec90db855718edc7ac9e6":67,"393714a7dae92befdfc7a22b425bdf236cf2354f":24,"ed3832adf7b8124fa10f4a748bfee81035c004f7":51,"0a1a4bb67d362b80aa88fefca548311ad7e177a9":1,"5917dd359d370c6d4e5b70951422d08da62129c6":243,"2a48e57891a80cc831766dd9ae162002de4b8758":45,"c18c841858e60cd2202196e23e2af98ca5c7969c":47,"7712607acb6d3304d9779871e1a86a1aebf988f6":53,"8363cc48d94f777077075f00a8d7344f9f90e3c2":4,"358ac157c3f30a6b99e73614fcd58d1a27f2fc4c":18,"63be59fefa316467b0801f674c45296bfac8fa2a":919,"53a06c9e98638bdb59b70b398cb428d1617fb25f":4,"7fc9f939f513bba0bd3e23af4af2695a82dc6ce9":53,"c4e81a33c54c07970aab7c8bd9b6673ae5a627f7":8,"62f5870e5bf6ff6ac3b2720faea61e61e7bd9946":78,"acd93cbd2093f9514167b3af8225510e48e2ea24":6,"67ee2f051c05f1ec25f21f105df836bdb53ec96e":151,"129845a19d9ec38e415e55a13f2d8caa12ed72a7":97,"4005b36e4569b2329aa47c2c959abde808c22073":16,"49a56924ce7211290c561bf7f1379b561156cf74":89,"89bf0e3a2933eebf2fd92283c523444ad06f52f7":58,"e0534cff0ff6bc77bb5672d423d4491b0e1f47b4":215,"876248548df466a72d9f9cd63271e88829b340ed":18,"6a53c811e5aa69eb3ae54a15eaafe0195f353d82":315,"988e933322391309883b7a159ed9a9f96fa9acba":37,"3d41c62045994db90a30c1604e62ae9a9b1cfea1":92,"af020b76b3e274a845b4c897cb2af4845f7bf2fa":5,"cc5471d76dcf1c2cf1c7b56a3bfe542bb4747f0e":214,"31cc54b33131f09235811dd19477df8d422b700c":395,"cef72adc5a012cfed399d1d64345a290595be8b3":179,"656416e8cee0738c304bfadf614966fd0f26b608":62,"c98009a3253c89dcf253798e4fa6594b048ab4eb":261,"eaf65f8376288e4c8eb3110e05024c61fbfad810":195,"731a305743568952560dcc32f9cb7542bf1084ad":181,"a4593b48052a2bf0622ea559372d5cc51b420e35":624,"e94a35601f685c47364b0ecec510888455b29221":3,"2c30db23abfd3feab017ff09364617a9be16018e":205,"b76862c2300f4436b147070e59ef7272324a1bdf":278,"5d0f6b7515f0aa59fcb7f0e6aa49ec85be45c15a":222,"44ee3d6715c66eab1ff08e958b33d11dccd02d36":28,"f73e6646d8c71d5327fffaf535726c242d20f8b0":116,"988c7b2062a25eee9aa5e88a04f2534665f2cc94":21,"510d711ea249249ba2475da961c09ec4cee749a2":256,"98b15e70f46ee45c58a40090d8ca4897415850c8":70,"2140b90f5645723f51165fb6c88d4af1185be17f":94,"2f55cc34caae72e02e90e89ed5be3152a7b4258c":94,"fc3c98cf97b6bbb4e5afceba848a968076666a8f":323,"71e52b3714e3f27327c312adc34667f7f0926d2c":185,"aeadad270b85f1b3f5cf1bc008f443e0a6c26d3e":546,"9307a46f42a733c3d82f2b223e8476ddb2366c76":630,"07b7739bdcc74c45ce2214a99dce096df49e982e":474,"503da4eab40c5b36fa44fd951828b21ea140c02a":159,"d3664ea152e7241ab656bf5f274e8b26ae1f7c18":546,"6d1621bf8694f53c7770a2ba33dfed9f6594b9ef":694,"bc257d4c5c3b845d194bc3c98a646e1c843a9821":10,"bfd891f6223775453897b3f0267d6b3d0e80f714":50,"983750681e6fe403c2b0b4e2d9790f50b0162917":295,"69a78342638dc03f8a7660ffc5d11ae92e92e7f1":464,"ce8aced63f1ef48ad152dd0383962cf30da2c95a":168,"cfd9289c76de964d023fcdf520095f0507652512":105,"581a72bdf95bf0856684d12f04097f715c57f63f":14,"47f59bde511b9d6890c7fa7307769e07df6ae27f":410,"3bef4eb5304e926272a651c4bdbca55635aa5193":29,"a8b9877cf78aec18cf108375c2b753818b126e3e":62,"b8bc5ebee740c34237174f74e5528775ad247a38":27,"46ad818aa3992c811bc1204d2494c04e95397236":33,"99a3dad98919ac973e0e78d12e7c29ff14bbd20e":95,"2691b64258235ddd722211dafa52bfd133f8795e":4,"629b4aaefddbf656313cd5db2e89b983c8e16ff4":2100,"8f745df2f6ed770aef67db951facbca88f3d32bc":106,"811c63ffb30808647e0da2d7c5709ee923238a57":1,"2012deb8ed428d59ed2935e3baf2e58586a9e17a":98,"ad4e0beef6175177b4927ca81eb0d683eff3f47d":51,"64d2d6b693863568d2375eedb7e9f533166abc10":1,"b7a24aea62f4044295facdd87e69d8984ab91362":121,"13ec7af9e00b4e5a027584f19f58e7a4b73d779d":7,"1aa772d6c645767198b99e1013ac10841f8f6684":3791,"be3bbbb66552d2da9e715e21d255bc5822d73e57":200,"8024bcec0aeaa6e78772fd8ab5d7a799ebb870cb":147,"3200ceba3b8767bc64948062a57e6e8a3b07a1b0":414,"a2801319da81931620d8f0592e85d9a84fdac33a":11,"c7ea7fef1082c616b11eb81b04b1c7b681ab24da":113,"5eaa33e580366851affd6fd27962b03dae53c2be":757,"e4eddba5545ef298be7ead3624a0657002672607":500,"ee9ea67abd451279481c3e86ff068cadcf8569a5":621,"d80f948954a20b55c5dc73bac226d40ca3c8dadb":8,"564c098f857362dea78649bc9b29cd9d9d1f1ec6":89,"397d992fd37150fd63d1caacb35f3a74cac14267":16,"97f647ff066aa1edb9be0d6375c9b6bba20968eb":24,"6891433e05b5e590bfae52ead6b499c671ef8600":87,"4dd5e2f0a65d79bfe3f16dac26a86bb1b2565fa6":139,"a2e8d5c208f819ea4cee8132c762881b13cfdb0f":216,"f00460c7860ef554e0833fee4a292d7ea9a2e6da":3979,"a0148ab52ee4be501eb4b20aaf9e48e7a5819791":33,"773044305097272720efa6d3dc167bc971275af2":251,"b3644e2224f774fc8ad086b4988716033cf71666":43,"95a16f5b79b144771649a0d24fff180e7005c848":102,"5a45f7440a58b74cefcc1b02ac04db47739b33f7":64,"2a7c5876fcaf0e88bc98473899d1c756afd28b8f":244,"a6380178fd99a53c93e0d0cbd3f7e3aec54f7719":154,"b311087eb4406664306b71ff9c21d1205dc21d3c":52,"a0e3366288117fdeeccbc5193f7205f8eb72bd2a":298,"86d865bbfdc15f282acbf7b956f56533a67aa653":84,"de59c4d4fbeb9e2add4ce3172172ef4d2cffcd9e":167,"acee02806bb4d0766fec481037447696bf8c3880":100,"e561023f5772d7ff3fa7c9921fd3221caa534b6f":76,"d6031147501740a3caa77551882c4c83fbd068e4":131,"41dfe9df6591f252ec7ffe857f8c157bb46dca5c":21,"e21ebbc71c9f128a0773f8eabad3af080f3ca58c":302,"5866231d304ec8b42b71c423a0c06218a6b66479":156,"4ac64e3d4a2d44da02efa89646a6cdcec2932b7a":12,"807d2d4a376af003a7aa3feb912f24af17e3b272":84,"c928d26995e2774857e20f34589aec0ed92f0b8a":64,"bea15bbee935a857058a973aa195e2775c327874":269},"excluded_import_commits":["246499b476bb34a725224b41cdf524efc318e853","4421a5bf3c6648579d8ea62bb0abbf61dcdb81b9","4af146f3c24d4ceb94dbc809d80d03ae07f04427","4f40146305518fe1a28c883b0dba60eaf7db6798","8934c29fceb6f81ecae692ad8f682349566dd61c","8bb4ab099c2e10bfa61ac3382551b3ac2ae2d90c","b1393ee674a4ae254e51b8b94a288822bea6758c","c366ab2da213b656cdc97fbb34304d259991c6fb","cd3dba9f0c037d8fc0bdf8b2ab11df5a2569f08f","e7ab835dfb23bc1c5ed853c5744ec23bd36fc16c","f5a45589898f9a351902414082e88bec1135deb2"]},"error":null},{"analyzer":"ai-release-velocity","pillar":"ai_provenance","status":"ok","tool_version":"prov-5","metrics":{"releases":99.0,"flagged_releases":9.0,"max_loc_per_day":59956.5},"findings":[],"evidence":[{"kind":"release-burst","description":"1.0.1 → 1.0.2-rc.1: 16,182 lines in 0.27 days (59,956.5 lines/day)","ref":"1.0.1...1.0.2-rc.1","url":"https://github.com/Freika/dawarich/compare/1.0.1...1.0.2-rc.1","weight":0.4},{"kind":"release-burst","description":"1.0.4 → 1.1.0-rc.1: 24,505 lines in 5.51 days (4,443.7 lines/day)","ref":"1.0.4...1.1.0-rc.1","url":"https://github.com/Freika/dawarich/compare/1.0.4...1.1.0-rc.1","weight":0.4},{"kind":"release-burst","description":"1.1.0 → 1.1.1-rc.1: 27,148 lines in 4.3 days (6,310.0 lines/day)","ref":"1.1.0...1.1.1-rc.1","url":"https://github.com/Freika/dawarich/compare/1.1.0...1.1.1-rc.1","weight":0.4},{"kind":"release-burst","description":"1.9.0 → 1.9.1: 11,893 lines in 0.97 days (12,223.5 lines/day)","ref":"1.9.0...1.9.1","url":"https://github.com/Freika/dawarich/compare/1.9.0...1.9.1","weight":0.4},{"kind":"release-burst","description":"1.14.1 → 1.14.2: 6,255 lines in 2.08 days (3,011.4 lines/day)","ref":"1.14.1...1.14.2","url":"https://github.com/Freika/dawarich/compare/1.14.1...1.14.2","weight":0.4},{"kind":"release-burst","description":"1.14.3 → 1.14.4: 5,389 lines in 1.13 days (4,770.0 lines/day)","ref":"1.14.3...1.14.4","url":"https://github.com/Freika/dawarich/compare/1.14.3...1.14.4","weight":0.4},{"kind":"release-burst","description":"1.15.1 → 1.15.2: 9,586 lines in 0.94 days (10,249.9 lines/day)","ref":"1.15.1...1.15.2","url":"https://github.com/Freika/dawarich/compare/1.15.1...1.15.2","weight":0.4},{"kind":"release-burst","description":"1.17.0 → 1.18.0: 19,612 lines in 2.04 days (9,606.1 lines/day)","ref":"1.17.0...1.18.0","url":"https://github.com/Freika/dawarich/compare/1.17.0...1.18.0","weight":0.4},{"kind":"release-burst","description":"1.18.1 → 1.19.0: 9,293 lines in 1.12 days (8,316.0 lines/day)","ref":"1.18.1...1.19.0","url":"https://github.com/Freika/dawarich/compare/1.18.1...1.19.0","weight":0.4}],"data":{"releases":[{"from":"0.36.3-rc.1","to":"0.36.3","loc":3499,"days":6.89,"loc_per_day":507.6,"flagged":false},{"from":"0.36.3","to":"0.36.4-rc.1","loc":3747,"days":2.27,"loc_per_day":1653.0,"flagged":false},{"from":"0.36.4-rc.1","to":"0.36.4","loc":4080,"days":9.85,"loc_per_day":414.1,"flagged":false},{"from":"0.36.4","to":"0.36.5-rc.2","loc":0,"days":0.04,"loc_per_day":0.0,"flagged":false},{"from":"0.36.5-rc.2","to":"0.36.5-rc.1","loc":4804,"days":0.12,"loc_per_day":40360.3,"flagged":false},{"from":"0.36.5-rc.1","to":"0.37.0","loc":3693,"days":3.99,"loc_per_day":925.7,"flagged":false},{"from":"0.37.0","to":"0.37.1","loc":31,"days":0.06,"loc_per_day":484.0,"flagged":false},{"from":"0.37.1","to":"0.37.2-rc.1","loc":8293,"days":3.78,"loc_per_day":2195.6,"flagged":false},{"from":"0.37.2-rc.1","to":"0.37.2-rc.2","loc":200,"days":0.96,"loc_per_day":208.7,"flagged":false},{"from":"0.37.2-rc.2","to":"0.37.2-rc.3","loc":0,"days":0.09,"loc_per_day":0.0,"flagged":false},{"from":"0.37.2-rc.3","to":"0.37.2-rc.4","loc":85,"days":0.08,"loc_per_day":1080.0,"flagged":false},{"from":"0.37.2-rc.4","to":"0.37.2-rc.5","loc":86,"days":0.04,"loc_per_day":2064.0,"flagged":false},{"from":"0.37.2-rc.5","to":"0.37.2-rc.6","loc":140,"days":0.09,"loc_per_day":1587.6,"flagged":false},{"from":"0.37.2-rc.6","to":"0.37.2-rc.7","loc":79,"days":0.04,"loc_per_day":1896.0,"flagged":false},{"from":"0.37.2-rc.7","to":"0.37.2","loc":734,"days":0.04,"loc_per_day":17616.0,"flagged":false},{"from":"0.37.2","to":"0.37.3","loc":3979,"days":6.99,"loc_per_day":569.2,"flagged":false},{"from":"0.37.3","to":"1.0.0","loc":0,"days":9.0,"loc_per_day":0.0,"flagged":false},{"from":"1.0.0","to":"1.0.1","loc":3166,"days":3.86,"loc_per_day":820.3,"flagged":false},{"from":"1.0.1","to":"1.0.2-rc.1","loc":16182,"days":0.27,"loc_per_day":59956.5,"flagged":true},{"from":"1.0.2-rc.1","to":"1.0.2-rc.2","loc":0,"days":1.0,"loc_per_day":0.0,"flagged":false},{"from":"1.0.2-rc.2","to":"1.0.2-rc.3","loc":5118,"days":5.75,"loc_per_day":890.8,"flagged":false},{"from":"1.0.2-rc.3","to":"1.0.2","loc":247,"days":0.24,"loc_per_day":1031.3,"flagged":false},{"from":"1.0.2","to":"1.0.3","loc":103,"days":0.06,"loc_per_day":1591.4,"flagged":false},{"from":"1.0.3","to":"1.0.4","loc":0,"days":0.52,"loc_per_day":0.0,"flagged":false},{"from":"1.0.4","to":"1.1.0-rc.1","loc":24505,"days":5.51,"loc_per_day":4443.7,"flagged":true},{"from":"1.1.0-rc.1","to":"1.1.0","loc":0,"days":1.61,"loc_per_day":0.0,"flagged":false},{"from":"1.1.0","to":"1.1.1-rc.1","loc":27148,"days":4.3,"loc_per_day":6310.0,"flagged":true},{"from":"1.1.1-rc.1","to":"1.1.1-rc.2","loc":79,"days":0.89,"loc_per_day":88.6,"flagged":false},{"from":"1.1.1-rc.2","to":"1.2.0","loc":312,"days":2.14,"loc_per_day":146.1,"flagged":false},{"from":"1.2.0","to":"1.3.0-rc.1","loc":1712,"days":0.98,"loc_per_day":1749.1,"flagged":false},{"from":"1.3.0-rc.1","to":"1.3.0-rc.2","loc":238,"days":1.93,"loc_per_day":123.1,"flagged":false},{"from":"1.3.0-rc.2","to":"1.3.0-rc.3","loc":3265,"days":0.07,"loc_per_day":46650.6,"flagged":false},{"from":"1.3.0-rc.3","to":"1.3.0-rc.4","loc":2257,"days":4.0,"loc_per_day":564.4,"flagged":false},{"from":"1.3.0-rc.4","to":"1.3.0","loc":3093,"days":2.89,"loc_per_day":1069.0,"flagged":false},{"from":"1.3.0","to":"1.3.1","loc":2139,"days":2.01,"loc_per_day":1063.6,"flagged":false},{"from":"1.3.1","to":"1.3.2-rc.1","loc":3297,"days":5.1,"loc_per_day":646.3,"flagged":false},{"from":"1.3.2-rc.1","to":"1.3.2-rc.2","loc":519,"days":0.9,"loc_per_day":577.0,"flagged":false},{"from":"1.3.2-rc.2","to":"1.3.2","loc":497,"days":3.02,"loc_per_day":164.5,"flagged":false},{"from":"1.3.2","to":"1.3.3","loc":1645,"days":4.05,"loc_per_day":406.4,"flagged":false},{"from":"1.3.3","to":"1.3.4","loc":4046,"days":2.72,"loc_per_day":1487.0,"flagged":false},{"from":"1.3.4","to":"1.4.0","loc":2182,"days":6.92,"loc_per_day":315.5,"flagged":false},{"from":"1.4.0","to":"1.5.0","loc":7956,"days":5.96,"loc_per_day":1334.4,"flagged":false},{"from":"1.5.0","to":"1.5.1","loc":45,"days":0.35,"loc_per_day":127.9,"flagged":false},{"from":"1.5.1","to":"1.6.0","loc":2432,"days":1.02,"loc_per_day":2379.6,"flagged":false},{"from":"1.6.0","to":"1.6.1","loc":35,"days":3.06,"loc_per_day":11.4,"flagged":false},{"from":"1.6.1","to":"1.6.2-rc.1","loc":2832,"days":19.88,"loc_per_day":142.5,"flagged":false},{"from":"1.6.2-rc.1","to":"1.6.2-rc.2","loc":1986,"days":0.96,"loc_per_day":2059.6,"flagged":false},{"from":"1.6.2-rc.2","to":"1.7.0","loc":10537,"days":4.18,"loc_per_day":2521.2,"flagged":false},{"from":"1.7.0","to":"1.7.1","loc":4543,"days":1.95,"loc_per_day":2327.4,"flagged":false},{"from":"1.7.1","to":"1.7.2","loc":1949,"days":0.93,"loc_per_day":2090.2,"flagged":false},{"from":"1.7.2","to":"1.7.3","loc":2731,"days":2.91,"loc_per_day":937.0,"flagged":false},{"from":"1.7.3","to":"1.7.4","loc":365,"days":0.61,"loc_per_day":602.7,"flagged":false},{"from":"1.7.4","to":"1.7.5","loc":3047,"days":0.57,"loc_per_day":5333.7,"flagged":false},{"from":"1.7.5","to":"1.7.6","loc":4246,"days":5.71,"loc_per_day":743.7,"flagged":false},{"from":"1.7.6","to":"1.7.7","loc":1293,"days":0.29,"loc_per_day":4404.0,"flagged":false},{"from":"1.7.7","to":"1.7.8","loc":4322,"days":6.96,"loc_per_day":620.7,"flagged":false},{"from":"1.7.8","to":"1.7.9","loc":4083,"days":4.8,"loc_per_day":850.0,"flagged":false},{"from":"1.7.9","to":"1.7.10","loc":1187,"days":5.16,"loc_per_day":230.1,"flagged":false},{"from":"1.7.10","to":"1.7.11","loc":4102,"days":4.87,"loc_per_day":841.9,"flagged":false},{"from":"1.7.11","to":"1.8.0-rc.1","loc":3300,"days":4.18,"loc_per_day":788.6,"flagged":false},{"from":"1.8.0-rc.1","to":"1.8.0-rc.2","loc":291,"days":2.7,"loc_per_day":107.9,"flagged":false},{"from":"1.8.0-rc.2","to":"1.8.0","loc":3780,"days":1.26,"loc_per_day":2998.3,"flagged":false},{"from":"1.8.0","to":"1.8.1","loc":1653,"days":2.88,"loc_per_day":574.6,"flagged":false},{"from":"1.8.1","to":"1.9.0","loc":0,"days":10.11,"loc_per_day":0.0,"flagged":false},{"from":"1.9.0","to":"1.9.1","loc":11893,"days":0.97,"loc_per_day":12223.5,"flagged":true},{"from":"1.9.1","to":"1.9.2","loc":129,"days":3.07,"loc_per_day":42.0,"flagged":false},{"from":"1.9.2","to":"1.10.0-rc.1","loc":10260,"days":8.56,"loc_per_day":1198.1,"flagged":false},{"from":"1.10.0-rc.1","to":"1.10.0-rc.2","loc":0,"days":0.04,"loc_per_day":0.0,"flagged":false},{"from":"1.10.0-rc.2","to":"1.10.0-rc.3","loc":0,"days":0.04,"loc_per_day":0.0,"flagged":false},{"from":"1.10.0-rc.3","to":"1.10.0-rc.4","loc":913,"days":1.12,"loc_per_day":815.4,"flagged":false},{"from":"1.10.0-rc.4","to":"1.10.0","loc":691,"days":9.75,"loc_per_day":70.9,"flagged":false},{"from":"1.10.0","to":"1.10.1","loc":5412,"days":4.44,"loc_per_day":1217.6,"flagged":false},{"from":"1.10.1","to":"1.10.2","loc":2916,"days":8.05,"loc_per_day":362.1,"flagged":false},{"from":"1.10.2","to":"1.10.3","loc":875,"days":1.01,"loc_per_day":865.9,"flagged":false},{"from":"1.10.3","to":"1.11.0","loc":8113,"days":5.01,"loc_per_day":1618.2,"flagged":false},{"from":"1.11.0","to":"1.12.0","loc":17899,"days":8.89,"loc_per_day":2014.3,"flagged":false},{"from":"1.12.0","to":"1.12.1","loc":466,"days":1.18,"loc_per_day":395.5,"flagged":false},{"from":"1.12.1","to":"1.12.2","loc":2284,"days":2.72,"loc_per_day":839.0,"flagged":false},{"from":"1.12.2","to":"1.13.0","loc":3962,"days":3.11,"loc_per_day":1275.2,"flagged":false},{"from":"1.13.0","to":"1.13.1","loc":11428,"days":4.93,"loc_per_day":2318.3,"flagged":false},{"from":"1.13.1","to":"1.14.0","loc":6231,"days":4.04,"loc_per_day":1540.6,"flagged":false},{"from":"1.14.0","to":"1.14.1","loc":2909,"days":4.01,"loc_per_day":724.7,"flagged":false},{"from":"1.14.1","to":"1.14.2","loc":6255,"days":2.08,"loc_per_day":3011.4,"flagged":true},{"from":"1.14.2","to":"1.14.3","loc":6008,"days":2.85,"loc_per_day":2110.0,"flagged":false},{"from":"1.14.3","to":"1.14.4","loc":5389,"days":1.13,"loc_per_day":4770.0,"flagged":true},{"from":"1.14.4","to":"1.14.5","loc":5734,"days":6.67,"loc_per_day":859.7,"flagged":false},{"from":"1.14.5","to":"1.15.0","loc":21648,"days":7.39,"loc_per_day":2930.6,"flagged":false},{"from":"1.15.0","to":"1.15.1","loc":1529,"days":1.01,"loc_per_day":1515.2,"flagged":false},{"from":"1.15.1","to":"1.15.2","loc":9586,"days":0.94,"loc_per_day":10249.9,"flagged":true},{"from":"1.15.2","to":"1.15.3","loc":2379,"days":8.01,"loc_per_day":297.1,"flagged":false},{"from":"1.15.3","to":"1.16.0","loc":7180,"days":16.64,"loc_per_day":431.5,"flagged":false},{"from":"1.16.0","to":"1.17.0","loc":10399,"days":6.41,"loc_per_day":1621.9,"flagged":false},{"from":"1.17.0","to":"1.18.0","loc":19612,"days":2.04,"loc_per_day":9606.1,"flagged":true},{"from":"1.18.0","to":"1.18.1","loc":4017,"days":0.94,"loc_per_day":4263.9,"flagged":false},{"from":"1.18.1","to":"1.19.0","loc":9293,"days":1.12,"loc_per_day":8316.0,"flagged":true},{"from":"1.19.0","to":"1.20.0","loc":9188,"days":3.46,"loc_per_day":2654.7,"flagged":false},{"from":"1.20.0","to":"1.20.1","loc":331,"days":1.51,"loc_per_day":219.2,"flagged":false},{"from":"1.20.1","to":"1.21.0","loc":0,"days":2.38,"loc_per_day":0.0,"flagged":false},{"from":"1.21.0","to":"1.22.0","loc":4994,"days":3.59,"loc_per_day":1391.5,"flagged":false}]},"error":null},{"analyzer":"ai-stylometry","pillar":"ai_provenance","status":"ok","tool_version":null,"metrics":{"lines_scanned":124526.0,"index":0.265,"count:narrated_steps":3.0,"per_kloc:narrated_steps":0.024,"files:narrated_steps":2.0,"count:placeholder":0.0,"per_kloc:placeholder":0.0,"files:placeholder":0.0,"count:emoji_in_code":60.0,"per_kloc:emoji_in_code":0.482,"files:emoji_in_code":18.0,"count:assistant_voice":0.0,"per_kloc:assistant_voice":0.0,"files:assistant_voice":0.0},"findings":[],"evidence":[{"kind":"stylometry:narrated_steps","description":"step-by-step narration comment: # First, ensure the 'maps' key exists for users that don't have it","ref":"db/migrate/20260112192240_set_existing_users_to_map_v1.rb:10","url":"https://github.com/Freika/dawarich/blob/0ac68e1835cf2a091907eb55f6287714c7206a6c/db/migrate/20260112192240_set_existing_users_to_map_v1.rb#L10","weight":0.0},{"kind":"stylometry:narrated_steps","description":"step-by-step narration comment: # Step 1: Database Setup","ref":"docker/web-entrypoint.sh:99","url":"https://github.com/Freika/dawarich/blob/0ac68e1835cf2a091907eb55f6287714c7206a6c/docker/web-entrypoint.sh#L99","weight":0.0},{"kind":"stylometry:narrated_steps","description":"step-by-step narration comment: # Step 2: Run migrations for all databases","ref":"docker/web-entrypoint.sh:105","url":"https://github.com/Freika/dawarich/blob/0ac68e1835cf2a091907eb55f6287714c7206a6c/docker/web-entrypoint.sh#L105","weight":0.0}],"data":{},"error":null},{"analyzer":"sec-secrets","pillar":"security","status":"ok","tool_version":"gitleaks 8.30.1","metrics":{"secrets_current":0.0,"secrets_history":0.0,"secrets_nonprod":9.0,"secrets_low_confidence":2.0},"findings":[{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in the current tree","path":"config/initializers/devise.rb","line":11,"fingerprint":"config/initializers/devise.rb:generic-api-key:11"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in the current tree (test/docs/example file)","path":"spec/services/achievements/region_silhouettes_spec.rb","line":165,"fingerprint":"spec/services/achievements/region_silhouettes_spec.rb:generic-api-key:165"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in the current tree (test/docs/example file)","path":"spec/services/achievements/region_set_checker_spec.rb","line":131,"fingerprint":"spec/services/achievements/region_set_checker_spec.rb:generic-api-key:131"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in history (commit bd7a1840e6); removed from the current tree but still retrievable","path":"app-phoenix/test/dawarich_web/auth_two_factor/form_test.exs","line":91,"fingerprint":"bd7a1840e68fca1b28d6995b789b6bbb9f747e86:app-phoenix/test/dawarich_web/auth_two_factor/form_test.exs:generic-api-key:91"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in history (commit f56af69725); removed from the current tree but still retrievable","path":"app-phoenix/test/dawarich/accounts/security_test.exs","line":86,"fingerprint":"f56af69725f05c7f52125de1d22504b8362e95a2:app-phoenix/test/dawarich/accounts/security_test.exs:generic-api-key:86"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in history (commit 9ab82e1f57); removed from the current tree but still retrievable","path":"app-phoenix/test/dawarich_web/native_m4_sessions_test.exs","line":26,"fingerprint":"9ab82e1f57c30befa1b25b5531cedab1281ef0f8:app-phoenix/test/dawarich_web/native_m4_sessions_test.exs:generic-api-key:26"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in history (commit f632889799); removed from the current tree but still retrievable","path":"app-phoenix/test/dawarich_web/health_golden_test.exs","line":35,"fingerprint":"f632889799cde9178a25c77abbec66c28c1024a0:app-phoenix/test/dawarich_web/health_golden_test.exs:generic-api-key:35"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in history (commit 1ae7207dac); removed from the current tree but still retrievable","path":"app-phoenix/test/dawarich_web/health_endpoint_test.exs","line":53,"fingerprint":"1ae7207dacf5e12b3da95ccd15b85347beecec92:app-phoenix/test/dawarich_web/health_endpoint_test.exs:generic-api-key:53"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in history (commit 62d667b60b); removed from the current tree but still retrievable","path":"app-phoenix/test/support/raw_http.ex","line":106,"fingerprint":"62d667b60b30022f5ad22d40440b0fb3e75e638f:app-phoenix/test/support/raw_http.ex:generic-api-key:106"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in history (commit 76ca3b5115); removed from the current tree but still retrievable","path":"app-phoenix/test/dawarich_web/cable_proxy_test.exs","line":19,"fingerprint":"76ca3b511574301d511b3826c2567409dc9155e7:app-phoenix/test/dawarich_web/cable_proxy_test.exs:generic-api-key:19"},{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in history (commit 3155738601); removed from the current tree but still retrievable","path":"docker-compose_mounted_volumes.yml","line":161,"fingerprint":"31557386012593cdc96c5d705f33579f71242798:docker-compose_mounted_volumes.yml:generic-api-key:161"}],"evidence":[],"data":{},"error":null},{"analyzer":"sec-sast","pillar":"security","status":"ok","tool_version":"opengrep 1.33.1; rules f1d2b562b414","metrics":{"findings":383.0,"findings_high":76.0,"findings_medium":300.0,"findings_low":7.0,"weighted_findings":162.887,"scanned_lines":124437.0,"parse_errors":221.0},"findings":[{"rule_id":"opengrep/dockerfile.security.last-user-is-root","severity":"high","message":"The last user in the container is 'root'. This is a security hazard because if an attacker gains control of the container they will have root access. Switch back to another user after running commands as 'root'. [confidence medium]","path":".devcontainer/Dockerfile","line":35,"fingerprint":"dockerfile.security.last-user-is-root:.devcontainer/Dockerfile:35"},{"rule_id":"opengrep/ruby.lang.security.missing-csrf-protection","severity":"high","message":"Detected controller which does not enable cross-site request forgery protections using 'protect_from_forgery'. Add 'protect_from_forgery :with => :exception' to your controller class. [confidence low]","path":"app/controllers/application_controller.rb","line":3,"fingerprint":"ruby.lang.security.missing-csrf-protection:app/controllers/application_controller.rb:3"},{"rule_id":"opengrep/ruby.lang.security.model-attr-accessible","severity":"high","message":"Checks for dangerous permitted attributes that can lead to mass assignment vulnerabilities. Query parameters allowed using permit and attr_accessible are checked for allowance of dangerous attributes admin, banned, role, and account_id. Also checks for usages of params.permit!, which allows everythi [confidence low]","path":"app/controllers/settings/users_controller.rb","line":153,"fingerprint":"ruby.lang.security.model-attr-accessible:app/controllers/settings/users_controller.rb:153"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/javascript/controllers/achievement_card_controller.js","line":78,"fingerprint":"javascript.browser.security.insecure-document-method:app/javascript/controllers/achievement_card_controller.js:78"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `this.materialTarget.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/javascript/controllers/achievement_card_controller.js","line":78,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/javascript/controllers/achievement_card_controller.js:78"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/javascript/controllers/achievement_unlocks_controller.js","line":98,"fingerprint":"javascript.browser.security.insecure-document-method:app/javascript/controllers/achievement_unlocks_controller.js:98"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `this.element.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/javascript/controllers/achievement_unlocks_controller.js","line":98,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/javascript/controllers/achievement_unlocks_controller.js:98"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/javascript/controllers/clipboard_controller.js","line":86,"fingerprint":"javascript.browser.security.insecure-document-method:app/javascript/controllers/clipboard_controller.js:86"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `button.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/javascript/controllers/clipboard_controller.js","line":86,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/javascript/controllers/clipboard_controller.js:86"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/javascript/controllers/flash_controller.js","line":64,"fingerprint":"javascript.browser.security.insecure-document-method:app/javascript/controllers/flash_controller.js:64"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `div.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/javascript/controllers/flash_controller.js","line":64,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/javascript/controllers/flash_controller.js:64"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/javascript/controllers/maps/immich_enrich_controller.js","line":204,"fingerprint":"javascript.browser.security.insecure-document-method:app/javascript/controllers/maps/immich_enrich_controller.js:204"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `this.resultsSummaryTarget.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/javascript/controllers/maps/immich_enrich_controller.js","line":204,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/javascript/controllers/maps/immich_enrich_controller.js:204"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/javascript/controllers/maps/immich_enrich_controller.js","line":248,"fingerprint":"javascript.browser.security.insecure-document-method:app/javascript/controllers/maps/immich_enrich_controller.js:248"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `item.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/javascript/controllers/maps/immich_enrich_controller.js","line":248,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/javascript/controllers/maps/immich_enrich_controller.js:248"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/javascript/controllers/maps/immich_enrich_controller.js","line":311,"fingerprint":"javascript.browser.security.insecure-document-method:app/javascript/controllers/maps/immich_enrich_controller.js:311"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `tooltip.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/javascript/controllers/maps/immich_enrich_controller.js","line":311,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/javascript/controllers/maps/immich_enrich_controller.js:311"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/javascript/controllers/maps/maplibre/area_selection_manager.js","line":222,"fingerprint":"javascript.browser.security.insecure-document-method:app/javascript/controllers/maps/maplibre/area_selection_manager.js:222"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `this.controller.selectedVisitsContainerTarget.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/javascript/controllers/maps/maplibre/area_selection_manager.js","line":222,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/javascript/controllers/maps/maplibre/area_selection_manager.js:222"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/javascript/controllers/maps/maplibre/area_selection_manager.js","line":307,"fingerprint":"javascript.browser.security.insecure-document-method:app/javascript/controllers/maps/maplibre/area_selection_manager.js:307"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `bulkActionsDiv.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/javascript/controllers/maps/maplibre/area_selection_manager.js","line":307,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/javascript/controllers/maps/maplibre/area_selection_manager.js:307"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/javascript/controllers/maps/maplibre/event_handlers.js","line":215,"fingerprint":"javascript.browser.security.insecure-document-method:app/javascript/controllers/maps/maplibre/event_handlers.js:215"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `container.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/javascript/controllers/maps/maplibre/event_handlers.js","line":215,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/javascript/controllers/maps/maplibre/event_handlers.js:215"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/javascript/controllers/maps/maplibre_controller.js","line":753,"fingerprint":"javascript.browser.security.insecure-document-method:app/javascript/controllers/maps/maplibre_controller.js:753"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `frame.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/javascript/controllers/maps/maplibre_controller.js","line":753,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/javascript/controllers/maps/maplibre_controller.js:753"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/javascript/controllers/maps/maplibre_controller.js","line":1536,"fingerprint":"javascript.browser.security.insecure-document-method:app/javascript/controllers/maps/maplibre_controller.js:1536"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `container.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/javascript/controllers/maps/maplibre_controller.js","line":1536,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/javascript/controllers/maps/maplibre_controller.js:1536"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/javascript/controllers/maps/maplibre_controller.js","line":1644,"fingerprint":"javascript.browser.security.insecure-document-method:app/javascript/controllers/maps/maplibre_controller.js:1644"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `this.infoContentTarget.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/javascript/controllers/maps/maplibre_controller.js","line":1644,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/javascript/controllers/maps/maplibre_controller.js:1644"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/javascript/controllers/maps/maplibre_controller.js","line":1648,"fingerprint":"javascript.browser.security.insecure-document-method:app/javascript/controllers/maps/maplibre_controller.js:1648"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `this.infoActionsTarget.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/javascript/controllers/maps/maplibre_controller.js","line":1648,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/javascript/controllers/maps/maplibre_controller.js:1648"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/javascript/controllers/onboarding_modal_controller.js","line":135,"fingerprint":"javascript.browser.security.insecure-document-method:app/javascript/controllers/onboarding_modal_controller.js:135"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `this.demoButtonTarget.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/javascript/controllers/onboarding_modal_controller.js","line":135,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/javascript/controllers/onboarding_modal_controller.js:135"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/javascript/controllers/onboarding_modal_controller.js","line":161,"fingerprint":"javascript.browser.security.insecure-document-method:app/javascript/controllers/onboarding_modal_controller.js:161"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `this.demoButtonTarget.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/javascript/controllers/onboarding_modal_controller.js","line":161,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/javascript/controllers/onboarding_modal_controller.js:161"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/javascript/controllers/place_creation_controller.js","line":125,"fingerprint":"javascript.browser.security.insecure-document-method:app/javascript/controllers/place_creation_controller.js:125"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `this.nearbyFrameTarget.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/javascript/controllers/place_creation_controller.js","line":125,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/javascript/controllers/place_creation_controller.js:125"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/javascript/controllers/sharing_modal_controller.js","line":42,"fingerprint":"javascript.browser.security.insecure-document-method:app/javascript/controllers/sharing_modal_controller.js:42"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `button.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/javascript/controllers/sharing_modal_controller.js","line":42,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/javascript/controllers/sharing_modal_controller.js:42"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/javascript/controllers/sharing_modal_controller.js","line":46,"fingerprint":"javascript.browser.security.insecure-document-method:app/javascript/controllers/sharing_modal_controller.js:46"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `button.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/javascript/controllers/sharing_modal_controller.js","line":46,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/javascript/controllers/sharing_modal_controller.js:46"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/javascript/controllers/speed_color_editor_controller.js","line":66,"fingerprint":"javascript.browser.security.insecure-document-method:app/javascript/controllers/speed_color_editor_controller.js:66"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `this.stopsListTarget.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/javascript/controllers/speed_color_editor_controller.js","line":66,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/javascript/controllers/speed_color_editor_controller.js:66"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/javascript/controllers/timeline_feed_controller.js","line":763,"fingerprint":"javascript.browser.security.insecure-document-method:app/javascript/controllers/timeline_feed_controller.js:763"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `grid.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/javascript/controllers/timeline_feed_controller.js","line":763,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/javascript/controllers/timeline_feed_controller.js:763"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/javascript/controllers/upload_controller.js","line":220,"fingerprint":"javascript.browser.security.insecure-document-method:app/javascript/controllers/upload_controller.js:220"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `wrapper.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/javascript/controllers/upload_controller.js","line":220,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/javascript/controllers/upload_controller.js:220"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/javascript/maps_maplibre/components/photo_cluster_gallery.js","line":145,"fingerprint":"javascript.browser.security.insecure-document-method:app/javascript/maps_maplibre/components/photo_cluster_gallery.js:145"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `preview.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/javascript/maps_maplibre/components/photo_cluster_gallery.js","line":145,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/javascript/maps_maplibre/components/photo_cluster_gallery.js:145"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/javascript/maps_maplibre/components/visit_place_search.js","line":32,"fingerprint":"javascript.browser.security.insecure-document-method:app/javascript/maps_maplibre/components/visit_place_search.js:32"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `this.mount.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/javascript/maps_maplibre/components/visit_place_search.js","line":32,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/javascript/maps_maplibre/components/visit_place_search.js:32"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/javascript/maps_maplibre/components/visit_place_search.js","line":112,"fingerprint":"javascript.browser.security.insecure-document-method:app/javascript/maps_maplibre/components/visit_place_search.js:112"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `this.list.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/javascript/maps_maplibre/components/visit_place_search.js","line":112,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/javascript/maps_maplibre/components/visit_place_search.js:112"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/javascript/maps_maplibre/components/visit_place_search.js","line":269,"fingerprint":"javascript.browser.security.insecure-document-method:app/javascript/maps_maplibre/components/visit_place_search.js:269"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `this.list.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/javascript/maps_maplibre/components/visit_place_search.js","line":269,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/javascript/maps_maplibre/components/visit_place_search.js:269"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/javascript/maps_maplibre/components/visit_place_search.js","line":274,"fingerprint":"javascript.browser.security.insecure-document-method:app/javascript/maps_maplibre/components/visit_place_search.js:274"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `this.list.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/javascript/maps_maplibre/components/visit_place_search.js","line":274,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/javascript/maps_maplibre/components/visit_place_search.js:274"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/javascript/maps_maplibre/editing/point_edit_history_panel.js","line":150,"fingerprint":"javascript.browser.security.insecure-document-method:app/javascript/maps_maplibre/editing/point_edit_history_panel.js:150"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `button.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/javascript/maps_maplibre/editing/point_edit_history_panel.js","line":150,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/javascript/maps_maplibre/editing/point_edit_history_panel.js:150"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/javascript/maps_maplibre/utils/search_manager.js","line":265,"fingerprint":"javascript.browser.security.insecure-document-method:app/javascript/maps_maplibre/utils/search_manager.js:265"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `this.resultsContainer.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/javascript/maps_maplibre/utils/search_manager.js","line":265,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/javascript/maps_maplibre/utils/search_manager.js:265"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/javascript/maps_maplibre/utils/search_manager.js","line":278,"fingerprint":"javascript.browser.security.insecure-document-method:app/javascript/maps_maplibre/utils/search_manager.js:278"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `this.resultsContainer.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/javascript/maps_maplibre/utils/search_manager.js","line":278,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/javascript/maps_maplibre/utils/search_manager.js:278"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/javascript/maps_maplibre/utils/search_manager.js","line":291,"fingerprint":"javascript.browser.security.insecure-document-method:app/javascript/maps_maplibre/utils/search_manager.js:291"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `this.resultsContainer.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/javascript/maps_maplibre/utils/search_manager.js","line":291,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/javascript/maps_maplibre/utils/search_manager.js:291"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/javascript/maps_maplibre/utils/search_manager.js","line":304,"fingerprint":"javascript.browser.security.insecure-document-method:app/javascript/maps_maplibre/utils/search_manager.js:304"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `this.resultsContainer.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/javascript/maps_maplibre/utils/search_manager.js","line":304,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/javascript/maps_maplibre/utils/search_manager.js:304"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/javascript/maps_maplibre/utils/search_manager.js","line":326,"fingerprint":"javascript.browser.security.insecure-document-method:app/javascript/maps_maplibre/utils/search_manager.js:326"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `this.resultsContainer.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/javascript/maps_maplibre/utils/search_manager.js","line":326,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/javascript/maps_maplibre/utils/search_manager.js:326"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/javascript/maps_maplibre/utils/search_manager.js","line":349,"fingerprint":"javascript.browser.security.insecure-document-method:app/javascript/maps_maplibre/utils/search_manager.js:349"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `this.resultsContainer.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/javascript/maps_maplibre/utils/search_manager.js","line":349,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/javascript/maps_maplibre/utils/search_manager.js:349"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/javascript/maps_maplibre/utils/search_manager.js","line":547,"fingerprint":"javascript.browser.security.insecure-document-method:app/javascript/maps_maplibre/utils/search_manager.js:547"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `modal.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/javascript/maps_maplibre/utils/search_manager.js","line":547,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/javascript/maps_maplibre/utils/search_manager.js:547"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/javascript/maps_maplibre/utils/search_manager.js","line":687,"fingerprint":"javascript.browser.security.insecure-document-method:app/javascript/maps_maplibre/utils/search_manager.js:687"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `notification.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"app/javascript/maps_maplibre/utils/search_manager.js","line":687,"fingerprint":"javascript.browser.security.insecure-innerhtml:app/javascript/maps_maplibre/utils/search_manager.js:687"},{"rule_id":"opengrep/dockerfile.security.missing-user-entrypoint","severity":"high","message":"By not specifying a USER, a program in the container may run as 'root'. This is a security hazard. If an attacker can control a process running as root, they may have control over the container. Ensure that the last USER in a Dockerfile is a USER other than 'root'. [confidence medium]","path":"docker/Dockerfile","line":152,"fingerprint":"dockerfile.security.missing-user-entrypoint:docker/Dockerfile:152"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.avoid-redirect","severity":"medium","message":"When a redirect uses user input, a malicious user can spoof a website under a trusted URL or access restricted parts of a site. When using user-supplied values, sanitize the value before using it for the redirect. [confidence medium]","path":"app/controllers/achievements/collectibles_controller.rb","line":43,"fingerprint":"ruby.rails.security.audit.xss.avoid-redirect:app/controllers/achievements/collectibles_controller.rb:43"},{"rule_id":"opengrep/ruby.rails.security.brakeman.check-unscoped-find","severity":"medium","message":"Found an unscoped `find(...)` with user-controllable input. If the ActiveRecord model being searched against is sensitive, this may lead to Insecure Direct Object Reference (IDOR) behavior and allow users to read arbitrary records. Scope the find to the current user, e.g. `current_user.accounts.find [confidence medium]","path":"app/controllers/achievements_controller.rb","line":16,"fingerprint":"ruby.rails.security.brakeman.check-unscoped-find:app/controllers/achievements_controller.rb:16"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.avoid-redirect","severity":"medium","message":"When a redirect uses user input, a malicious user can spoof a website under a trusted URL or access restricted parts of a site. When using user-supplied values, sanitize the value before using it for the redirect. [confidence medium]","path":"app/controllers/achievements_controller.rb","line":21,"fingerprint":"ruby.rails.security.audit.xss.avoid-redirect:app/controllers/achievements_controller.rb:21"},{"rule_id":"opengrep/ruby.rails.security.brakeman.check-unscoped-find","severity":"medium","message":"Found an unscoped `find(...)` with user-controllable input. If the ActiveRecord model being searched against is sensitive, this may lead to Insecure Direct Object Reference (IDOR) behavior and allow users to read arbitrary records. Scope the find to the current user, e.g. `current_user.accounts.find [confidence medium]","path":"app/controllers/achievements_controller.rb","line":35,"fingerprint":"ruby.rails.security.brakeman.check-unscoped-find:app/controllers/achievements_controller.rb:35"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.avoid-redirect","severity":"medium","message":"When a redirect uses user input, a malicious user can spoof a website under a trusted URL or access restricted parts of a site. When using user-supplied values, sanitize the value before using it for the redirect. [confidence medium]","path":"app/controllers/admin/settings_controller.rb","line":34,"fingerprint":"ruby.rails.security.audit.xss.avoid-redirect:app/controllers/admin/settings_controller.rb:34"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.avoid-redirect","severity":"medium","message":"When a redirect uses user input, a malicious user can spoof a website under a trusted URL or access restricted parts of a site. When using user-supplied values, sanitize the value before using it for the redirect. [confidence medium]","path":"app/controllers/admin/settings_controller.rb","line":39,"fingerprint":"ruby.rails.security.audit.xss.avoid-redirect:app/controllers/admin/settings_controller.rb:39"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.avoid-redirect","severity":"medium","message":"When a redirect uses user input, a malicious user can spoof a website under a trusted URL or access restricted parts of a site. When using user-supplied values, sanitize the value before using it for the redirect. [confidence medium]","path":"app/controllers/admin/settings_controller.rb","line":41,"fingerprint":"ruby.rails.security.audit.xss.avoid-redirect:app/controllers/admin/settings_controller.rb:41"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.avoid-redirect","severity":"medium","message":"When a redirect uses user input, a malicious user can spoof a website under a trusted URL or access restricted parts of a site. When using user-supplied values, sanitize the value before using it for the redirect. [confidence medium]","path":"app/controllers/admin/settings_controller.rb","line":50,"fingerprint":"ruby.rails.security.audit.xss.avoid-redirect:app/controllers/admin/settings_controller.rb:50"},{"rule_id":"opengrep/ruby.lang.security.mass-assignment-vuln","severity":"medium","message":"Checks for calls to without_protection during mass assignment (which allows record creation from hash values). This can lead to users bypassing permissions protections. For Rails 4 and higher, mass protection is on by default. Fix: Don't use :without_protection => true. Instead, configure attr_acces [confidence low]","path":"app/controllers/api/v1/auth/otp_challenges_controller.rb","line":5,"fingerprint":"ruby.lang.security.mass-assignment-vuln:app/controllers/api/v1/auth/otp_challenges_controller.rb:5"},{"rule_id":"opengrep/ruby.lang.security.weak-hashes-md5","severity":"medium","message":"Should not use md5 to generate hashes. md5 is proven to be vulnerable through the use of brute-force attacks. Could also result in collisions, leading to potential collision attacks. Use SHA256 or other hashing functions instead. [confidence medium]","path":"app/controllers/api/v1/shared/photos_controller.rb","line":87,"fingerprint":"ruby.lang.security.weak-hashes-md5:app/controllers/api/v1/shared/photos_controller.rb:87"},{"rule_id":"opengrep/ruby.lang.security.mass-assignment-vuln","severity":"medium","message":"Checks for calls to without_protection during mass assignment (which allows record creation from hash values). This can lead to users bypassing permissions protections. For Rails 4 and higher, mass protection is on by default. Fix: Don't use :without_protection => true. Instead, configure attr_acces [confidence low]","path":"app/controllers/api/v1/subscriptions_controller.rb","line":18,"fingerprint":"ruby.lang.security.mass-assignment-vuln:app/controllers/api/v1/subscriptions_controller.rb:18"},{"rule_id":"opengrep/ruby.rails.security.audit.avoid-session-manipulation","severity":"medium","message":"This gets data from session using user inputs. A malicious user may be able to retrieve information from your session that you didn't intend them to. Do not use user input as a session key. [confidence medium]","path":"app/controllers/application_controller.rb","line":362,"fingerprint":"ruby.rails.security.audit.avoid-session-manipulation:app/controllers/application_controller.rb:362"},{"rule_id":"opengrep/ruby.lang.security.mass-assignment-vuln","severity":"medium","message":"Checks for calls to without_protection during mass assignment (which allows record creation from hash values). This can lead to users bypassing permissions protections. For Rails 4 and higher, mass protection is on by default. Fix: Don't use :without_protection => true. Instead, configure attr_acces [confidence low]","path":"app/controllers/auth/account_links_controller.rb","line":13,"fingerprint":"ruby.lang.security.mass-assignment-vuln:app/controllers/auth/account_links_controller.rb:13"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.avoid-redirect","severity":"medium","message":"When a redirect uses user input, a malicious user can spoof a website under a trusted URL or access restricted parts of a site. When using user-supplied values, sanitize the value before using it for the redirect. [confidence medium]","path":"app/controllers/auth/account_links_controller.rb","line":116,"fingerprint":"ruby.rails.security.audit.xss.avoid-redirect:app/controllers/auth/account_links_controller.rb:116"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.avoid-redirect","severity":"medium","message":"When a redirect uses user input, a malicious user can spoof a website under a trusted URL or access restricted parts of a site. When using user-supplied values, sanitize the value before using it for the redirect. [confidence medium]","path":"app/controllers/auth/account_links_controller.rb","line":142,"fingerprint":"ruby.rails.security.audit.xss.avoid-redirect:app/controllers/auth/account_links_controller.rb:142"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.avoid-redirect","severity":"medium","message":"When a redirect uses user input, a malicious user can spoof a website under a trusted URL or access restricted parts of a site. When using user-supplied values, sanitize the value before using it for the redirect. [confidence medium]","path":"app/controllers/concerns/place_bulk_actions.rb","line":18,"fingerprint":"ruby.rails.security.audit.xss.avoid-redirect:app/controllers/concerns/place_bulk_actions.rb:18"},{"rule_id":"opengrep/ruby.rails.security.audit.avoid-session-manipulation","severity":"medium","message":"This gets data from session using user inputs. A malicious user may be able to retrieve information from your session that you didn't intend them to. Do not use user input as a session key. [confidence medium]","path":"app/controllers/concerns/utm_trackable.rb","line":10,"fingerprint":"ruby.rails.security.audit.avoid-session-manipulation:app/controllers/concerns/utm_trackable.rb:10"},{"rule_id":"opengrep/ruby.rails.security.audit.avoid-session-manipulation","severity":"medium","message":"This gets data from session using user inputs. A malicious user may be able to retrieve information from your session that you didn't intend them to. Do not use user input as a session key. [confidence medium]","path":"app/controllers/family/invitations_controller.rb","line":33,"fingerprint":"ruby.rails.security.audit.avoid-session-manipulation:app/controllers/family/invitations_controller.rb:33"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.avoid-redirect","severity":"medium","message":"When a redirect uses user input, a malicious user can spoof a website under a trusted URL or access restricted parts of a site. When using user-supplied values, sanitize the value before using it for the redirect. [confidence medium]","path":"app/controllers/family/invitations_controller.rb","line":52,"fingerprint":"ruby.rails.security.audit.xss.avoid-redirect:app/controllers/family/invitations_controller.rb:52"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.avoid-redirect","severity":"medium","message":"When a redirect uses user input, a malicious user can spoof a website under a trusted URL or access restricted parts of a site. When using user-supplied values, sanitize the value before using it for the redirect. [confidence medium]","path":"app/controllers/family/location_requests_controller.rb","line":23,"fingerprint":"ruby.rails.security.audit.xss.avoid-redirect:app/controllers/family/location_requests_controller.rb:23"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.avoid-redirect","severity":"medium","message":"When a redirect uses user input, a malicious user can spoof a website under a trusted URL or access restricted parts of a site. When using user-supplied values, sanitize the value before using it for the redirect. [confidence medium]","path":"app/controllers/family/location_requests_controller.rb","line":39,"fingerprint":"ruby.rails.security.audit.xss.avoid-redirect:app/controllers/family/location_requests_controller.rb:39"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.avoid-redirect","severity":"medium","message":"When a redirect uses user input, a malicious user can spoof a website under a trusted URL or access restricted parts of a site. When using user-supplied values, sanitize the value before using it for the redirect. [confidence medium]","path":"app/controllers/family/location_requests_controller.rb","line":51,"fingerprint":"ruby.rails.security.audit.xss.avoid-redirect:app/controllers/family/location_requests_controller.rb:51"},{"rule_id":"opengrep/ruby.rails.security.brakeman.check-unscoped-find","severity":"medium","message":"Found an unscoped `find(...)` with user-controllable input. If the ActiveRecord model being searched against is sensitive, this may lead to Insecure Direct Object Reference (IDOR) behavior and allow users to read arbitrary records. Scope the find to the current user, e.g. `current_user.accounts.find [confidence medium]","path":"app/controllers/family/location_requests_controller.rb","line":58,"fingerprint":"ruby.rails.security.brakeman.check-unscoped-find:app/controllers/family/location_requests_controller.rb:58"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.avoid-redirect","severity":"medium","message":"When a redirect uses user input, a malicious user can spoof a website under a trusted URL or access restricted parts of a site. When using user-supplied values, sanitize the value before using it for the redirect. [confidence medium]","path":"app/controllers/family/memberships_controller.rb","line":26,"fingerprint":"ruby.rails.security.audit.xss.avoid-redirect:app/controllers/family/memberships_controller.rb:26"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.avoid-redirect","severity":"medium","message":"When a redirect uses user input, a malicious user can spoof a website under a trusted URL or access restricted parts of a site. When using user-supplied values, sanitize the value before using it for the redirect. [confidence medium]","path":"app/controllers/family/memberships_controller.rb","line":63,"fingerprint":"ruby.rails.security.audit.xss.avoid-redirect:app/controllers/family/memberships_controller.rb:63"},{"rule_id":"opengrep/ruby.rails.security.brakeman.check-unscoped-find","severity":"medium","message":"Found an unscoped `find(...)` with user-controllable input. If the ActiveRecord model being searched against is sensitive, this may lead to Insecure Direct Object Reference (IDOR) behavior and allow users to read arbitrary records. Scope the find to the current user, e.g. `current_user.accounts.find [confidence medium]","path":"app/controllers/imports/extractions_controller.rb","line":49,"fingerprint":"ruby.rails.security.brakeman.check-unscoped-find:app/controllers/imports/extractions_controller.rb:49"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.avoid-redirect","severity":"medium","message":"When a redirect uses user input, a malicious user can spoof a website under a trusted URL or access restricted parts of a site. When using user-supplied values, sanitize the value before using it for the redirect. [confidence medium]","path":"app/controllers/imports_controller.rb","line":35,"fingerprint":"ruby.rails.security.audit.xss.avoid-redirect:app/controllers/imports_controller.rb:35"},{"rule_id":"opengrep/ruby.rails.security.brakeman.check-unscoped-find","severity":"medium","message":"Found an unscoped `find(...)` with user-controllable input. If the ActiveRecord model being searched against is sensitive, this may lead to Insecure Direct Object Reference (IDOR) behavior and allow users to read arbitrary records. Scope the find to the current user, e.g. `current_user.accounts.find [confidence medium]","path":"app/controllers/imports_controller.rb","line":110,"fingerprint":"ruby.rails.security.brakeman.check-unscoped-find:app/controllers/imports_controller.rb:110"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.avoid-redirect","severity":"medium","message":"When a redirect uses user input, a malicious user can spoof a website under a trusted URL or access restricted parts of a site. When using user-supplied values, sanitize the value before using it for the redirect. [confidence medium]","path":"app/controllers/places_controller.rb","line":59,"fingerprint":"ruby.rails.security.audit.xss.avoid-redirect:app/controllers/places_controller.rb:59"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.avoid-redirect","severity":"medium","message":"When a redirect uses user input, a malicious user can spoof a website under a trusted URL or access restricted parts of a site. When using user-supplied values, sanitize the value before using it for the redirect. [confidence medium]","path":"app/controllers/places_controller.rb","line":87,"fingerprint":"ruby.rails.security.audit.xss.avoid-redirect:app/controllers/places_controller.rb:87"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.avoid-redirect","severity":"medium","message":"When a redirect uses user input, a malicious user can spoof a website under a trusted URL or access restricted parts of a site. When using user-supplied values, sanitize the value before using it for the redirect. [confidence medium]","path":"app/controllers/places_controller.rb","line":177,"fingerprint":"ruby.rails.security.audit.xss.avoid-redirect:app/controllers/places_controller.rb:177"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.avoid-redirect","severity":"medium","message":"When a redirect uses user input, a malicious user can spoof a website under a trusted URL or access restricted parts of a site. When using user-supplied values, sanitize the value before using it for the redirect. [confidence medium]","path":"app/controllers/places_controller.rb","line":193,"fingerprint":"ruby.rails.security.audit.xss.avoid-redirect:app/controllers/places_controller.rb:193"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.avoid-redirect","severity":"medium","message":"When a redirect uses user input, a malicious user can spoof a website under a trusted URL or access restricted parts of a site. When using user-supplied values, sanitize the value before using it for the redirect. [confidence medium]","path":"app/controllers/settings/integrations_controller.rb","line":35,"fingerprint":"ruby.rails.security.audit.xss.avoid-redirect:app/controllers/settings/integrations_controller.rb:35"},{"rule_id":"opengrep/ruby.rails.security.audit.avoid-session-manipulation","severity":"medium","message":"This gets data from session using user inputs. A malicious user may be able to retrieve information from your session that you didn't intend them to. Do not use user input as a session key. [confidence medium]","path":"app/controllers/settings/integrations_controller.rb","line":73,"fingerprint":"ruby.rails.security.audit.avoid-session-manipulation:app/controllers/settings/integrations_controller.rb:73"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.avoid-redirect","severity":"medium","message":"When a redirect uses user input, a malicious user can spoof a website under a trusted URL or access restricted parts of a site. When using user-supplied values, sanitize the value before using it for the redirect. [confidence medium]","path":"app/controllers/settings/integrations_controller.rb","line":74,"fingerprint":"ruby.rails.security.audit.xss.avoid-redirect:app/controllers/settings/integrations_controller.rb:74"},{"rule_id":"opengrep/ruby.rails.security.brakeman.check-unscoped-find","severity":"medium","message":"Found an unscoped `find(...)` with user-controllable input. If the ActiveRecord model being searched against is sensitive, this may lead to Insecure Direct Object Reference (IDOR) behavior and allow users to read arbitrary records. Scope the find to the current user, e.g. `current_user.accounts.find [confidence medium]","path":"app/controllers/settings/users_controller.rb","line":15,"fingerprint":"ruby.rails.security.brakeman.check-unscoped-find:app/controllers/settings/users_controller.rb:15"},{"rule_id":"opengrep/ruby.rails.security.brakeman.check-unscoped-find","severity":"medium","message":"Found an unscoped `find(...)` with user-controllable input. If the ActiveRecord model being searched against is sensitive, this may lead to Insecure Direct Object Reference (IDOR) behavior and allow users to read arbitrary records. Scope the find to the current user, e.g. `current_user.accounts.find [confidence medium]","path":"app/controllers/settings/users_controller.rb","line":19,"fingerprint":"ruby.rails.security.brakeman.check-unscoped-find:app/controllers/settings/users_controller.rb:19"},{"rule_id":"opengrep/ruby.rails.security.brakeman.check-unscoped-find","severity":"medium","message":"Found an unscoped `find(...)` with user-controllable input. If the ActiveRecord model being searched against is sensitive, this may lead to Insecure Direct Object Reference (IDOR) behavior and allow users to read arbitrary records. Scope the find to the current user, e.g. `current_user.accounts.find [confidence medium]","path":"app/controllers/settings/users_controller.rb","line":23,"fingerprint":"ruby.rails.security.brakeman.check-unscoped-find:app/controllers/settings/users_controller.rb:23"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.avoid-redirect","severity":"medium","message":"When a redirect uses user input, a malicious user can spoof a website under a trusted URL or access restricted parts of a site. When using user-supplied values, sanitize the value before using it for the redirect. [confidence medium]","path":"app/controllers/settings/users_controller.rb","line":32,"fingerprint":"ruby.rails.security.audit.xss.avoid-redirect:app/controllers/settings/users_controller.rb:32"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.avoid-redirect","severity":"medium","message":"When a redirect uses user input, a malicious user can spoof a website under a trusted URL or access restricted parts of a site. When using user-supplied values, sanitize the value before using it for the redirect. [confidence medium]","path":"app/controllers/settings/users_controller.rb","line":49,"fingerprint":"ruby.rails.security.audit.xss.avoid-redirect:app/controllers/settings/users_controller.rb:49"},{"rule_id":"opengrep/ruby.rails.security.brakeman.check-unscoped-find","severity":"medium","message":"Found an unscoped `find(...)` with user-controllable input. If the ActiveRecord model being searched against is sensitive, this may lead to Insecure Direct Object Reference (IDOR) behavior and allow users to read arbitrary records. Scope the find to the current user, e.g. `current_user.accounts.find [confidence medium]","path":"app/controllers/settings/users_controller.rb","line":57,"fingerprint":"ruby.rails.security.brakeman.check-unscoped-find:app/controllers/settings/users_controller.rb:57"},{"rule_id":"opengrep/ruby.rails.security.brakeman.check-unscoped-find","severity":"medium","message":"Found an unscoped `find(...)` with user-controllable input. If the ActiveRecord model being searched against is sensitive, this may lead to Insecure Direct Object Reference (IDOR) behavior and allow users to read arbitrary records. Scope the find to the current user, e.g. `current_user.accounts.find [confidence medium]","path":"app/controllers/settings/users_controller.rb","line":80,"fingerprint":"ruby.rails.security.brakeman.check-unscoped-find:app/controllers/settings/users_controller.rb:80"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.avoid-redirect","severity":"medium","message":"When a redirect uses user input, a malicious user can spoof a website under a trusted URL or access restricted parts of a site. When using user-supplied values, sanitize the value before using it for the redirect. [confidence medium]","path":"app/controllers/settings/users_controller.rb","line":83,"fingerprint":"ruby.rails.security.audit.xss.avoid-redirect:app/controllers/settings/users_controller.rb:83"},{"rule_id":"opengrep/ruby.rails.security.brakeman.check-unscoped-find","severity":"medium","message":"Found an unscoped `find(...)` with user-controllable input. If the ActiveRecord model being searched against is sensitive, this may lead to Insecure Direct Object Reference (IDOR) behavior and allow users to read arbitrary records. Scope the find to the current user, e.g. `current_user.accounts.find [confidence medium]","path":"app/controllers/settings/users_controller.rb","line":87,"fingerprint":"ruby.rails.security.brakeman.check-unscoped-find:app/controllers/settings/users_controller.rb:87"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.avoid-redirect","severity":"medium","message":"When a redirect uses user input, a malicious user can spoof a website under a trusted URL or access restricted parts of a site. When using user-supplied values, sanitize the value before using it for the redirect. [confidence medium]","path":"app/controllers/settings/users_controller.rb","line":90,"fingerprint":"ruby.rails.security.audit.xss.avoid-redirect:app/controllers/settings/users_controller.rb:90"},{"rule_id":"opengrep/ruby.rails.security.brakeman.check-unscoped-find","severity":"medium","message":"Found an unscoped `find(...)` with user-controllable input. If the ActiveRecord model being searched against is sensitive, this may lead to Insecure Direct Object Reference (IDOR) behavior and allow users to read arbitrary records. Scope the find to the current user, e.g. `current_user.accounts.find [confidence medium]","path":"app/controllers/shared/achievements_controller.rb","line":45,"fingerprint":"ruby.rails.security.brakeman.check-unscoped-find:app/controllers/shared/achievements_controller.rb:45"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.avoid-redirect","severity":"medium","message":"When a redirect uses user input, a malicious user can spoof a website under a trusted URL or access restricted parts of a site. When using user-supplied values, sanitize the value before using it for the redirect. [confidence medium]","path":"app/controllers/stats_controller.rb","line":13,"fingerprint":"ruby.rails.security.audit.xss.avoid-redirect:app/controllers/stats_controller.rb:13"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.avoid-redirect","severity":"medium","message":"When a redirect uses user input, a malicious user can spoof a website under a trusted URL or access restricted parts of a site. When using user-supplied values, sanitize the value before using it for the redirect. [confidence medium]","path":"app/controllers/stats_controller.rb","line":39,"fingerprint":"ruby.rails.security.audit.xss.avoid-redirect:app/controllers/stats_controller.rb:39"},{"rule_id":"opengrep/ruby.rails.security.brakeman.check-unscoped-find","severity":"medium","message":"Found an unscoped `find(...)` with user-controllable input. If the ActiveRecord model being searched against is sensitive, this may lead to Insecure Direct Object Reference (IDOR) behavior and allow users to read arbitrary records. Scope the find to the current user, e.g. `current_user.accounts.find [confidence medium]","path":"app/controllers/trial/welcome_controller.rb","line":17,"fingerprint":"ruby.rails.security.brakeman.check-unscoped-find:app/controllers/trial/welcome_controller.rb:17"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.avoid-redirect","severity":"medium","message":"When a redirect uses user input, a malicious user can spoof a website under a trusted URL or access restricted parts of a site. When using user-supplied values, sanitize the value before using it for the redirect. [confidence medium]","path":"app/controllers/trial/welcome_controller.rb","line":34,"fingerprint":"ruby.rails.security.audit.xss.avoid-redirect:app/controllers/trial/welcome_controller.rb:34"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.avoid-redirect","severity":"medium","message":"When a redirect uses user input, a malicious user can spoof a website under a trusted URL or access restricted parts of a site. When using user-supplied values, sanitize the value before using it for the redirect. [confidence medium]","path":"app/controllers/trips/notes_controller.rb","line":28,"fingerprint":"ruby.rails.security.audit.xss.avoid-redirect:app/controllers/trips/notes_controller.rb:28"},{"rule_id":"opengrep/ruby.rails.security.audit.avoid-session-manipulation","severity":"medium","message":"This gets data from session using user inputs. A malicious user may be able to retrieve information from your session that you didn't intend them to. Do not use user input as a session key. [confidence medium]","path":"app/controllers/users/apple_oauth_controller.rb","line":103,"fingerprint":"ruby.rails.security.audit.avoid-session-manipulation:app/controllers/users/apple_oauth_controller.rb:103"},{"rule_id":"opengrep/ruby.rails.security.audit.avoid-session-manipulation","severity":"medium","message":"This gets data from session using user inputs. A malicious user may be able to retrieve information from your session that you didn't intend them to. Do not use user input as a session key. [confidence medium]","path":"app/controllers/users/apple_oauth_controller.rb","line":111,"fingerprint":"ruby.rails.security.audit.avoid-session-manipulation:app/controllers/users/apple_oauth_controller.rb:111"},{"rule_id":"opengrep/ruby.lang.security.mass-assignment-vuln","severity":"medium","message":"Checks for calls to without_protection during mass assignment (which allows record creation from hash values). This can lead to users bypassing permissions protections. For Rails 4 and higher, mass protection is on by default. Fix: Don't use :without_protection => true. Instead, configure attr_acces [confidence low]","path":"app/controllers/users/destroy_confirmations_controller.rb","line":9,"fingerprint":"ruby.lang.security.mass-assignment-vuln:app/controllers/users/destroy_confirmations_controller.rb:9"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.avoid-redirect","severity":"medium","message":"When a redirect uses user input, a malicious user can spoof a website under a trusted URL or access restricted parts of a site. When using user-supplied values, sanitize the value before using it for the redirect. [confidence medium]","path":"app/controllers/users/digests_controller.rb","line":26,"fingerprint":"ruby.rails.security.audit.xss.avoid-redirect:app/controllers/users/digests_controller.rb:26"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.avoid-redirect","severity":"medium","message":"When a redirect uses user input, a malicious user can spoof a website under a trusted URL or access restricted parts of a site. When using user-supplied values, sanitize the value before using it for the redirect. [confidence medium]","path":"app/controllers/users/omniauth_callbacks_controller.rb","line":73,"fingerprint":"ruby.rails.security.audit.xss.avoid-redirect:app/controllers/users/omniauth_callbacks_controller.rb:73"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.avoid-redirect","severity":"medium","message":"When a redirect uses user input, a malicious user can spoof a website under a trusted URL or access restricted parts of a site. When using user-supplied values, sanitize the value before using it for the redirect. [confidence medium]","path":"app/controllers/users/otp_challenge_controller.rb","line":29,"fingerprint":"ruby.rails.security.audit.xss.avoid-redirect:app/controllers/users/otp_challenge_controller.rb:29"},{"rule_id":"opengrep/ruby.rails.security.audit.avoid-session-manipulation","severity":"medium","message":"This gets data from session using user inputs. A malicious user may be able to retrieve information from your session that you didn't intend them to. Do not use user input as a session key. [confidence medium]","path":"app/controllers/users/registrations_controller.rb","line":15,"fingerprint":"ruby.rails.security.audit.avoid-session-manipulation:app/controllers/users/registrations_controller.rb:15"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.avoid-redirect","severity":"medium","message":"When a redirect uses user input, a malicious user can spoof a website under a trusted URL or access restricted parts of a site. When using user-supplied values, sanitize the value before using it for the redirect. [confidence medium]","path":"app/controllers/users/registrations_controller.rb","line":96,"fingerprint":"ruby.rails.security.audit.xss.avoid-redirect:app/controllers/users/registrations_controller.rb:96"},{"rule_id":"opengrep/ruby.rails.security.audit.avoid-session-manipulation","severity":"medium","message":"This gets data from session using user inputs. A malicious user may be able to retrieve information from your session that you didn't intend them to. Do not use user input as a session key. [confidence medium]","path":"app/controllers/users/registrations_controller.rb","line":135,"fingerprint":"ruby.rails.security.audit.avoid-session-manipulation:app/controllers/users/registrations_controller.rb:135"},{"rule_id":"opengrep/ruby.rails.security.audit.avoid-session-manipulation","severity":"medium","message":"This gets data from session using user inputs. A malicious user may be able to retrieve information from your session that you didn't intend them to. Do not use user input as a session key. [confidence medium]","path":"app/controllers/users/registrations_controller.rb","line":169,"fingerprint":"ruby.rails.security.audit.avoid-session-manipulation:app/controllers/users/registrations_controller.rb:169"},{"rule_id":"opengrep/ruby.rails.security.audit.avoid-session-manipulation","severity":"medium","message":"This gets data from session using user inputs. A malicious user may be able to retrieve information from your session that you didn't intend them to. Do not use user input as a session key. [confidence medium]","path":"app/controllers/users/sessions_controller.rb","line":33,"fingerprint":"ruby.rails.security.audit.avoid-session-manipulation:app/controllers/users/sessions_controller.rb:33"},{"rule_id":"opengrep/ruby.rails.security.audit.avoid-session-manipulation","severity":"medium","message":"This gets data from session using user inputs. A malicious user may be able to retrieve information from your session that you didn't intend them to. Do not use user input as a session key. [confidence medium]","path":"app/controllers/users/sessions_controller.rb","line":35,"fingerprint":"ruby.rails.security.audit.avoid-session-manipulation:app/controllers/users/sessions_controller.rb:35"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.avoid-redirect","severity":"medium","message":"When a redirect uses user input, a malicious user can spoof a website under a trusted URL or access restricted parts of a site. When using user-supplied values, sanitize the value before using it for the redirect. [confidence medium]","path":"app/controllers/visits_controller.rb","line":44,"fingerprint":"ruby.rails.security.audit.xss.avoid-redirect:app/controllers/visits_controller.rb:44"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.avoid-redirect","severity":"medium","message":"When a redirect uses user input, a malicious user can spoof a website under a trusted URL or access restricted parts of a site. When using user-supplied values, sanitize the value before using it for the redirect. [confidence medium]","path":"app/controllers/visits_controller.rb","line":53,"fingerprint":"ruby.rails.security.audit.xss.avoid-redirect:app/controllers/visits_controller.rb:53"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.avoid-html-safe","severity":"medium","message":"'html_safe()' does not make the supplied string safe. 'html_safe()' bypasses HTML escaping. If external data can reach here, this exposes your application to cross-site scripting (XSS) attacks. Ensure no external data reaches here. [confidence low]","path":"app/helpers/application_helper.rb","line":14,"fingerprint":"ruby.rails.security.audit.xss.avoid-html-safe:app/helpers/application_helper.rb:14"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.avoid-content-tag","severity":"medium","message":"'content_tag()' bypasses HTML escaping for some portion of the content. If external data can reach here, this exposes your application to cross-site scripting (XSS) attacks. Ensure no external data reaches here. If you must do this, create your HTML manually and use 'html_safe'. Ensure no external d [confidence low]","path":"app/helpers/application_helper.rb","line":283,"fingerprint":"ruby.rails.security.audit.xss.avoid-content-tag:app/helpers/application_helper.rb:283"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.avoid-content-tag","severity":"medium","message":"'content_tag()' bypasses HTML escaping for some portion of the content. If external data can reach here, this exposes your application to cross-site scripting (XSS) attacks. Ensure no external data reaches here. If you must do this, create your HTML manually and use 'html_safe'. Ensure no external d [confidence low]","path":"app/helpers/application_helper.rb","line":287,"fingerprint":"ruby.rails.security.audit.xss.avoid-content-tag:app/helpers/application_helper.rb:287"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.avoid-content-tag","severity":"medium","message":"'content_tag()' bypasses HTML escaping for some portion of the content. If external data can reach here, this exposes your application to cross-site scripting (XSS) attacks. Ensure no external data reaches here. If you must do this, create your HTML manually and use 'html_safe'. Ensure no external d [confidence low]","path":"app/helpers/application_helper.rb","line":290,"fingerprint":"ruby.rails.security.audit.xss.avoid-content-tag:app/helpers/application_helper.rb:290"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.avoid-content-tag","severity":"medium","message":"'content_tag()' bypasses HTML escaping for some portion of the content. If external data can reach here, this exposes your application to cross-site scripting (XSS) attacks. Ensure no external data reaches here. If you must do this, create your HTML manually and use 'html_safe'. Ensure no external d [confidence low]","path":"app/helpers/datetime_formatting_helper.rb","line":13,"fingerprint":"ruby.rails.security.audit.xss.avoid-content-tag:app/helpers/datetime_formatting_helper.rb:13"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.avoid-content-tag","severity":"medium","message":"'content_tag()' bypasses HTML escaping for some portion of the content. If external data can reach here, this exposes your application to cross-site scripting (XSS) attacks. Ensure no external data reaches here. If you must do this, create your HTML manually and use 'html_safe'. Ensure no external d [confidence low]","path":"app/helpers/datetime_formatting_helper.rb","line":26,"fingerprint":"ruby.rails.security.audit.xss.avoid-content-tag:app/helpers/datetime_formatting_helper.rb:26"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.avoid-content-tag","severity":"medium","message":"'content_tag()' bypasses HTML escaping for some portion of the content. If external data can reach here, this exposes your application to cross-site scripting (XSS) attacks. Ensure no external data reaches here. If you must do this, create your HTML manually and use 'html_safe'. Ensure no external d [confidence low]","path":"app/helpers/datetime_formatting_helper.rb","line":39,"fingerprint":"ruby.rails.security.audit.xss.avoid-content-tag:app/helpers/datetime_formatting_helper.rb:39"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.avoid-html-safe","severity":"medium","message":"'html_safe()' does not make the supplied string safe. 'html_safe()' bypasses HTML escaping. If external data can reach here, this exposes your application to cross-site scripting (XSS) attacks. Ensure no external data reaches here. [confidence low]","path":"app/helpers/user_helper.rb","line":9,"fingerprint":"ruby.rails.security.audit.xss.avoid-html-safe:app/helpers/user_helper.rb:9"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/javascript/achievements/spectral_material.js","line":117,"fingerprint":"javascript.lang.security.html-in-template-string:app/javascript/achievements/spectral_material.js:117"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/javascript/achievements/spectral_material.js","line":119,"fingerprint":"javascript.lang.security.html-in-template-string:app/javascript/achievements/spectral_material.js:119"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/javascript/achievements/spectral_material.js","line":135,"fingerprint":"javascript.lang.security.html-in-template-string:app/javascript/achievements/spectral_material.js:135"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/javascript/achievements/spectral_material.js","line":139,"fingerprint":"javascript.lang.security.html-in-template-string:app/javascript/achievements/spectral_material.js:139"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/javascript/achievements/spectral_material.js","line":146,"fingerprint":"javascript.lang.security.html-in-template-string:app/javascript/achievements/spectral_material.js:146"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/javascript/achievements/spectral_material.js","line":160,"fingerprint":"javascript.lang.security.html-in-template-string:app/javascript/achievements/spectral_material.js:160"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/javascript/achievements/spectral_material.js","line":160,"fingerprint":"javascript.lang.security.html-in-template-string:app/javascript/achievements/spectral_material.js:160"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/javascript/achievements/spectral_material.js","line":162,"fingerprint":"javascript.lang.security.html-in-template-string:app/javascript/achievements/spectral_material.js:162"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/javascript/achievements/spectral_material.js","line":186,"fingerprint":"javascript.lang.security.html-in-template-string:app/javascript/achievements/spectral_material.js:186"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/javascript/achievements/spectral_material.js","line":190,"fingerprint":"javascript.lang.security.html-in-template-string:app/javascript/achievements/spectral_material.js:190"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/javascript/achievements/spectral_material.js","line":191,"fingerprint":"javascript.lang.security.html-in-template-string:app/javascript/achievements/spectral_material.js:191"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/javascript/achievements/spectral_material.js","line":194,"fingerprint":"javascript.lang.security.html-in-template-string:app/javascript/achievements/spectral_material.js:194"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/javascript/achievements/spectral_material.js","line":200,"fingerprint":"javascript.lang.security.html-in-template-string:app/javascript/achievements/spectral_material.js:200"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/javascript/achievements/spectral_material.js","line":242,"fingerprint":"javascript.lang.security.html-in-template-string:app/javascript/achievements/spectral_material.js:242"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/javascript/achievements/spectral_material.js","line":243,"fingerprint":"javascript.lang.security.html-in-template-string:app/javascript/achievements/spectral_material.js:243"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/javascript/achievements/spectral_material.js","line":249,"fingerprint":"javascript.lang.security.html-in-template-string:app/javascript/achievements/spectral_material.js:249"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/javascript/achievements/spectral_material.js","line":252,"fingerprint":"javascript.lang.security.html-in-template-string:app/javascript/achievements/spectral_material.js:252"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/javascript/achievements/spectral_material.js","line":255,"fingerprint":"javascript.lang.security.html-in-template-string:app/javascript/achievements/spectral_material.js:255"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/javascript/achievements/spectral_material.js","line":255,"fingerprint":"javascript.lang.security.html-in-template-string:app/javascript/achievements/spectral_material.js:255"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/javascript/achievements/spectral_material.js","line":262,"fingerprint":"javascript.lang.security.html-in-template-string:app/javascript/achievements/spectral_material.js:262"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/javascript/achievements/spectral_material.js","line":266,"fingerprint":"javascript.lang.security.html-in-template-string:app/javascript/achievements/spectral_material.js:266"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/javascript/achievements/spectral_material.js","line":271,"fingerprint":"javascript.lang.security.html-in-template-string:app/javascript/achievements/spectral_material.js:271"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/javascript/achievements/spectral_material.js","line":275,"fingerprint":"javascript.lang.security.html-in-template-string:app/javascript/achievements/spectral_material.js:275"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/javascript/controllers/card_modal_controller.js","line":129,"fingerprint":"javascript.lang.security.html-in-template-string:app/javascript/controllers/card_modal_controller.js:129"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/javascript/controllers/family_map_controller.js","line":136,"fingerprint":"javascript.lang.security.html-in-template-string:app/javascript/controllers/family_map_controller.js:136"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/javascript/controllers/maps/immich_enrich_controller.js","line":204,"fingerprint":"javascript.lang.security.html-in-template-string:app/javascript/controllers/maps/immich_enrich_controller.js:204"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/javascript/controllers/maps/maplibre/event_handlers.js","line":121,"fingerprint":"javascript.lang.security.html-in-template-string:app/javascript/controllers/maps/maplibre/event_handlers.js:121"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/javascript/controllers/maps/maplibre/event_handlers.js","line":245,"fingerprint":"javascript.lang.security.html-in-template-string:app/javascript/controllers/maps/maplibre/event_handlers.js:245"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/javascript/controllers/maps/maplibre/event_handlers.js","line":250,"fingerprint":"javascript.lang.security.html-in-template-string:app/javascript/controllers/maps/maplibre/event_handlers.js:250"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/javascript/controllers/maps/maplibre/event_handlers.js","line":252,"fingerprint":"javascript.lang.security.html-in-template-string:app/javascript/controllers/maps/maplibre/event_handlers.js:252"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/javascript/controllers/maps/maplibre/event_handlers.js","line":253,"fingerprint":"javascript.lang.security.html-in-template-string:app/javascript/controllers/maps/maplibre/event_handlers.js:253"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/javascript/controllers/maps/maplibre/event_handlers.js","line":254,"fingerprint":"javascript.lang.security.html-in-template-string:app/javascript/controllers/maps/maplibre/event_handlers.js:254"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/javascript/controllers/maps/maplibre/event_handlers.js","line":287,"fingerprint":"javascript.lang.security.html-in-template-string:app/javascript/controllers/maps/maplibre/event_handlers.js:287"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/javascript/controllers/maps/maplibre/event_handlers.js","line":288,"fingerprint":"javascript.lang.security.html-in-template-string:app/javascript/controllers/maps/maplibre/event_handlers.js:288"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/javascript/controllers/maps/maplibre/event_handlers.js","line":532,"fingerprint":"javascript.lang.security.html-in-template-string:app/javascript/controllers/maps/maplibre/event_handlers.js:532"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/javascript/controllers/maps/maplibre/event_handlers.js","line":545,"fingerprint":"javascript.lang.security.html-in-template-string:app/javascript/controllers/maps/maplibre/event_handlers.js:545"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/javascript/controllers/maps/maplibre/event_handlers.js","line":569,"fingerprint":"javascript.lang.security.html-in-template-string:app/javascript/controllers/maps/maplibre/event_handlers.js:569"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/javascript/controllers/maps/maplibre_controller.js","line":1536,"fingerprint":"javascript.lang.security.html-in-template-string:app/javascript/controllers/maps/maplibre_controller.js:1536"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/javascript/controllers/maps/maplibre_controller.js","line":1657,"fingerprint":"javascript.lang.security.html-in-template-string:app/javascript/controllers/maps/maplibre_controller.js:1657"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/javascript/controllers/maps/maplibre_controller.js","line":1660,"fingerprint":"javascript.lang.security.html-in-template-string:app/javascript/controllers/maps/maplibre_controller.js:1660"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/javascript/controllers/onboarding_modal_controller.js","line":135,"fingerprint":"javascript.lang.security.html-in-template-string:app/javascript/controllers/onboarding_modal_controller.js:135"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/javascript/controllers/place_creation_controller.js","line":125,"fingerprint":"javascript.lang.security.html-in-template-string:app/javascript/controllers/place_creation_controller.js:125"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/javascript/controllers/timeline_feed_controller.js","line":759,"fingerprint":"javascript.lang.security.html-in-template-string:app/javascript/controllers/timeline_feed_controller.js:759"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/javascript/controllers/upload_controller.js","line":220,"fingerprint":"javascript.lang.security.html-in-template-string:app/javascript/controllers/upload_controller.js:220"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"app/javascript/controllers/visit_creation_v2_controller.js","line":311,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:app/javascript/controllers/visit_creation_v2_controller.js:311"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"app/javascript/i18n.js","line":104,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:app/javascript/i18n.js:104"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/javascript/maps_maplibre/components/photo_popup.js","line":41,"fingerprint":"javascript.lang.security.html-in-template-string:app/javascript/maps_maplibre/components/photo_popup.js:41"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/javascript/maps_maplibre/components/place_info.js","line":31,"fingerprint":"javascript.lang.security.html-in-template-string:app/javascript/maps_maplibre/components/place_info.js:31"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/javascript/maps_maplibre/components/place_info.js","line":37,"fingerprint":"javascript.lang.security.html-in-template-string:app/javascript/maps_maplibre/components/place_info.js:37"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/javascript/maps_maplibre/components/place_info.js","line":38,"fingerprint":"javascript.lang.security.html-in-template-string:app/javascript/maps_maplibre/components/place_info.js:38"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/javascript/maps_maplibre/components/place_info.js","line":39,"fingerprint":"javascript.lang.security.html-in-template-string:app/javascript/maps_maplibre/components/place_info.js:39"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/javascript/maps_maplibre/components/place_info.js","line":40,"fingerprint":"javascript.lang.security.html-in-template-string:app/javascript/maps_maplibre/components/place_info.js:40"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/javascript/maps_maplibre/components/place_info.js","line":41,"fingerprint":"javascript.lang.security.html-in-template-string:app/javascript/maps_maplibre/components/place_info.js:41"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/javascript/maps_maplibre/components/visit_card.js","line":62,"fingerprint":"javascript.lang.security.html-in-template-string:app/javascript/maps_maplibre/components/visit_card.js:62"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/javascript/maps_maplibre/components/visit_place_search.js","line":109,"fingerprint":"javascript.lang.security.html-in-template-string:app/javascript/maps_maplibre/components/visit_place_search.js:109"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/javascript/maps_maplibre/components/visit_place_search.js","line":114,"fingerprint":"javascript.lang.security.html-in-template-string:app/javascript/maps_maplibre/components/visit_place_search.js:114"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/javascript/maps_maplibre/components/visit_place_search.js","line":244,"fingerprint":"javascript.lang.security.html-in-template-string:app/javascript/maps_maplibre/components/visit_place_search.js:244"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/javascript/maps_maplibre/components/visit_place_search.js","line":246,"fingerprint":"javascript.lang.security.html-in-template-string:app/javascript/maps_maplibre/components/visit_place_search.js:246"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/javascript/maps_maplibre/components/visit_place_search.js","line":263,"fingerprint":"javascript.lang.security.html-in-template-string:app/javascript/maps_maplibre/components/visit_place_search.js:263"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/javascript/maps_maplibre/components/visit_place_search.js","line":264,"fingerprint":"javascript.lang.security.html-in-template-string:app/javascript/maps_maplibre/components/visit_place_search.js:264"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/javascript/maps_maplibre/components/visit_place_search.js","line":269,"fingerprint":"javascript.lang.security.html-in-template-string:app/javascript/maps_maplibre/components/visit_place_search.js:269"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/javascript/maps_maplibre/components/visit_place_search.js","line":274,"fingerprint":"javascript.lang.security.html-in-template-string:app/javascript/maps_maplibre/components/visit_place_search.js:274"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/javascript/maps_maplibre/editing/point_edit_history_panel.js","line":13,"fingerprint":"javascript.lang.security.html-in-template-string:app/javascript/maps_maplibre/editing/point_edit_history_panel.js:13"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/javascript/maps_maplibre/layers/anomalies_layer.js","line":135,"fingerprint":"javascript.lang.security.html-in-template-string:app/javascript/maps_maplibre/layers/anomalies_layer.js:135"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/javascript/maps_maplibre/layers/family_layer.js","line":73,"fingerprint":"javascript.lang.security.html-in-template-string:app/javascript/maps_maplibre/layers/family_layer.js:73"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/javascript/maps_maplibre/layers/flights_layer.js","line":90,"fingerprint":"javascript.lang.security.html-in-template-string:app/javascript/maps_maplibre/layers/flights_layer.js:90"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/javascript/maps_maplibre/layers/flights_layer.js","line":93,"fingerprint":"javascript.lang.security.html-in-template-string:app/javascript/maps_maplibre/layers/flights_layer.js:93"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/javascript/maps_maplibre/layers/flights_layer.js","line":94,"fingerprint":"javascript.lang.security.html-in-template-string:app/javascript/maps_maplibre/layers/flights_layer.js:94"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/javascript/maps_maplibre/layers/photos_layer.js","line":575,"fingerprint":"javascript.lang.security.html-in-template-string:app/javascript/maps_maplibre/layers/photos_layer.js:575"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/javascript/maps_maplibre/layers/photos_layer.js","line":586,"fingerprint":"javascript.lang.security.html-in-template-string:app/javascript/maps_maplibre/layers/photos_layer.js:586"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/javascript/maps_maplibre/layers/photos_layer.js","line":590,"fingerprint":"javascript.lang.security.html-in-template-string:app/javascript/maps_maplibre/layers/photos_layer.js:590"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/javascript/maps_maplibre/layers/recent_point_layer.js","line":51,"fingerprint":"javascript.lang.security.html-in-template-string:app/javascript/maps_maplibre/layers/recent_point_layer.js:51"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/javascript/maps_maplibre/layers/recent_point_layer.js","line":57,"fingerprint":"javascript.lang.security.html-in-template-string:app/javascript/maps_maplibre/layers/recent_point_layer.js:57"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/javascript/maps_maplibre/utils/hexagon_popup.js","line":42,"fingerprint":"javascript.lang.security.html-in-template-string:app/javascript/maps_maplibre/utils/hexagon_popup.js:42"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/javascript/maps_maplibre/utils/hexagon_popup.js","line":56,"fingerprint":"javascript.lang.security.html-in-template-string:app/javascript/maps_maplibre/utils/hexagon_popup.js:56"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"app/javascript/maps_maplibre/utils/lazy_loader.js","line":48,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:app/javascript/maps_maplibre/utils/lazy_loader.js:48"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/javascript/maps_maplibre/utils/search_manager.js","line":304,"fingerprint":"javascript.lang.security.html-in-template-string:app/javascript/maps_maplibre/utils/search_manager.js:304"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/javascript/maps_maplibre/utils/search_manager.js","line":326,"fingerprint":"javascript.lang.security.html-in-template-string:app/javascript/maps_maplibre/utils/search_manager.js:326"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/javascript/maps_maplibre/utils/search_manager.js","line":338,"fingerprint":"javascript.lang.security.html-in-template-string:app/javascript/maps_maplibre/utils/search_manager.js:338"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/javascript/maps_maplibre/utils/search_manager.js","line":389,"fingerprint":"javascript.lang.security.html-in-template-string:app/javascript/maps_maplibre/utils/search_manager.js:389"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/javascript/maps_maplibre/utils/search_manager.js","line":417,"fingerprint":"javascript.lang.security.html-in-template-string:app/javascript/maps_maplibre/utils/search_manager.js:417"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/javascript/maps_maplibre/utils/search_manager.js","line":547,"fingerprint":"javascript.lang.security.html-in-template-string:app/javascript/maps_maplibre/utils/search_manager.js:547"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"app/javascript/maps_maplibre/utils/search_manager.js","line":687,"fingerprint":"javascript.lang.security.html-in-template-string:app/javascript/maps_maplibre/utils/search_manager.js:687"},{"rule_id":"opengrep/javascript.lang.security.audit.prototype-pollution.prototype-pollution-assignment","severity":"medium","message":"Possibility of prototype polluting assignment detected. By adding or modifying attributes of an object prototype, it is possible to create attributes that exist on every object, or replace critical attributes with malicious ones. This can be problematic if the software depends on existence or non-ex [confidence low]","path":"app/javascript/posthog.js","line":11,"fingerprint":"javascript.lang.security.audit.prototype-pollution.prototype-pollution-assignment:app/javascript/posthog.js:11"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.manual-template-creation","severity":"medium","message":"Detected manual creation of an ERB template. Manual creation of templates may expose your application to server-side template injection (SSTI) or cross-site scripting (XSS) attacks if user input is used to create the template. Instead, create a '.erb' template file and use 'render'. [confidence low]","path":"app/services/achievements/og_image.rb","line":61,"fingerprint":"ruby.rails.security.audit.xss.manual-template-creation:app/services/achievements/og_image.rb:61"},{"rule_id":"opengrep/ruby.lang.security.weak-hashes-md5","severity":"medium","message":"Should not use md5 to generate hashes. md5 is proven to be vulnerable through the use of brute-force attacks. Could also result in collisions, leading to potential collision attacks. Use SHA256 or other hashing functions instead. [confidence medium]","path":"app/services/imports/secure_file_downloader.rb","line":141,"fingerprint":"ruby.lang.security.weak-hashes-md5:app/services/imports/secure_file_downloader.rb:141"},{"rule_id":"opengrep/ruby.lang.security.dangerous-exec","severity":"medium","message":"Detected non-static command inside Open3.popen3. Audit the input to 'Open3.popen3'. If unverified user data can reach this call site, this is a code injection vulnerability. A malicious actor can inject a malicious script to execute arbitrary code. [confidence medium]","path":"app/services/posters/native_renderer.rb","line":87,"fingerprint":"ruby.lang.security.dangerous-exec:app/services/posters/native_renderer.rb:87"},{"rule_id":"opengrep/ruby.lang.security.ssl-mode-no-verify","severity":"medium","message":"Detected SSL that will accept an unverified connection. This makes the connections susceptible to man-in-the-middle attacks. Use 'OpenSSL::SSL::VERIFY_PEER' instead. [confidence medium]","path":"app/services/trek/client.rb","line":66,"fingerprint":"ruby.lang.security.ssl-mode-no-verify:app/services/trek/client.rb:66"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.templates.unquoted-attribute","severity":"medium","message":"Detected a unquoted template variable as an attribute. If unquoted, a malicious actor could inject custom JavaScript handlers. To fix this, add quotes around the template expression, like this: \"<%= expr %>\". [confidence low]","path":"app/views/achievements/collectibles/index.html.erb","line":2,"fingerprint":"ruby.rails.security.audit.xss.templates.unquoted-attribute:app/views/achievements/collectibles/index.html.erb:2"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.templates.unquoted-attribute","severity":"medium","message":"Detected a unquoted template variable as an attribute. If unquoted, a malicious actor could inject custom JavaScript handlers. To fix this, add quotes around the template expression, like this: \"<%= expr %>\". [confidence low]","path":"app/views/achievements/collectibles/show.html.erb","line":2,"fingerprint":"ruby.rails.security.audit.xss.templates.unquoted-attribute:app/views/achievements/collectibles/show.html.erb:2"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.templates.dangerous-link-to","severity":"medium","message":"Detected a template variable used in 'link_to'. This will generate dynamic data in the 'href' attribute. This allows a malicious actor to input the 'javascript:' URI and is subject to cross- site scripting (XSS) attacks. If using a relative URL, start with a literal forward slash and concatenate the [confidence low]","path":"app/views/achievements/collectibles/show.html.erb","line":17,"fingerprint":"ruby.rails.security.audit.xss.templates.dangerous-link-to:app/views/achievements/collectibles/show.html.erb:17"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.templates.dangerous-link-to","severity":"medium","message":"Detected a template variable used in 'link_to'. This will generate dynamic data in the 'href' attribute. This allows a malicious actor to input the 'javascript:' URI and is subject to cross- site scripting (XSS) attacks. If using a relative URL, start with a literal forward slash and concatenate the [confidence low]","path":"app/views/achievements/collectibles/show.html.erb","line":21,"fingerprint":"ruby.rails.security.audit.xss.templates.dangerous-link-to:app/views/achievements/collectibles/show.html.erb:21"},{"rule_id":"opengrep/ruby.rails.security.brakeman.check-reverse-tabnabbing","severity":"medium","message":"Setting an anchor target of `_blank` without the `noopener` or `noreferrer` attribute allows reverse tabnabbing on Internet Explorer, Opera, and Android Webview. [confidence medium]","path":"app/views/achievements/collectibles/show.html.erb","line":21,"fingerprint":"ruby.rails.security.brakeman.check-reverse-tabnabbing:app/views/achievements/collectibles/show.html.erb:21"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.templates.dangerous-link-to","severity":"medium","message":"Detected a template variable used in 'link_to'. This will generate dynamic data in the 'href' attribute. This allows a malicious actor to input the 'javascript:' URI and is subject to cross- site scripting (XSS) attacks. If using a relative URL, start with a literal forward slash and concatenate the [confidence low]","path":"app/views/achievements/collectibles/show.html.erb","line":33,"fingerprint":"ruby.rails.security.audit.xss.templates.dangerous-link-to:app/views/achievements/collectibles/show.html.erb:33"},{"rule_id":"opengrep/ruby.rails.security.brakeman.check-reverse-tabnabbing","severity":"medium","message":"Setting an anchor target of `_blank` without the `noopener` or `noreferrer` attribute allows reverse tabnabbing on Internet Explorer, Opera, and Android Webview. [confidence medium]","path":"app/views/achievements/collectibles/show.html.erb","line":33,"fingerprint":"ruby.rails.security.brakeman.check-reverse-tabnabbing:app/views/achievements/collectibles/show.html.erb:33"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.templates.dangerous-link-to","severity":"medium","message":"Detected a template variable used in 'link_to'. This will generate dynamic data in the 'href' attribute. This allows a malicious actor to input the 'javascript:' URI and is subject to cross- site scripting (XSS) attacks. If using a relative URL, start with a literal forward slash and concatenate the [confidence low]","path":"app/views/achievements/collectibles/show.html.erb","line":61,"fingerprint":"ruby.rails.security.audit.xss.templates.dangerous-link-to:app/views/achievements/collectibles/show.html.erb:61"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.templates.dangerous-link-to","severity":"medium","message":"Detected a template variable used in 'link_to'. This will generate dynamic data in the 'href' attribute. This allows a malicious actor to input the 'javascript:' URI and is subject to cross- site scripting (XSS) attacks. If using a relative URL, start with a literal forward slash and concatenate the [confidence low]","path":"app/views/achievements/collectibles/show.html.erb","line":77,"fingerprint":"ruby.rails.security.audit.xss.templates.dangerous-link-to:app/views/achievements/collectibles/show.html.erb:77"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.templates.dangerous-link-to","severity":"medium","message":"Detected a template variable used in 'link_to'. This will generate dynamic data in the 'href' attribute. This allows a malicious actor to input the 'javascript:' URI and is subject to cross- site scripting (XSS) attacks. If using a relative URL, start with a literal forward slash and concatenate the [confidence low]","path":"app/views/achievements/show.html.erb","line":9,"fingerprint":"ruby.rails.security.audit.xss.templates.dangerous-link-to:app/views/achievements/show.html.erb:9"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.templates.dangerous-link-to","severity":"medium","message":"Detected a template variable used in 'link_to'. This will generate dynamic data in the 'href' attribute. This allows a malicious actor to input the 'javascript:' URI and is subject to cross- site scripting (XSS) attacks. If using a relative URL, start with a literal forward slash and concatenate the [confidence low]","path":"app/views/achievements/show.html.erb","line":36,"fingerprint":"ruby.rails.security.audit.xss.templates.dangerous-link-to:app/views/achievements/show.html.erb:36"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.templates.dangerous-link-to","severity":"medium","message":"Detected a template variable used in 'link_to'. This will generate dynamic data in the 'href' attribute. This allows a malicious actor to input the 'javascript:' URI and is subject to cross- site scripting (XSS) attacks. If using a relative URL, start with a literal forward slash and concatenate the [confidence low]","path":"app/views/achievements/show.html.erb","line":84,"fingerprint":"ruby.rails.security.audit.xss.templates.dangerous-link-to:app/views/achievements/show.html.erb:84"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.templates.dangerous-link-to","severity":"medium","message":"Detected a template variable used in 'link_to'. This will generate dynamic data in the 'href' attribute. This allows a malicious actor to input the 'javascript:' URI and is subject to cross- site scripting (XSS) attacks. If using a relative URL, start with a literal forward slash and concatenate the [confidence low]","path":"app/views/achievements/show.html.erb","line":111,"fingerprint":"ruby.rails.security.audit.xss.templates.dangerous-link-to:app/views/achievements/show.html.erb:111"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.templates.dangerous-link-to","severity":"medium","message":"Detected a template variable used in 'link_to'. This will generate dynamic data in the 'href' attribute. This allows a malicious actor to input the 'javascript:' URI and is subject to cross- site scripting (XSS) attacks. If using a relative URL, start with a literal forward slash and concatenate the [confidence low]","path":"app/views/achievements/show.html.erb","line":140,"fingerprint":"ruby.rails.security.audit.xss.templates.dangerous-link-to:app/views/achievements/show.html.erb:140"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.templates.unquoted-attribute","severity":"medium","message":"Detected a unquoted template variable as an attribute. If unquoted, a malicious actor could inject custom JavaScript handlers. To fix this, add quotes around the template expression, like this: \"<%= expr %>\". [confidence low]","path":"app/views/active_storage/blobs/_blob.html.erb","line":1,"fingerprint":"ruby.rails.security.audit.xss.templates.unquoted-attribute:app/views/active_storage/blobs/_blob.html.erb:1"},{"rule_id":"opengrep/ruby.rails.security.brakeman.check-reverse-tabnabbing","severity":"medium","message":"Setting an anchor target of `_blank` without the `noopener` or `noreferrer` attribute allows reverse tabnabbing on Internet Explorer, Opera, and Android Webview. [confidence medium]","path":"app/views/admin/settings/_section.html.erb","line":26,"fingerprint":"ruby.rails.security.brakeman.check-reverse-tabnabbing:app/views/admin/settings/_section.html.erb:26"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.templates.dangerous-link-to","severity":"medium","message":"Detected a template variable used in 'link_to'. This will generate dynamic data in the 'href' attribute. This allows a malicious actor to input the 'javascript:' URI and is subject to cross- site scripting (XSS) attacks. If using a relative URL, start with a literal forward slash and concatenate the [confidence low]","path":"app/views/devise/mailer/confirmation_instructions.html.erb","line":5,"fingerprint":"ruby.rails.security.audit.xss.templates.dangerous-link-to:app/views/devise/mailer/confirmation_instructions.html.erb:5"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.templates.dangerous-link-to","severity":"medium","message":"Detected a template variable used in 'link_to'. This will generate dynamic data in the 'href' attribute. This allows a malicious actor to input the 'javascript:' URI and is subject to cross- site scripting (XSS) attacks. If using a relative URL, start with a literal forward slash and concatenate the [confidence low]","path":"app/views/devise/mailer/reset_password_instructions.html.erb","line":5,"fingerprint":"ruby.rails.security.audit.xss.templates.dangerous-link-to:app/views/devise/mailer/reset_password_instructions.html.erb:5"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.templates.dangerous-link-to","severity":"medium","message":"Detected a template variable used in 'link_to'. This will generate dynamic data in the 'href' attribute. This allows a malicious actor to input the 'javascript:' URI and is subject to cross- site scripting (XSS) attacks. If using a relative URL, start with a literal forward slash and concatenate the [confidence low]","path":"app/views/devise/mailer/unlock_instructions.html.erb","line":7,"fingerprint":"ruby.rails.security.audit.xss.templates.dangerous-link-to:app/views/devise/mailer/unlock_instructions.html.erb:7"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.templates.avoid-content-tag","severity":"medium","message":"'content_tag' exhibits unintuitive escaping behavior and may accidentally expose your application to cross-site scripting. If using Rails 2, only attribute values are escaped. If using Rails 3, content and attribute values are escaped. Tag and attribute names are never escaped. Because of this, it i [confidence low]","path":"app/views/devise/registrations/_points_usage.html.erb","line":4,"fingerprint":"ruby.rails.security.audit.xss.templates.avoid-content-tag:app/views/devise/registrations/_points_usage.html.erb:4"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.templates.avoid-content-tag","severity":"medium","message":"'content_tag' exhibits unintuitive escaping behavior and may accidentally expose your application to cross-site scripting. If using Rails 2, only attribute values are escaped. If using Rails 3, content and attribute values are escaped. Tag and attribute names are never escaped. Because of this, it i [confidence low]","path":"app/views/devise/registrations/_points_usage.html.erb","line":5,"fingerprint":"ruby.rails.security.audit.xss.templates.avoid-content-tag:app/views/devise/registrations/_points_usage.html.erb:5"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.templates.dangerous-link-to","severity":"medium","message":"Detected a template variable used in 'link_to'. This will generate dynamic data in the 'href' attribute. This allows a malicious actor to input the 'javascript:' URI and is subject to cross- site scripting (XSS) attacks. If using a relative URL, start with a literal forward slash and concatenate the [confidence low]","path":"app/views/devise/sessions/new.html.erb","line":13,"fingerprint":"ruby.rails.security.audit.xss.templates.dangerous-link-to:app/views/devise/sessions/new.html.erb:13"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.templates.avoid-content-tag","severity":"medium","message":"'content_tag' exhibits unintuitive escaping behavior and may accidentally expose your application to cross-site scripting. If using Rails 2, only attribute values are escaped. If using Rails 3, content and attribute values are escaped. Tag and attribute names are never escaped. Because of this, it i [confidence low]","path":"app/views/devise/shared/_feature_list.html.erb","line":1,"fingerprint":"ruby.rails.security.audit.xss.templates.avoid-content-tag:app/views/devise/shared/_feature_list.html.erb:1"},{"rule_id":"opengrep/ruby.rails.security.brakeman.check-reverse-tabnabbing","severity":"medium","message":"Setting an anchor target of `_blank` without the `noopener` or `noreferrer` attribute allows reverse tabnabbing on Internet Explorer, Opera, and Android Webview. [confidence medium]","path":"app/views/families/_getting_started.html.erb","line":48,"fingerprint":"ruby.rails.security.brakeman.check-reverse-tabnabbing:app/views/families/_getting_started.html.erb:48"},{"rule_id":"opengrep/ruby.rails.security.brakeman.check-reverse-tabnabbing","severity":"medium","message":"Setting an anchor target of `_blank` without the `noopener` or `noreferrer` attribute allows reverse tabnabbing on Internet Explorer, Opera, and Android Webview. [confidence medium]","path":"app/views/families/_getting_started.html.erb","line":52,"fingerprint":"ruby.rails.security.brakeman.check-reverse-tabnabbing:app/views/families/_getting_started.html.erb:52"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.templates.unquoted-attribute","severity":"medium","message":"Detected a unquoted template variable as an attribute. If unquoted, a malicious actor could inject custom JavaScript handlers. To fix this, add quotes around the template expression, like this: \"<%= expr %>\". [confidence low]","path":"app/views/families/_location_sharing_toggle.html.erb","line":35,"fingerprint":"ruby.rails.security.audit.xss.templates.unquoted-attribute:app/views/families/_location_sharing_toggle.html.erb:35"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.templates.unquoted-attribute","severity":"medium","message":"Detected a unquoted template variable as an attribute. If unquoted, a malicious actor could inject custom JavaScript handlers. To fix this, add quotes around the template expression, like this: \"<%= expr %>\". [confidence low]","path":"app/views/families/_location_sharing_toggle.html.erb","line":45,"fingerprint":"ruby.rails.security.audit.xss.templates.unquoted-attribute:app/views/families/_location_sharing_toggle.html.erb:45"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.templates.unquoted-attribute","severity":"medium","message":"Detected a unquoted template variable as an attribute. If unquoted, a malicious actor could inject custom JavaScript handlers. To fix this, add quotes around the template expression, like this: \"<%= expr %>\". [confidence low]","path":"app/views/families/_location_sharing_toggle.html.erb","line":46,"fingerprint":"ruby.rails.security.audit.xss.templates.unquoted-attribute:app/views/families/_location_sharing_toggle.html.erb:46"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.templates.unquoted-attribute","severity":"medium","message":"Detected a unquoted template variable as an attribute. If unquoted, a malicious actor could inject custom JavaScript handlers. To fix this, add quotes around the template expression, like this: \"<%= expr %>\". [confidence low]","path":"app/views/families/_location_sharing_toggle.html.erb","line":47,"fingerprint":"ruby.rails.security.audit.xss.templates.unquoted-attribute:app/views/families/_location_sharing_toggle.html.erb:47"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.templates.unquoted-attribute","severity":"medium","message":"Detected a unquoted template variable as an attribute. If unquoted, a malicious actor could inject custom JavaScript handlers. To fix this, add quotes around the template expression, like this: \"<%= expr %>\". [confidence low]","path":"app/views/families/_location_sharing_toggle.html.erb","line":48,"fingerprint":"ruby.rails.security.audit.xss.templates.unquoted-attribute:app/views/families/_location_sharing_toggle.html.erb:48"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.templates.unquoted-attribute","severity":"medium","message":"Detected a unquoted template variable as an attribute. If unquoted, a malicious actor could inject custom JavaScript handlers. To fix this, add quotes around the template expression, like this: \"<%= expr %>\". [confidence low]","path":"app/views/families/_location_sharing_toggle.html.erb","line":49,"fingerprint":"ruby.rails.security.audit.xss.templates.unquoted-attribute:app/views/families/_location_sharing_toggle.html.erb:49"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.templates.unquoted-attribute","severity":"medium","message":"Detected a unquoted template variable as an attribute. If unquoted, a malicious actor could inject custom JavaScript handlers. To fix this, add quotes around the template expression, like this: \"<%= expr %>\". [confidence low]","path":"app/views/families/_location_sharing_toggle.html.erb","line":76,"fingerprint":"ruby.rails.security.audit.xss.templates.unquoted-attribute:app/views/families/_location_sharing_toggle.html.erb:76"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.templates.unquoted-attribute","severity":"medium","message":"Detected a unquoted template variable as an attribute. If unquoted, a malicious actor could inject custom JavaScript handlers. To fix this, add quotes around the template expression, like this: \"<%= expr %>\". [confidence low]","path":"app/views/families/_location_sharing_toggle.html.erb","line":85,"fingerprint":"ruby.rails.security.audit.xss.templates.unquoted-attribute:app/views/families/_location_sharing_toggle.html.erb:85"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.templates.unquoted-attribute","severity":"medium","message":"Detected a unquoted template variable as an attribute. If unquoted, a malicious actor could inject custom JavaScript handlers. To fix this, add quotes around the template expression, like this: \"<%= expr %>\". [confidence low]","path":"app/views/families/_location_sharing_toggle.html.erb","line":86,"fingerprint":"ruby.rails.security.audit.xss.templates.unquoted-attribute:app/views/families/_location_sharing_toggle.html.erb:86"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.templates.unquoted-attribute","severity":"medium","message":"Detected a unquoted template variable as an attribute. If unquoted, a malicious actor could inject custom JavaScript handlers. To fix this, add quotes around the template expression, like this: \"<%= expr %>\". [confidence low]","path":"app/views/families/_location_sharing_toggle.html.erb","line":87,"fingerprint":"ruby.rails.security.audit.xss.templates.unquoted-attribute:app/views/families/_location_sharing_toggle.html.erb:87"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.templates.unquoted-attribute","severity":"medium","message":"Detected a unquoted template variable as an attribute. If unquoted, a malicious actor could inject custom JavaScript handlers. To fix this, add quotes around the template expression, like this: \"<%= expr %>\". [confidence low]","path":"app/views/families/_location_sharing_toggle.html.erb","line":88,"fingerprint":"ruby.rails.security.audit.xss.templates.unquoted-attribute:app/views/families/_location_sharing_toggle.html.erb:88"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.templates.dangerous-link-to","severity":"medium","message":"Detected a template variable used in 'link_to'. This will generate dynamic data in the 'href' attribute. This allows a malicious actor to input the 'javascript:' URI and is subject to cross- site scripting (XSS) attacks. If using a relative URL, start with a literal forward slash and concatenate the [confidence low]","path":"app/views/families/lapsed.html.erb","line":21,"fingerprint":"ruby.rails.security.audit.xss.templates.dangerous-link-to:app/views/families/lapsed.html.erb:21"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.templates.dangerous-link-to","severity":"medium","message":"Detected a template variable used in 'link_to'. This will generate dynamic data in the 'href' attribute. This allows a malicious actor to input the 'javascript:' URI and is subject to cross- site scripting (XSS) attacks. If using a relative URL, start with a literal forward slash and concatenate the [confidence low]","path":"app/views/families/new.html.erb","line":22,"fingerprint":"ruby.rails.security.audit.xss.templates.dangerous-link-to:app/views/families/new.html.erb:22"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.templates.dangerous-link-to","severity":"medium","message":"Detected a template variable used in 'link_to'. This will generate dynamic data in the 'href' attribute. This allows a malicious actor to input the 'javascript:' URI and is subject to cross- site scripting (XSS) attacks. If using a relative URL, start with a literal forward slash and concatenate the [confidence low]","path":"app/views/family/invitations/show.html.erb","line":131,"fingerprint":"ruby.rails.security.audit.xss.templates.dangerous-link-to:app/views/family/invitations/show.html.erb:131"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.templates.dangerous-link-to","severity":"medium","message":"Detected a template variable used in 'link_to'. This will generate dynamic data in the 'href' attribute. This allows a malicious actor to input the 'javascript:' URI and is subject to cross- site scripting (XSS) attacks. If using a relative URL, start with a literal forward slash and concatenate the [confidence low]","path":"app/views/family/invitations/show.html.erb","line":146,"fingerprint":"ruby.rails.security.audit.xss.templates.dangerous-link-to:app/views/family/invitations/show.html.erb:146"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.templates.dangerous-link-to","severity":"medium","message":"Detected a template variable used in 'link_to'. This will generate dynamic data in the 'href' attribute. This allows a malicious actor to input the 'javascript:' URI and is subject to cross- site scripting (XSS) attacks. If using a relative URL, start with a literal forward slash and concatenate the [confidence low]","path":"app/views/family/invitations/show.html.erb","line":155,"fingerprint":"ruby.rails.security.audit.xss.templates.dangerous-link-to:app/views/family/invitations/show.html.erb:155"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.templates.dangerous-link-to","severity":"medium","message":"Detected a template variable used in 'link_to'. This will generate dynamic data in the 'href' attribute. This allows a malicious actor to input the 'javascript:' URI and is subject to cross- site scripting (XSS) attacks. If using a relative URL, start with a literal forward slash and concatenate the [confidence low]","path":"app/views/family_mailer/invitation.html.erb","line":22,"fingerprint":"ruby.rails.security.audit.xss.templates.dangerous-link-to:app/views/family_mailer/invitation.html.erb:22"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.templates.dangerous-link-to","severity":"medium","message":"Detected a template variable used in 'link_to'. This will generate dynamic data in the 'href' attribute. This allows a malicious actor to input the 'javascript:' URI and is subject to cross- site scripting (XSS) attacks. If using a relative URL, start with a literal forward slash and concatenate the [confidence low]","path":"app/views/family_mailer/location_request.html.erb","line":18,"fingerprint":"ruby.rails.security.audit.xss.templates.dangerous-link-to:app/views/family_mailer/location_request.html.erb:18"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.templates.var-in-href","severity":"medium","message":"Detected a template variable used in an anchor tag with the 'href' attribute. This allows a malicious actor to input the 'javascript:' URI and is subject to cross- site scripting (XSS) attacks. If using a relative URL, start with a literal forward slash and concatenate the URL, like this: href='/<%= [confidence low]","path":"app/views/family_mailer/plan_lapsed.html.erb","line":30,"fingerprint":"ruby.rails.security.audit.xss.templates.var-in-href:app/views/family_mailer/plan_lapsed.html.erb:30"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.templates.dangerous-link-to","severity":"medium","message":"Detected a template variable used in 'link_to'. This will generate dynamic data in the 'href' attribute. This allows a malicious actor to input the 'javascript:' URI and is subject to cross- site scripting (XSS) attacks. If using a relative URL, start with a literal forward slash and concatenate the [confidence low]","path":"app/views/imports/download.html.erb","line":4,"fingerprint":"ruby.rails.security.audit.xss.templates.dangerous-link-to:app/views/imports/download.html.erb:4"},{"rule_id":"opengrep/ruby.rails.security.brakeman.check-reverse-tabnabbing","severity":"medium","message":"Setting an anchor target of `_blank` without the `noopener` or `noreferrer` attribute allows reverse tabnabbing on Internet Explorer, Opera, and Android Webview. [confidence medium]","path":"app/views/imports/new.html.erb","line":16,"fingerprint":"ruby.rails.security.brakeman.check-reverse-tabnabbing:app/views/imports/new.html.erb:16"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.templates.dangerous-link-to","severity":"medium","message":"Detected a template variable used in 'link_to'. This will generate dynamic data in the 'href' attribute. This allows a malicious actor to input the 'javascript:' URI and is subject to cross- site scripting (XSS) attacks. If using a relative URL, start with a literal forward slash and concatenate the [confidence low]","path":"app/views/imports/show.html.erb","line":27,"fingerprint":"ruby.rails.security.audit.xss.templates.dangerous-link-to:app/views/imports/show.html.erb:27"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.templates.dangerous-link-to","severity":"medium","message":"Detected a template variable used in 'link_to'. This will generate dynamic data in the 'href' attribute. This allows a malicious actor to input the 'javascript:' URI and is subject to cross- site scripting (XSS) attacks. If using a relative URL, start with a literal forward slash and concatenate the [confidence low]","path":"app/views/imports/show.html.erb","line":29,"fingerprint":"ruby.rails.security.audit.xss.templates.dangerous-link-to:app/views/imports/show.html.erb:29"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.templates.dangerous-link-to","severity":"medium","message":"Detected a template variable used in 'link_to'. This will generate dynamic data in the 'href' attribute. This allows a malicious actor to input the 'javascript:' URI and is subject to cross- site scripting (XSS) attacks. If using a relative URL, start with a literal forward slash and concatenate the [confidence low]","path":"app/views/insights/_header.html.erb","line":17,"fingerprint":"ruby.rails.security.audit.xss.templates.dangerous-link-to:app/views/insights/_header.html.erb:17"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.templates.dangerous-link-to","severity":"medium","message":"Detected a template variable used in 'link_to'. This will generate dynamic data in the 'href' attribute. This allows a malicious actor to input the 'javascript:' URI and is subject to cross- site scripting (XSS) attacks. If using a relative URL, start with a literal forward slash and concatenate the [confidence low]","path":"app/views/insights/_header.html.erb","line":22,"fingerprint":"ruby.rails.security.audit.xss.templates.dangerous-link-to:app/views/insights/_header.html.erb:22"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.templates.dangerous-link-to","severity":"medium","message":"Detected a template variable used in 'link_to'. This will generate dynamic data in the 'href' attribute. This allows a malicious actor to input the 'javascript:' URI and is subject to cross- site scripting (XSS) attacks. If using a relative URL, start with a literal forward slash and concatenate the [confidence low]","path":"app/views/insights/_header.html.erb","line":32,"fingerprint":"ruby.rails.security.audit.xss.templates.dangerous-link-to:app/views/insights/_header.html.erb:32"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.templates.dangerous-link-to","severity":"medium","message":"Detected a template variable used in 'link_to'. This will generate dynamic data in the 'href' attribute. This allows a malicious actor to input the 'javascript:' URI and is subject to cross- site scripting (XSS) attacks. If using a relative URL, start with a literal forward slash and concatenate the [confidence low]","path":"app/views/insights/_monthly_digest.html.erb","line":27,"fingerprint":"ruby.rails.security.audit.xss.templates.dangerous-link-to:app/views/insights/_monthly_digest.html.erb:27"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.templates.dangerous-link-to","severity":"medium","message":"Detected a template variable used in 'link_to'. This will generate dynamic data in the 'href' attribute. This allows a malicious actor to input the 'javascript:' URI and is subject to cross- site scripting (XSS) attacks. If using a relative URL, start with a literal forward slash and concatenate the [confidence low]","path":"app/views/insights/_monthly_digest.html.erb","line":186,"fingerprint":"ruby.rails.security.audit.xss.templates.dangerous-link-to:app/views/insights/_monthly_digest.html.erb:186"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.templates.var-in-href","severity":"medium","message":"Detected a template variable used in an anchor tag with the 'href' attribute. This allows a malicious actor to input the 'javascript:' URI and is subject to cross- site scripting (XSS) attacks. If using a relative URL, start with a literal forward slash and concatenate the URL, like this: href='/<%= [confidence low]","path":"app/views/insights/_pro_locked_card.html.erb","line":20,"fingerprint":"ruby.rails.security.audit.xss.templates.var-in-href:app/views/insights/_pro_locked_card.html.erb:20"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.templates.avoid-html-safe","severity":"medium","message":"'html_safe' renders raw HTML. This means that normal HTML escaping is bypassed. If user data can be controlled here, this exposes your application to cross-site scripting (XSS). If you need to do this, be sure to correctly sanitize the data using a library such as DOMPurify. [confidence low]","path":"app/views/layouts/application.html.erb","line":26,"fingerprint":"ruby.rails.security.audit.xss.templates.avoid-html-safe:app/views/layouts/application.html.erb:26"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.templates.var-in-script-tag","severity":"medium","message":"Detected a template variable used in a script tag. Although template variables are HTML escaped, HTML escaping does not always prevent cross-site scripting (XSS) attacks when used directly in JavaScript. If you need to do this, use `escape_javascript` or its alias, `j`. However, this will not protec [confidence low]","path":"app/views/layouts/application.html.erb","line":31,"fingerprint":"ruby.rails.security.audit.xss.templates.var-in-script-tag:app/views/layouts/application.html.erb:31"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.templates.avoid-html-safe","severity":"medium","message":"'html_safe' renders raw HTML. This means that normal HTML escaping is bypassed. If user data can be controlled here, this exposes your application to cross-site scripting (XSS). If you need to do this, be sure to correctly sanitize the data using a library such as DOMPurify. [confidence low]","path":"app/views/layouts/application.html.erb","line":31,"fingerprint":"ruby.rails.security.audit.xss.templates.avoid-html-safe:app/views/layouts/application.html.erb:31"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.templates.var-in-script-tag","severity":"medium","message":"Detected a template variable used in a script tag. Although template variables are HTML escaped, HTML escaping does not always prevent cross-site scripting (XSS) attacks when used directly in JavaScript. If you need to do this, use `escape_javascript` or its alias, `j`. However, this will not protec [confidence low]","path":"app/views/layouts/application.html.erb","line":32,"fingerprint":"ruby.rails.security.audit.xss.templates.var-in-script-tag:app/views/layouts/application.html.erb:32"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.templates.avoid-html-safe","severity":"medium","message":"'html_safe' renders raw HTML. This means that normal HTML escaping is bypassed. If user data can be controlled here, this exposes your application to cross-site scripting (XSS). If you need to do this, be sure to correctly sanitize the data using a library such as DOMPurify. [confidence low]","path":"app/views/layouts/application.html.erb","line":32,"fingerprint":"ruby.rails.security.audit.xss.templates.avoid-html-safe:app/views/layouts/application.html.erb:32"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.templates.var-in-script-tag","severity":"medium","message":"Detected a template variable used in a script tag. Although template variables are HTML escaped, HTML escaping does not always prevent cross-site scripting (XSS) attacks when used directly in JavaScript. If you need to do this, use `escape_javascript` or its alias, `j`. However, this will not protec [confidence low]","path":"app/views/layouts/application.html.erb","line":44,"fingerprint":"ruby.rails.security.audit.xss.templates.var-in-script-tag:app/views/layouts/application.html.erb:44"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.templates.avoid-html-safe","severity":"medium","message":"'html_safe' renders raw HTML. This means that normal HTML escaping is bypassed. If user data can be controlled here, this exposes your application to cross-site scripting (XSS). If you need to do this, be sure to correctly sanitize the data using a library such as DOMPurify. [confidence low]","path":"app/views/layouts/application.html.erb","line":44,"fingerprint":"ruby.rails.security.audit.xss.templates.avoid-html-safe:app/views/layouts/application.html.erb:44"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.templates.var-in-script-tag","severity":"medium","message":"Detected a template variable used in a script tag. Although template variables are HTML escaped, HTML escaping does not always prevent cross-site scripting (XSS) attacks when used directly in JavaScript. If you need to do this, use `escape_javascript` or its alias, `j`. However, this will not protec [confidence low]","path":"app/views/layouts/application.html.erb","line":54,"fingerprint":"ruby.rails.security.audit.xss.templates.var-in-script-tag:app/views/layouts/application.html.erb:54"},{"rule_id":"opengrep/ruby.rails.security.audit.xss.templates.avoid-html-safe","severity":"medium","message":"'html_safe' renders raw HTML. This means that normal HTML escaping is bypassed. If user data can be controlled here, this exposes your application to cross-site scripting (XSS). If you need to do this, be sure to correctly sanitize the data using a library such as DOMPurify. [confidence low]","path":"app/views/layouts/application.html.erb","line":54,"fingerprint":"ruby.rails.security.audit.xss.templates.avoid-html-safe:app/views/layouts/application.html.erb:54"}],"evidence":[],"data":{"rulesets":["ruby","javascript","bash","dockerfile"]},"error":null},{"analyzer":"sec-deps","pillar":"security","status":"ok","tool_version":"osv-scanner version: 2.7.1","metrics":{"vulnerable_packages":4.0,"vulnerabilities":8.0,"vulns_critical":1.0,"vulns_high":3.0,"vulns_medium":1.0,"vulns_low":1.0,"vulns_unknown":2.0,"penalty":34.0},"findings":[{"rule_id":"osv/GHSA-cg2g-xh64-v4q7","severity":"critical","message":"dompurify@3.4.13 (npm) is affected by GHSA-cg2g-xh64-v4q7","path":"package-lock.json","line":null,"fingerprint":"dompurify@3.4.13 (npm):GHSA-cg2g-xh64-v4q7"},{"rule_id":"osv/GHSA-73v3-wf97-vpgj","severity":"high","message":"msgpack@1.8.4 (RubyGems) is affected by GHSA-73v3-wf97-vpgj","path":"Gemfile.lock","line":null,"fingerprint":"msgpack@1.8.4 (RubyGems):GHSA-73v3-wf97-vpgj"},{"rule_id":"osv/GHSA-mrv2-3pqr-j5jr","severity":"high","message":"dompurify@3.4.13 (npm) is affected by GHSA-mrv2-3pqr-j5jr","path":"package-lock.json","line":null,"fingerprint":"dompurify@3.4.13 (npm):GHSA-mrv2-3pqr-j5jr"},{"rule_id":"osv/GHSA-68fv-2mgg-jv7q","severity":"high","message":"source-map-js@1.2.1 (npm) is affected by GHSA-68fv-2mgg-jv7q","path":"package-lock.json","line":null,"fingerprint":"source-map-js@1.2.1 (npm):GHSA-68fv-2mgg-jv7q"},{"rule_id":"osv/GHSA-m27g-v28p-f9fx","severity":"medium","message":"omniauth@2.1.4 (RubyGems) is affected by GHSA-m27g-v28p-f9fx","path":"Gemfile.lock","line":null,"fingerprint":"omniauth@2.1.4 (RubyGems):GHSA-m27g-v28p-f9fx"},{"rule_id":"osv/GHSA-6688-9rhm-gjv2","severity":"medium","message":"dompurify@3.4.13 (npm) is affected by GHSA-6688-9rhm-gjv2","path":"package-lock.json","line":null,"fingerprint":"dompurify@3.4.13 (npm):GHSA-6688-9rhm-gjv2"},{"rule_id":"osv/GHSA-c6gr-qvv4-5v3f","severity":"medium","message":"dompurify@3.4.13 (npm) is affected by GHSA-c6gr-qvv4-5v3f","path":"package-lock.json","line":null,"fingerprint":"dompurify@3.4.13 (npm):GHSA-c6gr-qvv4-5v3f"},{"rule_id":"osv/GHSA-p98j-92pf-mc4p","severity":"low","message":"dompurify@3.4.13 (npm) is affected by GHSA-p98j-92pf-mc4p","path":"package-lock.json","line":null,"fingerprint":"dompurify@3.4.13 (npm):GHSA-p98j-92pf-mc4p"}],"evidence":[],"data":{"ecosystems":["RubyGems","npm"]},"error":null},{"analyzer":"sec-actions","pillar":"security","status":"ok","tool_version":"zizmor 1.32.0","metrics":{"workflows":9.0,"findings":50.0,"findings_high":28.0,"findings_medium":10.0,"findings_low":12.0,"penalty":346.5},"findings":[{"rule_id":"zizmor/template-injection","severity":"high","message":"code injection via template expansion [confidence high]","path":".github/workflows/attach_compose.yml","line":21,"fingerprint":"template-injection:.github/workflows/attach_compose.yml:21"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/attach_compose.yml","line":16,"fingerprint":"unpinned-uses:.github/workflows/attach_compose.yml:16"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/biome.yml","line":12,"fingerprint":"unpinned-uses:.github/workflows/biome.yml:12"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/biome.yml","line":32,"fingerprint":"unpinned-uses:.github/workflows/biome.yml:32"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/build_and_push.yml","line":55,"fingerprint":"unpinned-uses:.github/workflows/build_and_push.yml:55"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/build_and_push.yml","line":62,"fingerprint":"unpinned-uses:.github/workflows/build_and_push.yml:62"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/build_and_push.yml","line":67,"fingerprint":"unpinned-uses:.github/workflows/build_and_push.yml:67"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/build_and_push.yml","line":70,"fingerprint":"unpinned-uses:.github/workflows/build_and_push.yml:70"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/build_and_push.yml","line":82,"fingerprint":"unpinned-uses:.github/workflows/build_and_push.yml:82"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/build_and_push.yml","line":87,"fingerprint":"unpinned-uses:.github/workflows/build_and_push.yml:87"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/build_and_push.yml","line":100,"fingerprint":"unpinned-uses:.github/workflows/build_and_push.yml:100"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/build_and_push.yml","line":122,"fingerprint":"unpinned-uses:.github/workflows/build_and_push.yml:122"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/build_and_push.yml","line":136,"fingerprint":"unpinned-uses:.github/workflows/build_and_push.yml:136"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/build_and_push.yml","line":141,"fingerprint":"unpinned-uses:.github/workflows/build_and_push.yml:141"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/build_and_push.yml","line":147,"fingerprint":"unpinned-uses:.github/workflows/build_and_push.yml:147"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/build_and_push.yml","line":150,"fingerprint":"unpinned-uses:.github/workflows/build_and_push.yml:150"},{"rule_id":"zizmor/cache-poisoning","severity":"high","message":"runtime artifacts potentially vulnerable to a cache poisoning attack [confidence low]","path":".github/workflows/build_and_push.yml","line":70,"fingerprint":"cache-poisoning:.github/workflows/build_and_push.yml:70"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/ci.yml","line":21,"fingerprint":"unpinned-uses:.github/workflows/ci.yml:21"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/ci.yml","line":24,"fingerprint":"unpinned-uses:.github/workflows/ci.yml:24"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/ci.yml","line":69,"fingerprint":"unpinned-uses:.github/workflows/ci.yml:69"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/ci.yml","line":75,"fingerprint":"unpinned-uses:.github/workflows/ci.yml:75"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/ci.yml","line":80,"fingerprint":"unpinned-uses:.github/workflows/ci.yml:80"},{"rule_id":"zizmor/unpinned-images","severity":"high","message":"unpinned image references [confidence high]","path":".github/workflows/ci.yml","line":54,"fingerprint":"unpinned-images:.github/workflows/ci.yml:54"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/mirror-onedev.yml","line":22,"fingerprint":"unpinned-uses:.github/workflows/mirror-onedev.yml:22"},{"rule_id":"zizmor/dangerous-triggers","severity":"high","message":"use of fundamentally insecure workflow trigger [confidence medium]","path":".github/workflows/release_notifications.yml","line":4,"fingerprint":"dangerous-triggers:.github/workflows/release_notifications.yml:4"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/release_notifications.yml","line":20,"fingerprint":"unpinned-uses:.github/workflows/release_notifications.yml:20"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/rubocop.yml","line":14,"fingerprint":"unpinned-uses:.github/workflows/rubocop.yml:14"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/rubocop.yml","line":33,"fingerprint":"unpinned-uses:.github/workflows/rubocop.yml:33"},{"rule_id":"zizmor/dependabot-cooldown","severity":"medium","message":"insufficient cooldown in Dependabot updates [confidence high]","path":".github/dependabot.yml","line":5,"fingerprint":"dependabot-cooldown:.github/dependabot.yml:5"},{"rule_id":"zizmor/dependabot-cooldown","severity":"medium","message":"insufficient cooldown in Dependabot updates [confidence high]","path":".github/dependabot.yml","line":18,"fingerprint":"dependabot-cooldown:.github/dependabot.yml:18"},{"rule_id":"zizmor/dependabot-cooldown","severity":"medium","message":"insufficient cooldown in Dependabot updates [confidence high]","path":".github/dependabot.yml","line":34,"fingerprint":"dependabot-cooldown:.github/dependabot.yml:34"},{"rule_id":"zizmor/template-injection","severity":"medium","message":"code injection via template expansion [confidence medium]","path":".github/workflows/build_and_push.yml","line":95,"fingerprint":"template-injection:.github/workflows/build_and_push.yml:95"},{"rule_id":"zizmor/artipacked","severity":"medium","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/security.yml","line":26,"fingerprint":"artipacked:.github/workflows/security.yml:26"},{"rule_id":"zizmor/artipacked","severity":"medium","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/security.yml","line":51,"fingerprint":"artipacked:.github/workflows/security.yml:51"},{"rule_id":"zizmor/artipacked","severity":"medium","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/security.yml","line":71,"fingerprint":"artipacked:.github/workflows/security.yml:71"},{"rule_id":"zizmor/artipacked","severity":"medium","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/security.yml","line":106,"fingerprint":"artipacked:.github/workflows/security.yml:106"},{"rule_id":"zizmor/artipacked","severity":"medium","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/trivy.yml","line":30,"fingerprint":"artipacked:.github/workflows/trivy.yml:30"},{"rule_id":"zizmor/artipacked","severity":"medium","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/trivy.yml","line":81,"fingerprint":"artipacked:.github/workflows/trivy.yml:81"},{"rule_id":"zizmor/artipacked","severity":"low","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/attach_compose.yml","line":16,"fingerprint":"artipacked:.github/workflows/attach_compose.yml:16"},{"rule_id":"zizmor/artipacked","severity":"low","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/build_and_push.yml","line":54,"fingerprint":"artipacked:.github/workflows/build_and_push.yml:54"},{"rule_id":"zizmor/artipacked","severity":"low","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/build_and_push.yml","line":135,"fingerprint":"artipacked:.github/workflows/build_and_push.yml:135"},{"rule_id":"zizmor/artipacked","severity":"low","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/ci.yml","line":20,"fingerprint":"artipacked:.github/workflows/ci.yml:20"},{"rule_id":"zizmor/artipacked","severity":"low","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/ci.yml","line":68,"fingerprint":"artipacked:.github/workflows/ci.yml:68"},{"rule_id":"zizmor/artipacked","severity":"low","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/release_notifications.yml","line":20,"fingerprint":"artipacked:.github/workflows/release_notifications.yml:20"},{"rule_id":"zizmor/artipacked","severity":"low","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/rubocop.yml","line":13,"fingerprint":"artipacked:.github/workflows/rubocop.yml:13"},{"rule_id":"zizmor/template-injection","severity":"info","message":"code injection via template expansion [confidence low]","path":".github/workflows/build_and_push.yml","line":118,"fingerprint":"template-injection:.github/workflows/build_and_push.yml:118"},{"rule_id":"zizmor/template-injection","severity":"info","message":"code injection via template expansion [confidence low]","path":".github/workflows/build_and_push.yml","line":160,"fingerprint":"template-injection:.github/workflows/build_and_push.yml:160"},{"rule_id":"zizmor/template-injection","severity":"info","message":"code injection via template expansion [confidence low]","path":".github/workflows/build_and_push.yml","line":161,"fingerprint":"template-injection:.github/workflows/build_and_push.yml:161"},{"rule_id":"zizmor/template-injection","severity":"info","message":"code injection via template expansion [confidence low]","path":".github/workflows/build_and_push.yml","line":176,"fingerprint":"template-injection:.github/workflows/build_and_push.yml:176"},{"rule_id":"zizmor/template-injection","severity":"info","message":"code injection via template expansion [confidence low]","path":".github/workflows/build_and_push.yml","line":190,"fingerprint":"template-injection:.github/workflows/build_and_push.yml:190"}],"evidence":[],"data":{},"error":null},{"analyzer":"sec-posture","pillar":"security","status":"ok","tool_version":null,"metrics":{"check:security_policy":0.0,"check:dependency_updates":1.0,"check:signed_commits":0.0,"check:lockfiles":1.0,"signed_commit_share":0.0,"unpinned_manifests":0.0},"findings":[],"evidence":[{"kind":"posture","description":"Dependency updates: .github/dependabot.yml","ref":".github/dependabot.yml","url":null,"weight":0.0}],"data":{},"error":null},{"analyzer":"sec-distribution","pillar":"security","status":"ok","tool_version":null,"metrics":{"signals":0.0,"binary_assets":0.0,"suspicious":0.0},"findings":[],"evidence":[],"data":{"signals":[],"suspicious":false,"unusual_traction":false,"metadata":true},"error":null},{"analyzer":"qual-complexity","pillar":"quality","status":"ok","tool_version":"lizard 1.25.1","metrics":{"functions":12008.0,"function_nloc":84144.0,"mean_ccn":2.53,"p90_ccn":5.0,"complex_functions":92.0,"long_functions":7.0,"many_param_functions":42.0,"risky_nloc_share":0.0232},"findings":[],"evidence":[{"kind":"complex-function","description":"fe in public/maplibre/6.16.0/maplibre-gl-worker.mjs: complexity 172, 1 lines","ref":"public/maplibre/6.16.0/maplibre-gl-worker.mjs","url":"https://github.com/Freika/dawarich/blob/0ac68e1835cf2a091907eb55f6287714c7206a6c/public/maplibre/6.16.0/maplibre-gl-worker.mjs#L5","weight":1.0},{"kind":"complex-function","description":"addLine in public/maplibre/6.16.0/maplibre-gl-worker.mjs: complexity 67, 1 lines","ref":"public/maplibre/6.16.0/maplibre-gl-worker.mjs","url":"https://github.com/Freika/dawarich/blob/0ac68e1835cf2a091907eb55f6287714c7206a6c/public/maplibre/6.16.0/maplibre-gl-worker.mjs#L5","weight":1.0},{"kind":"complex-function","description":"syncToggleStates in app/javascript/controllers/maps/maplibre/settings_manager.js: complexity 40, 161 lines","ref":"app/javascript/controllers/maps/maplibre/settings_manager.js","url":"https://github.com/Freika/dawarich/blob/0ac68e1835cf2a091907eb55f6287714c7206a6c/app/javascript/controllers/maps/maplibre/settings_manager.js#L61","weight":0.6666666666666666},{"kind":"complex-function","description":"ru in public/maplibre/6.16.0/maplibre-gl-worker.mjs: complexity 40, 1 lines","ref":"public/maplibre/6.16.0/maplibre-gl-worker.mjs","url":"https://github.com/Freika/dawarich/blob/0ac68e1835cf2a091907eb55f6287714c7206a6c/public/maplibre/6.16.0/maplibre-gl-worker.mjs#L5","weight":0.6666666666666666},{"kind":"complex-function","description":"hx in public/maplibre/6.16.0/maplibre-gl-worker.mjs: complexity 39, 1 lines","ref":"public/maplibre/6.16.0/maplibre-gl-worker.mjs","url":"https://github.com/Freika/dawarich/blob/0ac68e1835cf2a091907eb55f6287714c7206a6c/public/maplibre/6.16.0/maplibre-gl-worker.mjs#L5","weight":0.65},{"kind":"complex-function","description":"evaluate in public/maplibre/6.16.0/maplibre-gl-worker.mjs: complexity 37, 1 lines","ref":"public/maplibre/6.16.0/maplibre-gl-worker.mjs","url":"https://github.com/Freika/dawarich/blob/0ac68e1835cf2a091907eb55f6287714c7206a6c/public/maplibre/6.16.0/maplibre-gl-worker.mjs#L5","weight":0.6166666666666667},{"kind":"complex-function","description":"_parse in public/maplibre/6.16.0/maplibre-gl-worker.mjs: complexity 36, 1 lines","ref":"public/maplibre/6.16.0/maplibre-gl-worker.mjs","url":"https://github.com/Freika/dawarich/blob/0ac68e1835cf2a091907eb55f6287714c7206a6c/public/maplibre/6.16.0/maplibre-gl-worker.mjs#L5","weight":0.6},{"kind":"complex-function","description":"fa in public/maplibre/6.16.0/maplibre-gl-worker.mjs: complexity 36, 1 lines","ref":"public/maplibre/6.16.0/maplibre-gl-worker.mjs","url":"https://github.com/Freika/dawarich/blob/0ac68e1835cf2a091907eb55f6287714c7206a6c/public/maplibre/6.16.0/maplibre-gl-worker.mjs#L5","weight":0.6},{"kind":"complex-function","description":"u_ in public/maplibre/6.16.0/maplibre-gl-worker.mjs: complexity 35, 1 lines","ref":"public/maplibre/6.16.0/maplibre-gl-worker.mjs","url":"https://github.com/Freika/dawarich/blob/0ac68e1835cf2a091907eb55f6287714c7206a6c/public/maplibre/6.16.0/maplibre-gl-worker.mjs#L5","weight":0.5833333333333334},{"kind":"complex-function","description":"i_ in public/maplibre/6.16.0/maplibre-gl-worker.mjs: complexity 35, 1 lines","ref":"public/maplibre/6.16.0/maplibre-gl-worker.mjs","url":"https://github.com/Freika/dawarich/blob/0ac68e1835cf2a091907eb55f6287714c7206a6c/public/maplibre/6.16.0/maplibre-gl-worker.mjs#L5","weight":0.5833333333333334}],"data":{},"error":null},{"analyzer":"qual-duplication","pillar":"quality","status":"ok","tool_version":"repotrust-dup-w6","metrics":{"compared_lines":83631.0,"duplicated_lines":2643.0,"duplicated_share":0.0316,"files":1550.0},"findings":[],"evidence":[{"kind":"duplicate-code","description":"6+ duplicated lines: app/controllers/api/v1/auth/apple_controller.rb:16 and app/controllers/api/v1/auth/google_controller.rb:16","ref":"app/controllers/api/v1/auth/apple_controller.rb","url":"https://github.com/Freika/dawarich/blob/0ac68e1835cf2a091907eb55f6287714c7206a6c/app/controllers/api/v1/auth/apple_controller.rb#L16","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: app/controllers/api/v1/insights_controller.rb:77 and app/controllers/insights_controller.rb:189","ref":"app/controllers/api/v1/insights_controller.rb","url":"https://github.com/Freika/dawarich/blob/0ac68e1835cf2a091907eb55f6287714c7206a6c/app/controllers/api/v1/insights_controller.rb#L77","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: app/controllers/api/v1/places_controller.rb:236 and app/controllers/api/v1/visits/select_place_controller.rb:39","ref":"app/controllers/api/v1/places_controller.rb","url":"https://github.com/Freika/dawarich/blob/0ac68e1835cf2a091907eb55f6287714c7206a6c/app/controllers/api/v1/places_controller.rb#L236","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: app/controllers/api/v1/shared/base_controller.rb:27 and app/controllers/shared/links_controller.rb:36","ref":"app/controllers/api/v1/shared/base_controller.rb","url":"https://github.com/Freika/dawarich/blob/0ac68e1835cf2a091907eb55f6287714c7206a6c/app/controllers/api/v1/shared/base_controller.rb#L27","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: app/controllers/auth/account_links_controller.rb:57 and app/controllers/auth/account_links_controller.rb:74","ref":"app/controllers/auth/account_links_controller.rb","url":"https://github.com/Freika/dawarich/blob/0ac68e1835cf2a091907eb55f6287714c7206a6c/app/controllers/auth/account_links_controller.rb#L57","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: app/controllers/imports_controller.rb:196 and app/controllers/settings/users_controller.rb:206","ref":"app/controllers/imports_controller.rb","url":"https://github.com/Freika/dawarich/blob/0ac68e1835cf2a091907eb55f6287714c7206a6c/app/controllers/imports_controller.rb#L196","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: app/controllers/insights_controller.rb:11 and app/controllers/insights_controller.rb:28","ref":"app/controllers/insights_controller.rb","url":"https://github.com/Freika/dawarich/blob/0ac68e1835cf2a091907eb55f6287714c7206a6c/app/controllers/insights_controller.rb#L11","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: app/controllers/shared/digests_controller.rb:46 and app/controllers/shared/stats_controller.rb:46","ref":"app/controllers/shared/digests_controller.rb","url":"https://github.com/Freika/dawarich/blob/0ac68e1835cf2a091907eb55f6287714c7206a6c/app/controllers/shared/digests_controller.rb#L46","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: app/controllers/visits_controller.rb:260 and app/controllers/visits_controller.rb:354","ref":"app/controllers/visits_controller.rb","url":"https://github.com/Freika/dawarich/blob/0ac68e1835cf2a091907eb55f6287714c7206a6c/app/controllers/visits_controller.rb#L260","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: app/javascript/channels/family_locations_channel.js:4 and app/javascript/maps_maplibre/channels/map_channel.js:34","ref":"app/javascript/channels/family_locations_channel.js","url":"https://github.com/Freika/dawarich/blob/0ac68e1835cf2a091907eb55f6287714c7206a6c/app/javascript/channels/family_locations_channel.js#L4","weight":0.3}],"data":{},"error":null},{"analyzer":"qual-lint","pillar":"quality","status":"ok","tool_version":"opengrep 1.33.1; rules f1d2b562b414","metrics":{"findings":56.0,"weighted_findings":27.5,"scanned_lines":124437.0,"category:best-practice":8.0,"category:correctness":44.0,"category:performance":4.0},"findings":[{"rule_id":"opengrep/javascript.lang.best-practice.javascript-confirm","severity":"medium","message":"found confirm() call; should this be in production code?","path":"app/javascript/controllers/maps/maplibre/area_selection_manager.js","line":396,"fingerprint":"javascript.lang.best-practice.javascript-confirm:app/javascript/controllers/maps/maplibre/area_selection_manager.js:396"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-confirm","severity":"medium","message":"found confirm() call; should this be in production code?","path":"app/javascript/controllers/maps/maplibre/area_selection_manager.js","line":632,"fingerprint":"javascript.lang.best-practice.javascript-confirm:app/javascript/controllers/maps/maplibre/area_selection_manager.js:632"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-confirm","severity":"medium","message":"found confirm() call; should this be in production code?","path":"app/javascript/controllers/maps/maplibre/area_selection_manager.js","line":709,"fingerprint":"javascript.lang.best-practice.javascript-confirm:app/javascript/controllers/maps/maplibre/area_selection_manager.js:709"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-confirm","severity":"medium","message":"found confirm() call; should this be in production code?","path":"app/javascript/controllers/maps/maplibre/settings_manager.js","line":370,"fingerprint":"javascript.lang.best-practice.javascript-confirm:app/javascript/controllers/maps/maplibre/settings_manager.js:370"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-confirm","severity":"medium","message":"found confirm() call; should this be in production code?","path":"app/javascript/controllers/maps/maplibre/settings_manager.js","line":749,"fingerprint":"javascript.lang.best-practice.javascript-confirm:app/javascript/controllers/maps/maplibre/settings_manager.js:749"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-confirm","severity":"medium","message":"found confirm() call; should this be in production code?","path":"app/javascript/controllers/maps/maplibre/settings_manager.js","line":785,"fingerprint":"javascript.lang.best-practice.javascript-confirm:app/javascript/controllers/maps/maplibre/settings_manager.js:785"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-confirm","severity":"medium","message":"found confirm() call; should this be in production code?","path":"app/javascript/controllers/maps/maplibre_controller.js","line":1753,"fingerprint":"javascript.lang.best-practice.javascript-confirm:app/javascript/controllers/maps/maplibre_controller.js:1753"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-confirm","severity":"medium","message":"found confirm() call; should this be in production code?","path":"app/javascript/maps_maplibre/components/place_actions.js","line":5,"fingerprint":"javascript.lang.best-practice.javascript-confirm:app/javascript/maps_maplibre/components/place_actions.js:5"},{"rule_id":"opengrep/javascript.lang.correctness.no-stringify-keys","severity":"medium","message":"JSON stringify does not produce a stable key ordering, and should not be relied on for producing object keys. Consider using json-stable-stringify instead.","path":"app/javascript/video_studio/video_renderer.js","line":49,"fingerprint":"javascript.lang.correctness.no-stringify-keys:app/javascript/video_studio/video_renderer.js:49"},{"rule_id":"opengrep/javascript.lang.correctness.no-stringify-keys","severity":"medium","message":"JSON stringify does not produce a stable key ordering, and should not be relied on for producing object keys. Consider using json-stable-stringify instead.","path":"app/javascript/video_studio/video_renderer.js","line":50,"fingerprint":"javascript.lang.correctness.no-stringify-keys:app/javascript/video_studio/video_renderer.js:50"},{"rule_id":"opengrep/javascript.lang.correctness.no-stringify-keys","severity":"medium","message":"JSON stringify does not produce a stable key ordering, and should not be relied on for producing object keys. Consider using json-stable-stringify instead.","path":"app/javascript/video_studio/video_renderer.js","line":61,"fingerprint":"javascript.lang.correctness.no-stringify-keys:app/javascript/video_studio/video_renderer.js:61"},{"rule_id":"opengrep/javascript.lang.correctness.no-stringify-keys","severity":"medium","message":"JSON stringify does not produce a stable key ordering, and should not be relied on for producing object keys. Consider using json-stable-stringify instead.","path":"app/javascript/video_studio/video_renderer.js","line":62,"fingerprint":"javascript.lang.correctness.no-stringify-keys:app/javascript/video_studio/video_renderer.js:62"},{"rule_id":"opengrep/javascript.lang.correctness.no-stringify-keys","severity":"medium","message":"JSON stringify does not produce a stable key ordering, and should not be relied on for producing object keys. Consider using json-stable-stringify instead.","path":"app/javascript/video_studio/video_renderer.js","line":66,"fingerprint":"javascript.lang.correctness.no-stringify-keys:app/javascript/video_studio/video_renderer.js:66"},{"rule_id":"opengrep/javascript.lang.correctness.no-stringify-keys","severity":"medium","message":"JSON stringify does not produce a stable key ordering, and should not be relied on for producing object keys. Consider using json-stable-stringify instead.","path":"app/javascript/video_studio/video_renderer.js","line":67,"fingerprint":"javascript.lang.correctness.no-stringify-keys:app/javascript/video_studio/video_renderer.js:67"},{"rule_id":"opengrep/javascript.lang.correctness.no-stringify-keys","severity":"medium","message":"JSON stringify does not produce a stable key ordering, and should not be relied on for producing object keys. Consider using json-stable-stringify instead.","path":"app/javascript/video_studio/video_renderer.js","line":69,"fingerprint":"javascript.lang.correctness.no-stringify-keys:app/javascript/video_studio/video_renderer.js:69"},{"rule_id":"opengrep/javascript.lang.correctness.no-stringify-keys","severity":"medium","message":"JSON stringify does not produce a stable key ordering, and should not be relied on for producing object keys. Consider using json-stable-stringify instead.","path":"app/javascript/video_studio/video_renderer.js","line":72,"fingerprint":"javascript.lang.correctness.no-stringify-keys:app/javascript/video_studio/video_renderer.js:72"},{"rule_id":"opengrep/javascript.lang.correctness.no-stringify-keys","severity":"medium","message":"JSON stringify does not produce a stable key ordering, and should not be relied on for producing object keys. Consider using json-stable-stringify instead.","path":"app/javascript/video_studio/video_renderer.js","line":76,"fingerprint":"javascript.lang.correctness.no-stringify-keys:app/javascript/video_studio/video_renderer.js:76"},{"rule_id":"opengrep/javascript.lang.correctness.no-stringify-keys","severity":"medium","message":"JSON stringify does not produce a stable key ordering, and should not be relied on for producing object keys. Consider using json-stable-stringify instead.","path":"app/javascript/video_studio/video_renderer.js","line":77,"fingerprint":"javascript.lang.correctness.no-stringify-keys:app/javascript/video_studio/video_renderer.js:77"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"app/javascript/controllers/maps/immich_enrich_controller.js","line":207,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:app/javascript/controllers/maps/immich_enrich_controller.js:207"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"app/javascript/controllers/maps/maplibre/area_selection_manager.js","line":229,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:app/javascript/controllers/maps/maplibre/area_selection_manager.js:229"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"app/javascript/controllers/maps/maplibre/area_selection_manager.js","line":313,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:app/javascript/controllers/maps/maplibre/area_selection_manager.js:313"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"app/javascript/controllers/maps/maplibre/event_handlers.js","line":121,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:app/javascript/controllers/maps/maplibre/event_handlers.js:121"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"app/javascript/controllers/maps/maplibre/event_handlers.js","line":121,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:app/javascript/controllers/maps/maplibre/event_handlers.js:121"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"app/javascript/controllers/maps/maplibre_controller.js","line":1550,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:app/javascript/controllers/maps/maplibre_controller.js:1550"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"app/javascript/controllers/maps/maplibre_controller.js","line":1550,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:app/javascript/controllers/maps/maplibre_controller.js:1550"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"app/javascript/controllers/speed_color_editor_controller.js","line":95,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:app/javascript/controllers/speed_color_editor_controller.js:95"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"app/javascript/controllers/trip_maplibre_preview_controller.js","line":124,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:app/javascript/controllers/trip_maplibre_preview_controller.js:124"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"app/javascript/controllers/trip_maplibre_preview_controller.js","line":124,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:app/javascript/controllers/trip_maplibre_preview_controller.js:124"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"app/javascript/controllers/video_studio_controller.js","line":775,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:app/javascript/controllers/video_studio_controller.js:775"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"app/javascript/controllers/video_studio_controller.js","line":775,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:app/javascript/controllers/video_studio_controller.js:775"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"app/javascript/controllers/video_studio_controller.js","line":775,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:app/javascript/controllers/video_studio_controller.js:775"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"app/javascript/controllers/video_studio_controller.js","line":775,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:app/javascript/controllers/video_studio_controller.js:775"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"app/javascript/controllers/video_studio_controller.js","line":775,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:app/javascript/controllers/video_studio_controller.js:775"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"app/javascript/controllers/video_studio_controller.js","line":775,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:app/javascript/controllers/video_studio_controller.js:775"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"app/javascript/maps_maplibre/components/photo_popup.js","line":53,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:app/javascript/maps_maplibre/components/photo_popup.js:53"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"app/javascript/maps_maplibre/components/toast.js","line":41,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:app/javascript/maps_maplibre/components/toast.js:41"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"app/javascript/maps_maplibre/components/toast.js","line":41,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:app/javascript/maps_maplibre/components/toast.js:41"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"app/javascript/maps_maplibre/components/visit_card.js","line":138,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:app/javascript/maps_maplibre/components/visit_card.js:138"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"app/javascript/maps_maplibre/utils/format_helpers.js","line":36,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:app/javascript/maps_maplibre/utils/format_helpers.js:36"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"app/javascript/maps_maplibre/utils/format_helpers.js","line":36,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:app/javascript/maps_maplibre/utils/format_helpers.js:36"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"app/javascript/maps_maplibre/utils/format_helpers.js","line":40,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:app/javascript/maps_maplibre/utils/format_helpers.js:40"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"app/javascript/maps_maplibre/utils/format_helpers.js","line":40,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:app/javascript/maps_maplibre/utils/format_helpers.js:40"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"app/javascript/maps_maplibre/utils/search_manager.js","line":330,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:app/javascript/maps_maplibre/utils/search_manager.js:330"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"app/javascript/maps_maplibre/utils/search_manager.js","line":340,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:app/javascript/maps_maplibre/utils/search_manager.js:340"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"app/javascript/maps_maplibre/utils/search_manager.js","line":341,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:app/javascript/maps_maplibre/utils/search_manager.js:341"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"app/javascript/maps_maplibre/utils/search_manager.js","line":393,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:app/javascript/maps_maplibre/utils/search_manager.js:393"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"app/javascript/maps_maplibre/utils/search_manager.js","line":395,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:app/javascript/maps_maplibre/utils/search_manager.js:395"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"app/javascript/maps_maplibre/utils/search_manager.js","line":410,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:app/javascript/maps_maplibre/utils/search_manager.js:410"},{"rule_id":"opengrep/ruby.rails.performance.ruby-rails-performance-indexes-are-beneficial","severity":"low","message":"The :attachable_id column appears to be a foreign key. Would it benefit from an index? Having an index can improve performance.","path":"db/migrate/20260622090000_backfill_notes_columns.rb","line":14,"fingerprint":"ruby.rails.performance.ruby-rails-performance-indexes-are-beneficial:db/migrate/20260622090000_backfill_notes_columns.rb:14"},{"rule_id":"opengrep/ruby.rails.performance.ruby-rails-performance-indexes-are-beneficial","severity":"low","message":"The :import_id column appears to be a foreign key. Would it benefit from an index? Having an index can improve performance.","path":"db/migrate/20260730220000_add_import_id_to_extraction_artifacts.rb","line":10,"fingerprint":"ruby.rails.performance.ruby-rails-performance-indexes-are-beneficial:db/migrate/20260730220000_add_import_id_to_extraction_artifacts.rb:10"},{"rule_id":"opengrep/ruby.rails.performance.ruby-rails-performance-indexes-are-beneficial","severity":"low","message":"The :import_id column appears to be a foreign key. Would it benefit from an index? Having an index can improve performance.","path":"db/migrate/20261027130300_add_import_scope_to_exports.rb","line":6,"fingerprint":"ruby.rails.performance.ruby-rails-performance-indexes-are-beneficial:db/migrate/20261027130300_add_import_scope_to_exports.rb:6"},{"rule_id":"opengrep/ruby.rails.performance.ruby-rails-performance-indexes-are-beneficial","severity":"low","message":"The :published_dataset_id column appears to be a foreign key. Would it benefit from an index? Having an index can improve performance.","path":"db/migrate/20261028150000_track_collection_dataset.rb","line":5,"fingerprint":"ruby.rails.performance.ruby-rails-performance-indexes-are-beneficial:db/migrate/20261028150000_track_collection_dataset.rb:5"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"docker/sidekiq-entrypoint.sh","line":58,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:docker/sidekiq-entrypoint.sh:58"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"docker/web-entrypoint.sh","line":72,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:docker/web-entrypoint.sh:72"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"docker/web-entrypoint.sh","line":73,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:docker/web-entrypoint.sh:73"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"docker/web-entrypoint.sh","line":92,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:docker/web-entrypoint.sh:92"}],"evidence":[],"data":{},"error":null},{"analyzer":"qual-testing","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:has_tests":1.0,"check:test_ratio":1.0,"check:ci_present":1.0,"check:ci_runs_tests":1.0,"check:ci_runs_lint":1.0,"check:tests_cochange":1.0,"test_lines":191041.0,"source_lines":124535.0,"test_ratio":1.534,"ci_files":9.0,"cochange_share":0.9517,"cochange_commits":207.0},"findings":[],"evidence":[{"kind":"ci","description":"CI config: .github/workflows/attach_compose.yml","ref":".github/workflows/attach_compose.yml","url":null,"weight":0.0},{"kind":"ci","description":"CI config: .github/workflows/biome.yml","ref":".github/workflows/biome.yml","url":null,"weight":0.0},{"kind":"ci","description":"CI config: .github/workflows/build_and_push.yml","ref":".github/workflows/build_and_push.yml","url":null,"weight":0.0},{"kind":"ci","description":"CI config: .github/workflows/ci.yml","ref":".github/workflows/ci.yml","url":null,"weight":0.0},{"kind":"ci","description":"CI config: .github/workflows/mirror-onedev.yml","ref":".github/workflows/mirror-onedev.yml","url":null,"weight":0.0},{"kind":"ci","description":"CI config: .github/workflows/release_notifications.yml","ref":".github/workflows/release_notifications.yml","url":null,"weight":0.0},{"kind":"ci","description":"CI config: .github/workflows/rubocop.yml","ref":".github/workflows/rubocop.yml","url":null,"weight":0.0},{"kind":"ci","description":"CI config: .github/workflows/security.yml","ref":".github/workflows/security.yml","url":null,"weight":0.0},{"kind":"ci","description":"CI config: .github/workflows/trivy.yml","ref":".github/workflows/trivy.yml","url":null,"weight":0.0},{"kind":"ci","description":"CI runs tests (npm test, bundle exec rspec, rspec)","ref":null,"url":null,"weight":0.0},{"kind":"ci","description":"CI runs linters (biome, rubocop)","ref":null,"url":null,"weight":0.0}],"data":{"test_commands":["npm test","bundle exec rspec","rspec"],"lint_commands":["biome","rubocop"]},"error":null},{"analyzer":"qual-docs","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:readme":1.0,"check:license":1.0,"check:contributing":1.0,"check:changelog":1.0,"readme_lines":131.0},"findings":[],"evidence":[{"kind":"docs","description":"README.md","ref":"README.md","url":null,"weight":0.0},{"kind":"docs","description":"LICENSE","ref":"LICENSE","url":null,"weight":0.0},{"kind":"docs","description":"CONTRIBUTING.md","ref":"CONTRIBUTING.md","url":null,"weight":0.0},{"kind":"docs","description":"CHANGELOG.md","ref":"CHANGELOG.md","url":null,"weight":0.0}],"data":{},"error":null},{"analyzer":"qual-type-safety","pillar":"quality","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"x-blame","pillar":"ai_provenance","status":"ok","tool_version":"git-blame","metrics":{"ai_lines":2165.0,"other_lines":118718.0,"files_blamed":1500.0,"blame_failures":0.0,"quality:ai_findings":0.0,"quality:ai_per_kloc":0.0,"quality:other_findings":56.0,"quality:other_per_kloc":0.472,"quality:ratio":0.0,"security:ai_findings":3.0,"security:ai_per_kloc":1.386,"security:other_findings":233.0,"security:other_per_kloc":1.963,"security:ratio":0.71},"findings":[],"evidence":[],"data":{"sampled":true,"comparable":true},"error":null}],"flags":[]}