{"schema_version":"2","scorer_version":"0.1.0","scoring_version":"prov-5+qual-2+sec-2","generated_at":"2026-11-14T14:52:02.896806Z","repo":{"ref":{"host":"github.com","owner":"azukauteh","name":"alx-polly"},"default_branch":"chore/add-coderabbit-config","clone_url":"https://github.com/azukauteh/alx-polly.git","html_url":"https://github.com/azukauteh/alx-polly","description":"Polling-App, which allows users to create polls, vote, and share via unique links or QR codes.","stars":1,"forks":0,"is_fork":false,"is_archived":false,"is_private":false,"size_kb":344,"primary_language":"TypeScript","license_spdx":null,"created_at":"2025-08-26T05:25:38Z","pushed_at":"2025-09-21T16:05:10Z","security_policy_url":null,"distribution":{"owner_created_at":"2019-05-24T09:14:50Z","owner_type":"User","release_assets":[]}},"commit_sha":"11eb13c25c1ba6ac0a6f1be5f735fcfc10a8c689","profile":{"lines_by_language":{"TypeScript":1384,"JavaScript":415,"SQL":68},"files_by_category":{"source":52,"other":15,"config":11,"docs":4,"binary":3,"test":1,"generated":1},"source_lines":1733,"test_lines":134},"pillars":{"ai_provenance":{"score":0.0,"confidence":0.49,"coverage":1.0,"label":"possible","breakdown":{"attributed_share":0.0,"suspected_share":0.0,"estimated_share":0.0,"ai_artifacts":0.0,"flagged_work_units":0.0,"flagged_releases":null,"style_index":14.137},"summary":"Weak signals consistent with AI-assisted development. Comments and strings use phrasing typical of LLM-written code (see the coding style evidence)."},"quality":{"score":56.2,"confidence":0.9,"coverage":1.0,"label":"weak","breakdown":{"complexity":98.9,"duplication":93.8,"lint":20.7,"testing":30.5,"docs":40.0,"type_safety":40.0,"process":null},"summary":"Code quality is weak: test-to-source ratio 0.08, no CI test run detected; 0% of function code in complex or long functions; 1% duplicated lines. Weakest area: lint."},"security":{"score":46.1,"confidence":0.85,"coverage":1.0,"label":"poor","breakdown":{"secrets":100.0,"sast":45.5,"dependencies":2.6,"ci_actions":null,"posture":0.0,"scorecard":null},"summary":"Security posture is poor: 113 known vulnerabilities in 29 dependencies; 4 high-severity SAST findings. Weakest area: posture."}},"analyzer_results":[{"analyzer":"sec-scorecard","pillar":"security","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":"no published OpenSSF Scorecard result for this repo"},{"analyzer":"sec-registry","pillar":"security","status":"ok","tool_version":null,"metrics":{"declared":38.0,"checked":38.0,"missing":0.0,"recent":0.0,"lookup_errors":0.0},"findings":[],"evidence":[],"data":{"phantom":false},"error":null},{"analyzer":"ai-attribution","pillar":"ai_provenance","status":"ok","tool_version":"signatures-v1","metrics":{"commits":36.0,"attributed_commits":0.0,"attributed_commit_share":0.0,"effective_loc":1974.0,"attributed_loc":0.0,"attributed_loc_share":0.0,"tools_detected":0.0},"findings":[],"evidence":[],"data":{"attributed_loc_by_commit":{},"tools":{},"monthly":{"2025-08":{"loc":599,"attributed_loc":0},"2025-09":{"loc":1375,"attributed_loc":0}}},"error":null},{"analyzer":"ai-artifacts","pillar":"ai_provenance","status":"ok","tool_version":"signatures-v1","metrics":{"artifacts":0.0,"workflow_agents":0.0,"tools_configured":0.0},"findings":[],"evidence":[],"data":{"artifacts":[],"workflows":[],"tools":[]},"error":null},{"analyzer":"ai-velocity","pillar":"ai_provenance","status":"ok","tool_version":"prov-4","metrics":{"work_units":10.0,"flagged_units":0.0,"pre_ai_era_bursts":0.0,"pre_ai_era_measured_loc":0.0,"pre_ai_era_burst_loc":0.0,"measured_loc":1974.0,"flagged_loc":0.0,"flagged_loc_share":0.0,"max_loc_per_hour":131.75,"median_loc_per_hour":111.75,"pr_timed_units":0.0,"excluded_import_loc":0.0},"findings":[],"evidence":[],"data":{"flagged_loc_by_commit":{},"excluded_import_commits":[]},"error":null},{"analyzer":"ai-release-velocity","pillar":"ai_provenance","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"ai-stylometry","pillar":"ai_provenance","status":"ok","tool_version":null,"metrics":{"lines_scanned":1733.0,"index":14.137,"count:narrated_steps":0.0,"per_kloc:narrated_steps":0.0,"files:narrated_steps":0.0,"count:placeholder":0.0,"per_kloc:placeholder":0.0,"files:placeholder":0.0,"count:emoji_in_code":49.0,"per_kloc:emoji_in_code":28.275,"files:emoji_in_code":13.0,"count:assistant_voice":0.0,"per_kloc:assistant_voice":0.0,"files:assistant_voice":0.0},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-secrets","pillar":"security","status":"ok","tool_version":"gitleaks 8.30.1","metrics":{"secrets_current":0.0,"secrets_history":0.0,"secrets_nonprod":0.0,"secrets_low_confidence":0.0},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-sast","pillar":"security","status":"ok","tool_version":"opengrep 1.33.1; rules f1d2b562b414","metrics":{"findings":7.0,"findings_high":4.0,"findings_medium":3.0,"findings_low":0.0,"weighted_findings":3.75,"scanned_lines":1665.0,"parse_errors":0.0},"findings":[{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"polling-app/coverage/lcov-report/prettify.js","line":2,"fingerprint":"javascript.browser.security.insecure-document-method:polling-app/coverage/lcov-report/prettify.js:2"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `S.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"polling-app/coverage/lcov-report/prettify.js","line":2,"fingerprint":"javascript.browser.security.insecure-innerhtml:polling-app/coverage/lcov-report/prettify.js:2"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"polling-app/coverage/lcov-report/sorter.js","line":84,"fingerprint":"javascript.browser.security.insecure-document-method:polling-app/coverage/lcov-report/sorter.js:84"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `colNode.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"polling-app/coverage/lcov-report/sorter.js","line":84,"fingerprint":"javascript.browser.security.insecure-innerhtml:polling-app/coverage/lcov-report/sorter.js:84"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-redos","severity":"medium","message":"Detected the use of a regular expression `\"^\"` which appears to be vulnerable to a Regular expression Denial-of-Service (ReDoS). For this reason, it is recommended to review the regex and ensure it is not vulnerable to catastrophic backtracking, and if possible use a library which offers default saf [confidence low]","path":"polling-app/coverage/lcov-report/prettify.js","line":2,"fingerprint":"javascript.lang.security.audit.detect-redos:polling-app/coverage/lcov-report/prettify.js:2"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-regexp","severity":"medium","message":"RegExp() called with a `T` function argument, this might allow an attacker to cause a Regular Expression Denial-of-Service (ReDoS) within your application as RegExP blocks the main thread. For this reason, it is recommended to use hardcoded regexes instead. If your regex is run on user-controlled in [confidence low]","path":"polling-app/coverage/lcov-report/prettify.js","line":2,"fingerprint":"javascript.lang.security.audit.detect-non-literal-regexp:polling-app/coverage/lcov-report/prettify.js:2"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-redos","severity":"medium","message":"Detected the use of a regular expression `^(?:0x[a-f0-9]+|(?:\\\\d(?:_\\\\d+)*\\\\d*(?:\\\\.\\\\d*)?|\\\\.\\\\d\\\\+)(?:e[+\\\\-]?\\\\d+)?)[a-z]*` which appears to be vulnerable to a Regular expression Denial-of-Service (ReDoS). For this reason, it is recommended to review the regex and ensure it is not vulnerable to c [confidence low]","path":"polling-app/coverage/lcov-report/prettify.js","line":2,"fingerprint":"javascript.lang.security.audit.detect-redos:polling-app/coverage/lcov-report/prettify.js:2"}],"evidence":[],"data":{"rulesets":["typescript","javascript"]},"error":null},{"analyzer":"sec-deps","pillar":"security","status":"ok","tool_version":"osv-scanner version: 2.7.1","metrics":{"vulnerable_packages":29.0,"vulnerabilities":113.0,"vulns_critical":6.0,"vulns_high":64.0,"vulns_medium":39.0,"vulns_low":4.0,"vulns_unknown":0.0,"penalty":219.0},"findings":[{"rule_id":"osv/GHSA-2w6w-674q-4c4q","severity":"critical","message":"handlebars@4.7.8 (npm) is affected by GHSA-2w6w-674q-4c4q","path":"polling-app/package-lock.json","line":null,"fingerprint":"handlebars@4.7.8 (npm):GHSA-2w6w-674q-4c4q"},{"rule_id":"osv/GHSA-8r5x-fm3f-whwj","severity":"critical","message":"handlebars@4.7.8 (npm) is affected by GHSA-8r5x-fm3f-whwj","path":"polling-app/package-lock.json","line":null,"fingerprint":"handlebars@4.7.8 (npm):GHSA-8r5x-fm3f-whwj"},{"rule_id":"osv/GHSA-p8wg-vrv2-v86f","severity":"critical","message":"handlebars@4.7.8 (npm) is affected by GHSA-p8wg-vrv2-v86f","path":"polling-app/package-lock.json","line":null,"fingerprint":"handlebars@4.7.8 (npm):GHSA-p8wg-vrv2-v86f"},{"rule_id":"osv/GHSA-2464-fhr4-w9xw","severity":"critical","message":"next@14.2.32 (npm) is affected by GHSA-2464-fhr4-w9xw","path":"polling-app/package-lock.json","line":null,"fingerprint":"next@14.2.32 (npm):GHSA-2464-fhr4-w9xw"},{"rule_id":"osv/GHSA-2xp9-vwfh-vxw4","severity":"critical","message":"next@14.2.32 (npm) is affected by GHSA-2xp9-vwfh-vxw4","path":"polling-app/package-lock.json","line":null,"fingerprint":"next@14.2.32 (npm):GHSA-2xp9-vwfh-vxw4"},{"rule_id":"osv/GHSA-p293-qw3h-jr36","severity":"critical","message":"next@14.2.32 (npm) is affected by GHSA-p293-qw3h-jr36","path":"polling-app/package-lock.json","line":null,"fingerprint":"next@14.2.32 (npm):GHSA-p293-qw3h-jr36"},{"rule_id":"osv/GHSA-7h2j-956f-4vf2","severity":"high","message":"@isaacs/brace-expansion@5.0.0 (npm) is affected by GHSA-7h2j-956f-4vf2","path":"polling-app/package-lock.json","line":null,"fingerprint":"@isaacs/brace-expansion@5.0.0 (npm):GHSA-7h2j-956f-4vf2"},{"rule_id":"osv/GHSA-3jxr-9vmj-r5cp","severity":"high","message":"brace-expansion@1.1.12 (npm) is affected by GHSA-3jxr-9vmj-r5cp","path":"polling-app/package-lock.json","line":null,"fingerprint":"brace-expansion@1.1.12 (npm):GHSA-3jxr-9vmj-r5cp"},{"rule_id":"osv/GHSA-6j4f-fj2g-mc7p","severity":"high","message":"brace-expansion@1.1.12 (npm) is affected by GHSA-6j4f-fj2g-mc7p","path":"polling-app/package-lock.json","line":null,"fingerprint":"brace-expansion@1.1.12 (npm):GHSA-6j4f-fj2g-mc7p"},{"rule_id":"osv/GHSA-mh99-v99m-4gvg","severity":"high","message":"brace-expansion@1.1.12 (npm) is affected by GHSA-mh99-v99m-4gvg","path":"polling-app/package-lock.json","line":null,"fingerprint":"brace-expansion@1.1.12 (npm):GHSA-mh99-v99m-4gvg"},{"rule_id":"osv/GHSA-qhr7-859c-m2p7","severity":"high","message":"brace-expansion@1.1.12 (npm) is affected by GHSA-qhr7-859c-m2p7","path":"polling-app/package-lock.json","line":null,"fingerprint":"brace-expansion@1.1.12 (npm):GHSA-qhr7-859c-m2p7"},{"rule_id":"osv/GHSA-rgw5-rvv9-x895","severity":"high","message":"brace-expansion@1.1.12 (npm) is affected by GHSA-rgw5-rvv9-x895","path":"polling-app/package-lock.json","line":null,"fingerprint":"brace-expansion@1.1.12 (npm):GHSA-rgw5-rvv9-x895"},{"rule_id":"osv/GHSA-3jxr-9vmj-r5cp","severity":"high","message":"brace-expansion@2.0.2 (npm) is affected by GHSA-3jxr-9vmj-r5cp","path":"polling-app/package-lock.json","line":null,"fingerprint":"brace-expansion@2.0.2 (npm):GHSA-3jxr-9vmj-r5cp"},{"rule_id":"osv/GHSA-6j4f-fj2g-mc7p","severity":"high","message":"brace-expansion@2.0.2 (npm) is affected by GHSA-6j4f-fj2g-mc7p","path":"polling-app/package-lock.json","line":null,"fingerprint":"brace-expansion@2.0.2 (npm):GHSA-6j4f-fj2g-mc7p"},{"rule_id":"osv/GHSA-mh99-v99m-4gvg","severity":"high","message":"brace-expansion@2.0.2 (npm) is affected by GHSA-mh99-v99m-4gvg","path":"polling-app/package-lock.json","line":null,"fingerprint":"brace-expansion@2.0.2 (npm):GHSA-mh99-v99m-4gvg"},{"rule_id":"osv/GHSA-qhr7-859c-m2p7","severity":"high","message":"brace-expansion@2.0.2 (npm) is affected by GHSA-qhr7-859c-m2p7","path":"polling-app/package-lock.json","line":null,"fingerprint":"brace-expansion@2.0.2 (npm):GHSA-qhr7-859c-m2p7"},{"rule_id":"osv/GHSA-rgw5-rvv9-x895","severity":"high","message":"brace-expansion@2.0.2 (npm) is affected by GHSA-rgw5-rvv9-x895","path":"polling-app/package-lock.json","line":null,"fingerprint":"brace-expansion@2.0.2 (npm):GHSA-rgw5-rvv9-x895"},{"rule_id":"osv/GHSA-73wf-gq98-2v4g","severity":"high","message":"browserslist@4.25.4 (npm) is affected by GHSA-73wf-gq98-2v4g","path":"polling-app/package-lock.json","line":null,"fingerprint":"browserslist@4.25.4 (npm):GHSA-73wf-gq98-2v4g"},{"rule_id":"osv/GHSA-c83g-rgw3-j3cx","severity":"high","message":"browserslist@4.25.4 (npm) is affected by GHSA-c83g-rgw3-j3cx","path":"polling-app/package-lock.json","line":null,"fingerprint":"browserslist@4.25.4 (npm):GHSA-c83g-rgw3-j3cx"},{"rule_id":"osv/GHSA-2gc4-cqfq-p2gv","severity":"high","message":"engine.io@6.6.4 (npm) is affected by GHSA-2gc4-cqfq-p2gv","path":"polling-app/package-lock.json","line":null,"fingerprint":"engine.io@6.6.4 (npm):GHSA-2gc4-cqfq-p2gv"},{"rule_id":"osv/GHSA-gr94-w7qr-f4j3","severity":"high","message":"engine.io@6.6.4 (npm) is affected by GHSA-gr94-w7qr-f4j3","path":"polling-app/package-lock.json","line":null,"fingerprint":"engine.io@6.6.4 (npm):GHSA-gr94-w7qr-f4j3"},{"rule_id":"osv/GHSA-r635-g3xr-vw7x","severity":"high","message":"engine.io@6.6.4 (npm) is affected by GHSA-r635-g3xr-vw7x","path":"polling-app/package-lock.json","line":null,"fingerprint":"engine.io@6.6.4 (npm):GHSA-r635-g3xr-vw7x"},{"rule_id":"osv/GHSA-25h7-pfq9-p65f","severity":"high","message":"flatted@3.3.3 (npm) is affected by GHSA-25h7-pfq9-p65f","path":"polling-app/package-lock.json","line":null,"fingerprint":"flatted@3.3.3 (npm):GHSA-25h7-pfq9-p65f"},{"rule_id":"osv/GHSA-rf6f-7fwh-wjgh","severity":"high","message":"flatted@3.3.3 (npm) is affected by GHSA-rf6f-7fwh-wjgh","path":"polling-app/package-lock.json","line":null,"fingerprint":"flatted@3.3.3 (npm):GHSA-rf6f-7fwh-wjgh"},{"rule_id":"osv/GHSA-5j98-mcp5-4vw2","severity":"high","message":"glob@10.4.5 (npm) is affected by GHSA-5j98-mcp5-4vw2","path":"polling-app/package-lock.json","line":null,"fingerprint":"glob@10.4.5 (npm):GHSA-5j98-mcp5-4vw2"},{"rule_id":"osv/GHSA-5j98-mcp5-4vw2","severity":"high","message":"glob@11.0.3 (npm) is affected by GHSA-5j98-mcp5-4vw2","path":"polling-app/package-lock.json","line":null,"fingerprint":"glob@11.0.3 (npm):GHSA-5j98-mcp5-4vw2"},{"rule_id":"osv/GHSA-3mfm-83xf-c92r","severity":"high","message":"handlebars@4.7.8 (npm) is affected by GHSA-3mfm-83xf-c92r","path":"polling-app/package-lock.json","line":null,"fingerprint":"handlebars@4.7.8 (npm):GHSA-3mfm-83xf-c92r"},{"rule_id":"osv/GHSA-9cx6-37pm-9jff","severity":"high","message":"handlebars@4.7.8 (npm) is affected by GHSA-9cx6-37pm-9jff","path":"polling-app/package-lock.json","line":null,"fingerprint":"handlebars@4.7.8 (npm):GHSA-9cx6-37pm-9jff"},{"rule_id":"osv/GHSA-xhpv-hc6g-r9c6","severity":"high","message":"handlebars@4.7.8 (npm) is affected by GHSA-xhpv-hc6g-r9c6","path":"polling-app/package-lock.json","line":null,"fingerprint":"handlebars@4.7.8 (npm):GHSA-xhpv-hc6g-r9c6"},{"rule_id":"osv/GHSA-xjpj-3mr7-gcpf","severity":"high","message":"handlebars@4.7.8 (npm) is affected by GHSA-xjpj-3mr7-gcpf","path":"polling-app/package-lock.json","line":null,"fingerprint":"handlebars@4.7.8 (npm):GHSA-xjpj-3mr7-gcpf"},{"rule_id":"osv/GHSA-2883-xcg3-v3hh","severity":"high","message":"js-yaml@3.14.1 (npm) is affected by GHSA-2883-xcg3-v3hh","path":"polling-app/package-lock.json","line":null,"fingerprint":"js-yaml@3.14.1 (npm):GHSA-2883-xcg3-v3hh"},{"rule_id":"osv/GHSA-52cp-r559-cp3m","severity":"high","message":"js-yaml@3.14.1 (npm) is affected by GHSA-52cp-r559-cp3m","path":"polling-app/package-lock.json","line":null,"fingerprint":"js-yaml@3.14.1 (npm):GHSA-52cp-r559-cp3m"},{"rule_id":"osv/GHSA-5p4m-2wfm-xmqj","severity":"high","message":"js-yaml@3.14.1 (npm) is affected by GHSA-5p4m-2wfm-xmqj","path":"polling-app/package-lock.json","line":null,"fingerprint":"js-yaml@3.14.1 (npm):GHSA-5p4m-2wfm-xmqj"},{"rule_id":"osv/GHSA-2883-xcg3-v3hh","severity":"high","message":"js-yaml@4.1.0 (npm) is affected by GHSA-2883-xcg3-v3hh","path":"polling-app/package-lock.json","line":null,"fingerprint":"js-yaml@4.1.0 (npm):GHSA-2883-xcg3-v3hh"},{"rule_id":"osv/GHSA-52cp-r559-cp3m","severity":"high","message":"js-yaml@4.1.0 (npm) is affected by GHSA-52cp-r559-cp3m","path":"polling-app/package-lock.json","line":null,"fingerprint":"js-yaml@4.1.0 (npm):GHSA-52cp-r559-cp3m"},{"rule_id":"osv/GHSA-5p4m-2wfm-xmqj","severity":"high","message":"js-yaml@4.1.0 (npm) is affected by GHSA-5p4m-2wfm-xmqj","path":"polling-app/package-lock.json","line":null,"fingerprint":"js-yaml@4.1.0 (npm):GHSA-5p4m-2wfm-xmqj"},{"rule_id":"osv/GHSA-23c5-xmqv-rm74","severity":"high","message":"minimatch@10.0.3 (npm) is affected by GHSA-23c5-xmqv-rm74","path":"polling-app/package-lock.json","line":null,"fingerprint":"minimatch@10.0.3 (npm):GHSA-23c5-xmqv-rm74"},{"rule_id":"osv/GHSA-3ppc-4f35-3m26","severity":"high","message":"minimatch@10.0.3 (npm) is affected by GHSA-3ppc-4f35-3m26","path":"polling-app/package-lock.json","line":null,"fingerprint":"minimatch@10.0.3 (npm):GHSA-3ppc-4f35-3m26"},{"rule_id":"osv/GHSA-7r86-cg39-jmmj","severity":"high","message":"minimatch@10.0.3 (npm) is affected by GHSA-7r86-cg39-jmmj","path":"polling-app/package-lock.json","line":null,"fingerprint":"minimatch@10.0.3 (npm):GHSA-7r86-cg39-jmmj"},{"rule_id":"osv/GHSA-23c5-xmqv-rm74","severity":"high","message":"minimatch@3.1.2 (npm) is affected by GHSA-23c5-xmqv-rm74","path":"polling-app/package-lock.json","line":null,"fingerprint":"minimatch@3.1.2 (npm):GHSA-23c5-xmqv-rm74"},{"rule_id":"osv/GHSA-3ppc-4f35-3m26","severity":"high","message":"minimatch@3.1.2 (npm) is affected by GHSA-3ppc-4f35-3m26","path":"polling-app/package-lock.json","line":null,"fingerprint":"minimatch@3.1.2 (npm):GHSA-3ppc-4f35-3m26"},{"rule_id":"osv/GHSA-7r86-cg39-jmmj","severity":"high","message":"minimatch@3.1.2 (npm) is affected by GHSA-7r86-cg39-jmmj","path":"polling-app/package-lock.json","line":null,"fingerprint":"minimatch@3.1.2 (npm):GHSA-7r86-cg39-jmmj"},{"rule_id":"osv/GHSA-23c5-xmqv-rm74","severity":"high","message":"minimatch@9.0.5 (npm) is affected by GHSA-23c5-xmqv-rm74","path":"polling-app/package-lock.json","line":null,"fingerprint":"minimatch@9.0.5 (npm):GHSA-23c5-xmqv-rm74"},{"rule_id":"osv/GHSA-3ppc-4f35-3m26","severity":"high","message":"minimatch@9.0.5 (npm) is affected by GHSA-3ppc-4f35-3m26","path":"polling-app/package-lock.json","line":null,"fingerprint":"minimatch@9.0.5 (npm):GHSA-3ppc-4f35-3m26"},{"rule_id":"osv/GHSA-7r86-cg39-jmmj","severity":"high","message":"minimatch@9.0.5 (npm) is affected by GHSA-7r86-cg39-jmmj","path":"polling-app/package-lock.json","line":null,"fingerprint":"minimatch@9.0.5 (npm):GHSA-7r86-cg39-jmmj"},{"rule_id":"osv/GHSA-28wg-ghj8-5hjv","severity":"high","message":"nanoid@3.3.11 (npm) is affected by GHSA-28wg-ghj8-5hjv","path":"polling-app/package-lock.json","line":null,"fingerprint":"nanoid@3.3.11 (npm):GHSA-28wg-ghj8-5hjv"},{"rule_id":"osv/GHSA-2v37-7h3g-55p8","severity":"high","message":"nanoid@3.3.11 (npm) is affected by GHSA-2v37-7h3g-55p8","path":"polling-app/package-lock.json","line":null,"fingerprint":"nanoid@3.3.11 (npm):GHSA-2v37-7h3g-55p8"},{"rule_id":"osv/GHSA-xwg4-73v4-xw9w","severity":"high","message":"nanoid@3.3.11 (npm) is affected by GHSA-xwg4-73v4-xw9w","path":"polling-app/package-lock.json","line":null,"fingerprint":"nanoid@3.3.11 (npm):GHSA-xwg4-73v4-xw9w"},{"rule_id":"osv/GHSA-36qx-fr4f-26g5","severity":"high","message":"next@14.2.32 (npm) is affected by GHSA-36qx-fr4f-26g5","path":"polling-app/package-lock.json","line":null,"fingerprint":"next@14.2.32 (npm):GHSA-36qx-fr4f-26g5"},{"rule_id":"osv/GHSA-5j59-xgg2-r9c4","severity":"high","message":"next@14.2.32 (npm) is affected by GHSA-5j59-xgg2-r9c4","path":"polling-app/package-lock.json","line":null,"fingerprint":"next@14.2.32 (npm):GHSA-5j59-xgg2-r9c4"},{"rule_id":"osv/GHSA-89xv-2m56-2m9x","severity":"high","message":"next@14.2.32 (npm) is affected by GHSA-89xv-2m56-2m9x","path":"polling-app/package-lock.json","line":null,"fingerprint":"next@14.2.32 (npm):GHSA-89xv-2m56-2m9x"},{"rule_id":"osv/GHSA-8h8q-6873-q5fj","severity":"high","message":"next@14.2.32 (npm) is affected by GHSA-8h8q-6873-q5fj","path":"polling-app/package-lock.json","line":null,"fingerprint":"next@14.2.32 (npm):GHSA-8h8q-6873-q5fj"},{"rule_id":"osv/GHSA-c4j6-fc7j-m34r","severity":"high","message":"next@14.2.32 (npm) is affected by GHSA-c4j6-fc7j-m34r","path":"polling-app/package-lock.json","line":null,"fingerprint":"next@14.2.32 (npm):GHSA-c4j6-fc7j-m34r"},{"rule_id":"osv/GHSA-h25m-26qc-wcjf","severity":"high","message":"next@14.2.32 (npm) is affected by GHSA-h25m-26qc-wcjf","path":"polling-app/package-lock.json","line":null,"fingerprint":"next@14.2.32 (npm):GHSA-h25m-26qc-wcjf"},{"rule_id":"osv/GHSA-m99w-x7hq-7vfj","severity":"high","message":"next@14.2.32 (npm) is affected by GHSA-m99w-x7hq-7vfj","path":"polling-app/package-lock.json","line":null,"fingerprint":"next@14.2.32 (npm):GHSA-m99w-x7hq-7vfj"},{"rule_id":"osv/GHSA-mwv6-3258-q52c","severity":"high","message":"next@14.2.32 (npm) is affected by GHSA-mwv6-3258-q52c","path":"polling-app/package-lock.json","line":null,"fingerprint":"next@14.2.32 (npm):GHSA-mwv6-3258-q52c"},{"rule_id":"osv/GHSA-p3m5-59mp-jv5r","severity":"high","message":"next@14.2.32 (npm) is affected by GHSA-p3m5-59mp-jv5r","path":"polling-app/package-lock.json","line":null,"fingerprint":"next@14.2.32 (npm):GHSA-p3m5-59mp-jv5r"},{"rule_id":"osv/GHSA-p9j2-gv94-2wf4","severity":"high","message":"next@14.2.32 (npm) is affected by GHSA-p9j2-gv94-2wf4","path":"polling-app/package-lock.json","line":null,"fingerprint":"next@14.2.32 (npm):GHSA-p9j2-gv94-2wf4"},{"rule_id":"osv/GHSA-q4gf-8mx6-v5v3","severity":"high","message":"next@14.2.32 (npm) is affected by GHSA-q4gf-8mx6-v5v3","path":"polling-app/package-lock.json","line":null,"fingerprint":"next@14.2.32 (npm):GHSA-q4gf-8mx6-v5v3"},{"rule_id":"osv/GHSA-c2c7-rcm5-vvqj","severity":"high","message":"picomatch@2.3.1 (npm) is affected by GHSA-c2c7-rcm5-vvqj","path":"polling-app/package-lock.json","line":null,"fingerprint":"picomatch@2.3.1 (npm):GHSA-c2c7-rcm5-vvqj"},{"rule_id":"osv/GHSA-c2c7-rcm5-vvqj","severity":"high","message":"picomatch@4.0.3 (npm) is affected by GHSA-c2c7-rcm5-vvqj","path":"polling-app/package-lock.json","line":null,"fingerprint":"picomatch@4.0.3 (npm):GHSA-c2c7-rcm5-vvqj"},{"rule_id":"osv/GHSA-6g55-p6wh-862q","severity":"high","message":"postcss@8.4.31 (npm) is affected by GHSA-6g55-p6wh-862q","path":"polling-app/package-lock.json","line":null,"fingerprint":"postcss@8.4.31 (npm):GHSA-6g55-p6wh-862q"},{"rule_id":"osv/GHSA-r28c-9q8g-f849","severity":"high","message":"postcss@8.4.31 (npm) is affected by GHSA-r28c-9q8g-f849","path":"polling-app/package-lock.json","line":null,"fingerprint":"postcss@8.4.31 (npm):GHSA-r28c-9q8g-f849"},{"rule_id":"osv/GHSA-6g55-p6wh-862q","severity":"high","message":"postcss@8.5.6 (npm) is affected by GHSA-6g55-p6wh-862q","path":"polling-app/package-lock.json","line":null,"fingerprint":"postcss@8.5.6 (npm):GHSA-6g55-p6wh-862q"},{"rule_id":"osv/GHSA-r28c-9q8g-f849","severity":"high","message":"postcss@8.5.6 (npm) is affected by GHSA-r28c-9q8g-f849","path":"polling-app/package-lock.json","line":null,"fingerprint":"postcss@8.5.6 (npm):GHSA-r28c-9q8g-f849"},{"rule_id":"osv/GHSA-2m8v-j782-fhvr","severity":"high","message":"socket.io-parser@4.2.4 (npm) is affected by GHSA-2m8v-j782-fhvr","path":"polling-app/package-lock.json","line":null,"fingerprint":"socket.io-parser@4.2.4 (npm):GHSA-2m8v-j782-fhvr"},{"rule_id":"osv/GHSA-677m-j7p3-52f9","severity":"high","message":"socket.io-parser@4.2.4 (npm) is affected by GHSA-677m-j7p3-52f9","path":"polling-app/package-lock.json","line":null,"fingerprint":"socket.io-parser@4.2.4 (npm):GHSA-677m-j7p3-52f9"},{"rule_id":"osv/GHSA-68fv-2mgg-jv7q","severity":"high","message":"source-map-js@1.2.1 (npm) is affected by GHSA-68fv-2mgg-jv7q","path":"polling-app/package-lock.json","line":null,"fingerprint":"source-map-js@1.2.1 (npm):GHSA-68fv-2mgg-jv7q"},{"rule_id":"osv/GHSA-96hv-2xvq-fx4p","severity":"high","message":"ws@8.17.1 (npm) is affected by GHSA-96hv-2xvq-fx4p","path":"polling-app/package-lock.json","line":null,"fingerprint":"ws@8.17.1 (npm):GHSA-96hv-2xvq-fx4p"},{"rule_id":"osv/GHSA-96hv-2xvq-fx4p","severity":"high","message":"ws@8.18.3 (npm) is affected by GHSA-96hv-2xvq-fx4p","path":"polling-app/package-lock.json","line":null,"fingerprint":"ws@8.18.3 (npm):GHSA-96hv-2xvq-fx4p"},{"rule_id":"osv/GHSA-2g4f-4pwh-qvx6","severity":"medium","message":"ajv@6.12.6 (npm) is affected by GHSA-2g4f-4pwh-qvx6","path":"polling-app/package-lock.json","line":null,"fingerprint":"ajv@6.12.6 (npm):GHSA-2g4f-4pwh-qvx6"},{"rule_id":"osv/GHSA-f886-m6hf-6m8v","severity":"medium","message":"brace-expansion@1.1.12 (npm) is affected by GHSA-f886-m6hf-6m8v","path":"polling-app/package-lock.json","line":null,"fingerprint":"brace-expansion@1.1.12 (npm):GHSA-f886-m6hf-6m8v"},{"rule_id":"osv/GHSA-q2hr-2g5m-vwhr","severity":"medium","message":"brace-expansion@1.1.12 (npm) is affected by GHSA-q2hr-2g5m-vwhr","path":"polling-app/package-lock.json","line":null,"fingerprint":"brace-expansion@1.1.12 (npm):GHSA-q2hr-2g5m-vwhr"},{"rule_id":"osv/GHSA-f886-m6hf-6m8v","severity":"medium","message":"brace-expansion@2.0.2 (npm) is affected by GHSA-f886-m6hf-6m8v","path":"polling-app/package-lock.json","line":null,"fingerprint":"brace-expansion@2.0.2 (npm):GHSA-f886-m6hf-6m8v"},{"rule_id":"osv/GHSA-q2hr-2g5m-vwhr","severity":"medium","message":"brace-expansion@2.0.2 (npm) is affected by GHSA-q2hr-2g5m-vwhr","path":"polling-app/package-lock.json","line":null,"fingerprint":"brace-expansion@2.0.2 (npm):GHSA-q2hr-2g5m-vwhr"},{"rule_id":"osv/GHSA-gcqx-w48m-w2h4","severity":"medium","message":"deepmerge@4.3.1 (npm) is affected by GHSA-gcqx-w48m-w2h4","path":"polling-app/package-lock.json","line":null,"fingerprint":"deepmerge@4.3.1 (npm):GHSA-gcqx-w48m-w2h4"},{"rule_id":"osv/GHSA-3g3m-2fjr-6pw4","severity":"medium","message":"glob@10.4.5 (npm) is affected by GHSA-3g3m-2fjr-6pw4","path":"polling-app/package-lock.json","line":null,"fingerprint":"glob@10.4.5 (npm):GHSA-3g3m-2fjr-6pw4"},{"rule_id":"osv/GHSA-3g3m-2fjr-6pw4","severity":"medium","message":"glob@11.0.3 (npm) is affected by GHSA-3g3m-2fjr-6pw4","path":"polling-app/package-lock.json","line":null,"fingerprint":"glob@11.0.3 (npm):GHSA-3g3m-2fjr-6pw4"},{"rule_id":"osv/GHSA-2qvq-rjwj-gvw9","severity":"medium","message":"handlebars@4.7.8 (npm) is affected by GHSA-2qvq-rjwj-gvw9","path":"polling-app/package-lock.json","line":null,"fingerprint":"handlebars@4.7.8 (npm):GHSA-2qvq-rjwj-gvw9"},{"rule_id":"osv/GHSA-7rx3-28cr-v5wh","severity":"medium","message":"handlebars@4.7.8 (npm) is affected by GHSA-7rx3-28cr-v5wh","path":"polling-app/package-lock.json","line":null,"fingerprint":"handlebars@4.7.8 (npm):GHSA-7rx3-28cr-v5wh"},{"rule_id":"osv/GHSA-xw65-4hp5-5hc7","severity":"medium","message":"handlebars@4.7.8 (npm) is affected by GHSA-xw65-4hp5-5hc7","path":"polling-app/package-lock.json","line":null,"fingerprint":"handlebars@4.7.8 (npm):GHSA-xw65-4hp5-5hc7"},{"rule_id":"osv/GHSA-h67p-54hq-rp68","severity":"medium","message":"js-yaml@3.14.1 (npm) is affected by GHSA-h67p-54hq-rp68","path":"polling-app/package-lock.json","line":null,"fingerprint":"js-yaml@3.14.1 (npm):GHSA-h67p-54hq-rp68"},{"rule_id":"osv/GHSA-mh29-5h37-fv8m","severity":"medium","message":"js-yaml@3.14.1 (npm) is affected by GHSA-mh29-5h37-fv8m","path":"polling-app/package-lock.json","line":null,"fingerprint":"js-yaml@3.14.1 (npm):GHSA-mh29-5h37-fv8m"},{"rule_id":"osv/GHSA-h67p-54hq-rp68","severity":"medium","message":"js-yaml@4.1.0 (npm) is affected by GHSA-h67p-54hq-rp68","path":"polling-app/package-lock.json","line":null,"fingerprint":"js-yaml@4.1.0 (npm):GHSA-h67p-54hq-rp68"},{"rule_id":"osv/GHSA-mh29-5h37-fv8m","severity":"medium","message":"js-yaml@4.1.0 (npm) is affected by GHSA-mh29-5h37-fv8m","path":"polling-app/package-lock.json","line":null,"fingerprint":"js-yaml@4.1.0 (npm):GHSA-mh29-5h37-fv8m"},{"rule_id":"osv/GHSA-g3hv-75wg-m249","severity":"medium","message":"minimatch@10.0.3 (npm) is affected by GHSA-g3hv-75wg-m249","path":"polling-app/package-lock.json","line":null,"fingerprint":"minimatch@10.0.3 (npm):GHSA-g3hv-75wg-m249"},{"rule_id":"osv/GHSA-g3hv-75wg-m249","severity":"medium","message":"minimatch@9.0.5 (npm) is affected by GHSA-g3hv-75wg-m249","path":"polling-app/package-lock.json","line":null,"fingerprint":"minimatch@9.0.5 (npm):GHSA-g3hv-75wg-m249"},{"rule_id":"osv/GHSA-3x4c-7xq6-9pq8","severity":"medium","message":"next@14.2.32 (npm) is affected by GHSA-3x4c-7xq6-9pq8","path":"polling-app/package-lock.json","line":null,"fingerprint":"next@14.2.32 (npm):GHSA-3x4c-7xq6-9pq8"},{"rule_id":"osv/GHSA-4633-3j49-mh5q","severity":"medium","message":"next@14.2.32 (npm) is affected by GHSA-4633-3j49-mh5q","path":"polling-app/package-lock.json","line":null,"fingerprint":"next@14.2.32 (npm):GHSA-4633-3j49-mh5q"},{"rule_id":"osv/GHSA-4c39-4ccg-62r3","severity":"medium","message":"next@14.2.32 (npm) is affected by GHSA-4c39-4ccg-62r3","path":"polling-app/package-lock.json","line":null,"fingerprint":"next@14.2.32 (npm):GHSA-4c39-4ccg-62r3"},{"rule_id":"osv/GHSA-68g3-v927-f742","severity":"medium","message":"next@14.2.32 (npm) is affected by GHSA-68g3-v927-f742","path":"polling-app/package-lock.json","line":null,"fingerprint":"next@14.2.32 (npm):GHSA-68g3-v927-f742"},{"rule_id":"osv/GHSA-955p-x3mx-jcvp","severity":"medium","message":"next@14.2.32 (npm) is affected by GHSA-955p-x3mx-jcvp","path":"polling-app/package-lock.json","line":null,"fingerprint":"next@14.2.32 (npm):GHSA-955p-x3mx-jcvp"},{"rule_id":"osv/GHSA-9g9p-9gw9-jx7f","severity":"medium","message":"next@14.2.32 (npm) is affected by GHSA-9g9p-9gw9-jx7f","path":"polling-app/package-lock.json","line":null,"fingerprint":"next@14.2.32 (npm):GHSA-9g9p-9gw9-jx7f"},{"rule_id":"osv/GHSA-ffhc-5mcf-pf4q","severity":"medium","message":"next@14.2.32 (npm) is affected by GHSA-ffhc-5mcf-pf4q","path":"polling-app/package-lock.json","line":null,"fingerprint":"next@14.2.32 (npm):GHSA-ffhc-5mcf-pf4q"},{"rule_id":"osv/GHSA-ggv3-7p47-pfv8","severity":"medium","message":"next@14.2.32 (npm) is affected by GHSA-ggv3-7p47-pfv8","path":"polling-app/package-lock.json","line":null,"fingerprint":"next@14.2.32 (npm):GHSA-ggv3-7p47-pfv8"},{"rule_id":"osv/GHSA-gx5p-jg67-6x7h","severity":"medium","message":"next@14.2.32 (npm) is affected by GHSA-gx5p-jg67-6x7h","path":"polling-app/package-lock.json","line":null,"fingerprint":"next@14.2.32 (npm):GHSA-gx5p-jg67-6x7h"},{"rule_id":"osv/GHSA-h64f-5h5j-jqjh","severity":"medium","message":"next@14.2.32 (npm) is affected by GHSA-h64f-5h5j-jqjh","path":"polling-app/package-lock.json","line":null,"fingerprint":"next@14.2.32 (npm):GHSA-h64f-5h5j-jqjh"},{"rule_id":"osv/GHSA-wfc6-r584-vfw7","severity":"medium","message":"next@14.2.32 (npm) is affected by GHSA-wfc6-r584-vfw7","path":"polling-app/package-lock.json","line":null,"fingerprint":"next@14.2.32 (npm):GHSA-wfc6-r584-vfw7"},{"rule_id":"osv/GHSA-3v7f-55p6-f55p","severity":"medium","message":"picomatch@2.3.1 (npm) is affected by GHSA-3v7f-55p6-f55p","path":"polling-app/package-lock.json","line":null,"fingerprint":"picomatch@2.3.1 (npm):GHSA-3v7f-55p6-f55p"},{"rule_id":"osv/GHSA-3v7f-55p6-f55p","severity":"medium","message":"picomatch@4.0.3 (npm) is affected by GHSA-3v7f-55p6-f55p","path":"polling-app/package-lock.json","line":null,"fingerprint":"picomatch@4.0.3 (npm):GHSA-3v7f-55p6-f55p"},{"rule_id":"osv/GHSA-fxqj-rqcc-2cmp","severity":"medium","message":"postcss@8.4.31 (npm) is affected by GHSA-fxqj-rqcc-2cmp","path":"polling-app/package-lock.json","line":null,"fingerprint":"postcss@8.4.31 (npm):GHSA-fxqj-rqcc-2cmp"},{"rule_id":"osv/GHSA-qx2v-qp2m-jg93","severity":"medium","message":"postcss@8.4.31 (npm) is affected by GHSA-qx2v-qp2m-jg93","path":"polling-app/package-lock.json","line":null,"fingerprint":"postcss@8.4.31 (npm):GHSA-qx2v-qp2m-jg93"},{"rule_id":"osv/GHSA-fxqj-rqcc-2cmp","severity":"medium","message":"postcss@8.5.6 (npm) is affected by GHSA-fxqj-rqcc-2cmp","path":"polling-app/package-lock.json","line":null,"fingerprint":"postcss@8.5.6 (npm):GHSA-fxqj-rqcc-2cmp"},{"rule_id":"osv/GHSA-qx2v-qp2m-jg93","severity":"medium","message":"postcss@8.5.6 (npm) is affected by GHSA-qx2v-qp2m-jg93","path":"polling-app/package-lock.json","line":null,"fingerprint":"postcss@8.5.6 (npm):GHSA-qx2v-qp2m-jg93"},{"rule_id":"osv/GHSA-rj75-hqrm-r3gf","severity":"medium","message":"postcss-selector-parser@6.1.2 (npm) is affected by GHSA-rj75-hqrm-r3gf","path":"polling-app/package-lock.json","line":null,"fingerprint":"postcss-selector-parser@6.1.2 (npm):GHSA-rj75-hqrm-r3gf"},{"rule_id":"osv/GHSA-w9m9-85wc-3x92","severity":"medium","message":"postcss-selector-parser@6.1.2 (npm) is affected by GHSA-w9m9-85wc-3x92","path":"polling-app/package-lock.json","line":null,"fingerprint":"postcss-selector-parser@6.1.2 (npm):GHSA-w9m9-85wc-3x92"},{"rule_id":"osv/GHSA-58qx-3vcg-4xpx","severity":"medium","message":"ws@8.17.1 (npm) is affected by GHSA-58qx-3vcg-4xpx","path":"polling-app/package-lock.json","line":null,"fingerprint":"ws@8.17.1 (npm):GHSA-58qx-3vcg-4xpx"},{"rule_id":"osv/GHSA-58qx-3vcg-4xpx","severity":"medium","message":"ws@8.18.3 (npm) is affected by GHSA-58qx-3vcg-4xpx","path":"polling-app/package-lock.json","line":null,"fingerprint":"ws@8.18.3 (npm):GHSA-58qx-3vcg-4xpx"},{"rule_id":"osv/GHSA-48c2-rrv3-qjmp","severity":"medium","message":"yaml@2.8.1 (npm) is affected by GHSA-48c2-rrv3-qjmp","path":"polling-app/package-lock.json","line":null,"fingerprint":"yaml@2.8.1 (npm):GHSA-48c2-rrv3-qjmp"},{"rule_id":"osv/GHSA-4x5r-pxfx-6jf8","severity":"low","message":"@babel/core@7.28.3 (npm) is affected by GHSA-4x5r-pxfx-6jf8","path":"polling-app/package-lock.json","line":null,"fingerprint":"@babel/core@7.28.3 (npm):GHSA-4x5r-pxfx-6jf8"},{"rule_id":"osv/GHSA-442j-39wm-28r2","severity":"low","message":"handlebars@4.7.8 (npm) is affected by GHSA-442j-39wm-28r2","path":"polling-app/package-lock.json","line":null,"fingerprint":"handlebars@4.7.8 (npm):GHSA-442j-39wm-28r2"},{"rule_id":"osv/GHSA-3g8h-86w9-wvmq","severity":"low","message":"next@14.2.32 (npm) is affected by GHSA-3g8h-86w9-wvmq","path":"polling-app/package-lock.json","line":null,"fingerprint":"next@14.2.32 (npm):GHSA-3g8h-86w9-wvmq"},{"rule_id":"osv/GHSA-vfv6-92ff-j949","severity":"low","message":"next@14.2.32 (npm) is affected by GHSA-vfv6-92ff-j949","path":"polling-app/package-lock.json","line":null,"fingerprint":"next@14.2.32 (npm):GHSA-vfv6-92ff-j949"}],"evidence":[],"data":{"ecosystems":["npm"]},"error":null},{"analyzer":"sec-actions","pillar":"security","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-posture","pillar":"security","status":"ok","tool_version":null,"metrics":{"check:security_policy":0.0,"check:dependency_updates":0.0,"check:signed_commits":0.0,"check:lockfiles":1.0,"signed_commit_share":0.2778,"unpinned_manifests":0.0},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-distribution","pillar":"security","status":"ok","tool_version":null,"metrics":{"signals":0.0,"binary_assets":0.0,"suspicious":0.0},"findings":[],"evidence":[],"data":{"signals":[],"suspicious":false,"unusual_traction":false,"metadata":true},"error":null},{"analyzer":"qual-complexity","pillar":"quality","status":"ok","tool_version":"lizard 1.25.1","metrics":{"functions":120.0,"function_nloc":811.0,"mean_ccn":3.07,"p90_ccn":7.0,"complex_functions":3.0,"long_functions":0.0,"many_param_functions":0.0,"risky_nloc_share":0.0037},"findings":[],"evidence":[{"kind":"complex-function","description":"W in polling-app/coverage/lcov-report/prettify.js: complexity 23, 1 lines","ref":"polling-app/coverage/lcov-report/prettify.js","url":"https://github.com/azukauteh/alx-polly/blob/11eb13c25c1ba6ac0a6f1be5f735fcfc10a8c689/polling-app/coverage/lcov-report/prettify.js#L2","weight":0.38333333333333336},{"kind":"complex-function","description":"U in polling-app/coverage/lcov-report/prettify.js: complexity 22, 1 lines","ref":"polling-app/coverage/lcov-report/prettify.js","url":"https://github.com/azukauteh/alx-polly/blob/11eb13c25c1ba6ac0a6f1be5f735fcfc10a8c689/polling-app/coverage/lcov-report/prettify.js#L2","weight":0.36666666666666664},{"kind":"complex-function","description":"X in polling-app/coverage/lcov-report/prettify.js: complexity 18, 1 lines","ref":"polling-app/coverage/lcov-report/prettify.js","url":"https://github.com/azukauteh/alx-polly/blob/11eb13c25c1ba6ac0a6f1be5f735fcfc10a8c689/polling-app/coverage/lcov-report/prettify.js#L2","weight":0.3}],"data":{},"error":null},{"analyzer":"qual-duplication","pillar":"quality","status":"ok","tool_version":"repotrust-dup-w6","metrics":{"compared_lines":1127.0,"duplicated_lines":12.0,"duplicated_share":0.0106,"files":52.0},"findings":[],"evidence":[{"kind":"duplicate-code","description":"6+ duplicated lines: polling-app/api/polls/id_route.ts:7 and polling-app/api/polls/route.ts:12","ref":"polling-app/api/polls/id_route.ts","url":"https://github.com/azukauteh/alx-polly/blob/11eb13c25c1ba6ac0a6f1be5f735fcfc10a8c689/polling-app/api/polls/id_route.ts#L7","weight":0.3}],"data":{},"error":null},{"analyzer":"qual-lint","pillar":"quality","status":"ok","tool_version":"opengrep 1.33.1; rules f1d2b562b414","metrics":{"findings":12.0,"weighted_findings":10.5,"scanned_lines":1665.0,"category:best-practice":10.0,"category:correctness":2.0},"findings":[{"rule_id":"opengrep/javascript.lang.best-practice.javascript-alert","severity":"medium","message":"found alert() call; should this be in production code?","path":"polling-app/app/polls/page.tsx","line":79,"fingerprint":"javascript.lang.best-practice.javascript-alert:polling-app/app/polls/page.tsx:79"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"polling-app/components/ui/button.tsx","line":54,"fingerprint":"typescript.react.best-practice.react-props-spreading:polling-app/components/ui/button.tsx:54"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"polling-app/components/ui/card.tsx","line":13,"fingerprint":"typescript.react.best-practice.react-props-spreading:polling-app/components/ui/card.tsx:13"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"polling-app/components/ui/card.tsx","line":26,"fingerprint":"typescript.react.best-practice.react-props-spreading:polling-app/components/ui/card.tsx:26"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"polling-app/components/ui/card.tsx","line":36,"fingerprint":"typescript.react.best-practice.react-props-spreading:polling-app/components/ui/card.tsx:36"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"polling-app/components/ui/card.tsx","line":46,"fingerprint":"typescript.react.best-practice.react-props-spreading:polling-app/components/ui/card.tsx:46"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"polling-app/components/ui/card.tsx","line":59,"fingerprint":"typescript.react.best-practice.react-props-spreading:polling-app/components/ui/card.tsx:59"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"polling-app/components/ui/card.tsx","line":69,"fingerprint":"typescript.react.best-practice.react-props-spreading:polling-app/components/ui/card.tsx:69"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"polling-app/components/ui/card.tsx","line":79,"fingerprint":"typescript.react.best-practice.react-props-spreading:polling-app/components/ui/card.tsx:79"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"polling-app/components/ui/input.tsx","line":57,"fingerprint":"typescript.react.best-practice.react-props-spreading:polling-app/components/ui/input.tsx:57"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`X[ar++]` is assigned twice; the first assignment is useless","path":"polling-app/coverage/lcov-report/prettify.js","line":2,"fingerprint":"javascript.lang.correctness.useless-assignment:polling-app/coverage/lcov-report/prettify.js:2"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`X[ar++]` is assigned twice; the first assignment is useless","path":"polling-app/coverage/lcov-report/prettify.js","line":2,"fingerprint":"javascript.lang.correctness.useless-assignment:polling-app/coverage/lcov-report/prettify.js:2"}],"evidence":[],"data":{},"error":null},{"analyzer":"qual-testing","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:has_tests":1.0,"check:test_ratio":0.1546,"check:ci_present":0.0,"check:ci_runs_tests":0.0,"check:ci_runs_lint":0.0,"check:tests_cochange":0.6667,"test_lines":134.0,"source_lines":1733.0,"test_ratio":0.0773,"ci_files":0.0,"cochange_share":0.1667,"cochange_commits":12.0},"findings":[],"evidence":[],"data":{"test_commands":[],"lint_commands":[]},"error":null},{"analyzer":"qual-docs","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:readme":1.0,"check:license":0.0,"check:contributing":0.0,"check:changelog":0.0,"readme_lines":134.0},"findings":[],"evidence":[{"kind":"docs","description":"README.md","ref":"README.md","url":null,"weight":0.0}],"data":{},"error":null},{"analyzer":"qual-type-safety","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:strict_config":0.0,"check:low_escape_density":1.0,"escapes":0.0,"escapes_per_kloc":0.0},"findings":[],"evidence":[],"data":{},"error":null}],"flags":[]}