{"schema_version":"2","scorer_version":"0.1.0","scoring_version":"prov-5+qual-2+sec-2","generated_at":"2026-11-14T14:52:05.962766Z","repo":{"ref":{"host":"github.com","owner":"l-baglini","name":"signal42-training-repository"},"default_branch":"main","clone_url":"https://github.com/l-baglini/signal42-training-repository.git","html_url":"https://github.com/l-baglini/signal42-training-repository","description":null,"stars":0,"forks":26,"is_fork":false,"is_archived":false,"is_private":false,"size_kb":3391,"primary_language":"JavaScript","license_spdx":null,"created_at":"2026-06-15T10:47:03Z","pushed_at":"2026-08-28T15:28:12Z","security_policy_url":null,"distribution":{"owner_created_at":"2024-04-03T16:41:16Z","owner_type":"User","release_assets":[]}},"commit_sha":"dacbc75ca1a8c9c22f824a05ada09a2b76ca2018","profile":{"lines_by_language":{"JavaScript":16272,"TypeScript":14789,"Python":9856,"Go":1488,"Dart":894,"Shell":654,"SQL":556,"Java":262},"files_by_category":{"source":416,"docs":119,"other":69,"config":68,"binary":55,"test":16,"generated":12},"source_lines":43353,"test_lines":1418},"pillars":{"ai_provenance":{"score":20.9,"confidence":0.81,"coverage":1.0,"label":"explicit","breakdown":{"attributed_share":0.209,"suspected_share":0.2632,"estimated_share":0.209,"ai_artifacts":12.0,"flagged_work_units":5.0,"flagged_releases":null,"style_index":3.079},"summary":"Explicit AI attribution on 21% of first-party code added; an estimated 21% including velocity signals."},"quality":{"score":54.5,"confidence":0.9,"coverage":1.0,"label":"weak","breakdown":{"complexity":70.1,"duplication":86.6,"lint":46.1,"testing":29.4,"docs":40.0,"type_safety":76.0,"process":null},"summary":"Code quality is weak: test-to-source ratio 0.03, no CI test run detected; 12% of function code in complex or long functions; 2% duplicated lines. Weakest area: testing."},"security":{"score":53.1,"confidence":0.85,"coverage":1.0,"label":"weak","breakdown":{"secrets":96.7,"sast":78.0,"dependencies":0.1,"ci_actions":null,"posture":0.0,"scorecard":null},"summary":"Security posture is weak: 328 known vulnerabilities in 53 dependencies; 22 high-severity SAST findings. Weakest area: posture."}},"analyzer_results":[{"analyzer":"sec-scorecard","pillar":"security","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":"no published OpenSSF Scorecard result for this repo"},{"analyzer":"sec-registry","pillar":"security","status":"ok","tool_version":null,"metrics":{"declared":110.0,"checked":110.0,"missing":0.0,"recent":0.0,"lookup_errors":0.0},"findings":[],"evidence":[],"data":{"phantom":false},"error":null},{"analyzer":"ai-attribution","pillar":"ai_provenance","status":"ok","tool_version":"signatures-v1","metrics":{"commits":44.0,"attributed_commits":7.0,"attributed_commit_share":0.1590909090909091,"effective_loc":52606.0,"attributed_loc":10996.0,"attributed_loc_share":0.2090255864350074,"tools_detected":1.0},"findings":[],"evidence":[{"kind":"attribution-summary","description":"Claude Code: 7 attributed commits, 10,996 lines added","ref":null,"url":null,"weight":1.0},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"a77181a074456e89fda745d1170a088174982734","url":"https://github.com/l-baglini/signal42-training-repository/commit/a77181a074456e89fda745d1170a088174982734","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"31a4a9b2b1fc7275651692001732dad2b4f39580","url":"https://github.com/l-baglini/signal42-training-repository/commit/31a4a9b2b1fc7275651692001732dad2b4f39580","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"f0d21ac57d8f6b9d9266c58952c89c863fa71c6a","url":"https://github.com/l-baglini/signal42-training-repository/commit/f0d21ac57d8f6b9d9266c58952c89c863fa71c6a","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"a258e07d7d7242a83813d20bc6beea64d9a5b6e1","url":"https://github.com/l-baglini/signal42-training-repository/commit/a258e07d7d7242a83813d20bc6beea64d9a5b6e1","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-authored-by: Claude'","ref":"e518a31924d90e27285e501ea7e428fd4d4bc3de","url":"https://github.com/l-baglini/signal42-training-repository/commit/e518a31924d90e27285e501ea7e428fd4d4bc3de","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"95626686af4d79a093738b20cef63a91665a0eac","url":"https://github.com/l-baglini/signal42-training-repository/commit/95626686af4d79a093738b20cef63a91665a0eac","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-authored-by: Claude'","ref":"6001399fecf2257ae53211f40b74efdd7fc413be","url":"https://github.com/l-baglini/signal42-training-repository/commit/6001399fecf2257ae53211f40b74efdd7fc413be","weight":0.9}],"data":{"attributed_loc_by_commit":{"6001399fecf2257ae53211f40b74efdd7fc413be":5869,"95626686af4d79a093738b20cef63a91665a0eac":5083,"e518a31924d90e27285e501ea7e428fd4d4bc3de":0,"a258e07d7d7242a83813d20bc6beea64d9a5b6e1":0,"f0d21ac57d8f6b9d9266c58952c89c863fa71c6a":31,"31a4a9b2b1fc7275651692001732dad2b4f39580":10,"a77181a074456e89fda745d1170a088174982734":3},"tools":{"claude-code":{"name":"Claude Code","commits":7,"loc":10996,"first_seen":1781785580,"last_seen":1783677393}},"monthly":{"2026-06":{"loc":52021,"attributed_loc":10952},"2026-07":{"loc":585,"attributed_loc":44}}},"error":null},{"analyzer":"ai-artifacts","pillar":"ai_provenance","status":"ok","tool_version":"signatures-v1","metrics":{"artifacts":12.0,"workflow_agents":0.0,"tools_configured":2.0,"earliest_adoption":1781628906.0},"findings":[],"evidence":[{"kind":"ai-artifact","description":"homework-01/dario-triolo/CLAUDE.md (claude-code configuration)","ref":"homework-01/dario-triolo/CLAUDE.md","url":"https://github.com/l-baglini/signal42-training-repository/blob/dacbc75ca1a8c9c22f824a05ada09a2b76ca2018/homework-01/dario-triolo/CLAUDE.md","weight":0.5},{"kind":"ai-artifact","description":"homework-01/f-pettrone/maze-cli-escape/CLAUDE.md (claude-code configuration)","ref":"homework-01/f-pettrone/maze-cli-escape/CLAUDE.md","url":"https://github.com/l-baglini/signal42-training-repository/blob/dacbc75ca1a8c9c22f824a05ada09a2b76ca2018/homework-01/f-pettrone/maze-cli-escape/CLAUDE.md","weight":0.5},{"kind":"ai-artifact","description":"homework-01/federico-liccione/CLAUDE.md (claude-code configuration)","ref":"homework-01/federico-liccione/CLAUDE.md","url":"https://github.com/l-baglini/signal42-training-repository/blob/dacbc75ca1a8c9c22f824a05ada09a2b76ca2018/homework-01/federico-liccione/CLAUDE.md","weight":0.5},{"kind":"ai-artifact","description":"homework-01/federico-quaglia/CLAUDE.md (claude-code configuration)","ref":"homework-01/federico-quaglia/CLAUDE.md","url":"https://github.com/l-baglini/signal42-training-repository/blob/dacbc75ca1a8c9c22f824a05ada09a2b76ca2018/homework-01/federico-quaglia/CLAUDE.md","weight":0.5},{"kind":"ai-artifact","description":"homework-01/gabriV/CLAUDE.md (claude-code configuration)","ref":"homework-01/gabriV/CLAUDE.md","url":"https://github.com/l-baglini/signal42-training-repository/blob/dacbc75ca1a8c9c22f824a05ada09a2b76ca2018/homework-01/gabriV/CLAUDE.md","weight":0.5},{"kind":"ai-artifact","description":"homework-01/marioben/code-lens/CLAUDE.md (claude-code configuration)","ref":"homework-01/marioben/code-lens/CLAUDE.md","url":"https://github.com/l-baglini/signal42-training-repository/blob/dacbc75ca1a8c9c22f824a05ada09a2b76ca2018/homework-01/marioben/code-lens/CLAUDE.md","weight":0.5},{"kind":"ai-artifact","description":"homework-01/mdand/CLAUDE.md (claude-code configuration)","ref":"homework-01/mdand/CLAUDE.md","url":"https://github.com/l-baglini/signal42-training-repository/blob/dacbc75ca1a8c9c22f824a05ada09a2b76ca2018/homework-01/mdand/CLAUDE.md","weight":0.5},{"kind":"ai-artifact","description":"homework-01/michele_bertagni/CLAUDE.md (claude-code configuration)","ref":"homework-01/michele_bertagni/CLAUDE.md","url":"https://github.com/l-baglini/signal42-training-repository/blob/dacbc75ca1a8c9c22f824a05ada09a2b76ca2018/homework-01/michele_bertagni/CLAUDE.md","weight":0.5},{"kind":"ai-artifact","description":"homework-01/rosario/gatherer/CLAUDE.md (claude-code configuration)","ref":"homework-01/rosario/gatherer/CLAUDE.md","url":"https://github.com/l-baglini/signal42-training-repository/blob/dacbc75ca1a8c9c22f824a05ada09a2b76ca2018/homework-01/rosario/gatherer/CLAUDE.md","weight":0.5},{"kind":"ai-artifact","description":"homework-01/sasero/claude-monitor-usage/CLAUDE.md (claude-code configuration)","ref":"homework-01/sasero/claude-monitor-usage/CLAUDE.md","url":"https://github.com/l-baglini/signal42-training-repository/blob/dacbc75ca1a8c9c22f824a05ada09a2b76ca2018/homework-01/sasero/claude-monitor-usage/CLAUDE.md","weight":0.5},{"kind":"ai-artifact","description":"homework-01/sasero/office-chaos/CLAUDE.md (claude-code configuration)","ref":"homework-01/sasero/office-chaos/CLAUDE.md","url":"https://github.com/l-baglini/signal42-training-repository/blob/dacbc75ca1a8c9c22f824a05ada09a2b76ca2018/homework-01/sasero/office-chaos/CLAUDE.md","weight":0.5},{"kind":"ai-artifact","description":"homework-01/federico-liccione/AGENTS.md (generic-agent configuration)","ref":"homework-01/federico-liccione/AGENTS.md","url":"https://github.com/l-baglini/signal42-training-repository/blob/dacbc75ca1a8c9c22f824a05ada09a2b76ca2018/homework-01/federico-liccione/AGENTS.md","weight":0.5}],"data":{"artifacts":[{"tool":"claude-code","path":"homework-01/dario-triolo/CLAUDE.md","added_at":1781785580},{"tool":"claude-code","path":"homework-01/f-pettrone/maze-cli-escape/CLAUDE.md","added_at":1781853817},{"tool":"claude-code","path":"homework-01/federico-liccione/CLAUDE.md","added_at":1781793551},{"tool":"claude-code","path":"homework-01/federico-quaglia/CLAUDE.md","added_at":1781772777},{"tool":"claude-code","path":"homework-01/gabriV/CLAUDE.md","added_at":1781785735},{"tool":"claude-code","path":"homework-01/marioben/code-lens/CLAUDE.md","added_at":1781629248},{"tool":"claude-code","path":"homework-01/mdand/CLAUDE.md","added_at":1782121099},{"tool":"claude-code","path":"homework-01/michele_bertagni/CLAUDE.md","added_at":1781628906},{"tool":"claude-code","path":"homework-01/rosario/gatherer/CLAUDE.md","added_at":1781716672},{"tool":"claude-code","path":"homework-01/sasero/claude-monitor-usage/CLAUDE.md","added_at":1781785900},{"tool":"claude-code","path":"homework-01/sasero/office-chaos/CLAUDE.md","added_at":1781785900},{"tool":"generic-agent","path":"homework-01/federico-liccione/AGENTS.md","added_at":1781793551}],"workflows":[],"tools":["claude-code","generic-agent"]},"error":null},{"analyzer":"ai-velocity","pillar":"ai_provenance","status":"ok","tool_version":"prov-4","metrics":{"work_units":19.0,"flagged_units":5.0,"pre_ai_era_bursts":0.0,"pre_ai_era_measured_loc":0.0,"pre_ai_era_burst_loc":0.0,"measured_loc":31748.0,"flagged_loc":19714.0,"flagged_loc_share":0.6209525009449414,"max_loc_per_hour":1319.884805266045,"median_loc_per_hour":247.8994963939831,"pr_timed_units":14.0,"excluded_import_loc":20858.0},"findings":[],"evidence":[{"kind":"velocity-burst","description":"5,347 lines of first-party code in ~4.1h (1,320 lines/hour, 2 commit session)","ref":"ba3f66f1d2f2f399989ed7dfac7e5078876d5d54","url":"https://github.com/l-baglini/signal42-training-repository/commit/ba3f66f1d2f2f399989ed7dfac7e5078876d5d54","weight":0.3959654415798135},{"kind":"velocity-burst","description":"3,376 lines of first-party code in ~4.2h (810 lines/hour, PR #5)","ref":"0a5c6c143552d3d6f53994aa49c9c6ae096e8f60","url":"https://github.com/l-baglini/signal42-training-repository/commit/0a5c6c143552d3d6f53994aa49c9c6ae096e8f60","weight":0.24292624425344791},{"kind":"velocity-burst","description":"5,869 lines of first-party code in ~7.3h (804 lines/hour, PR #12)","ref":"6001399fecf2257ae53211f40b74efdd7fc413be","url":"https://github.com/l-baglini/signal42-training-repository/commit/6001399fecf2257ae53211f40b74efdd7fc413be","weight":0.24114590070382347},{"kind":"velocity-burst","description":"2,802 lines of first-party code in ~3.9h (715 lines/hour, 2 commit session)","ref":"1e0900b222e6c16b9e5e34be0a43bdde8640e9b1","url":"https://github.com/l-baglini/signal42-training-repository/commit/1e0900b222e6c16b9e5e34be0a43bdde8640e9b1","weight":0.21440838883378205},{"kind":"velocity-burst","description":"2,320 lines of first-party code in ~4.1h (572 lines/hour, PR #11)","ref":"7c3ff65680466e5955ba2b1d15b7a80ea2137dcb","url":"https://github.com/l-baglini/signal42-training-repository/commit/7c3ff65680466e5955ba2b1d15b7a80ea2137dcb","weight":0.17168699465533777}],"data":{"flagged_loc_by_commit":{"0a5c6c143552d3d6f53994aa49c9c6ae096e8f60":3376,"7c3ff65680466e5955ba2b1d15b7a80ea2137dcb":2320,"45eb8b8da65f71428d6732136fafaeb30d76a4ad":2682,"ba3f66f1d2f2f399989ed7dfac7e5078876d5d54":2665,"f65a6a22f5402345fc0da6974997710c9ddd8d81":2781,"1e0900b222e6c16b9e5e34be0a43bdde8640e9b1":21,"6001399fecf2257ae53211f40b74efdd7fc413be":5869},"excluded_import_commits":["7cc7e8deb418d1ec6402772493a06ae73225964d","7d7126e3dfc19f8965f8da86b35873d2e2b16b3d","95626686af4d79a093738b20cef63a91665a0eac","c1ed704882ad2b5fd24393ea38a5abb5bc44fea8"]},"error":null},{"analyzer":"ai-release-velocity","pillar":"ai_provenance","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"ai-stylometry","pillar":"ai_provenance","status":"ok","tool_version":null,"metrics":{"lines_scanned":43353.0,"index":3.079,"count:narrated_steps":0.0,"per_kloc:narrated_steps":0.0,"files:narrated_steps":0.0,"count:placeholder":0.0,"per_kloc:placeholder":0.0,"files:placeholder":0.0,"count:emoji_in_code":267.0,"per_kloc:emoji_in_code":6.159,"files:emoji_in_code":60.0,"count:assistant_voice":0.0,"per_kloc:assistant_voice":0.0,"files:assistant_voice":0.0},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-secrets","pillar":"security","status":"ok","tool_version":"gitleaks 8.30.1","metrics":{"secrets_current":0.0,"secrets_history":0.0,"secrets_nonprod":1.0,"secrets_low_confidence":0.0},"findings":[{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in the current tree (test/docs/example file)","path":"homework-01/marioben/code-lens/.claude/skills/api-design/SKILL.md","line":307,"fingerprint":"homework-01/marioben/code-lens/.claude/skills/api-design/SKILL.md:generic-api-key:307"}],"evidence":[],"data":{},"error":null},{"analyzer":"sec-sast","pillar":"security","status":"ok","tool_version":"opengrep 1.33.1; rules f1d2b562b414","metrics":{"findings":59.0,"findings_high":22.0,"findings_medium":32.0,"findings_low":5.0,"weighted_findings":29.713,"scanned_lines":41903.0,"parse_errors":2.0},"findings":[{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'run' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"homework-01/federico-quaglia/analyzer.py","line":225,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:homework-01/federico-quaglia/analyzer.py:225"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"homework-01/gabriV/web/js/hud.js","line":102,"fingerprint":"javascript.browser.security.insecure-document-method:homework-01/gabriV/web/js/hud.js:102"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `line.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"homework-01/gabriV/web/js/hud.js","line":102,"fingerprint":"javascript.browser.security.insecure-innerhtml:homework-01/gabriV/web/js/hud.js:102"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"homework-01/gabriV/web/js/lobby.js","line":11,"fingerprint":"javascript.browser.security.insecure-document-method:homework-01/gabriV/web/js/lobby.js:11"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `container.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"homework-01/gabriV/web/js/lobby.js","line":11,"fingerprint":"javascript.browser.security.insecure-innerhtml:homework-01/gabriV/web/js/lobby.js:11"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"homework-01/gabriV/web/js/options.js","line":12,"fingerprint":"javascript.browser.security.insecure-document-method:homework-01/gabriV/web/js/options.js:12"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `panel.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"homework-01/gabriV/web/js/options.js","line":12,"fingerprint":"javascript.browser.security.insecure-innerhtml:homework-01/gabriV/web/js/options.js:12"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"homework-01/matteo/space-invaders/game.js","line":318,"fingerprint":"javascript.browser.security.insecure-document-method:homework-01/matteo/space-invaders/game.js:318"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `ov.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"homework-01/matteo/space-invaders/game.js","line":318,"fingerprint":"javascript.browser.security.insecure-innerhtml:homework-01/matteo/space-invaders/game.js:318"},{"rule_id":"opengrep/python.lang.security.use-defused-xml","severity":"high","message":"The Python documentation recommends using `defusedxml` instead of `xml` because the native Python `xml` library is vulnerable to XML External Entity (XXE) attacks. These attacks can leak confidential data and \"XML bombs\" can cause denial of service. [confidence low]","path":"homework-01/mlucchesi/workbreak/modules/dashboard.py","line":45,"fingerprint":"python.lang.security.use-defused-xml:homework-01/mlucchesi/workbreak/modules/dashboard.py:45"},{"rule_id":"opengrep/python.lang.security.use-defused-xml-parse","severity":"high","message":"The native Python `xml` library is vulnerable to XML External Entity (XXE) attacks.  These attacks can leak confidential data and \"XML bombs\" can cause denial of service. Do not use this library to parse untrusted input. Instead  the Python documentation recommends using `defusedxml`. [confidence medium]","path":"homework-01/mlucchesi/workbreak/modules/dashboard.py","line":50,"fingerprint":"python.lang.security.use-defused-xml-parse:homework-01/mlucchesi/workbreak/modules/dashboard.py:50"},{"rule_id":"opengrep/python.lang.security.audit.dangerous-subprocess-use-audit","severity":"high","message":"Detected subprocess function 'run' without a static string. If this data can be controlled by a malicious actor, it may be an instance of command injection. Audit the use of this call to ensure it is not controllable by an external resource. You may consider using 'shlex.escape()'. [confidence low]","path":"homework-01/mlucchesi/workbreak/modules/timer_engine.py","line":25,"fingerprint":"python.lang.security.audit.dangerous-subprocess-use-audit:homework-01/mlucchesi/workbreak/modules/timer_engine.py:25"},{"rule_id":"opengrep/dockerfile.security.missing-user-entrypoint","severity":"high","message":"By not specifying a USER, a program in the container may run as 'root'. This is a security hazard. If an attacker can control a process running as root, they may have control over the container. Ensure that the last USER in a Dockerfile is a USER other than 'root'. [confidence medium]","path":"homework-01/rosario/gatherer/backend/Dockerfile","line":20,"fingerprint":"dockerfile.security.missing-user-entrypoint:homework-01/rosario/gatherer/backend/Dockerfile:20"},{"rule_id":"opengrep/dockerfile.security.missing-user","severity":"high","message":"By not specifying a USER, a program in the container may run as 'root'. This is a security hazard. If an attacker can control a process running as root, they may have control over the container. Ensure that the last USER in a Dockerfile is a USER other than 'root'. [confidence medium]","path":"homework-01/sasero/office-chaos/server/Dockerfile","line":18,"fingerprint":"dockerfile.security.missing-user:homework-01/sasero/office-chaos/server/Dockerfile:18"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"homework-04/public/index.js","line":114,"fingerprint":"javascript.browser.security.insecure-document-method:homework-04/public/index.js:114"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `modal.querySelector('.seller-id').innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"homework-04/public/index.js","line":114,"fingerprint":"javascript.browser.security.insecure-innerhtml:homework-04/public/index.js:114"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"homework-04/public/index.js","line":115,"fingerprint":"javascript.browser.security.insecure-document-method:homework-04/public/index.js:115"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `modal.querySelector('.seller-name').innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"homework-04/public/index.js","line":115,"fingerprint":"javascript.browser.security.insecure-innerhtml:homework-04/public/index.js:115"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"homework-04/public/index.js","line":116,"fingerprint":"javascript.browser.security.insecure-document-method:homework-04/public/index.js:116"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `modal.querySelector('.seller-domain').innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"homework-04/public/index.js","line":116,"fingerprint":"javascript.browser.security.insecure-innerhtml:homework-04/public/index.js:116"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"homework-04/public/index.js","line":118,"fingerprint":"javascript.browser.security.insecure-document-method:homework-04/public/index.js:118"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `modal.querySelector('.import-date').innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"homework-04/public/index.js","line":118,"fingerprint":"javascript.browser.security.insecure-innerhtml:homework-04/public/index.js:118"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `folderPath` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"homework-01/ema/gitdash/main.js","line":34,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:homework-01/ema/gitdash/main.js:34"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"homework-01/ema/gitdash/main.js","line":38,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:homework-01/ema/gitdash/main.js:38"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"homework-01/ema/gitdash/main.js","line":38,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:homework-01/ema/gitdash/main.js:38"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"homework-01/ema/gitdash/main.js","line":39,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:homework-01/ema/gitdash/main.js:39"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `folderPath` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"homework-01/ema/gitdash/main.js","line":40,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:homework-01/ema/gitdash/main.js:40"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"homework-01/federico-liccione/src/app/api/feed/route.ts","line":33,"fingerprint":"javascript.lang.security.html-in-template-string:homework-01/federico-liccione/src/app/api/feed/route.ts:33"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"homework-01/federico-liccione/src/app/api/feed/route.ts","line":39,"fingerprint":"javascript.lang.security.html-in-template-string:homework-01/federico-liccione/src/app/api/feed/route.ts:39"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"homework-01/federico-liccione/src/app/api/notify/route.ts","line":98,"fingerprint":"javascript.lang.security.html-in-template-string:homework-01/federico-liccione/src/app/api/notify/route.ts:98"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"homework-01/federico-liccione/src/components/EventMap.tsx","line":134,"fingerprint":"javascript.lang.security.html-in-template-string:homework-01/federico-liccione/src/components/EventMap.tsx:134"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"homework-01/federico-liccione/src/components/EventMap.tsx","line":137,"fingerprint":"javascript.lang.security.html-in-template-string:homework-01/federico-liccione/src/components/EventMap.tsx:137"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"homework-01/federico-liccione/src/components/EventMap.tsx","line":152,"fingerprint":"javascript.lang.security.html-in-template-string:homework-01/federico-liccione/src/components/EventMap.tsx:152"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"homework-01/federico-liccione/src/components/EventMap.tsx","line":179,"fingerprint":"javascript.lang.security.html-in-template-string:homework-01/federico-liccione/src/components/EventMap.tsx:179"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"homework-01/gabriM/frontend/src/App.jsx","line":16,"fingerprint":"javascript.lang.security.html-in-template-string:homework-01/gabriM/frontend/src/App.jsx:16"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"homework-01/gabriM/frontend/src/App.jsx","line":17,"fingerprint":"javascript.lang.security.html-in-template-string:homework-01/gabriM/frontend/src/App.jsx:17"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"homework-01/gabriM/frontend/src/App.jsx","line":18,"fingerprint":"javascript.lang.security.html-in-template-string:homework-01/gabriM/frontend/src/App.jsx:18"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"homework-01/gabriM/frontend/src/App.jsx","line":19,"fingerprint":"javascript.lang.security.html-in-template-string:homework-01/gabriM/frontend/src/App.jsx:19"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"homework-01/gabriM/frontend/src/App.jsx","line":21,"fingerprint":"javascript.lang.security.html-in-template-string:homework-01/gabriM/frontend/src/App.jsx:21"},{"rule_id":"opengrep/go.lang.security.audit.net.use-tls","severity":"medium","message":"Found an HTTP server without TLS. Use 'http.ListenAndServeTLS' instead. See https://golang.org/pkg/net/http/#ListenAndServeTLS for more information. [confidence medium]","path":"homework-01/gabriV/cmd/server/main.go","line":37,"fingerprint":"go.lang.security.audit.net.use-tls:homework-01/gabriV/cmd/server/main.go:37"},{"rule_id":"opengrep/go.lang.security.audit.crypto.math-random-used","severity":"medium","message":"Do not use `math/rand`. Use `crypto/rand` instead. [confidence medium]","path":"homework-01/gabriV/internal/game/state.go","line":5,"fingerprint":"go.lang.security.audit.crypto.math-random-used:homework-01/gabriV/internal/game/state.go:5"},{"rule_id":"opengrep/go.gorilla.security.audit.websocket-missing-origin-check","severity":"medium","message":"The Origin header in the HTTP WebSocket handshake is used to guarantee that the connection accepted by the WebSocket is from a trusted origin domain. Failure to enforce can lead to Cross Site Request Forgery (CSRF). As per \"gorilla/websocket\" documentation: \"A CheckOrigin function should carefully v [confidence medium]","path":"homework-01/gabriV/internal/room/client.go","line":49,"fingerprint":"go.gorilla.security.audit.websocket-missing-origin-check:homework-01/gabriV/internal/room/client.go:49"},{"rule_id":"opengrep/go.gorilla.security.audit.websocket-missing-origin-check","severity":"medium","message":"The Origin header in the HTTP WebSocket handshake is used to guarantee that the connection accepted by the WebSocket is from a trusted origin domain. Failure to enforce can lead to Cross Site Request Forgery (CSRF). As per \"gorilla/websocket\" documentation: \"A CheckOrigin function should carefully v [confidence medium]","path":"homework-01/gabriV/internal/room/client.go","line":68,"fingerprint":"go.gorilla.security.audit.websocket-missing-origin-check:homework-01/gabriV/internal/room/client.go:68"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"homework-01/gabriV/web/js/hud.js","line":103,"fingerprint":"javascript.lang.security.html-in-template-string:homework-01/gabriV/web/js/hud.js:103"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"homework-01/gabriV/web/js/hud.js","line":104,"fingerprint":"javascript.lang.security.html-in-template-string:homework-01/gabriV/web/js/hud.js:104"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"homework-01/matteo/space-invaders/game.js","line":318,"fingerprint":"javascript.lang.security.html-in-template-string:homework-01/matteo/space-invaders/game.js:318"},{"rule_id":"opengrep/python.fastapi.security.wildcard-cors","severity":"medium","message":"CORS policy allows any origin (using wildcard '*'). This is insecure and should be avoided. [confidence medium]","path":"homework-01/rosario/gatherer/backend/app/main.py","line":41,"fingerprint":"python.fastapi.security.wildcard-cors:homework-01/rosario/gatherer/backend/app/main.py:41"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `p` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"homework-01/sasero/claude-monitor-usage/server.js","line":138,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:homework-01/sasero/claude-monitor-usage/server.js:138"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"homework-01/sasero/claude-monitor-usage/server.js","line":326,"fingerprint":"javascript.lang.security.html-in-template-string:homework-01/sasero/claude-monitor-usage/server.js:326"},{"rule_id":"opengrep/dockerfile.security.secret-in-build-arg","severity":"medium","message":"Docker build time arguments are not suited for secrets, because the argument values are saved with the image. Running `docker image history` on the image will show information on how the image was built, including arguments. If these contain plain text secrets, anyone with access to the docker image [confidence low]","path":"homework-01/tommasoNocchi/frontend/Dockerfile","line":6,"fingerprint":"dockerfile.security.secret-in-build-arg:homework-01/tommasoNocchi/frontend/Dockerfile:6"},{"rule_id":"opengrep/javascript.express.security.audit.xss.ejs.template-explicit-unescape","severity":"medium","message":"Detected an explicit unescape in an EJS template, using '<%- ... %>' If external data can reach these locations, your application is exposed to a cross-site scripting (XSS) vulnerability. Use '<%= ... %>' to escape this data. If you need escaping, ensure no external data can reach this location. [confidence low]","path":"homework-04/views/index.ejs","line":11,"fingerprint":"javascript.express.security.audit.xss.ejs.template-explicit-unescape:homework-04/views/index.ejs:11"},{"rule_id":"opengrep/javascript.express.security.audit.xss.ejs.var-in-script-tag","severity":"medium","message":"Detected a template variable used in a script tag. Although template variables are HTML escaped, HTML escaping does not always prevent cross-site scripting (XSS) attacks when used directly in JavaScript. If you need this data on the rendered page, consider placing it in the HTML portion (outside of  [confidence low]","path":"homework-04/views/index.ejs","line":11,"fingerprint":"javascript.express.security.audit.xss.ejs.var-in-script-tag:homework-04/views/index.ejs:11"},{"rule_id":"opengrep/javascript.express.security.audit.xss.ejs.template-explicit-unescape","severity":"medium","message":"Detected an explicit unescape in an EJS template, using '<%- ... %>' If external data can reach these locations, your application is exposed to a cross-site scripting (XSS) vulnerability. Use '<%= ... %>' to escape this data. If you need escaping, ensure no external data can reach this location. [confidence low]","path":"homework-04/views/index.ejs","line":12,"fingerprint":"javascript.express.security.audit.xss.ejs.template-explicit-unescape:homework-04/views/index.ejs:12"},{"rule_id":"opengrep/javascript.express.security.audit.xss.ejs.var-in-script-tag","severity":"medium","message":"Detected a template variable used in a script tag. Although template variables are HTML escaped, HTML escaping does not always prevent cross-site scripting (XSS) attacks when used directly in JavaScript. If you need this data on the rendered page, consider placing it in the HTML portion (outside of  [confidence low]","path":"homework-04/views/index.ejs","line":12,"fingerprint":"javascript.express.security.audit.xss.ejs.var-in-script-tag:homework-04/views/index.ejs:12"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-formatstring","severity":"low","message":"Detected string concatenation with a non-literal variable in a util.format / console.log function. If an attacker injects a format specifier in the string, it will forge the log message. Try to use constant values for the format string. [confidence low]","path":"homework-01/diego-tomba/src/presentation/cli/index.ts","line":38,"fingerprint":"javascript.lang.security.audit.unsafe-formatstring:homework-01/diego-tomba/src/presentation/cli/index.ts:38"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-formatstring","severity":"low","message":"Detected string concatenation with a non-literal variable in a util.format / console.log function. If an attacker injects a format specifier in the string, it will forge the log message. Try to use constant values for the format string. [confidence low]","path":"homework-01/diego-tomba/worker/scheduler.ts","line":60,"fingerprint":"javascript.lang.security.audit.unsafe-formatstring:homework-01/diego-tomba/worker/scheduler.ts:60"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-formatstring","severity":"low","message":"Detected string concatenation with a non-literal variable in a util.format / console.log function. If an attacker injects a format specifier in the string, it will forge the log message. Try to use constant values for the format string. [confidence low]","path":"homework-01/federico-liccione/src/lib/scrapers/centrisociali.ts","line":98,"fingerprint":"javascript.lang.security.audit.unsafe-formatstring:homework-01/federico-liccione/src/lib/scrapers/centrisociali.ts:98"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-formatstring","severity":"low","message":"Detected string concatenation with a non-literal variable in a util.format / console.log function. If an attacker injects a format specifier in the string, it will forge the log message. Try to use constant values for the format string. [confidence low]","path":"homework-01/federico-liccione/src/lib/scrapers/telegram.ts","line":125,"fingerprint":"javascript.lang.security.audit.unsafe-formatstring:homework-01/federico-liccione/src/lib/scrapers/telegram.ts:125"},{"rule_id":"opengrep/javascript.express.security.audit.express-check-csurf-middleware-usage","severity":"low","message":"A CSRF middleware was not detected in your express application. Ensure you are either using one such as `csurf` or `csrf` (see rule references) and/or you are properly doing CSRF validation in your routes with a token or cookies. [confidence low]","path":"homework-01/sasero/claude-monitor-usage/server.js","line":9,"fingerprint":"javascript.express.security.audit.express-check-csurf-middleware-usage:homework-01/sasero/claude-monitor-usage/server.js:9"}],"evidence":[],"data":{"rulesets":["javascript","typescript","python","go","bash","java","dockerfile"]},"error":null},{"analyzer":"sec-deps","pillar":"security","status":"ok","tool_version":"osv-scanner version: 2.7.1","metrics":{"vulnerable_packages":53.0,"vulnerabilities":328.0,"vulns_critical":19.0,"vulns_high":135.0,"vulns_medium":144.0,"vulns_low":27.0,"vulns_unknown":3.0,"penalty":410.0},"findings":[{"rule_id":"osv/GHSA-2464-fhr4-w9xw","severity":"critical","message":"next@15.5.19 (npm) is affected by GHSA-2464-fhr4-w9xw","path":"homework-01/diego-tomba/package-lock.json","line":null,"fingerprint":"next@15.5.19 (npm):GHSA-2464-fhr4-w9xw"},{"rule_id":"osv/GHSA-2xp9-vwfh-vxw4","severity":"critical","message":"next@15.5.19 (npm) is affected by GHSA-2xp9-vwfh-vxw4","path":"homework-01/diego-tomba/package-lock.json","line":null,"fingerprint":"next@15.5.19 (npm):GHSA-2xp9-vwfh-vxw4"},{"rule_id":"osv/GHSA-p293-qw3h-jr36","severity":"critical","message":"next@15.5.19 (npm) is affected by GHSA-p293-qw3h-jr36","path":"homework-01/diego-tomba/package-lock.json","line":null,"fingerprint":"next@15.5.19 (npm):GHSA-p293-qw3h-jr36"},{"rule_id":"osv/GHSA-v5rq-49vh-5v5c","severity":"critical","message":"@simple-git/argv-parser@1.1.1 (npm) is affected by GHSA-v5rq-49vh-5v5c","path":"homework-01/ema/gitdash/package-lock.json","line":null,"fingerprint":"@simple-git/argv-parser@1.1.1 (npm):GHSA-v5rq-49vh-5v5c"},{"rule_id":"osv/GHSA-x6jw-m9v5-85vh","severity":"critical","message":"simple-git@3.36.0 (npm) is affected by GHSA-x6jw-m9v5-85vh","path":"homework-01/ema/gitdash/package-lock.json","line":null,"fingerprint":"simple-git@3.36.0 (npm):GHSA-x6jw-m9v5-85vh"},{"rule_id":"osv/GHSA-2464-fhr4-w9xw","severity":"critical","message":"next@14.2.35 (npm) is affected by GHSA-2464-fhr4-w9xw","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"next@14.2.35 (npm):GHSA-2464-fhr4-w9xw"},{"rule_id":"osv/GHSA-2xp9-vwfh-vxw4","severity":"critical","message":"next@14.2.35 (npm) is affected by GHSA-2xp9-vwfh-vxw4","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"next@14.2.35 (npm):GHSA-2xp9-vwfh-vxw4"},{"rule_id":"osv/GHSA-p293-qw3h-jr36","severity":"critical","message":"next@14.2.35 (npm) is affected by GHSA-p293-qw3h-jr36","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"next@14.2.35 (npm):GHSA-p293-qw3h-jr36"},{"rule_id":"osv/GHSA-jqcg-44mw-7w3h","severity":"critical","message":"proxy-addr@2.0.7 (npm) is affected by GHSA-jqcg-44mw-7w3h; also in homework-01/sasero/claude-monitor-usage/package-lock.json; also in homework-04/package-lock.json","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"proxy-addr@2.0.7 (npm):GHSA-jqcg-44mw-7w3h"},{"rule_id":"osv/GHSA-5gmw-xhrv-c9v3","severity":"critical","message":"tinypool@0.8.4 (npm) is affected by GHSA-5gmw-xhrv-c9v3","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"tinypool@0.8.4 (npm):GHSA-5gmw-xhrv-c9v3"},{"rule_id":"osv/GHSA-85c8-ppgw-ccpr","severity":"critical","message":"tinypool@0.8.4 (npm) is affected by GHSA-85c8-ppgw-ccpr","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"tinypool@0.8.4 (npm):GHSA-85c8-ppgw-ccpr"},{"rule_id":"osv/GHSA-5xrq-8626-4rwp","severity":"critical","message":"vitest@1.6.1 (npm) is affected by GHSA-5xrq-8626-4rwp","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"vitest@1.6.1 (npm):GHSA-5xrq-8626-4rwp"},{"rule_id":"osv/GHSA-5x8w-8jj5-q52h","severity":"critical","message":"pillow@10.0.0 (PyPI) is affected by PYSEC-2026-4330, GHSA-5x8w-8jj5-q52h","path":"homework-01/mlucchesi/workbreak/requirements.txt","line":null,"fingerprint":"pillow@10.0.0 (PyPI):GHSA-5x8w-8jj5-q52h"},{"rule_id":"osv/GHSA-8g5g-8vmr-9782","severity":"critical","message":"pillow@10.0.0 (PyPI) is affected by PYSEC-2026-4332, GHSA-8g5g-8vmr-9782","path":"homework-01/mlucchesi/workbreak/requirements.txt","line":null,"fingerprint":"pillow@10.0.0 (PyPI):GHSA-8g5g-8vmr-9782"},{"rule_id":"osv/GHSA-xvh5-g6gv-559v","severity":"critical","message":"pillow@10.0.0 (PyPI) is affected by PYSEC-2026-4363, GHSA-xvh5-g6gv-559v","path":"homework-01/mlucchesi/workbreak/requirements.txt","line":null,"fingerprint":"pillow@10.0.0 (PyPI):GHSA-xvh5-g6gv-559v"},{"rule_id":"osv/GHSA-3f63-hfp8-52jq","severity":"critical","message":"pillow@10.0.0 (PyPI) is affected by PYSEC-2026-457, GHSA-3f63-hfp8-52jq","path":"homework-01/mlucchesi/workbreak/requirements.txt","line":null,"fingerprint":"pillow@10.0.0 (PyPI):GHSA-3f63-hfp8-52jq"},{"rule_id":"osv/GHSA-332p-7hrc-92wf","severity":"critical","message":"pillow@10.0.0 (PyPI) is affected by GHSA-332p-7hrc-92wf","path":"homework-01/mlucchesi/workbreak/requirements.txt","line":null,"fingerprint":"pillow@10.0.0 (PyPI):GHSA-332p-7hrc-92wf"},{"rule_id":"osv/GHSA-w889-685w-c8fh","severity":"critical","message":"pillow@10.0.0 (PyPI) is affected by GHSA-w889-685w-c8fh","path":"homework-01/mlucchesi/workbreak/requirements.txt","line":null,"fingerprint":"pillow@10.0.0 (PyPI):GHSA-w889-685w-c8fh"},{"rule_id":"osv/GHSA-3qf3-8w2g-rqmx","severity":"critical","message":"python-jose@3.3.0 (PyPI) is affected by PYSEC-2024-232, PYSEC-2026-4298, GHSA-3qf3-8w2g-rqmx, GHSA-6c5p-j8vq-pqhj","path":"homework-01/tommasoNocchi/backend/requirements.txt","line":null,"fingerprint":"python-jose@3.3.0 (PyPI):GHSA-3qf3-8w2g-rqmx"},{"rule_id":"osv/GHSA-73wf-gq98-2v4g","severity":"high","message":"browserslist@4.28.2 (npm) is affected by GHSA-73wf-gq98-2v4g; also in homework-01/federico-liccione/package-lock.json; also in homework-01/gabriM/frontend/package-lock.json; also in homework-01/marioben/code-lens/frontend/package-lock.json; also in homework-01/rosario/gatherer/frontend/package-lock.json","path":"homework-01/dario-triolo/package-lock.json","line":null,"fingerprint":"browserslist@4.28.2 (npm):GHSA-73wf-gq98-2v4g"},{"rule_id":"osv/GHSA-c83g-rgw3-j3cx","severity":"high","message":"browserslist@4.28.2 (npm) is affected by GHSA-c83g-rgw3-j3cx; also in homework-01/federico-liccione/package-lock.json; also in homework-01/gabriM/frontend/package-lock.json; also in homework-01/marioben/code-lens/frontend/package-lock.json; also in homework-01/rosario/gatherer/frontend/package-lock.json","path":"homework-01/dario-triolo/package-lock.json","line":null,"fingerprint":"browserslist@4.28.2 (npm):GHSA-c83g-rgw3-j3cx"},{"rule_id":"osv/GHSA-28wg-ghj8-5hjv","severity":"high","message":"nanoid@3.3.12 (npm) is affected by GHSA-28wg-ghj8-5hjv; also in homework-01/diego-tomba/package-lock.json; also in homework-01/federico-liccione/package-lock.json; also in homework-01/gabriM/frontend/package-lock.json; also in homework-01/marioben/code-lens/frontend/package-lock.json; also in homework-01/rosario/gatherer/frontend/package-lock.json","path":"homework-01/dario-triolo/package-lock.json","line":null,"fingerprint":"nanoid@3.3.12 (npm):GHSA-28wg-ghj8-5hjv"},{"rule_id":"osv/GHSA-2v37-7h3g-55p8","severity":"high","message":"nanoid@3.3.12 (npm) is affected by GHSA-2v37-7h3g-55p8; also in homework-01/diego-tomba/package-lock.json; also in homework-01/federico-liccione/package-lock.json; also in homework-01/gabriM/frontend/package-lock.json; also in homework-01/marioben/code-lens/frontend/package-lock.json; also in homework-01/rosario/gatherer/frontend/package-lock.json","path":"homework-01/dario-triolo/package-lock.json","line":null,"fingerprint":"nanoid@3.3.12 (npm):GHSA-2v37-7h3g-55p8"},{"rule_id":"osv/GHSA-r28c-9q8g-f849","severity":"high","message":"postcss@8.5.15 (npm) is affected by GHSA-r28c-9q8g-f849; also in homework-01/diego-tomba/package-lock.json; also in homework-01/federico-liccione/package-lock.json; also in homework-01/gabriM/frontend/package-lock.json; also in homework-01/marioben/code-lens/frontend/package-lock.json; also in homework-01/rosario/gatherer/frontend/package-lock.json","path":"homework-01/dario-triolo/package-lock.json","line":null,"fingerprint":"postcss@8.5.15 (npm):GHSA-r28c-9q8g-f849"},{"rule_id":"osv/GHSA-68fv-2mgg-jv7q","severity":"high","message":"source-map-js@1.2.1 (npm) is affected by GHSA-68fv-2mgg-jv7q; also in homework-01/diego-tomba/package-lock.json; also in homework-01/federico-liccione/package-lock.json; also in homework-01/gabriM/frontend/package-lock.json; also in homework-01/marioben/code-lens/frontend/package-lock.json; also in homework-01/rosario/gatherer/frontend/package-lock.json","path":"homework-01/dario-triolo/package-lock.json","line":null,"fingerprint":"source-map-js@1.2.1 (npm):GHSA-68fv-2mgg-jv7q"},{"rule_id":"osv/GHSA-587h-7wmj-h5pm","severity":"high","message":"vite@5.4.21 (npm) is affected by GHSA-587h-7wmj-h5pm; also in homework-01/federico-liccione/package-lock.json; also in homework-01/gabriM/frontend/package-lock.json; also in homework-01/rosario/gatherer/frontend/package-lock.json","path":"homework-01/dario-triolo/package-lock.json","line":null,"fingerprint":"vite@5.4.21 (npm):GHSA-587h-7wmj-h5pm"},{"rule_id":"osv/GHSA-ggr8-5vv4-36mx","severity":"high","message":"deepmerge-ts@7.1.5 (npm) is affected by GHSA-ggr8-5vv4-36mx","path":"homework-01/diego-tomba/package-lock.json","line":null,"fingerprint":"deepmerge-ts@7.1.5 (npm):GHSA-ggr8-5vv4-36mx"},{"rule_id":"osv/GHSA-89xv-2m56-2m9x","severity":"high","message":"next@15.5.19 (npm) is affected by GHSA-89xv-2m56-2m9x","path":"homework-01/diego-tomba/package-lock.json","line":null,"fingerprint":"next@15.5.19 (npm):GHSA-89xv-2m56-2m9x"},{"rule_id":"osv/GHSA-m99w-x7hq-7vfj","severity":"high","message":"next@15.5.19 (npm) is affected by GHSA-m99w-x7hq-7vfj","path":"homework-01/diego-tomba/package-lock.json","line":null,"fingerprint":"next@15.5.19 (npm):GHSA-m99w-x7hq-7vfj"},{"rule_id":"osv/GHSA-p3m5-59mp-jv5r","severity":"high","message":"next@15.5.19 (npm) is affected by GHSA-p3m5-59mp-jv5r","path":"homework-01/diego-tomba/package-lock.json","line":null,"fingerprint":"next@15.5.19 (npm):GHSA-p3m5-59mp-jv5r"},{"rule_id":"osv/GHSA-p9j2-gv94-2wf4","severity":"high","message":"next@15.5.19 (npm) is affected by GHSA-p9j2-gv94-2wf4","path":"homework-01/diego-tomba/package-lock.json","line":null,"fingerprint":"next@15.5.19 (npm):GHSA-p9j2-gv94-2wf4"},{"rule_id":"osv/GHSA-6g55-p6wh-862q","severity":"high","message":"postcss@8.4.31 (npm) is affected by GHSA-6g55-p6wh-862q; also in homework-01/federico-liccione/package-lock.json","path":"homework-01/diego-tomba/package-lock.json","line":null,"fingerprint":"postcss@8.4.31 (npm):GHSA-6g55-p6wh-862q"},{"rule_id":"osv/GHSA-r28c-9q8g-f849","severity":"high","message":"postcss@8.4.31 (npm) is affected by GHSA-r28c-9q8g-f849; also in homework-01/federico-liccione/package-lock.json","path":"homework-01/diego-tomba/package-lock.json","line":null,"fingerprint":"postcss@8.4.31 (npm):GHSA-r28c-9q8g-f849"},{"rule_id":"osv/GHSA-f88m-g3jw-g9cj","severity":"high","message":"sharp@0.34.5 (npm) is affected by GHSA-f88m-g3jw-g9cj","path":"homework-01/diego-tomba/package-lock.json","line":null,"fingerprint":"sharp@0.34.5 (npm):GHSA-f88m-g3jw-g9cj"},{"rule_id":"osv/GHSA-rgj7-g3m4-5g8c","severity":"high","message":"sharp@0.34.5 (npm) is affected by GHSA-rgj7-g3m4-5g8c","path":"homework-01/diego-tomba/package-lock.json","line":null,"fingerprint":"sharp@0.34.5 (npm):GHSA-rgj7-g3m4-5g8c"},{"rule_id":"osv/GHSA-wq5f-xc86-pv6w","severity":"high","message":"sharp@0.34.5 (npm) is affected by GHSA-wq5f-xc86-pv6w","path":"homework-01/diego-tomba/package-lock.json","line":null,"fingerprint":"sharp@0.34.5 (npm):GHSA-wq5f-xc86-pv6w"},{"rule_id":"osv/GHSA-w5hq-g745-h8pq","severity":"high","message":"uuid@8.3.2 (npm) is affected by GHSA-w5hq-g745-h8pq","path":"homework-01/diego-tomba/package-lock.json","line":null,"fingerprint":"uuid@8.3.2 (npm):GHSA-w5hq-g745-h8pq"},{"rule_id":"osv/GHSA-mrhx-c7xc-m3w5","severity":"high","message":"zod@4.4.3 (npm) is affected by GHSA-mrhx-c7xc-m3w5; also in homework-01/federico-liccione/package-lock.json; also in homework-01/marioben/code-lens/frontend/package-lock.json","path":"homework-01/diego-tomba/package-lock.json","line":null,"fingerprint":"zod@4.4.3 (npm):GHSA-mrhx-c7xc-m3w5"},{"rule_id":"osv/GHSA-9qh4-3jw8-366w","severity":"high","message":"electron@42.4.0 (npm) is affected by GHSA-9qh4-3jw8-366w; also in homework-01/ema/nerd-quest/package-lock.json","path":"homework-01/ema/gitdash/package-lock.json","line":null,"fingerprint":"electron@42.4.0 (npm):GHSA-9qh4-3jw8-366w"},{"rule_id":"osv/GHSA-gr2m-v5gq-v685","severity":"high","message":"electron@42.4.0 (npm) is affected by GHSA-gr2m-v5gq-v685; also in homework-01/ema/nerd-quest/package-lock.json","path":"homework-01/ema/gitdash/package-lock.json","line":null,"fingerprint":"electron@42.4.0 (npm):GHSA-gr2m-v5gq-v685"},{"rule_id":"osv/GHSA-hq2x-r82h-9wj4","severity":"high","message":"electron@42.4.0 (npm) is affected by GHSA-hq2x-r82h-9wj4; also in homework-01/ema/nerd-quest/package-lock.json","path":"homework-01/ema/gitdash/package-lock.json","line":null,"fingerprint":"electron@42.4.0 (npm):GHSA-hq2x-r82h-9wj4"},{"rule_id":"osv/GHSA-j84w-jfhq-vhvj","severity":"high","message":"electron@42.4.0 (npm) is affected by GHSA-j84w-jfhq-vhvj; also in homework-01/ema/nerd-quest/package-lock.json","path":"homework-01/ema/gitdash/package-lock.json","line":null,"fingerprint":"electron@42.4.0 (npm):GHSA-j84w-jfhq-vhvj"},{"rule_id":"osv/GHSA-jr5w-w6x2-84p9","severity":"high","message":"electron@42.4.0 (npm) is affected by GHSA-jr5w-w6x2-84p9; also in homework-01/ema/nerd-quest/package-lock.json","path":"homework-01/ema/gitdash/package-lock.json","line":null,"fingerprint":"electron@42.4.0 (npm):GHSA-jr5w-w6x2-84p9"},{"rule_id":"osv/GHSA-qmv3-fv6v-rmhq","severity":"high","message":"electron@42.4.0 (npm) is affected by GHSA-qmv3-fv6v-rmhq; also in homework-01/ema/nerd-quest/package-lock.json","path":"homework-01/ema/gitdash/package-lock.json","line":null,"fingerprint":"electron@42.4.0 (npm):GHSA-qmv3-fv6v-rmhq"},{"rule_id":"osv/GHSA-858h-whjf-mvg5","severity":"high","message":"simple-git@3.36.0 (npm) is affected by GHSA-858h-whjf-mvg5","path":"homework-01/ema/gitdash/package-lock.json","line":null,"fingerprint":"simple-git@3.36.0 (npm):GHSA-858h-whjf-mvg5"},{"rule_id":"osv/GHSA-g4wm-2vf7-vfgr","severity":"high","message":"simple-git@3.36.0 (npm) is affected by GHSA-g4wm-2vf7-vfgr","path":"homework-01/ema/gitdash/package-lock.json","line":null,"fingerprint":"simple-git@3.36.0 (npm):GHSA-g4wm-2vf7-vfgr"},{"rule_id":"osv/GHSA-2m5v-pch6-74hx","severity":"high","message":"undici@7.27.2 (npm) is affected by GHSA-2m5v-pch6-74hx; also in homework-01/federico-liccione/package-lock.json","path":"homework-01/ema/gitdash/package-lock.json","line":null,"fingerprint":"undici@7.27.2 (npm):GHSA-2m5v-pch6-74hx"},{"rule_id":"osv/GHSA-4cwx-7wf7-3272","severity":"high","message":"undici@7.27.2 (npm) is affected by GHSA-4cwx-7wf7-3272; also in homework-01/federico-liccione/package-lock.json","path":"homework-01/ema/gitdash/package-lock.json","line":null,"fingerprint":"undici@7.27.2 (npm):GHSA-4cwx-7wf7-3272"},{"rule_id":"osv/GHSA-4w7w-5xrc-9h26","severity":"high","message":"undici@7.27.2 (npm) is affected by GHSA-4w7w-5xrc-9h26; also in homework-01/federico-liccione/package-lock.json","path":"homework-01/ema/gitdash/package-lock.json","line":null,"fingerprint":"undici@7.27.2 (npm):GHSA-4w7w-5xrc-9h26"},{"rule_id":"osv/GHSA-hm92-r4w5-c3mj","severity":"high","message":"undici@7.27.2 (npm) is affected by GHSA-hm92-r4w5-c3mj; also in homework-01/federico-liccione/package-lock.json","path":"homework-01/ema/gitdash/package-lock.json","line":null,"fingerprint":"undici@7.27.2 (npm):GHSA-hm92-r4w5-c3mj"},{"rule_id":"osv/GHSA-qrxm-fqhp-jwvm","severity":"high","message":"undici@7.27.2 (npm) is affected by GHSA-qrxm-fqhp-jwvm; also in homework-01/federico-liccione/package-lock.json","path":"homework-01/ema/gitdash/package-lock.json","line":null,"fingerprint":"undici@7.27.2 (npm):GHSA-qrxm-fqhp-jwvm"},{"rule_id":"osv/GHSA-rfgv-xxqx-mfg5","severity":"high","message":"undici@7.27.2 (npm) is affected by GHSA-rfgv-xxqx-mfg5; also in homework-01/federico-liccione/package-lock.json","path":"homework-01/ema/gitdash/package-lock.json","line":null,"fingerprint":"undici@7.27.2 (npm):GHSA-rfgv-xxqx-mfg5"},{"rule_id":"osv/GHSA-vmh5-mc38-953g","severity":"high","message":"undici@7.27.2 (npm) is affected by GHSA-vmh5-mc38-953g; also in homework-01/federico-liccione/package-lock.json","path":"homework-01/ema/gitdash/package-lock.json","line":null,"fingerprint":"undici@7.27.2 (npm):GHSA-vmh5-mc38-953g"},{"rule_id":"osv/GHSA-vxpw-j846-p89q","severity":"high","message":"undici@7.27.2 (npm) is affected by GHSA-vxpw-j846-p89q; also in homework-01/federico-liccione/package-lock.json","path":"homework-01/ema/gitdash/package-lock.json","line":null,"fingerprint":"undici@7.27.2 (npm):GHSA-vxpw-j846-p89q"},{"rule_id":"osv/GHSA-w293-vg96-wgc3","severity":"high","message":"undici@7.27.2 (npm) is affected by GHSA-w293-vg96-wgc3; also in homework-01/federico-liccione/package-lock.json","path":"homework-01/ema/gitdash/package-lock.json","line":null,"fingerprint":"undici@7.27.2 (npm):GHSA-w293-vg96-wgc3"},{"rule_id":"osv/GHSA-xjj6-f33q-929c","severity":"high","message":"undici@7.27.2 (npm) is affected by GHSA-xjj6-f33q-929c; also in homework-01/federico-liccione/package-lock.json","path":"homework-01/ema/gitdash/package-lock.json","line":null,"fingerprint":"undici@7.27.2 (npm):GHSA-xjj6-f33q-929c"},{"rule_id":"osv/GHSA-2m5v-pch6-74hx","severity":"high","message":"undici@7.28.0 (npm) is affected by GHSA-2m5v-pch6-74hx","path":"homework-01/ema/nerd-quest/package-lock.json","line":null,"fingerprint":"undici@7.28.0 (npm):GHSA-2m5v-pch6-74hx"},{"rule_id":"osv/GHSA-4cwx-7wf7-3272","severity":"high","message":"undici@7.28.0 (npm) is affected by GHSA-4cwx-7wf7-3272","path":"homework-01/ema/nerd-quest/package-lock.json","line":null,"fingerprint":"undici@7.28.0 (npm):GHSA-4cwx-7wf7-3272"},{"rule_id":"osv/GHSA-4w7w-5xrc-9h26","severity":"high","message":"undici@7.28.0 (npm) is affected by GHSA-4w7w-5xrc-9h26","path":"homework-01/ema/nerd-quest/package-lock.json","line":null,"fingerprint":"undici@7.28.0 (npm):GHSA-4w7w-5xrc-9h26"},{"rule_id":"osv/GHSA-qrxm-fqhp-jwvm","severity":"high","message":"undici@7.28.0 (npm) is affected by GHSA-qrxm-fqhp-jwvm","path":"homework-01/ema/nerd-quest/package-lock.json","line":null,"fingerprint":"undici@7.28.0 (npm):GHSA-qrxm-fqhp-jwvm"},{"rule_id":"osv/GHSA-rfgv-xxqx-mfg5","severity":"high","message":"undici@7.28.0 (npm) is affected by GHSA-rfgv-xxqx-mfg5","path":"homework-01/ema/nerd-quest/package-lock.json","line":null,"fingerprint":"undici@7.28.0 (npm):GHSA-rfgv-xxqx-mfg5"},{"rule_id":"osv/GHSA-w293-vg96-wgc3","severity":"high","message":"undici@7.28.0 (npm) is affected by GHSA-w293-vg96-wgc3","path":"homework-01/ema/nerd-quest/package-lock.json","line":null,"fingerprint":"undici@7.28.0 (npm):GHSA-w293-vg96-wgc3"},{"rule_id":"osv/GHSA-xjj6-f33q-929c","severity":"high","message":"undici@7.28.0 (npm) is affected by GHSA-xjj6-f33q-929c","path":"homework-01/ema/nerd-quest/package-lock.json","line":null,"fingerprint":"undici@7.28.0 (npm):GHSA-xjj6-f33q-929c"},{"rule_id":"osv/GHSA-22jm-h49p-29qw","severity":"high","message":"@modelcontextprotocol/sdk@1.29.0 (npm) is affected by GHSA-22jm-h49p-29qw","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"@modelcontextprotocol/sdk@1.29.0 (npm):GHSA-22jm-h49p-29qw"},{"rule_id":"osv/GHSA-46jr-4wx8-v453","severity":"high","message":"@modelcontextprotocol/sdk@1.29.0 (npm) is affected by GHSA-46jr-4wx8-v453","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"@modelcontextprotocol/sdk@1.29.0 (npm):GHSA-46jr-4wx8-v453"},{"rule_id":"osv/GHSA-6qxp-vccf-f47h","severity":"high","message":"@modelcontextprotocol/sdk@1.29.0 (npm) is affected by GHSA-6qxp-vccf-f47h","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"@modelcontextprotocol/sdk@1.29.0 (npm):GHSA-6qxp-vccf-f47h"},{"rule_id":"osv/GHSA-f897-62hf-6gxq","severity":"high","message":"@modelcontextprotocol/sdk@1.29.0 (npm) is affected by GHSA-f897-62hf-6gxq","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"@modelcontextprotocol/sdk@1.29.0 (npm):GHSA-f897-62hf-6gxq"},{"rule_id":"osv/GHSA-27r3-jxmh-p828","severity":"high","message":"body-parser@2.2.2 (npm) is affected by GHSA-27r3-jxmh-p828","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"body-parser@2.2.2 (npm):GHSA-27r3-jxmh-p828"},{"rule_id":"osv/GHSA-3jxr-9vmj-r5cp","severity":"high","message":"brace-expansion@1.1.15 (npm) is affected by GHSA-3jxr-9vmj-r5cp","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"brace-expansion@1.1.15 (npm):GHSA-3jxr-9vmj-r5cp"},{"rule_id":"osv/GHSA-6j4f-fj2g-mc7p","severity":"high","message":"brace-expansion@1.1.15 (npm) is affected by GHSA-6j4f-fj2g-mc7p","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"brace-expansion@1.1.15 (npm):GHSA-6j4f-fj2g-mc7p"},{"rule_id":"osv/GHSA-mh99-v99m-4gvg","severity":"high","message":"brace-expansion@1.1.15 (npm) is affected by GHSA-mh99-v99m-4gvg","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"brace-expansion@1.1.15 (npm):GHSA-mh99-v99m-4gvg"},{"rule_id":"osv/GHSA-qhr7-859c-m2p7","severity":"high","message":"brace-expansion@1.1.15 (npm) is affected by GHSA-qhr7-859c-m2p7","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"brace-expansion@1.1.15 (npm):GHSA-qhr7-859c-m2p7"},{"rule_id":"osv/GHSA-rgw5-rvv9-x895","severity":"high","message":"brace-expansion@1.1.15 (npm) is affected by GHSA-rgw5-rvv9-x895","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"brace-expansion@1.1.15 (npm):GHSA-rgw5-rvv9-x895"},{"rule_id":"osv/GHSA-3jxr-9vmj-r5cp","severity":"high","message":"brace-expansion@5.0.6 (npm) is affected by GHSA-3jxr-9vmj-r5cp; also in homework-01/marioben/code-lens/frontend/package-lock.json","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"brace-expansion@5.0.6 (npm):GHSA-3jxr-9vmj-r5cp"},{"rule_id":"osv/GHSA-6j4f-fj2g-mc7p","severity":"high","message":"brace-expansion@5.0.6 (npm) is affected by GHSA-6j4f-fj2g-mc7p; also in homework-01/marioben/code-lens/frontend/package-lock.json","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"brace-expansion@5.0.6 (npm):GHSA-6j4f-fj2g-mc7p"},{"rule_id":"osv/GHSA-mh99-v99m-4gvg","severity":"high","message":"brace-expansion@5.0.6 (npm) is affected by GHSA-mh99-v99m-4gvg; also in homework-01/marioben/code-lens/frontend/package-lock.json","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"brace-expansion@5.0.6 (npm):GHSA-mh99-v99m-4gvg"},{"rule_id":"osv/GHSA-qhr7-859c-m2p7","severity":"high","message":"brace-expansion@5.0.6 (npm) is affected by GHSA-qhr7-859c-m2p7; also in homework-01/marioben/code-lens/frontend/package-lock.json","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"brace-expansion@5.0.6 (npm):GHSA-qhr7-859c-m2p7"},{"rule_id":"osv/GHSA-rgw5-rvv9-x895","severity":"high","message":"brace-expansion@5.0.6 (npm) is affected by GHSA-rgw5-rvv9-x895; also in homework-01/marioben/code-lens/frontend/package-lock.json","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"brace-expansion@5.0.6 (npm):GHSA-rgw5-rvv9-x895"},{"rule_id":"osv/GHSA-4c8g-83qw-93j6","severity":"high","message":"fast-uri@3.1.2 (npm) is affected by GHSA-4c8g-83qw-93j6","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"fast-uri@3.1.2 (npm):GHSA-4c8g-83qw-93j6"},{"rule_id":"osv/GHSA-7p8r-x3mc-p8w7","severity":"high","message":"fast-uri@3.1.2 (npm) is affected by GHSA-7p8r-x3mc-p8w7","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"fast-uri@3.1.2 (npm):GHSA-7p8r-x3mc-p8w7"},{"rule_id":"osv/GHSA-f65p-4m7j-42xc","severity":"high","message":"fast-uri@3.1.2 (npm) is affected by GHSA-f65p-4m7j-42xc","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"fast-uri@3.1.2 (npm):GHSA-f65p-4m7j-42xc"},{"rule_id":"osv/GHSA-fph4-wmhf-6fwf","severity":"high","message":"fast-uri@3.1.2 (npm) is affected by GHSA-fph4-wmhf-6fwf","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"fast-uri@3.1.2 (npm):GHSA-fph4-wmhf-6fwf"},{"rule_id":"osv/GHSA-jqff-g426-hqxp","severity":"high","message":"fast-uri@3.1.2 (npm) is affected by GHSA-jqff-g426-hqxp","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"fast-uri@3.1.2 (npm):GHSA-jqff-g426-hqxp"},{"rule_id":"osv/GHSA-qw65-cvwx-89v3","severity":"high","message":"fast-uri@3.1.2 (npm) is affected by GHSA-qw65-cvwx-89v3","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"fast-uri@3.1.2 (npm):GHSA-qw65-cvwx-89v3"},{"rule_id":"osv/GHSA-v2hh-gcrm-f6hx","severity":"high","message":"fast-uri@3.1.2 (npm) is affected by GHSA-v2hh-gcrm-f6hx","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"fast-uri@3.1.2 (npm):GHSA-v2hh-gcrm-f6hx"},{"rule_id":"osv/GHSA-mwp4-54f8-5fhr","severity":"high","message":"ip-address@10.2.0 (npm) is affected by GHSA-mwp4-54f8-5fhr","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"ip-address@10.2.0 (npm):GHSA-mwp4-54f8-5fhr"},{"rule_id":"osv/GHSA-2883-xcg3-v3hh","severity":"high","message":"js-yaml@4.2.0 (npm) is affected by GHSA-2883-xcg3-v3hh","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"js-yaml@4.2.0 (npm):GHSA-2883-xcg3-v3hh"},{"rule_id":"osv/GHSA-52cp-r559-cp3m","severity":"high","message":"js-yaml@4.2.0 (npm) is affected by GHSA-52cp-r559-cp3m","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"js-yaml@4.2.0 (npm):GHSA-52cp-r559-cp3m"},{"rule_id":"osv/GHSA-5p4m-2wfm-xmqj","severity":"high","message":"js-yaml@4.2.0 (npm) is affected by GHSA-5p4m-2wfm-xmqj","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"js-yaml@4.2.0 (npm):GHSA-5p4m-2wfm-xmqj"},{"rule_id":"osv/GHSA-36qx-fr4f-26g5","severity":"high","message":"next@14.2.35 (npm) is affected by GHSA-36qx-fr4f-26g5","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"next@14.2.35 (npm):GHSA-36qx-fr4f-26g5"},{"rule_id":"osv/GHSA-89xv-2m56-2m9x","severity":"high","message":"next@14.2.35 (npm) is affected by GHSA-89xv-2m56-2m9x","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"next@14.2.35 (npm):GHSA-89xv-2m56-2m9x"},{"rule_id":"osv/GHSA-8h8q-6873-q5fj","severity":"high","message":"next@14.2.35 (npm) is affected by GHSA-8h8q-6873-q5fj","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"next@14.2.35 (npm):GHSA-8h8q-6873-q5fj"},{"rule_id":"osv/GHSA-c4j6-fc7j-m34r","severity":"high","message":"next@14.2.35 (npm) is affected by GHSA-c4j6-fc7j-m34r","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"next@14.2.35 (npm):GHSA-c4j6-fc7j-m34r"},{"rule_id":"osv/GHSA-h25m-26qc-wcjf","severity":"high","message":"next@14.2.35 (npm) is affected by GHSA-h25m-26qc-wcjf","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"next@14.2.35 (npm):GHSA-h25m-26qc-wcjf"},{"rule_id":"osv/GHSA-m99w-x7hq-7vfj","severity":"high","message":"next@14.2.35 (npm) is affected by GHSA-m99w-x7hq-7vfj","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"next@14.2.35 (npm):GHSA-m99w-x7hq-7vfj"},{"rule_id":"osv/GHSA-p3m5-59mp-jv5r","severity":"high","message":"next@14.2.35 (npm) is affected by GHSA-p3m5-59mp-jv5r","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"next@14.2.35 (npm):GHSA-p3m5-59mp-jv5r"},{"rule_id":"osv/GHSA-p9j2-gv94-2wf4","severity":"high","message":"next@14.2.35 (npm) is affected by GHSA-p9j2-gv94-2wf4","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"next@14.2.35 (npm):GHSA-p9j2-gv94-2wf4"},{"rule_id":"osv/GHSA-q4gf-8mx6-v5v3","severity":"high","message":"next@14.2.35 (npm) is affected by GHSA-q4gf-8mx6-v5v3","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"next@14.2.35 (npm):GHSA-q4gf-8mx6-v5v3"},{"rule_id":"osv/GHSA-2x7j-588g-ccc2","severity":"high","message":"nodemailer@9.0.1 (npm) is affected by GHSA-2x7j-588g-ccc2","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"nodemailer@9.0.1 (npm):GHSA-2x7j-588g-ccc2"},{"rule_id":"osv/GHSA-v53p-9fqp-m79j","severity":"high","message":"nodemailer@9.0.1 (npm) is affected by GHSA-v53p-9fqp-m79j","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"nodemailer@9.0.1 (npm):GHSA-v53p-9fqp-m79j"},{"rule_id":"osv/GHSA-mrhx-c7xc-m3w5","severity":"high","message":"zod@3.25.76 (npm) is affected by GHSA-mrhx-c7xc-m3w5","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"zod@3.25.76 (npm):GHSA-mrhx-c7xc-m3w5"},{"rule_id":"osv/GHSA-587h-7wmj-h5pm","severity":"high","message":"vite@8.0.16 (npm) is affected by GHSA-587h-7wmj-h5pm","path":"homework-01/marioben/code-lens/frontend/package-lock.json","line":null,"fingerprint":"vite@8.0.16 (npm):GHSA-587h-7wmj-h5pm"},{"rule_id":"osv/GHSA-qr4w-53vh-m672","severity":"high","message":"opencv-python@4.8.0 (PyPI) is affected by GHSA-qr4w-53vh-m672","path":"homework-01/mlucchesi/workbreak/requirements.txt","line":null,"fingerprint":"opencv-python@4.8.0 (PyPI):GHSA-qr4w-53vh-m672"},{"rule_id":"osv/GHSA-44wm-f244-xhp3","severity":"high","message":"pillow@10.0.0 (PyPI) is affected by PYSEC-2026-1793, GHSA-44wm-f244-xhp3","path":"homework-01/mlucchesi/workbreak/requirements.txt","line":null,"fingerprint":"pillow@10.0.0 (PyPI):GHSA-44wm-f244-xhp3"},{"rule_id":"osv/GHSA-j7hp-h8jx-5ppr","severity":"high","message":"pillow@10.0.0 (PyPI) is affected by PYSEC-2026-1794, GHSA-j7hp-h8jx-5ppr","path":"homework-01/mlucchesi/workbreak/requirements.txt","line":null,"fingerprint":"pillow@10.0.0 (PyPI):GHSA-j7hp-h8jx-5ppr"},{"rule_id":"osv/GHSA-8v84-f9pq-wr9x","severity":"high","message":"pillow@10.0.0 (PyPI) is affected by PYSEC-2026-2253, GHSA-8v84-f9pq-wr9x","path":"homework-01/mlucchesi/workbreak/requirements.txt","line":null,"fingerprint":"pillow@10.0.0 (PyPI):GHSA-8v84-f9pq-wr9x"},{"rule_id":"osv/GHSA-5x94-69rx-g8h2","severity":"high","message":"pillow@10.0.0 (PyPI) is affected by PYSEC-2026-2254, GHSA-5x94-69rx-g8h2","path":"homework-01/mlucchesi/workbreak/requirements.txt","line":null,"fingerprint":"pillow@10.0.0 (PyPI):GHSA-5x94-69rx-g8h2"},{"rule_id":"osv/GHSA-45hq-cxwh-f6vc","severity":"high","message":"pillow@10.0.0 (PyPI) is affected by PYSEC-2026-2255, GHSA-45hq-cxwh-f6vc","path":"homework-01/mlucchesi/workbreak/requirements.txt","line":null,"fingerprint":"pillow@10.0.0 (PyPI):GHSA-45hq-cxwh-f6vc"},{"rule_id":"osv/GHSA-phj9-mv4w-65pm","severity":"high","message":"pillow@10.0.0 (PyPI) is affected by PYSEC-2026-2256, GHSA-phj9-mv4w-65pm","path":"homework-01/mlucchesi/workbreak/requirements.txt","line":null,"fingerprint":"pillow@10.0.0 (PyPI):GHSA-phj9-mv4w-65pm"},{"rule_id":"osv/GHSA-6r8x-57c9-28j4","severity":"high","message":"pillow@10.0.0 (PyPI) is affected by PYSEC-2026-3451, GHSA-6r8x-57c9-28j4","path":"homework-01/mlucchesi/workbreak/requirements.txt","line":null,"fingerprint":"pillow@10.0.0 (PyPI):GHSA-6r8x-57c9-28j4"},{"rule_id":"osv/GHSA-9hw9-ch79-4vh6","severity":"high","message":"pillow@10.0.0 (PyPI) is affected by PYSEC-2026-3453, GHSA-9hw9-ch79-4vh6","path":"homework-01/mlucchesi/workbreak/requirements.txt","line":null,"fingerprint":"pillow@10.0.0 (PyPI):GHSA-9hw9-ch79-4vh6"},{"rule_id":"osv/GHSA-xj96-63gp-2gmr","severity":"high","message":"pillow@10.0.0 (PyPI) is affected by PYSEC-2026-3454, GHSA-xj96-63gp-2gmr","path":"homework-01/mlucchesi/workbreak/requirements.txt","line":null,"fingerprint":"pillow@10.0.0 (PyPI):GHSA-xj96-63gp-2gmr"},{"rule_id":"osv/GHSA-62p4-gmf7-7g93","severity":"high","message":"pillow@10.0.0 (PyPI) is affected by PYSEC-2026-3493, GHSA-62p4-gmf7-7g93","path":"homework-01/mlucchesi/workbreak/requirements.txt","line":null,"fingerprint":"pillow@10.0.0 (PyPI):GHSA-62p4-gmf7-7g93"},{"rule_id":"osv/GHSA-jjj6-mw9f-p565","severity":"high","message":"pillow@10.0.0 (PyPI) is affected by PYSEC-2026-3495, GHSA-jjj6-mw9f-p565","path":"homework-01/mlucchesi/workbreak/requirements.txt","line":null,"fingerprint":"pillow@10.0.0 (PyPI):GHSA-jjj6-mw9f-p565"},{"rule_id":"osv/GHSA-vjc4-5qp5-m44j","severity":"high","message":"pillow@10.0.0 (PyPI) is affected by PYSEC-2026-3496, GHSA-vjc4-5qp5-m44j","path":"homework-01/mlucchesi/workbreak/requirements.txt","line":null,"fingerprint":"pillow@10.0.0 (PyPI):GHSA-vjc4-5qp5-m44j"},{"rule_id":"osv/GHSA-27h8-gf7j-v5hc","severity":"high","message":"pillow@10.0.0 (PyPI) is affected by PYSEC-2026-4326, GHSA-27h8-gf7j-v5hc","path":"homework-01/mlucchesi/workbreak/requirements.txt","line":null,"fingerprint":"pillow@10.0.0 (PyPI):GHSA-27h8-gf7j-v5hc"},{"rule_id":"osv/GHSA-4558-3h8r-v8xp","severity":"high","message":"pillow@10.0.0 (PyPI) is affected by PYSEC-2026-4327, GHSA-4558-3h8r-v8xp","path":"homework-01/mlucchesi/workbreak/requirements.txt","line":null,"fingerprint":"pillow@10.0.0 (PyPI):GHSA-4558-3h8r-v8xp"},{"rule_id":"osv/GHSA-58r4-6rv3-gfh8","severity":"high","message":"pillow@10.0.0 (PyPI) is affected by PYSEC-2026-4329, GHSA-58r4-6rv3-gfh8","path":"homework-01/mlucchesi/workbreak/requirements.txt","line":null,"fingerprint":"pillow@10.0.0 (PyPI):GHSA-58r4-6rv3-gfh8"},{"rule_id":"osv/GHSA-7mwm-ghpf-9vrm","severity":"high","message":"pillow@10.0.0 (PyPI) is affected by PYSEC-2026-4331, GHSA-7mwm-ghpf-9vrm","path":"homework-01/mlucchesi/workbreak/requirements.txt","line":null,"fingerprint":"pillow@10.0.0 (PyPI):GHSA-7mwm-ghpf-9vrm"},{"rule_id":"osv/GHSA-pchr-8j38-3x4p","severity":"high","message":"pillow@10.0.0 (PyPI) is affected by PYSEC-2026-4334, GHSA-pchr-8j38-3x4p","path":"homework-01/mlucchesi/workbreak/requirements.txt","line":null,"fingerprint":"pillow@10.0.0 (PyPI):GHSA-pchr-8j38-3x4p"},{"rule_id":"osv/GHSA-xgh8-jp6q-p5x8","severity":"high","message":"pillow@10.0.0 (PyPI) is affected by PYSEC-2026-4335, GHSA-xgh8-jp6q-p5x8","path":"homework-01/mlucchesi/workbreak/requirements.txt","line":null,"fingerprint":"pillow@10.0.0 (PyPI):GHSA-xgh8-jp6q-p5x8"},{"rule_id":"osv/GHSA-g842-9rc4-69pw","severity":"high","message":"pillow@10.0.0 (PyPI) is affected by PYSEC-2026-4338, GHSA-g842-9rc4-69pw","path":"homework-01/mlucchesi/workbreak/requirements.txt","line":null,"fingerprint":"pillow@10.0.0 (PyPI):GHSA-g842-9rc4-69pw"},{"rule_id":"osv/GHSA-3j72-p6qg-6xp7","severity":"high","message":"pillow@10.0.0 (PyPI) is affected by PYSEC-2026-4341, GHSA-3j72-p6qg-6xp7","path":"homework-01/mlucchesi/workbreak/requirements.txt","line":null,"fingerprint":"pillow@10.0.0 (PyPI):GHSA-3j72-p6qg-6xp7"},{"rule_id":"osv/GHSA-9v9v-9qvf-h2hj","severity":"high","message":"pillow@10.0.0 (PyPI) is affected by PYSEC-2026-4343, GHSA-9v9v-9qvf-h2hj","path":"homework-01/mlucchesi/workbreak/requirements.txt","line":null,"fingerprint":"pillow@10.0.0 (PyPI):GHSA-9v9v-9qvf-h2hj"},{"rule_id":"osv/GHSA-22hg-r758-rrw9","severity":"high","message":"pillow@10.0.0 (PyPI) is affected by GHSA-22hg-r758-rrw9","path":"homework-01/mlucchesi/workbreak/requirements.txt","line":null,"fingerprint":"pillow@10.0.0 (PyPI):GHSA-22hg-r758-rrw9"},{"rule_id":"osv/GHSA-5xm2-6676-qcp9","severity":"high","message":"pillow@10.0.0 (PyPI) is affected by GHSA-5xm2-6676-qcp9","path":"homework-01/mlucchesi/workbreak/requirements.txt","line":null,"fingerprint":"pillow@10.0.0 (PyPI):GHSA-5xm2-6676-qcp9"},{"rule_id":"osv/GHSA-65qm-jvmh-6pqg","severity":"high","message":"pillow@10.0.0 (PyPI) is affected by GHSA-65qm-jvmh-6pqg","path":"homework-01/mlucchesi/workbreak/requirements.txt","line":null,"fingerprint":"pillow@10.0.0 (PyPI):GHSA-65qm-jvmh-6pqg"},{"rule_id":"osv/GHSA-c6hw-5grf-ff96","severity":"high","message":"pillow@10.0.0 (PyPI) is affected by GHSA-c6hw-5grf-ff96","path":"homework-01/mlucchesi/workbreak/requirements.txt","line":null,"fingerprint":"pillow@10.0.0 (PyPI):GHSA-c6hw-5grf-ff96"},{"rule_id":"osv/GHSA-f2g6-542v-9j58","severity":"high","message":"pillow@10.0.0 (PyPI) is affected by GHSA-f2g6-542v-9j58","path":"homework-01/mlucchesi/workbreak/requirements.txt","line":null,"fingerprint":"pillow@10.0.0 (PyPI):GHSA-f2g6-542v-9j58"},{"rule_id":"osv/GHSA-g7cr-3p24-7wf7","severity":"high","message":"pillow@10.0.0 (PyPI) is affected by GHSA-g7cr-3p24-7wf7","path":"homework-01/mlucchesi/workbreak/requirements.txt","line":null,"fingerprint":"pillow@10.0.0 (PyPI):GHSA-g7cr-3p24-7wf7"},{"rule_id":"osv/GHSA-gg2r-wvfm-q9rx","severity":"high","message":"pillow@10.0.0 (PyPI) is affected by GHSA-gg2r-wvfm-q9rx","path":"homework-01/mlucchesi/workbreak/requirements.txt","line":null,"fingerprint":"pillow@10.0.0 (PyPI):GHSA-gg2r-wvfm-q9rx"},{"rule_id":"osv/GHSA-j4m9-6w36-pw47","severity":"high","message":"pillow@10.0.0 (PyPI) is affected by GHSA-j4m9-6w36-pw47","path":"homework-01/mlucchesi/workbreak/requirements.txt","line":null,"fingerprint":"pillow@10.0.0 (PyPI):GHSA-j4m9-6w36-pw47"},{"rule_id":"osv/GHSA-jg86-v3jv-hrpm","severity":"high","message":"pillow@10.0.0 (PyPI) is affected by GHSA-jg86-v3jv-hrpm","path":"homework-01/mlucchesi/workbreak/requirements.txt","line":null,"fingerprint":"pillow@10.0.0 (PyPI):GHSA-jg86-v3jv-hrpm"},{"rule_id":"osv/GHSA-mrfp-p49p-3hf2","severity":"high","message":"pillow@10.0.0 (PyPI) is affected by GHSA-mrfp-p49p-3hf2","path":"homework-01/mlucchesi/workbreak/requirements.txt","line":null,"fingerprint":"pillow@10.0.0 (PyPI):GHSA-mrfp-p49p-3hf2"},{"rule_id":"osv/GHSA-p4wg-p73j-c528","severity":"high","message":"pillow@10.0.0 (PyPI) is affected by GHSA-p4wg-p73j-c528","path":"homework-01/mlucchesi/workbreak/requirements.txt","line":null,"fingerprint":"pillow@10.0.0 (PyPI):GHSA-p4wg-p73j-c528"},{"rule_id":"osv/GHSA-q45j-58j2-45rg","severity":"high","message":"pillow@10.0.0 (PyPI) is affected by GHSA-q45j-58j2-45rg","path":"homework-01/mlucchesi/workbreak/requirements.txt","line":null,"fingerprint":"pillow@10.0.0 (PyPI):GHSA-q45j-58j2-45rg"},{"rule_id":"osv/GHSA-xcvg-w56q-r89m","severity":"high","message":"pillow@10.0.0 (PyPI) is affected by GHSA-xcvg-w56q-r89m","path":"homework-01/mlucchesi/workbreak/requirements.txt","line":null,"fingerprint":"pillow@10.0.0 (PyPI):GHSA-xcvg-w56q-r89m"},{"rule_id":"osv/GHSA-27r3-jxmh-p828","severity":"high","message":"body-parser@1.20.5 (npm) is affected by GHSA-27r3-jxmh-p828","path":"homework-01/sasero/claude-monitor-usage/package-lock.json","line":null,"fingerprint":"body-parser@1.20.5 (npm):GHSA-27r3-jxmh-p828"},{"rule_id":"osv/GHSA-59g5-xgcq-4qw3","severity":"high","message":"python-multipart@0.0.9 (PyPI) is affected by PYSEC-2026-1851, GHSA-59g5-xgcq-4qw3","path":"homework-01/tommasoNocchi/backend/requirements.txt","line":null,"fingerprint":"python-multipart@0.0.9 (PyPI):GHSA-59g5-xgcq-4qw3"},{"rule_id":"osv/GHSA-wp53-j4wj-2cfg","severity":"high","message":"python-multipart@0.0.9 (PyPI) is affected by PYSEC-2026-1852, GHSA-wp53-j4wj-2cfg","path":"homework-01/tommasoNocchi/backend/requirements.txt","line":null,"fingerprint":"python-multipart@0.0.9 (PyPI):GHSA-wp53-j4wj-2cfg"},{"rule_id":"osv/GHSA-5rvq-cxj2-64vf","severity":"high","message":"python-multipart@0.0.9 (PyPI) is affected by PYSEC-2026-3036, GHSA-5rvq-cxj2-64vf","path":"homework-01/tommasoNocchi/backend/requirements.txt","line":null,"fingerprint":"python-multipart@0.0.9 (PyPI):GHSA-5rvq-cxj2-64vf"},{"rule_id":"osv/GHSA-pp6c-gr5w-3c5g","severity":"high","message":"python-multipart@0.0.9 (PyPI) is affected by PYSEC-2026-3039, GHSA-pp6c-gr5w-3c5g","path":"homework-01/tommasoNocchi/backend/requirements.txt","line":null,"fingerprint":"python-multipart@0.0.9 (PyPI):GHSA-pp6c-gr5w-3c5g"},{"rule_id":"osv/GHSA-27r3-jxmh-p828","severity":"high","message":"body-parser@1.20.6 (npm) is affected by GHSA-27r3-jxmh-p828","path":"homework-04/package-lock.json","line":null,"fingerprint":"body-parser@1.20.6 (npm):GHSA-27r3-jxmh-p828"},{"rule_id":"osv/GHSA-6j4f-fj2g-mc7p","severity":"high","message":"brace-expansion@2.1.2 (npm) is affected by GHSA-6j4f-fj2g-mc7p","path":"homework-04/package-lock.json","line":null,"fingerprint":"brace-expansion@2.1.2 (npm):GHSA-6j4f-fj2g-mc7p"},{"rule_id":"osv/GHSA-mh99-v99m-4gvg","severity":"high","message":"brace-expansion@2.1.2 (npm) is affected by GHSA-mh99-v99m-4gvg","path":"homework-04/package-lock.json","line":null,"fingerprint":"brace-expansion@2.1.2 (npm):GHSA-mh99-v99m-4gvg"},{"rule_id":"osv/GHSA-qhr7-859c-m2p7","severity":"high","message":"brace-expansion@2.1.2 (npm) is affected by GHSA-qhr7-859c-m2p7","path":"homework-04/package-lock.json","line":null,"fingerprint":"brace-expansion@2.1.2 (npm):GHSA-qhr7-859c-m2p7"},{"rule_id":"osv/GHSA-rgw5-rvv9-x895","severity":"high","message":"brace-expansion@2.1.2 (npm) is affected by GHSA-rgw5-rvv9-x895","path":"homework-04/package-lock.json","line":null,"fingerprint":"brace-expansion@2.1.2 (npm):GHSA-rgw5-rvv9-x895"},{"rule_id":"osv/GHSA-5jgf-p345-68v8","severity":"high","message":"fast-uri@3.1.3 (npm) is affected by GHSA-5jgf-p345-68v8","path":"homework-04/package-lock.json","line":null,"fingerprint":"fast-uri@3.1.3 (npm):GHSA-5jgf-p345-68v8"},{"rule_id":"osv/GHSA-7p8r-x3mc-p8w7","severity":"high","message":"fast-uri@3.1.3 (npm) is affected by GHSA-7p8r-x3mc-p8w7","path":"homework-04/package-lock.json","line":null,"fingerprint":"fast-uri@3.1.3 (npm):GHSA-7p8r-x3mc-p8w7"},{"rule_id":"osv/GHSA-f65p-4m7j-42xc","severity":"high","message":"fast-uri@3.1.3 (npm) is affected by GHSA-f65p-4m7j-42xc","path":"homework-04/package-lock.json","line":null,"fingerprint":"fast-uri@3.1.3 (npm):GHSA-f65p-4m7j-42xc"},{"rule_id":"osv/GHSA-fph4-wmhf-6fwf","severity":"high","message":"fast-uri@3.1.3 (npm) is affected by GHSA-fph4-wmhf-6fwf","path":"homework-04/package-lock.json","line":null,"fingerprint":"fast-uri@3.1.3 (npm):GHSA-fph4-wmhf-6fwf"},{"rule_id":"osv/GHSA-jqff-g426-hqxp","severity":"high","message":"fast-uri@3.1.3 (npm) is affected by GHSA-jqff-g426-hqxp","path":"homework-04/package-lock.json","line":null,"fingerprint":"fast-uri@3.1.3 (npm):GHSA-jqff-g426-hqxp"},{"rule_id":"osv/GHSA-qw65-cvwx-89v3","severity":"high","message":"fast-uri@3.1.3 (npm) is affected by GHSA-qw65-cvwx-89v3","path":"homework-04/package-lock.json","line":null,"fingerprint":"fast-uri@3.1.3 (npm):GHSA-qw65-cvwx-89v3"},{"rule_id":"osv/GHSA-v2hh-gcrm-f6hx","severity":"high","message":"fast-uri@3.1.3 (npm) is affected by GHSA-v2hh-gcrm-f6hx","path":"homework-04/package-lock.json","line":null,"fingerprint":"fast-uri@3.1.3 (npm):GHSA-v2hh-gcrm-f6hx"},{"rule_id":"osv/GHSA-w5vr-8v7q-w6rv","severity":"medium","message":"baseline-browser-mapping@2.10.38 (npm) is affected by GHSA-w5vr-8v7q-w6rv; also in homework-01/gabriM/frontend/package-lock.json","path":"homework-01/dario-triolo/package-lock.json","line":null,"fingerprint":"baseline-browser-mapping@2.10.38 (npm):GHSA-w5vr-8v7q-w6rv"},{"rule_id":"osv/GHSA-67mh-4wv8-2f99","severity":"medium","message":"esbuild@0.21.5 (npm) is affected by GHSA-67mh-4wv8-2f99; also in homework-01/federico-liccione/package-lock.json; also in homework-01/gabriM/frontend/package-lock.json; also in homework-01/rosario/gatherer/frontend/package-lock.json","path":"homework-01/dario-triolo/package-lock.json","line":null,"fingerprint":"esbuild@0.21.5 (npm):GHSA-67mh-4wv8-2f99"},{"rule_id":"osv/GHSA-fxqj-rqcc-2cmp","severity":"medium","message":"postcss@8.5.15 (npm) is affected by GHSA-fxqj-rqcc-2cmp; also in homework-01/diego-tomba/package-lock.json; also in homework-01/federico-liccione/package-lock.json; also in homework-01/gabriM/frontend/package-lock.json; also in homework-01/marioben/code-lens/frontend/package-lock.json; also in homework-01/rosario/gatherer/frontend/package-lock.json","path":"homework-01/dario-triolo/package-lock.json","line":null,"fingerprint":"postcss@8.5.15 (npm):GHSA-fxqj-rqcc-2cmp"},{"rule_id":"osv/GHSA-337j-9hxr-rhxg","severity":"medium","message":"react-router@6.30.4 (npm) is affected by GHSA-337j-9hxr-rhxg; also in homework-01/rosario/gatherer/frontend/package-lock.json","path":"homework-01/dario-triolo/package-lock.json","line":null,"fingerprint":"react-router@6.30.4 (npm):GHSA-337j-9hxr-rhxg"},{"rule_id":"osv/GHSA-wrjc-x8rr-h8h6","severity":"medium","message":"react-router@6.30.4 (npm) is affected by GHSA-wrjc-x8rr-h8h6; also in homework-01/rosario/gatherer/frontend/package-lock.json","path":"homework-01/dario-triolo/package-lock.json","line":null,"fingerprint":"react-router@6.30.4 (npm):GHSA-wrjc-x8rr-h8h6"},{"rule_id":"osv/GHSA-jjmj-jmhj-qwj2","severity":"medium","message":"react-router-dom@6.30.4 (npm) is affected by GHSA-jjmj-jmhj-qwj2; also in homework-01/rosario/gatherer/frontend/package-lock.json","path":"homework-01/dario-triolo/package-lock.json","line":null,"fingerprint":"react-router-dom@6.30.4 (npm):GHSA-jjmj-jmhj-qwj2"},{"rule_id":"osv/GHSA-4w7w-66w2-5vf9","severity":"medium","message":"vite@5.4.21 (npm) is affected by GHSA-4w7w-66w2-5vf9; also in homework-01/federico-liccione/package-lock.json; also in homework-01/gabriM/frontend/package-lock.json; also in homework-01/rosario/gatherer/frontend/package-lock.json","path":"homework-01/dario-triolo/package-lock.json","line":null,"fingerprint":"vite@5.4.21 (npm):GHSA-4w7w-66w2-5vf9"},{"rule_id":"osv/GHSA-698v-4r3x-3vcv","severity":"medium","message":"vite@5.4.21 (npm) is affected by GHSA-698v-4r3x-3vcv; also in homework-01/federico-liccione/package-lock.json; also in homework-01/gabriM/frontend/package-lock.json; also in homework-01/rosario/gatherer/frontend/package-lock.json","path":"homework-01/dario-triolo/package-lock.json","line":null,"fingerprint":"vite@5.4.21 (npm):GHSA-698v-4r3x-3vcv"},{"rule_id":"osv/GHSA-fx2h-pf6j-xcff","severity":"medium","message":"vite@5.4.21 (npm) is affected by GHSA-fx2h-pf6j-xcff; also in homework-01/federico-liccione/package-lock.json; also in homework-01/gabriM/frontend/package-lock.json; also in homework-01/rosario/gatherer/frontend/package-lock.json","path":"homework-01/dario-triolo/package-lock.json","line":null,"fingerprint":"vite@5.4.21 (npm):GHSA-fx2h-pf6j-xcff"},{"rule_id":"osv/GHSA-r825-w8mm-5pxw","severity":"medium","message":"vite@5.4.21 (npm) is affected by GHSA-r825-w8mm-5pxw; also in homework-01/federico-liccione/package-lock.json; also in homework-01/gabriM/frontend/package-lock.json; also in homework-01/rosario/gatherer/frontend/package-lock.json","path":"homework-01/dario-triolo/package-lock.json","line":null,"fingerprint":"vite@5.4.21 (npm):GHSA-r825-w8mm-5pxw"},{"rule_id":"osv/GHSA-rq7h-c2jc-7f22","severity":"medium","message":"vite@5.4.21 (npm) is affected by GHSA-rq7h-c2jc-7f22; also in homework-01/federico-liccione/package-lock.json; also in homework-01/gabriM/frontend/package-lock.json; also in homework-01/rosario/gatherer/frontend/package-lock.json","path":"homework-01/dario-triolo/package-lock.json","line":null,"fingerprint":"vite@5.4.21 (npm):GHSA-rq7h-c2jc-7f22"},{"rule_id":"osv/GHSA-v6wh-96g9-6wx3","severity":"medium","message":"vite@5.4.21 (npm) is affected by GHSA-v6wh-96g9-6wx3; also in homework-01/federico-liccione/package-lock.json; also in homework-01/gabriM/frontend/package-lock.json; also in homework-01/rosario/gatherer/frontend/package-lock.json","path":"homework-01/dario-triolo/package-lock.json","line":null,"fingerprint":"vite@5.4.21 (npm):GHSA-v6wh-96g9-6wx3"},{"rule_id":"osv/GHSA-4633-3j49-mh5q","severity":"medium","message":"next@15.5.19 (npm) is affected by GHSA-4633-3j49-mh5q","path":"homework-01/diego-tomba/package-lock.json","line":null,"fingerprint":"next@15.5.19 (npm):GHSA-4633-3j49-mh5q"},{"rule_id":"osv/GHSA-4c39-4ccg-62r3","severity":"medium","message":"next@15.5.19 (npm) is affected by GHSA-4c39-4ccg-62r3","path":"homework-01/diego-tomba/package-lock.json","line":null,"fingerprint":"next@15.5.19 (npm):GHSA-4c39-4ccg-62r3"},{"rule_id":"osv/GHSA-4jqv-mc3x-m676","severity":"medium","message":"next@15.5.19 (npm) is affected by GHSA-4jqv-mc3x-m676","path":"homework-01/diego-tomba/package-lock.json","line":null,"fingerprint":"next@15.5.19 (npm):GHSA-4jqv-mc3x-m676"},{"rule_id":"osv/GHSA-68g3-v927-f742","severity":"medium","message":"next@15.5.19 (npm) is affected by GHSA-68g3-v927-f742","path":"homework-01/diego-tomba/package-lock.json","line":null,"fingerprint":"next@15.5.19 (npm):GHSA-68g3-v927-f742"},{"rule_id":"osv/GHSA-955p-x3mx-jcvp","severity":"medium","message":"next@15.5.19 (npm) is affected by GHSA-955p-x3mx-jcvp","path":"homework-01/diego-tomba/package-lock.json","line":null,"fingerprint":"next@15.5.19 (npm):GHSA-955p-x3mx-jcvp"},{"rule_id":"osv/GHSA-mcj8-r9mp-w47p","severity":"medium","message":"next@15.5.19 (npm) is affected by GHSA-mcj8-r9mp-w47p","path":"homework-01/diego-tomba/package-lock.json","line":null,"fingerprint":"next@15.5.19 (npm):GHSA-mcj8-r9mp-w47p"},{"rule_id":"osv/GHSA-q8wf-6r8g-63ch","severity":"medium","message":"next@15.5.19 (npm) is affected by GHSA-q8wf-6r8g-63ch","path":"homework-01/diego-tomba/package-lock.json","line":null,"fingerprint":"next@15.5.19 (npm):GHSA-q8wf-6r8g-63ch"},{"rule_id":"osv/GHSA-fxqj-rqcc-2cmp","severity":"medium","message":"postcss@8.4.31 (npm) is affected by GHSA-fxqj-rqcc-2cmp; also in homework-01/federico-liccione/package-lock.json","path":"homework-01/diego-tomba/package-lock.json","line":null,"fingerprint":"postcss@8.4.31 (npm):GHSA-fxqj-rqcc-2cmp"},{"rule_id":"osv/GHSA-qx2v-qp2m-jg93","severity":"medium","message":"postcss@8.4.31 (npm) is affected by GHSA-qx2v-qp2m-jg93; also in homework-01/federico-liccione/package-lock.json","path":"homework-01/diego-tomba/package-lock.json","line":null,"fingerprint":"postcss@8.4.31 (npm):GHSA-qx2v-qp2m-jg93"},{"rule_id":"osv/GHSA-2p8c-gr87-2676","severity":"medium","message":"electron@42.4.0 (npm) is affected by GHSA-2p8c-gr87-2676; also in homework-01/ema/nerd-quest/package-lock.json","path":"homework-01/ema/gitdash/package-lock.json","line":null,"fingerprint":"electron@42.4.0 (npm):GHSA-2p8c-gr87-2676"},{"rule_id":"osv/GHSA-997q-gvvc-jwmx","severity":"medium","message":"electron@42.4.0 (npm) is affected by GHSA-997q-gvvc-jwmx; also in homework-01/ema/nerd-quest/package-lock.json","path":"homework-01/ema/gitdash/package-lock.json","line":null,"fingerprint":"electron@42.4.0 (npm):GHSA-997q-gvvc-jwmx"},{"rule_id":"osv/GHSA-fw47-9c62-h3vw","severity":"medium","message":"electron@42.4.0 (npm) is affected by GHSA-fw47-9c62-h3vw; also in homework-01/ema/nerd-quest/package-lock.json","path":"homework-01/ema/gitdash/package-lock.json","line":null,"fingerprint":"electron@42.4.0 (npm):GHSA-fw47-9c62-h3vw"},{"rule_id":"osv/GHSA-r4w5-6pfg-jxp5","severity":"medium","message":"electron@42.4.0 (npm) is affected by GHSA-r4w5-6pfg-jxp5; also in homework-01/ema/nerd-quest/package-lock.json","path":"homework-01/ema/gitdash/package-lock.json","line":null,"fingerprint":"electron@42.4.0 (npm):GHSA-r4w5-6pfg-jxp5"},{"rule_id":"osv/GHSA-x562-297c-g43g","severity":"medium","message":"electron@42.4.0 (npm) is affected by GHSA-x562-297c-g43g; also in homework-01/ema/nerd-quest/package-lock.json","path":"homework-01/ema/gitdash/package-lock.json","line":null,"fingerprint":"electron@42.4.0 (npm):GHSA-x562-297c-g43g"},{"rule_id":"osv/GHSA-2jfj-6hjv-fm6j","severity":"medium","message":"undici@7.27.2 (npm) is affected by GHSA-2jfj-6hjv-fm6j; also in homework-01/federico-liccione/package-lock.json","path":"homework-01/ema/gitdash/package-lock.json","line":null,"fingerprint":"undici@7.27.2 (npm):GHSA-2jfj-6hjv-fm6j"},{"rule_id":"osv/GHSA-3xpg-4rpp-hhhm","severity":"medium","message":"undici@7.27.2 (npm) is affected by GHSA-3xpg-4rpp-hhhm; also in homework-01/federico-liccione/package-lock.json","path":"homework-01/ema/gitdash/package-lock.json","line":null,"fingerprint":"undici@7.27.2 (npm):GHSA-3xpg-4rpp-hhhm"},{"rule_id":"osv/GHSA-4qv8-2p9j-2685","severity":"medium","message":"undici@7.27.2 (npm) is affected by GHSA-4qv8-2p9j-2685; also in homework-01/federico-liccione/package-lock.json","path":"homework-01/ema/gitdash/package-lock.json","line":null,"fingerprint":"undici@7.27.2 (npm):GHSA-4qv8-2p9j-2685"},{"rule_id":"osv/GHSA-55wc-3pg8-jfw6","severity":"medium","message":"undici@7.27.2 (npm) is affected by GHSA-55wc-3pg8-jfw6; also in homework-01/federico-liccione/package-lock.json","path":"homework-01/ema/gitdash/package-lock.json","line":null,"fingerprint":"undici@7.27.2 (npm):GHSA-55wc-3pg8-jfw6"},{"rule_id":"osv/GHSA-8xcm-r25x-g524","severity":"medium","message":"undici@7.27.2 (npm) is affected by GHSA-8xcm-r25x-g524; also in homework-01/federico-liccione/package-lock.json","path":"homework-01/ema/gitdash/package-lock.json","line":null,"fingerprint":"undici@7.27.2 (npm):GHSA-8xcm-r25x-g524"},{"rule_id":"osv/GHSA-9fm3-97px-rjf6","severity":"medium","message":"undici@7.27.2 (npm) is affected by GHSA-9fm3-97px-rjf6; also in homework-01/federico-liccione/package-lock.json","path":"homework-01/ema/gitdash/package-lock.json","line":null,"fingerprint":"undici@7.27.2 (npm):GHSA-9fm3-97px-rjf6"},{"rule_id":"osv/GHSA-f72v-6w45-q472","severity":"medium","message":"undici@7.27.2 (npm) is affected by GHSA-f72v-6w45-q472; also in homework-01/federico-liccione/package-lock.json","path":"homework-01/ema/gitdash/package-lock.json","line":null,"fingerprint":"undici@7.27.2 (npm):GHSA-f72v-6w45-q472"},{"rule_id":"osv/GHSA-jr45-8vmc-qm54","severity":"medium","message":"undici@7.27.2 (npm) is affected by GHSA-jr45-8vmc-qm54; also in homework-01/federico-liccione/package-lock.json","path":"homework-01/ema/gitdash/package-lock.json","line":null,"fingerprint":"undici@7.27.2 (npm):GHSA-jr45-8vmc-qm54"},{"rule_id":"osv/GHSA-m8rv-5g2x-5cg5","severity":"medium","message":"undici@7.27.2 (npm) is affected by GHSA-m8rv-5g2x-5cg5; also in homework-01/federico-liccione/package-lock.json","path":"homework-01/ema/gitdash/package-lock.json","line":null,"fingerprint":"undici@7.27.2 (npm):GHSA-m8rv-5g2x-5cg5"},{"rule_id":"osv/GHSA-p88m-4jfj-68fv","severity":"medium","message":"undici@7.27.2 (npm) is affected by GHSA-p88m-4jfj-68fv; also in homework-01/federico-liccione/package-lock.json","path":"homework-01/ema/gitdash/package-lock.json","line":null,"fingerprint":"undici@7.27.2 (npm):GHSA-p88m-4jfj-68fv"},{"rule_id":"osv/GHSA-pmjh-fq2x-6v4x","severity":"medium","message":"undici@7.27.2 (npm) is affected by GHSA-pmjh-fq2x-6v4x; also in homework-01/federico-liccione/package-lock.json","path":"homework-01/ema/gitdash/package-lock.json","line":null,"fingerprint":"undici@7.27.2 (npm):GHSA-pmjh-fq2x-6v4x"},{"rule_id":"osv/GHSA-pr7r-676h-xcf6","severity":"medium","message":"undici@7.27.2 (npm) is affected by GHSA-pr7r-676h-xcf6; also in homework-01/federico-liccione/package-lock.json","path":"homework-01/ema/gitdash/package-lock.json","line":null,"fingerprint":"undici@7.27.2 (npm):GHSA-pr7r-676h-xcf6"},{"rule_id":"osv/GHSA-rx4f-c7p8-82vq","severity":"medium","message":"undici@7.27.2 (npm) is affected by GHSA-rx4f-c7p8-82vq; also in homework-01/federico-liccione/package-lock.json","path":"homework-01/ema/gitdash/package-lock.json","line":null,"fingerprint":"undici@7.27.2 (npm):GHSA-rx4f-c7p8-82vq"},{"rule_id":"osv/GHSA-v3r7-h72x-cjcm","severity":"medium","message":"undici@7.27.2 (npm) is affected by GHSA-v3r7-h72x-cjcm; also in homework-01/federico-liccione/package-lock.json","path":"homework-01/ema/gitdash/package-lock.json","line":null,"fingerprint":"undici@7.27.2 (npm):GHSA-v3r7-h72x-cjcm"},{"rule_id":"osv/GHSA-2jfj-6hjv-fm6j","severity":"medium","message":"undici@7.28.0 (npm) is affected by GHSA-2jfj-6hjv-fm6j","path":"homework-01/ema/nerd-quest/package-lock.json","line":null,"fingerprint":"undici@7.28.0 (npm):GHSA-2jfj-6hjv-fm6j"},{"rule_id":"osv/GHSA-3wwx-pv8p-q78v","severity":"medium","message":"undici@7.28.0 (npm) is affected by GHSA-3wwx-pv8p-q78v","path":"homework-01/ema/nerd-quest/package-lock.json","line":null,"fingerprint":"undici@7.28.0 (npm):GHSA-3wwx-pv8p-q78v"},{"rule_id":"osv/GHSA-3xpg-4rpp-hhhm","severity":"medium","message":"undici@7.28.0 (npm) is affected by GHSA-3xpg-4rpp-hhhm","path":"homework-01/ema/nerd-quest/package-lock.json","line":null,"fingerprint":"undici@7.28.0 (npm):GHSA-3xpg-4rpp-hhhm"},{"rule_id":"osv/GHSA-4qv8-2p9j-2685","severity":"medium","message":"undici@7.28.0 (npm) is affected by GHSA-4qv8-2p9j-2685","path":"homework-01/ema/nerd-quest/package-lock.json","line":null,"fingerprint":"undici@7.28.0 (npm):GHSA-4qv8-2p9j-2685"},{"rule_id":"osv/GHSA-55wc-3pg8-jfw6","severity":"medium","message":"undici@7.28.0 (npm) is affected by GHSA-55wc-3pg8-jfw6","path":"homework-01/ema/nerd-quest/package-lock.json","line":null,"fingerprint":"undici@7.28.0 (npm):GHSA-55wc-3pg8-jfw6"},{"rule_id":"osv/GHSA-8xcm-r25x-g524","severity":"medium","message":"undici@7.28.0 (npm) is affected by GHSA-8xcm-r25x-g524","path":"homework-01/ema/nerd-quest/package-lock.json","line":null,"fingerprint":"undici@7.28.0 (npm):GHSA-8xcm-r25x-g524"},{"rule_id":"osv/GHSA-9fm3-97px-rjf6","severity":"medium","message":"undici@7.28.0 (npm) is affected by GHSA-9fm3-97px-rjf6","path":"homework-01/ema/nerd-quest/package-lock.json","line":null,"fingerprint":"undici@7.28.0 (npm):GHSA-9fm3-97px-rjf6"},{"rule_id":"osv/GHSA-f72v-6w45-q472","severity":"medium","message":"undici@7.28.0 (npm) is affected by GHSA-f72v-6w45-q472","path":"homework-01/ema/nerd-quest/package-lock.json","line":null,"fingerprint":"undici@7.28.0 (npm):GHSA-f72v-6w45-q472"},{"rule_id":"osv/GHSA-jr45-8vmc-qm54","severity":"medium","message":"undici@7.28.0 (npm) is affected by GHSA-jr45-8vmc-qm54","path":"homework-01/ema/nerd-quest/package-lock.json","line":null,"fingerprint":"undici@7.28.0 (npm):GHSA-jr45-8vmc-qm54"},{"rule_id":"osv/GHSA-m8rv-5g2x-5cg5","severity":"medium","message":"undici@7.28.0 (npm) is affected by GHSA-m8rv-5g2x-5cg5","path":"homework-01/ema/nerd-quest/package-lock.json","line":null,"fingerprint":"undici@7.28.0 (npm):GHSA-m8rv-5g2x-5cg5"},{"rule_id":"osv/GHSA-pmjh-fq2x-6v4x","severity":"medium","message":"undici@7.28.0 (npm) is affected by GHSA-pmjh-fq2x-6v4x","path":"homework-01/ema/nerd-quest/package-lock.json","line":null,"fingerprint":"undici@7.28.0 (npm):GHSA-pmjh-fq2x-6v4x"},{"rule_id":"osv/GHSA-rx4f-c7p8-82vq","severity":"medium","message":"undici@7.28.0 (npm) is affected by GHSA-rx4f-c7p8-82vq","path":"homework-01/ema/nerd-quest/package-lock.json","line":null,"fingerprint":"undici@7.28.0 (npm):GHSA-rx4f-c7p8-82vq"},{"rule_id":"osv/GHSA-v3r7-h72x-cjcm","severity":"medium","message":"undici@7.28.0 (npm) is affected by GHSA-v3r7-h72x-cjcm","path":"homework-01/ema/nerd-quest/package-lock.json","line":null,"fingerprint":"undici@7.28.0 (npm):GHSA-v3r7-h72x-cjcm"},{"rule_id":"osv/GHSA-frvp-7c67-39w9","severity":"medium","message":"@hono/node-server@1.19.14 (npm) is affected by GHSA-frvp-7c67-39w9","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"@hono/node-server@1.19.14 (npm):GHSA-frvp-7c67-39w9"},{"rule_id":"osv/GHSA-jpvv-r467-5p4w","severity":"medium","message":"@hono/node-server@1.19.14 (npm) is affected by GHSA-jpvv-r467-5p4w","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"@hono/node-server@1.19.14 (npm):GHSA-jpvv-r467-5p4w"},{"rule_id":"osv/GHSA-rmxm-3fg6-px4f","severity":"medium","message":"@hono/node-server@1.19.14 (npm) is affected by GHSA-rmxm-3fg6-px4f","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"@hono/node-server@1.19.14 (npm):GHSA-rmxm-3fg6-px4f"},{"rule_id":"osv/GHSA-6prh-2h8m-c8cw","severity":"medium","message":"@modelcontextprotocol/sdk@1.29.0 (npm) is affected by GHSA-6prh-2h8m-c8cw","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"@modelcontextprotocol/sdk@1.29.0 (npm):GHSA-6prh-2h8m-c8cw"},{"rule_id":"osv/GHSA-rvq5-wwqv-78pq","severity":"medium","message":"@modelcontextprotocol/sdk@1.29.0 (npm) is affected by GHSA-rvq5-wwqv-78pq","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"@modelcontextprotocol/sdk@1.29.0 (npm):GHSA-rvq5-wwqv-78pq"},{"rule_id":"osv/GHSA-w5vr-8v7q-w6rv","severity":"medium","message":"baseline-browser-mapping@2.10.37 (npm) is affected by GHSA-w5vr-8v7q-w6rv; also in homework-01/marioben/code-lens/frontend/package-lock.json; also in homework-01/rosario/gatherer/frontend/package-lock.json","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"baseline-browser-mapping@2.10.37 (npm):GHSA-w5vr-8v7q-w6rv"},{"rule_id":"osv/GHSA-q2hr-2g5m-vwhr","severity":"medium","message":"brace-expansion@1.1.15 (npm) is affected by GHSA-q2hr-2g5m-vwhr","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"brace-expansion@1.1.15 (npm):GHSA-q2hr-2g5m-vwhr"},{"rule_id":"osv/GHSA-q2hr-2g5m-vwhr","severity":"medium","message":"brace-expansion@5.0.6 (npm) is affected by GHSA-q2hr-2g5m-vwhr; also in homework-01/marioben/code-lens/frontend/package-lock.json","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"brace-expansion@5.0.6 (npm):GHSA-q2hr-2g5m-vwhr"},{"rule_id":"osv/GHSA-gcqx-w48m-w2h4","severity":"medium","message":"deepmerge@4.3.1 (npm) is affected by GHSA-gcqx-w48m-w2h4","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"deepmerge@4.3.1 (npm):GHSA-gcqx-w48m-w2h4"},{"rule_id":"osv/GHSA-hrr3-gc8f-f4qj","severity":"medium","message":"fast-uri@3.1.2 (npm) is affected by GHSA-hrr3-gc8f-f4qj","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"fast-uri@3.1.2 (npm):GHSA-hrr3-gc8f-f4qj"},{"rule_id":"osv/GHSA-w74x-v6f9-j3xg","severity":"medium","message":"fast-uri@3.1.2 (npm) is affected by GHSA-w74x-v6f9-j3xg","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"fast-uri@3.1.2 (npm):GHSA-w74x-v6f9-j3xg"},{"rule_id":"osv/GHSA-46wx-v44x-9hh2","severity":"medium","message":"hono@4.12.25 (npm) is affected by GHSA-46wx-v44x-9hh2","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"hono@4.12.25 (npm):GHSA-46wx-v44x-9hh2"},{"rule_id":"osv/GHSA-4h7h-rv7c-7m2v","severity":"medium","message":"hono@4.12.25 (npm) is affected by GHSA-4h7h-rv7c-7m2v","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"hono@4.12.25 (npm):GHSA-4h7h-rv7c-7m2v"},{"rule_id":"osv/GHSA-4m76-xfj5-7975","severity":"medium","message":"hono@4.12.25 (npm) is affected by GHSA-4m76-xfj5-7975","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"hono@4.12.25 (npm):GHSA-4m76-xfj5-7975"},{"rule_id":"osv/GHSA-54fx-42gc-7vw4","severity":"medium","message":"hono@4.12.25 (npm) is affected by GHSA-54fx-42gc-7vw4","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"hono@4.12.25 (npm):GHSA-54fx-42gc-7vw4"},{"rule_id":"osv/GHSA-5r4p-p66f-jhc7","severity":"medium","message":"hono@4.12.25 (npm) is affected by GHSA-5r4p-p66f-jhc7","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"hono@4.12.25 (npm):GHSA-5r4p-p66f-jhc7"},{"rule_id":"osv/GHSA-8j4g-w8fx-2239","severity":"medium","message":"hono@4.12.25 (npm) is affected by GHSA-8j4g-w8fx-2239","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"hono@4.12.25 (npm):GHSA-8j4g-w8fx-2239"},{"rule_id":"osv/GHSA-crvj-82cr-hjcx","severity":"medium","message":"hono@4.12.25 (npm) is affected by GHSA-crvj-82cr-hjcx","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"hono@4.12.25 (npm):GHSA-crvj-82cr-hjcx"},{"rule_id":"osv/GHSA-f23p-vx2j-j53r","severity":"medium","message":"hono@4.12.25 (npm) is affected by GHSA-f23p-vx2j-j53r","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"hono@4.12.25 (npm):GHSA-f23p-vx2j-j53r"},{"rule_id":"osv/GHSA-g6gw-c38x-mqfc","severity":"medium","message":"hono@4.12.25 (npm) is affected by GHSA-g6gw-c38x-mqfc","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"hono@4.12.25 (npm):GHSA-g6gw-c38x-mqfc"},{"rule_id":"osv/GHSA-gqvv-2mrq-wpjv","severity":"medium","message":"hono@4.12.25 (npm) is affected by GHSA-gqvv-2mrq-wpjv","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"hono@4.12.25 (npm):GHSA-gqvv-2mrq-wpjv"},{"rule_id":"osv/GHSA-h7mg-cq63-vhpq","severity":"medium","message":"hono@4.12.25 (npm) is affected by GHSA-h7mg-cq63-vhpq","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"hono@4.12.25 (npm):GHSA-h7mg-cq63-vhpq"},{"rule_id":"osv/GHSA-hvrm-45r6-mjfj","severity":"medium","message":"hono@4.12.25 (npm) is affected by GHSA-hvrm-45r6-mjfj","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"hono@4.12.25 (npm):GHSA-hvrm-45r6-mjfj"},{"rule_id":"osv/GHSA-hxh3-vqpv-xpqv","severity":"medium","message":"hono@4.12.25 (npm) is affected by GHSA-hxh3-vqpv-xpqv","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"hono@4.12.25 (npm):GHSA-hxh3-vqpv-xpqv"},{"rule_id":"osv/GHSA-w62v-xxxg-mg59","severity":"medium","message":"hono@4.12.25 (npm) is affected by GHSA-w62v-xxxg-mg59","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"hono@4.12.25 (npm):GHSA-w62v-xxxg-mg59"},{"rule_id":"osv/GHSA-xgm2-5f3f-mvvc","severity":"medium","message":"hono@4.12.25 (npm) is affected by GHSA-xgm2-5f3f-mvvc","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"hono@4.12.25 (npm):GHSA-xgm2-5f3f-mvvc"},{"rule_id":"osv/GHSA-22jq-vg5j-6vgg","severity":"medium","message":"ip-address@10.2.0 (npm) is affected by GHSA-22jq-vg5j-6vgg","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"ip-address@10.2.0 (npm):GHSA-22jq-vg5j-6vgg"},{"rule_id":"osv/GHSA-2vr4-cq9g-pvrc","severity":"medium","message":"ip-address@10.2.0 (npm) is affected by GHSA-2vr4-cq9g-pvrc","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"ip-address@10.2.0 (npm):GHSA-2vr4-cq9g-pvrc"},{"rule_id":"osv/GHSA-4xrf-jv44-h6hh","severity":"medium","message":"ip-address@10.2.0 (npm) is affected by GHSA-4xrf-jv44-h6hh","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"ip-address@10.2.0 (npm):GHSA-4xrf-jv44-h6hh"},{"rule_id":"osv/GHSA-h3mg-xc3c-68pw","severity":"medium","message":"ip-address@10.2.0 (npm) is affected by GHSA-h3mg-xc3c-68pw","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"ip-address@10.2.0 (npm):GHSA-h3mg-xc3c-68pw"},{"rule_id":"osv/GHSA-j6r3-76f7-8jcv","severity":"medium","message":"ip-address@10.2.0 (npm) is affected by GHSA-j6r3-76f7-8jcv","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"ip-address@10.2.0 (npm):GHSA-j6r3-76f7-8jcv"},{"rule_id":"osv/GHSA-rpw4-54j3-4h4q","severity":"medium","message":"ip-address@10.2.0 (npm) is affected by GHSA-rpw4-54j3-4h4q","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"ip-address@10.2.0 (npm):GHSA-rpw4-54j3-4h4q"},{"rule_id":"osv/GHSA-rxp7-6hxx-x8q5","severity":"medium","message":"ip-address@10.2.0 (npm) is affected by GHSA-rxp7-6hxx-x8q5","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"ip-address@10.2.0 (npm):GHSA-rxp7-6hxx-x8q5"},{"rule_id":"osv/GHSA-g3hv-75wg-m249","severity":"medium","message":"minimatch@10.2.5 (npm) is affected by GHSA-g3hv-75wg-m249; also in homework-01/marioben/code-lens/frontend/package-lock.json","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"minimatch@10.2.5 (npm):GHSA-g3hv-75wg-m249"},{"rule_id":"osv/GHSA-3x4c-7xq6-9pq8","severity":"medium","message":"next@14.2.35 (npm) is affected by GHSA-3x4c-7xq6-9pq8","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"next@14.2.35 (npm):GHSA-3x4c-7xq6-9pq8"},{"rule_id":"osv/GHSA-4633-3j49-mh5q","severity":"medium","message":"next@14.2.35 (npm) is affected by GHSA-4633-3j49-mh5q","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"next@14.2.35 (npm):GHSA-4633-3j49-mh5q"},{"rule_id":"osv/GHSA-4c39-4ccg-62r3","severity":"medium","message":"next@14.2.35 (npm) is affected by GHSA-4c39-4ccg-62r3","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"next@14.2.35 (npm):GHSA-4c39-4ccg-62r3"},{"rule_id":"osv/GHSA-68g3-v927-f742","severity":"medium","message":"next@14.2.35 (npm) is affected by GHSA-68g3-v927-f742","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"next@14.2.35 (npm):GHSA-68g3-v927-f742"},{"rule_id":"osv/GHSA-955p-x3mx-jcvp","severity":"medium","message":"next@14.2.35 (npm) is affected by GHSA-955p-x3mx-jcvp","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"next@14.2.35 (npm):GHSA-955p-x3mx-jcvp"},{"rule_id":"osv/GHSA-9g9p-9gw9-jx7f","severity":"medium","message":"next@14.2.35 (npm) is affected by GHSA-9g9p-9gw9-jx7f","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"next@14.2.35 (npm):GHSA-9g9p-9gw9-jx7f"},{"rule_id":"osv/GHSA-ffhc-5mcf-pf4q","severity":"medium","message":"next@14.2.35 (npm) is affected by GHSA-ffhc-5mcf-pf4q","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"next@14.2.35 (npm):GHSA-ffhc-5mcf-pf4q"},{"rule_id":"osv/GHSA-ggv3-7p47-pfv8","severity":"medium","message":"next@14.2.35 (npm) is affected by GHSA-ggv3-7p47-pfv8","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"next@14.2.35 (npm):GHSA-ggv3-7p47-pfv8"},{"rule_id":"osv/GHSA-gx5p-jg67-6x7h","severity":"medium","message":"next@14.2.35 (npm) is affected by GHSA-gx5p-jg67-6x7h","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"next@14.2.35 (npm):GHSA-gx5p-jg67-6x7h"},{"rule_id":"osv/GHSA-h64f-5h5j-jqjh","severity":"medium","message":"next@14.2.35 (npm) is affected by GHSA-h64f-5h5j-jqjh","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"next@14.2.35 (npm):GHSA-h64f-5h5j-jqjh"},{"rule_id":"osv/GHSA-wfc6-r584-vfw7","severity":"medium","message":"next@14.2.35 (npm) is affected by GHSA-wfc6-r584-vfw7","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"next@14.2.35 (npm):GHSA-wfc6-r584-vfw7"},{"rule_id":"osv/GHSA-39m8-27wv-hr27","severity":"medium","message":"nodemailer@9.0.1 (npm) is affected by GHSA-39m8-27wv-hr27","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"nodemailer@9.0.1 (npm):GHSA-39m8-27wv-hr27"},{"rule_id":"osv/GHSA-4ffr-jq9g-5ffx","severity":"medium","message":"nodemailer@9.0.1 (npm) is affected by GHSA-4ffr-jq9g-5ffx","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"nodemailer@9.0.1 (npm):GHSA-4ffr-jq9g-5ffx"},{"rule_id":"osv/GHSA-4g23-2xm8-66gc","severity":"medium","message":"nodemailer@9.0.1 (npm) is affected by GHSA-4g23-2xm8-66gc","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"nodemailer@9.0.1 (npm):GHSA-4g23-2xm8-66gc"},{"rule_id":"osv/GHSA-6vj9-mwq6-2f5v","severity":"medium","message":"nodemailer@9.0.1 (npm) is affected by GHSA-6vj9-mwq6-2f5v","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"nodemailer@9.0.1 (npm):GHSA-6vj9-mwq6-2f5v"},{"rule_id":"osv/GHSA-85x2-q946-cp5h","severity":"medium","message":"nodemailer@9.0.1 (npm) is affected by GHSA-85x2-q946-cp5h","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"nodemailer@9.0.1 (npm):GHSA-85x2-q946-cp5h"},{"rule_id":"osv/GHSA-8c8m-p3m8-cjg8","severity":"medium","message":"nodemailer@9.0.1 (npm) is affected by GHSA-8c8m-p3m8-cjg8","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"nodemailer@9.0.1 (npm):GHSA-8c8m-p3m8-cjg8"},{"rule_id":"osv/GHSA-8m3c-c648-2xjj","severity":"medium","message":"nodemailer@9.0.1 (npm) is affected by GHSA-8m3c-c648-2xjj","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"nodemailer@9.0.1 (npm):GHSA-8m3c-c648-2xjj"},{"rule_id":"osv/GHSA-8vvx-rff5-p5rq","severity":"medium","message":"nodemailer@9.0.1 (npm) is affected by GHSA-8vvx-rff5-p5rq","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"nodemailer@9.0.1 (npm):GHSA-8vvx-rff5-p5rq"},{"rule_id":"osv/GHSA-cc9r-2j5m-2m83","severity":"medium","message":"nodemailer@9.0.1 (npm) is affected by GHSA-cc9r-2j5m-2m83","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"nodemailer@9.0.1 (npm):GHSA-cc9r-2j5m-2m83"},{"rule_id":"osv/GHSA-g73g-hqqh-jr95","severity":"medium","message":"nodemailer@9.0.1 (npm) is affected by GHSA-g73g-hqqh-jr95","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"nodemailer@9.0.1 (npm):GHSA-g73g-hqqh-jr95"},{"rule_id":"osv/GHSA-m943-m63m-w62w","severity":"medium","message":"nodemailer@9.0.1 (npm) is affected by GHSA-m943-m63m-w62w","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"nodemailer@9.0.1 (npm):GHSA-m943-m63m-w62w"},{"rule_id":"osv/GHSA-wmmp-3585-3rmp","severity":"medium","message":"nodemailer@9.0.1 (npm) is affected by GHSA-wmmp-3585-3rmp","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"nodemailer@9.0.1 (npm):GHSA-wmmp-3585-3rmp"},{"rule_id":"osv/GHSA-rj75-hqrm-r3gf","severity":"medium","message":"postcss-selector-parser@7.1.4 (npm) is affected by GHSA-rj75-hqrm-r3gf","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"postcss-selector-parser@7.1.4 (npm):GHSA-rj75-hqrm-r3gf"},{"rule_id":"osv/GHSA-4mjr-xmp4-gh2g","severity":"medium","message":"qs@6.15.2 (npm) is affected by GHSA-4mjr-xmp4-gh2g; also in homework-01/sasero/claude-monitor-usage/package-lock.json","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"qs@6.15.2 (npm):GHSA-4mjr-xmp4-gh2g"},{"rule_id":"osv/GHSA-6pq8-jhm2-2vcw","severity":"medium","message":"qs@6.15.2 (npm) is affected by GHSA-6pq8-jhm2-2vcw; also in homework-01/sasero/claude-monitor-usage/package-lock.json","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"qs@6.15.2 (npm):GHSA-6pq8-jhm2-2vcw"},{"rule_id":"osv/GHSA-x5fp-wj9c-mxmx","severity":"medium","message":"qs@6.15.2 (npm) is affected by GHSA-x5fp-wj9c-mxmx; also in homework-01/sasero/claude-monitor-usage/package-lock.json","path":"homework-01/federico-liccione/package-lock.json","line":null,"fingerprint":"qs@6.15.2 (npm):GHSA-x5fp-wj9c-mxmx"},{"rule_id":"osv/GHSA-vqwp-45wm-r9r5","severity":"medium","message":"streamlit@1.30 (PyPI) is affected by PYSEC-2026-212, GHSA-vqwp-45wm-r9r5","path":"homework-01/flavio/requirements.txt","line":null,"fingerprint":"streamlit@1.30 (PyPI):GHSA-vqwp-45wm-r9r5"},{"rule_id":"osv/GHSA-7p48-42j8-8846","severity":"medium","message":"streamlit@1.30 (PyPI) is affected by PYSEC-2026-2285, GHSA-7p48-42j8-8846","path":"homework-01/flavio/requirements.txt","line":null,"fingerprint":"streamlit@1.30 (PyPI):GHSA-7p48-42j8-8846"},{"rule_id":"osv/GHSA-rxff-vr5r-8cj5","severity":"medium","message":"streamlit@1.30 (PyPI) is affected by GHSA-rxff-vr5r-8cj5","path":"homework-01/flavio/requirements.txt","line":null,"fingerprint":"streamlit@1.30 (PyPI):GHSA-rxff-vr5r-8cj5"},{"rule_id":"osv/GHSA-mf9w-mj56-hr94","severity":"medium","message":"python-dotenv@1.0.1 (PyPI) is affected by PYSEC-2026-2270, GHSA-mf9w-mj56-hr94","path":"homework-01/gabriM/backend/requirements.txt","line":null,"fingerprint":"python-dotenv@1.0.1 (PyPI):GHSA-mf9w-mj56-hr94"},{"rule_id":"osv/GHSA-698v-4r3x-3vcv","severity":"medium","message":"vite@8.0.16 (npm) is affected by GHSA-698v-4r3x-3vcv","path":"homework-01/marioben/code-lens/frontend/package-lock.json","line":null,"fingerprint":"vite@8.0.16 (npm):GHSA-698v-4r3x-3vcv"},{"rule_id":"osv/GHSA-r825-w8mm-5pxw","severity":"medium","message":"vite@8.0.16 (npm) is affected by GHSA-r825-w8mm-5pxw","path":"homework-01/marioben/code-lens/frontend/package-lock.json","line":null,"fingerprint":"vite@8.0.16 (npm):GHSA-r825-w8mm-5pxw"},{"rule_id":"osv/GHSA-rq7h-c2jc-7f22","severity":"medium","message":"vite@8.0.16 (npm) is affected by GHSA-rq7h-c2jc-7f22","path":"homework-01/marioben/code-lens/frontend/package-lock.json","line":null,"fingerprint":"vite@8.0.16 (npm):GHSA-rq7h-c2jc-7f22"},{"rule_id":"osv/PYSEC-2023-183","severity":"medium","message":"opencv-python@4.8.0 (PyPI) is affected by PYSEC-2023-183","path":"homework-01/mlucchesi/workbreak/requirements.txt","line":null,"fingerprint":"opencv-python@4.8.0 (PyPI):PYSEC-2023-183"},{"rule_id":"osv/PYSEC-2023-175","severity":"medium","message":"pillow@10.0.0 (PyPI) is affected by PYSEC-2023-175","path":"homework-01/mlucchesi/workbreak/requirements.txt","line":null,"fingerprint":"pillow@10.0.0 (PyPI):PYSEC-2023-175"},{"rule_id":"osv/GHSA-wjx4-4jcj-g98j","severity":"medium","message":"pillow@10.0.0 (PyPI) is affected by PYSEC-2026-165, GHSA-wjx4-4jcj-g98j","path":"homework-01/mlucchesi/workbreak/requirements.txt","line":null,"fingerprint":"pillow@10.0.0 (PyPI):GHSA-wjx4-4jcj-g98j"},{"rule_id":"osv/GHSA-4x4j-2g7c-83w6","severity":"medium","message":"pillow@10.0.0 (PyPI) is affected by PYSEC-2026-2257, GHSA-4x4j-2g7c-83w6","path":"homework-01/mlucchesi/workbreak/requirements.txt","line":null,"fingerprint":"pillow@10.0.0 (PyPI):GHSA-4x4j-2g7c-83w6"},{"rule_id":"osv/GHSA-r73j-pqj5-w3x7","severity":"medium","message":"pillow@10.0.0 (PyPI) is affected by PYSEC-2026-2874, GHSA-r73j-pqj5-w3x7","path":"homework-01/mlucchesi/workbreak/requirements.txt","line":null,"fingerprint":"pillow@10.0.0 (PyPI):GHSA-r73j-pqj5-w3x7"},{"rule_id":"osv/GHSA-fj7v-r99m-22gq","severity":"medium","message":"pillow@10.0.0 (PyPI) is affected by PYSEC-2026-3494, GHSA-fj7v-r99m-22gq","path":"homework-01/mlucchesi/workbreak/requirements.txt","line":null,"fingerprint":"pillow@10.0.0 (PyPI):GHSA-fj7v-r99m-22gq"},{"rule_id":"osv/GHSA-p8hx-v2p6-rp84","severity":"medium","message":"pillow@10.0.0 (PyPI) is affected by PYSEC-2026-4337, GHSA-p8hx-v2p6-rp84","path":"homework-01/mlucchesi/workbreak/requirements.txt","line":null,"fingerprint":"pillow@10.0.0 (PyPI):GHSA-p8hx-v2p6-rp84"},{"rule_id":"osv/GHSA-4rm8-3hmm-39fg","severity":"medium","message":"pillow@10.0.0 (PyPI) is affected by PYSEC-2026-4340, GHSA-4rm8-3hmm-39fg","path":"homework-01/mlucchesi/workbreak/requirements.txt","line":null,"fingerprint":"pillow@10.0.0 (PyPI):GHSA-4rm8-3hmm-39fg"},{"rule_id":"osv/GHSA-24rc-8hj2-v98c","severity":"medium","message":"pillow@10.0.0 (PyPI) is affected by GHSA-24rc-8hj2-v98c","path":"homework-01/mlucchesi/workbreak/requirements.txt","line":null,"fingerprint":"pillow@10.0.0 (PyPI):GHSA-24rc-8hj2-v98c"},{"rule_id":"osv/GHSA-254f-3936-288h","severity":"medium","message":"pillow@10.0.0 (PyPI) is affected by GHSA-254f-3936-288h","path":"homework-01/mlucchesi/workbreak/requirements.txt","line":null,"fingerprint":"pillow@10.0.0 (PyPI):GHSA-254f-3936-288h"},{"rule_id":"osv/GHSA-462x-pgg6-55fp","severity":"medium","message":"pillow@10.0.0 (PyPI) is affected by GHSA-462x-pgg6-55fp","path":"homework-01/mlucchesi/workbreak/requirements.txt","line":null,"fingerprint":"pillow@10.0.0 (PyPI):GHSA-462x-pgg6-55fp"},{"rule_id":"osv/GHSA-74r2-7ff9-mjj2","severity":"medium","message":"pillow@10.0.0 (PyPI) is affected by GHSA-74r2-7ff9-mjj2","path":"homework-01/mlucchesi/workbreak/requirements.txt","line":null,"fingerprint":"pillow@10.0.0 (PyPI):GHSA-74r2-7ff9-mjj2"},{"rule_id":"osv/GHSA-fc9g-5qg7-mf45","severity":"medium","message":"pillow@10.0.0 (PyPI) is affected by GHSA-fc9g-5qg7-mf45","path":"homework-01/mlucchesi/workbreak/requirements.txt","line":null,"fingerprint":"pillow@10.0.0 (PyPI):GHSA-fc9g-5qg7-mf45"},{"rule_id":"osv/GHSA-rfgq-q3w2-pmv2","severity":"medium","message":"pillow@10.0.0 (PyPI) is affected by GHSA-rfgq-q3w2-pmv2","path":"homework-01/mlucchesi/workbreak/requirements.txt","line":null,"fingerprint":"pillow@10.0.0 (PyPI):GHSA-rfgq-q3w2-pmv2"},{"rule_id":"osv/GHSA-vx6w-vv9f-6gvg","severity":"medium","message":"pillow@10.0.0 (PyPI) is affected by GHSA-vx6w-vv9f-6gvg","path":"homework-01/mlucchesi/workbreak/requirements.txt","line":null,"fingerprint":"pillow@10.0.0 (PyPI):GHSA-vx6w-vv9f-6gvg"},{"rule_id":"osv/GHSA-wqgw-9xfh-qf2g","severity":"medium","message":"pillow@10.0.0 (PyPI) is affected by GHSA-wqgw-9xfh-qf2g","path":"homework-01/mlucchesi/workbreak/requirements.txt","line":null,"fingerprint":"pillow@10.0.0 (PyPI):GHSA-wqgw-9xfh-qf2g"},{"rule_id":"osv/GHSA-cjwg-qfpm-7377","severity":"medium","message":"python-jose@3.3.0 (PyPI) is affected by PYSEC-2024-233, GHSA-cjwg-qfpm-7377","path":"homework-01/tommasoNocchi/backend/requirements.txt","line":null,"fingerprint":"python-jose@3.3.0 (PyPI):GHSA-cjwg-qfpm-7377"},{"rule_id":"osv/PYSEC-2025-185","severity":"medium","message":"python-jose@3.3.0 (PyPI) is affected by PYSEC-2025-185","path":"homework-01/tommasoNocchi/backend/requirements.txt","line":null,"fingerprint":"python-jose@3.3.0 (PyPI):PYSEC-2025-185"},{"rule_id":"osv/GHSA-mj87-hwqh-73pj","severity":"medium","message":"python-multipart@0.0.9 (PyPI) is affected by PYSEC-2026-3038, GHSA-mj87-hwqh-73pj","path":"homework-01/tommasoNocchi/backend/requirements.txt","line":null,"fingerprint":"python-multipart@0.0.9 (PyPI):GHSA-mj87-hwqh-73pj"},{"rule_id":"osv/GHSA-q2hr-2g5m-vwhr","severity":"medium","message":"brace-expansion@2.1.2 (npm) is affected by GHSA-q2hr-2g5m-vwhr","path":"homework-04/package-lock.json","line":null,"fingerprint":"brace-expansion@2.1.2 (npm):GHSA-q2hr-2g5m-vwhr"},{"rule_id":"osv/GHSA-hrr3-gc8f-f4qj","severity":"medium","message":"fast-uri@3.1.3 (npm) is affected by GHSA-hrr3-gc8f-f4qj","path":"homework-04/package-lock.json","line":null,"fingerprint":"fast-uri@3.1.3 (npm):GHSA-hrr3-gc8f-f4qj"},{"rule_id":"osv/GHSA-w74x-v6f9-j3xg","severity":"medium","message":"fast-uri@3.1.3 (npm) is affected by GHSA-w74x-v6f9-j3xg","path":"homework-04/package-lock.json","line":null,"fingerprint":"fast-uri@3.1.3 (npm):GHSA-w74x-v6f9-j3xg"},{"rule_id":"osv/GHSA-wjr9-j795-jxcr","severity":"medium","message":"fast-uri@3.1.3 (npm) is affected by GHSA-wjr9-j795-jxcr","path":"homework-04/package-lock.json","line":null,"fingerprint":"fast-uri@3.1.3 (npm):GHSA-wjr9-j795-jxcr"},{"rule_id":"osv/GHSA-4mjr-xmp4-gh2g","severity":"medium","message":"qs@6.15.3 (npm) is affected by GHSA-4mjr-xmp4-gh2g","path":"homework-04/package-lock.json","line":null,"fingerprint":"qs@6.15.3 (npm):GHSA-4mjr-xmp4-gh2g"},{"rule_id":"osv/GHSA-6pq8-jhm2-2vcw","severity":"medium","message":"qs@6.15.3 (npm) is affected by GHSA-6pq8-jhm2-2vcw","path":"homework-04/package-lock.json","line":null,"fingerprint":"qs@6.15.3 (npm):GHSA-6pq8-jhm2-2vcw"}],"evidence":[],"data":{"ecosystems":["Go","Maven","PyPI","npm"]},"error":null},{"analyzer":"sec-actions","pillar":"security","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-posture","pillar":"security","status":"ok","tool_version":null,"metrics":{"check:security_policy":0.0,"check:dependency_updates":0.0,"check:signed_commits":0.0,"check:lockfiles":0.0,"signed_commit_share":0.4091,"unpinned_manifests":3.0},"findings":[],"evidence":[{"kind":"posture","description":"homework-01/sasero/office-chaos/client/package.json has no lockfile alongside it (unpinned dependencies)","ref":"homework-01/sasero/office-chaos/client/package.json","url":null,"weight":0.3},{"kind":"posture","description":"homework-01/sasero/office-chaos/server/package.json has no lockfile alongside it (unpinned dependencies)","ref":"homework-01/sasero/office-chaos/server/package.json","url":null,"weight":0.3},{"kind":"posture","description":"homework-01/tommasoNocchi/frontend/package.json has no lockfile alongside it (unpinned dependencies)","ref":"homework-01/tommasoNocchi/frontend/package.json","url":null,"weight":0.3}],"data":{},"error":null},{"analyzer":"sec-distribution","pillar":"security","status":"ok","tool_version":null,"metrics":{"signals":0.0,"binary_assets":0.0,"suspicious":0.0},"findings":[],"evidence":[],"data":{"signals":[],"suspicious":false,"unusual_traction":false,"metadata":true},"error":null},{"analyzer":"qual-complexity","pillar":"quality","status":"ok","tool_version":"lizard 1.25.1","metrics":{"functions":2304.0,"function_nloc":23005.0,"mean_ccn":2.6,"p90_ccn":6.0,"complex_functions":21.0,"long_functions":14.0,"many_param_functions":2.0,"risky_nloc_share":0.1182},"findings":[],"evidence":[{"kind":"complex-function","description":"runPipeline in homework-01/federico-liccione/src/lib/pipeline.ts: complexity 44, 102 lines","ref":"homework-01/federico-liccione/src/lib/pipeline.ts","url":"https://github.com/l-baglini/signal42-training-repository/blob/dacbc75ca1a8c9c22f824a05ada09a2b76ca2018/homework-01/federico-liccione/src/lib/pipeline.ts#L23","weight":0.7333333333333333},{"kind":"complex-function","description":"_loop in homework-01/sasero/office-chaos/client/src/game/three/Scene.js: complexity 36, 77 lines","ref":"homework-01/sasero/office-chaos/client/src/game/three/Scene.js","url":"https://github.com/l-baglini/signal42-training-repository/blob/dacbc75ca1a8c9c22f824a05ada09a2b76ca2018/homework-01/sasero/office-chaos/client/src/game/three/Scene.js#L617","weight":0.6},{"kind":"complex-function","description":"makeFurniture in homework-01/sasero/office-chaos/client/src/game/three/catalog.js: complexity 31, 137 lines","ref":"homework-01/sasero/office-chaos/client/src/game/three/catalog.js","url":"https://github.com/l-baglini/signal42-training-repository/blob/dacbc75ca1a8c9c22f824a05ada09a2b76ca2018/homework-01/sasero/office-chaos/client/src/game/three/catalog.js#L58","weight":0.5166666666666667},{"kind":"complex-function","description":"simTick in homework-01/sasero/office-chaos/server/src/game/rooms.js: complexity 29, 44 lines","ref":"homework-01/sasero/office-chaos/server/src/game/rooms.js","url":"https://github.com/l-baglini/signal42-training-repository/blob/dacbc75ca1a8c9c22f824a05ada09a2b76ca2018/homework-01/sasero/office-chaos/server/src/game/rooms.js#L211","weight":0.48333333333333334},{"kind":"complex-function","description":"validateLayout in homework-01/sasero/office-chaos/server/src/game/map.js: complexity 27, 29 lines","ref":"homework-01/sasero/office-chaos/server/src/game/map.js","url":"https://github.com/l-baglini/signal42-training-repository/blob/dacbc75ca1a8c9c22f824a05ada09a2b76ca2018/homework-01/sasero/office-chaos/server/src/game/map.js#L242","weight":0.45},{"kind":"complex-function","description":"RegisterPage in homework-01/tommasoNocchi/frontend/src/pages/auth/RegisterPage.tsx: complexity 27, 184 lines","ref":"homework-01/tommasoNocchi/frontend/src/pages/auth/RegisterPage.tsx","url":"https://github.com/l-baglini/signal42-training-repository/blob/dacbc75ca1a8c9c22f824a05ada09a2b76ca2018/homework-01/tommasoNocchi/frontend/src/pages/auth/RegisterPage.tsx#L31","weight":0.45},{"kind":"complex-function","description":"update in homework-01/matteo/space-invaders/game.js: complexity 26, 74 lines","ref":"homework-01/matteo/space-invaders/game.js","url":"https://github.com/l-baglini/signal42-training-repository/blob/dacbc75ca1a8c9c22f824a05ada09a2b76ca2018/homework-01/matteo/space-invaders/game.js#L407","weight":0.43333333333333335},{"kind":"complex-function","description":"move in homework-01/michele_bertagni/game.js: complexity 24, 30 lines","ref":"homework-01/michele_bertagni/game.js","url":"https://github.com/l-baglini/signal42-training-repository/blob/dacbc75ca1a8c9c22f824a05ada09a2b76ca2018/homework-01/michele_bertagni/game.js#L212","weight":0.4},{"kind":"complex-function","description":"diagnose in homework-01/federico-quaglia/analyzer.py: complexity 23, 60 lines","ref":"homework-01/federico-quaglia/analyzer.py","url":"https://github.com/l-baglini/signal42-training-repository/blob/dacbc75ca1a8c9c22f824a05ada09a2b76ca2018/homework-01/federico-quaglia/analyzer.py#L350","weight":0.38333333333333336},{"kind":"complex-function","description":"draw in homework-01/michele_bertagni/game.js: complexity 23, 43 lines","ref":"homework-01/michele_bertagni/game.js","url":"https://github.com/l-baglini/signal42-training-repository/blob/dacbc75ca1a8c9c22f824a05ada09a2b76ca2018/homework-01/michele_bertagni/game.js#L293","weight":0.38333333333333336}],"data":{},"error":null},{"analyzer":"qual-duplication","pillar":"quality","status":"ok","tool_version":"repotrust-dup-w6","metrics":{"compared_lines":31421.0,"duplicated_lines":751.0,"duplicated_share":0.0239,"files":416.0},"findings":[],"evidence":[{"kind":"duplicate-code","description":"6+ duplicated lines: homework-01/diego-tomba/app/api/repos/[id]/route.ts:13 and homework-01/diego-tomba/app/api/repos/route.ts:15","ref":"homework-01/diego-tomba/app/api/repos/[id]/route.ts","url":"https://github.com/l-baglini/signal42-training-repository/blob/dacbc75ca1a8c9c22f824a05ada09a2b76ca2018/homework-01/diego-tomba/app/api/repos/[id]/route.ts#L13","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: homework-01/diego-tomba/components/charts/spend-over-time.tsx:57 and homework-01/diego-tomba/components/charts/usage-by-task.tsx:53","ref":"homework-01/diego-tomba/components/charts/spend-over-time.tsx","url":"https://github.com/l-baglini/signal42-training-repository/blob/dacbc75ca1a8c9c22f824a05ada09a2b76ca2018/homework-01/diego-tomba/components/charts/spend-over-time.tsx#L57","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: homework-01/diego-tomba/components/tabs/prompts-tab.tsx:109 and homework-01/diego-tomba/components/tabs/repos-tab.tsx:178","ref":"homework-01/diego-tomba/components/tabs/prompts-tab.tsx","url":"https://github.com/l-baglini/signal42-training-repository/blob/dacbc75ca1a8c9c22f824a05ada09a2b76ca2018/homework-01/diego-tomba/components/tabs/prompts-tab.tsx#L109","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: homework-01/diego-tomba/lib/api-client.ts:14 and homework-01/diego-tomba/src/infrastructure/persistence/prisma/prisma-watched-repo.repository.ts:17","ref":"homework-01/diego-tomba/lib/api-client.ts","url":"https://github.com/l-baglini/signal42-training-repository/blob/dacbc75ca1a8c9c22f824a05ada09a2b76ca2018/homework-01/diego-tomba/lib/api-client.ts#L14","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: homework-01/diego-tomba/lib/server-container.ts:25 and homework-01/diego-tomba/worker/scheduler.ts:27","ref":"homework-01/diego-tomba/lib/server-container.ts","url":"https://github.com/l-baglini/signal42-training-repository/blob/dacbc75ca1a8c9c22f824a05ada09a2b76ca2018/homework-01/diego-tomba/lib/server-container.ts#L25","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: homework-01/diego-tomba/prisma/migrations/20260618133303_init/migration.sql:29 and homework-01/diego-tomba/prisma/migrations/20260618144429_report_token_usage/migration.sql:5","ref":"homework-01/diego-tomba/prisma/migrations/20260618133303_init/migration.sql","url":"https://github.com/l-baglini/signal42-training-repository/blob/dacbc75ca1a8c9c22f824a05ada09a2b76ca2018/homework-01/diego-tomba/prisma/migrations/20260618133303_init/migration.sql#L29","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: homework-01/diego-tomba/src/domain/entities/estimate.ts:6 and homework-01/diego-tomba/src/domain/services/estimator.service.ts:8","ref":"homework-01/diego-tomba/src/domain/entities/estimate.ts","url":"https://github.com/l-baglini/signal42-training-repository/blob/dacbc75ca1a8c9c22f824a05ada09a2b76ca2018/homework-01/diego-tomba/src/domain/entities/estimate.ts#L6","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: homework-01/diego-tomba/src/infrastructure/github/octokit-git-platform.adapter.ts:74 and homework-01/diego-tomba/src/infrastructure/github/octokit-git-platform.adapter.ts:126","ref":"homework-01/diego-tomba/src/infrastructure/github/octokit-git-platform.adapter.ts","url":"https://github.com/l-baglini/signal42-training-repository/blob/dacbc75ca1a8c9c22f824a05ada09a2b76ca2018/homework-01/diego-tomba/src/infrastructure/github/octokit-git-platform.adapter.ts#L74","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: homework-01/f-pettrone/maze-cli-escape/lib/input_reader.dart:72 and homework-01/f-pettrone/maze-cli-escape/lib/input_reader.dart:83","ref":"homework-01/f-pettrone/maze-cli-escape/lib/input_reader.dart","url":"https://github.com/l-baglini/signal42-training-repository/blob/dacbc75ca1a8c9c22f824a05ada09a2b76ca2018/homework-01/f-pettrone/maze-cli-escape/lib/input_reader.dart#L72","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: homework-01/federico-liccione/scripts/dedup-mit.ts:6 and homework-01/federico-liccione/scripts/regeocode.ts:8","ref":"homework-01/federico-liccione/scripts/dedup-mit.ts","url":"https://github.com/l-baglini/signal42-training-repository/blob/dacbc75ca1a8c9c22f824a05ada09a2b76ca2018/homework-01/federico-liccione/scripts/dedup-mit.ts#L6","weight":0.3}],"data":{},"error":null},{"analyzer":"qual-lint","pillar":"quality","status":"ok","tool_version":"opengrep 1.33.1; rules f1d2b562b414","metrics":{"findings":118.0,"weighted_findings":129.75,"scanned_lines":41903.0,"category:best-practice":70.0,"category:correctness":16.0,"category:maintainability":32.0},"findings":[{"rule_id":"opengrep/python.lang.maintainability.useless-inner-function","severity":"high","message":"function `_refresh_display` is defined inside a function but never used","path":"homework-01/mlucchesi/workbreak/modules/dashboard.py","line":454,"fingerprint":"python.lang.maintainability.useless-inner-function:homework-01/mlucchesi/workbreak/modules/dashboard.py:454"},{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"homework-01/mlucchesi/workbreak/modules/lock_screen.py","line":193,"fingerprint":"python.lang.best-practice.arbitrary-sleep:homework-01/mlucchesi/workbreak/modules/lock_screen.py:193"},{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"homework-01/mlucchesi/workbreak/modules/lock_screen.py","line":253,"fingerprint":"python.lang.best-practice.arbitrary-sleep:homework-01/mlucchesi/workbreak/modules/lock_screen.py:253"},{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"homework-01/mlucchesi/workbreak/modules/lock_screen.py","line":817,"fingerprint":"python.lang.best-practice.arbitrary-sleep:homework-01/mlucchesi/workbreak/modules/lock_screen.py:817"},{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"homework-01/mlucchesi/workbreak/modules/lock_screen.py","line":852,"fingerprint":"python.lang.best-practice.arbitrary-sleep:homework-01/mlucchesi/workbreak/modules/lock_screen.py:852"},{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"homework-01/mlucchesi/workbreak/modules/timer_engine.py","line":109,"fingerprint":"python.lang.best-practice.arbitrary-sleep:homework-01/mlucchesi/workbreak/modules/timer_engine.py:109"},{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"homework-01/mlucchesi/workbreak/modules/timer_engine.py","line":150,"fingerprint":"python.lang.best-practice.arbitrary-sleep:homework-01/mlucchesi/workbreak/modules/timer_engine.py:150"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"homework-01/diego-tomba/components/ui/button.tsx","line":39,"fingerprint":"typescript.react.best-practice.react-props-spreading:homework-01/diego-tomba/components/ui/button.tsx:39"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"homework-01/diego-tomba/components/ui/card.tsx","line":14,"fingerprint":"typescript.react.best-practice.react-props-spreading:homework-01/diego-tomba/components/ui/card.tsx:14"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"homework-01/diego-tomba/components/ui/card.tsx","line":23,"fingerprint":"typescript.react.best-practice.react-props-spreading:homework-01/diego-tomba/components/ui/card.tsx:23"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"homework-01/diego-tomba/components/ui/card.tsx","line":33,"fingerprint":"typescript.react.best-practice.react-props-spreading:homework-01/diego-tomba/components/ui/card.tsx:33"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"homework-01/diego-tomba/components/ui/card.tsx","line":43,"fingerprint":"typescript.react.best-practice.react-props-spreading:homework-01/diego-tomba/components/ui/card.tsx:43"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"homework-01/diego-tomba/components/ui/card.tsx","line":51,"fingerprint":"typescript.react.best-practice.react-props-spreading:homework-01/diego-tomba/components/ui/card.tsx:51"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"homework-01/diego-tomba/components/ui/input.tsx","line":11,"fingerprint":"typescript.react.best-practice.react-props-spreading:homework-01/diego-tomba/components/ui/input.tsx:11"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"homework-01/diego-tomba/components/ui/input.tsx","line":22,"fingerprint":"typescript.react.best-practice.react-props-spreading:homework-01/diego-tomba/components/ui/input.tsx:22"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"homework-01/diego-tomba/components/ui/input.tsx","line":37,"fingerprint":"typescript.react.best-practice.react-props-spreading:homework-01/diego-tomba/components/ui/input.tsx:37"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"homework-01/diego-tomba/components/ui/misc.tsx","line":26,"fingerprint":"typescript.react.best-practice.react-props-spreading:homework-01/diego-tomba/components/ui/misc.tsx:26"},{"rule_id":"opengrep/javascript.lang.correctness.no-stringify-keys","severity":"medium","message":"JSON stringify does not produce a stable key ordering, and should not be relied on for producing object keys. Consider using json-stable-stringify instead.","path":"homework-01/diego-tomba/src/infrastructure/ai/claude-narrator.adapter.ts","line":166,"fingerprint":"javascript.lang.correctness.no-stringify-keys:homework-01/diego-tomba/src/infrastructure/ai/claude-narrator.adapter.ts:166"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-alert","severity":"medium","message":"found alert() call; should this be in production code?","path":"homework-01/federico-liccione/src/app/admin/page.tsx","line":82,"fingerprint":"javascript.lang.best-practice.javascript-alert:homework-01/federico-liccione/src/app/admin/page.tsx:82"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-alert","severity":"medium","message":"found alert() call; should this be in production code?","path":"homework-01/federico-liccione/src/app/admin/page.tsx","line":105,"fingerprint":"javascript.lang.best-practice.javascript-alert:homework-01/federico-liccione/src/app/admin/page.tsx:105"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-in-state","severity":"medium","message":"Copying a prop into state in React -- this is bad practice as all updates to it are ignored. Instead, read props directly in your component and avoid copying props into state.","path":"homework-01/federico-liccione/src/app/page.tsx","line":16,"fingerprint":"typescript.react.best-practice.react-props-in-state:homework-01/federico-liccione/src/app/page.tsx:16"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.string-concat-in-list","severity":"medium","message":"Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list?","path":"homework-01/flavio/word_banks.py","line":43,"fingerprint":"python.lang.correctness.common-mistakes.string-concat-in-list:homework-01/flavio/word_banks.py:43"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.string-concat-in-list","severity":"medium","message":"Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list?","path":"homework-01/flavio/word_banks.py","line":45,"fingerprint":"python.lang.correctness.common-mistakes.string-concat-in-list:homework-01/flavio/word_banks.py:45"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.string-concat-in-list","severity":"medium","message":"Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list?","path":"homework-01/flavio/word_banks.py","line":47,"fingerprint":"python.lang.correctness.common-mistakes.string-concat-in-list:homework-01/flavio/word_banks.py:47"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.string-concat-in-list","severity":"medium","message":"Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list?","path":"homework-01/flavio/word_banks.py","line":55,"fingerprint":"python.lang.correctness.common-mistakes.string-concat-in-list:homework-01/flavio/word_banks.py:55"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.string-concat-in-list","severity":"medium","message":"Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list?","path":"homework-01/flavio/word_banks.py","line":59,"fingerprint":"python.lang.correctness.common-mistakes.string-concat-in-list:homework-01/flavio/word_banks.py:59"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.string-concat-in-list","severity":"medium","message":"Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list?","path":"homework-01/flavio/word_banks.py","line":64,"fingerprint":"python.lang.correctness.common-mistakes.string-concat-in-list:homework-01/flavio/word_banks.py:64"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.string-concat-in-list","severity":"medium","message":"Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list?","path":"homework-01/flavio/word_banks.py","line":66,"fingerprint":"python.lang.correctness.common-mistakes.string-concat-in-list:homework-01/flavio/word_banks.py:66"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.string-concat-in-list","severity":"medium","message":"Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list?","path":"homework-01/flavio/word_banks.py","line":68,"fingerprint":"python.lang.correctness.common-mistakes.string-concat-in-list:homework-01/flavio/word_banks.py:68"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.string-concat-in-list","severity":"medium","message":"Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list?","path":"homework-01/flavio/word_banks.py","line":92,"fingerprint":"python.lang.correctness.common-mistakes.string-concat-in-list:homework-01/flavio/word_banks.py:92"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.string-concat-in-list","severity":"medium","message":"Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list?","path":"homework-01/flavio/word_banks.py","line":95,"fingerprint":"python.lang.correctness.common-mistakes.string-concat-in-list:homework-01/flavio/word_banks.py:95"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.string-concat-in-list","severity":"medium","message":"Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list?","path":"homework-01/flavio/word_banks.py","line":100,"fingerprint":"python.lang.correctness.common-mistakes.string-concat-in-list:homework-01/flavio/word_banks.py:100"},{"rule_id":"opengrep/python.lang.correctness.common-mistakes.string-concat-in-list","severity":"medium","message":"Detected strings that are implicitly concatenated inside a list. Python will implicitly concatenate strings when not explicitly delimited. Was this supposed to be individual elements of the list?","path":"homework-01/flavio/word_banks.py","line":106,"fingerprint":"python.lang.correctness.common-mistakes.string-concat-in-list:homework-01/flavio/word_banks.py:106"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"homework-01/marioben/code-lens/.claude/skills/frontend-slides/scripts/extract-pptx.py","line":90,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:homework-01/marioben/code-lens/.claude/skills/frontend-slides/scripts/extract-pptx.py:90"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"homework-01/mlucchesi/workbreak/modules/dashboard.py","line":348,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:homework-01/mlucchesi/workbreak/modules/dashboard.py:348"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_on_break\" a function or an attribute? If it is a function, you may have meant self.state.is_on_break() because self.state.is_on_break is always true.","path":"homework-01/mlucchesi/workbreak/modules/lock_screen.py","line":444,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:homework-01/mlucchesi/workbreak/modules/lock_screen.py:444"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_meeting\" a function or an attribute? If it is a function, you may have meant self.state.is_meeting() because self.state.is_meeting is always true.","path":"homework-01/mlucchesi/workbreak/modules/lock_screen.py","line":895,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:homework-01/mlucchesi/workbreak/modules/lock_screen.py:895"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_on_break\" a function or an attribute? If it is a function, you may have meant self.state.is_on_break() because self.state.is_on_break is always true.","path":"homework-01/mlucchesi/workbreak/modules/lock_screen.py","line":912,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:homework-01/mlucchesi/workbreak/modules/lock_screen.py:912"},{"rule_id":"opengrep/python.lang.maintainability.return-not-in-function","severity":"medium","message":"`return` only makes sense inside a function","path":"homework-01/mlucchesi/workbreak/modules/state.py","line":44,"fingerprint":"python.lang.maintainability.return-not-in-function:homework-01/mlucchesi/workbreak/modules/state.py:44"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_working\" a function or an attribute? If it is a function, you may have meant self.is_working() because self.is_working is always true.","path":"homework-01/mlucchesi/workbreak/modules/state.py","line":61,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:homework-01/mlucchesi/workbreak/modules/state.py:61"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_on_break\" a function or an attribute? If it is a function, you may have meant self.is_on_break() because self.is_on_break is always true.","path":"homework-01/mlucchesi/workbreak/modules/state.py","line":62,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:homework-01/mlucchesi/workbreak/modules/state.py:62"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_meeting\" a function or an attribute? If it is a function, you may have meant self.is_meeting() because self.is_meeting is always true.","path":"homework-01/mlucchesi/workbreak/modules/state.py","line":63,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:homework-01/mlucchesi/workbreak/modules/state.py:63"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"homework-01/mlucchesi/workbreak/modules/state.py","line":78,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:homework-01/mlucchesi/workbreak/modules/state.py:78"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"homework-01/mlucchesi/workbreak/modules/state.py","line":112,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:homework-01/mlucchesi/workbreak/modules/state.py:112"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_meeting\" a function or an attribute? If it is a function, you may have meant self.is_meeting() because self.is_meeting is always true.","path":"homework-01/mlucchesi/workbreak/modules/state.py","line":155,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:homework-01/mlucchesi/workbreak/modules/state.py:155"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_meeting\" a function or an attribute? If it is a function, you may have meant self.state.is_meeting() because self.state.is_meeting is always true.","path":"homework-01/mlucchesi/workbreak/modules/timer_engine.py","line":210,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:homework-01/mlucchesi/workbreak/modules/timer_engine.py:210"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_meeting\" a function or an attribute? If it is a function, you may have meant self.state.is_meeting() because self.state.is_meeting is always true.","path":"homework-01/mlucchesi/workbreak/modules/tray.py","line":56,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:homework-01/mlucchesi/workbreak/modules/tray.py:56"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_meeting\" a function or an attribute? If it is a function, you may have meant self.state.is_meeting() because self.state.is_meeting is always true.","path":"homework-01/mlucchesi/workbreak/modules/tray.py","line":56,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:homework-01/mlucchesi/workbreak/modules/tray.py:56"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_meeting\" a function or an attribute? If it is a function, you may have meant self.state.is_meeting() because self.state.is_meeting is always true.","path":"homework-01/mlucchesi/workbreak/modules/tray.py","line":57,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:homework-01/mlucchesi/workbreak/modules/tray.py:57"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_meeting\" a function or an attribute? If it is a function, you may have meant self.state.is_meeting() because self.state.is_meeting is always true.","path":"homework-01/mlucchesi/workbreak/modules/tray.py","line":58,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:homework-01/mlucchesi/workbreak/modules/tray.py:58"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_meeting\" a function or an attribute? If it is a function, you may have meant self.state.is_meeting() because self.state.is_meeting is always true.","path":"homework-01/mlucchesi/workbreak/modules/tray.py","line":71,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:homework-01/mlucchesi/workbreak/modules/tray.py:71"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_read\" a function or an attribute? If it is a function, you may have meant finding.read_state.is_read() because finding.read_state.is_read is always true.","path":"homework-01/rosario/gatherer/backend/app/api/routes.py","line":118,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:homework-01/rosario/gatherer/backend/app/api/routes.py:118"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_read\" a function or an attribute? If it is a function, you may have meant body.is_read() because body.is_read is always true.","path":"homework-01/rosario/gatherer/backend/app/api/routes.py","line":134,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:homework-01/rosario/gatherer/backend/app/api/routes.py:134"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_read\" a function or an attribute? If it is a function, you may have meant ReadState.is_read() because ReadState.is_read is always true.","path":"homework-01/rosario/gatherer/backend/app/db/repositories.py","line":28,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:homework-01/rosario/gatherer/backend/app/db/repositories.py:28"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_current\" a function or an attribute? If it is a function, you may have meant Digest.is_current() because Digest.is_current is always true.","path":"homework-01/rosario/gatherer/backend/app/db/repositories.py","line":73,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:homework-01/rosario/gatherer/backend/app/db/repositories.py:73"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_read\" a function or an attribute? If it is a function, you may have meant ReadState.is_read() because ReadState.is_read is always true.","path":"homework-01/rosario/gatherer/backend/app/db/repositories.py","line":78,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:homework-01/rosario/gatherer/backend/app/db/repositories.py:78"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_current\" a function or an attribute? If it is a function, you may have meant Digest.is_current() because Digest.is_current is always true.","path":"homework-01/rosario/gatherer/backend/app/db/repositories.py","line":109,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:homework-01/rosario/gatherer/backend/app/db/repositories.py:109"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_read\" a function or an attribute? If it is a function, you may have meant rs.is_read() because rs.is_read is always true.","path":"homework-01/rosario/gatherer/backend/app/db/repositories.py","line":126,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:homework-01/rosario/gatherer/backend/app/db/repositories.py:126"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_current\" a function or an attribute? If it is a function, you may have meant Digest.is_current() because Digest.is_current is always true.","path":"homework-01/rosario/gatherer/backend/app/db/repositories.py","line":206,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:homework-01/rosario/gatherer/backend/app/db/repositories.py:206"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-confirm","severity":"medium","message":"found confirm() call; should this be in production code?","path":"homework-01/rosario/gatherer/frontend/src/components/Sidebar.tsx","line":71,"fingerprint":"javascript.lang.best-practice.javascript-confirm:homework-01/rosario/gatherer/frontend/src/components/Sidebar.tsx:71"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-in-state","severity":"medium","message":"Copying a prop into state in React -- this is bad practice as all updates to it are ignored. Instead, read props directly in your component and avoid copying props into state.","path":"homework-01/sasero/office-chaos/client/src/hud/OnboardingModal.jsx","line":6,"fingerprint":"typescript.react.best-practice.react-props-in-state:homework-01/sasero/office-chaos/client/src/hud/OnboardingModal.jsx:6"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_active\" a function or an attribute? If it is a function, you may have meant user.is_active() because user.is_active is always true.","path":"homework-01/tommasoNocchi/backend/app/dependencies/auth.py","line":39,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:homework-01/tommasoNocchi/backend/app/dependencies/auth.py:39"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_available\" a function or an attribute? If it is a function, you may have meant slot.is_available() because slot.is_available is always true.","path":"homework-01/tommasoNocchi/backend/app/routers/appointments.py","line":94,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:homework-01/tommasoNocchi/backend/app/routers/appointments.py:94"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_available\" a function or an attribute? If it is a function, you may have meant slot.is_available() because slot.is_available is always true.","path":"homework-01/tommasoNocchi/backend/app/routers/appointments.py","line":114,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:homework-01/tommasoNocchi/backend/app/routers/appointments.py:114"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_available\" a function or an attribute? If it is a function, you may have meant slot.is_available() because slot.is_available is always true.","path":"homework-01/tommasoNocchi/backend/app/routers/appointments.py","line":218,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:homework-01/tommasoNocchi/backend/app/routers/appointments.py:218"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_active\" a function or an attribute? If it is a function, you may have meant user.is_active() because user.is_active is always true.","path":"homework-01/tommasoNocchi/backend/app/routers/auth.py","line":54,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:homework-01/tommasoNocchi/backend/app/routers/auth.py:54"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_active\" a function or an attribute? If it is a function, you may have meant user.is_active() because user.is_active is always true.","path":"homework-01/tommasoNocchi/backend/app/routers/auth.py","line":98,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:homework-01/tommasoNocchi/backend/app/routers/auth.py:98"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_active\" a function or an attribute? If it is a function, you may have meant User.is_active() because User.is_active is always true.","path":"homework-01/tommasoNocchi/backend/app/routers/doctors.py","line":57,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:homework-01/tommasoNocchi/backend/app/routers/doctors.py:57"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_available\" a function or an attribute? If it is a function, you may have meant Slot.is_available() because Slot.is_available is always true.","path":"homework-01/tommasoNocchi/backend/app/routers/doctors.py","line":87,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:homework-01/tommasoNocchi/backend/app/routers/doctors.py:87"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_available\" a function or an attribute? If it is a function, you may have meant Slot.is_available() because Slot.is_available is always true.","path":"homework-01/tommasoNocchi/backend/app/routers/slots.py","line":50,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:homework-01/tommasoNocchi/backend/app/routers/slots.py:50"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"homework-01/tommasoNocchi/frontend/src/components/ui/badge.tsx","line":25,"fingerprint":"typescript.react.best-practice.react-props-spreading:homework-01/tommasoNocchi/frontend/src/components/ui/badge.tsx:25"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"homework-01/tommasoNocchi/frontend/src/components/ui/button.tsx","line":36,"fingerprint":"typescript.react.best-practice.react-props-spreading:homework-01/tommasoNocchi/frontend/src/components/ui/button.tsx:36"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"homework-01/tommasoNocchi/frontend/src/components/ui/card.tsx","line":5,"fingerprint":"typescript.react.best-practice.react-props-spreading:homework-01/tommasoNocchi/frontend/src/components/ui/card.tsx:5"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"homework-01/tommasoNocchi/frontend/src/components/ui/card.tsx","line":10,"fingerprint":"typescript.react.best-practice.react-props-spreading:homework-01/tommasoNocchi/frontend/src/components/ui/card.tsx:10"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"homework-01/tommasoNocchi/frontend/src/components/ui/card.tsx","line":15,"fingerprint":"typescript.react.best-practice.react-props-spreading:homework-01/tommasoNocchi/frontend/src/components/ui/card.tsx:15"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"homework-01/tommasoNocchi/frontend/src/components/ui/card.tsx","line":20,"fingerprint":"typescript.react.best-practice.react-props-spreading:homework-01/tommasoNocchi/frontend/src/components/ui/card.tsx:20"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"homework-01/tommasoNocchi/frontend/src/components/ui/card.tsx","line":25,"fingerprint":"typescript.react.best-practice.react-props-spreading:homework-01/tommasoNocchi/frontend/src/components/ui/card.tsx:25"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"homework-01/tommasoNocchi/frontend/src/components/ui/card.tsx","line":30,"fingerprint":"typescript.react.best-practice.react-props-spreading:homework-01/tommasoNocchi/frontend/src/components/ui/card.tsx:30"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"homework-01/tommasoNocchi/frontend/src/components/ui/dialog.tsx","line":18,"fingerprint":"typescript.react.best-practice.react-props-spreading:homework-01/tommasoNocchi/frontend/src/components/ui/dialog.tsx:18"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"homework-01/tommasoNocchi/frontend/src/components/ui/dialog.tsx","line":35,"fingerprint":"typescript.react.best-practice.react-props-spreading:homework-01/tommasoNocchi/frontend/src/components/ui/dialog.tsx:35"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"homework-01/tommasoNocchi/frontend/src/components/ui/dialog.tsx","line":48,"fingerprint":"typescript.react.best-practice.react-props-spreading:homework-01/tommasoNocchi/frontend/src/components/ui/dialog.tsx:48"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"homework-01/tommasoNocchi/frontend/src/components/ui/dialog.tsx","line":53,"fingerprint":"typescript.react.best-practice.react-props-spreading:homework-01/tommasoNocchi/frontend/src/components/ui/dialog.tsx:53"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"homework-01/tommasoNocchi/frontend/src/components/ui/dialog.tsx","line":61,"fingerprint":"typescript.react.best-practice.react-props-spreading:homework-01/tommasoNocchi/frontend/src/components/ui/dialog.tsx:61"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"homework-01/tommasoNocchi/frontend/src/components/ui/dialog.tsx","line":69,"fingerprint":"typescript.react.best-practice.react-props-spreading:homework-01/tommasoNocchi/frontend/src/components/ui/dialog.tsx:69"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"homework-01/tommasoNocchi/frontend/src/components/ui/input.tsx","line":15,"fingerprint":"typescript.react.best-practice.react-props-spreading:homework-01/tommasoNocchi/frontend/src/components/ui/input.tsx:15"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"homework-01/tommasoNocchi/frontend/src/components/ui/label.tsx","line":12,"fingerprint":"typescript.react.best-practice.react-props-spreading:homework-01/tommasoNocchi/frontend/src/components/ui/label.tsx:12"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"homework-01/tommasoNocchi/frontend/src/components/ui/select.tsx","line":20,"fingerprint":"typescript.react.best-practice.react-props-spreading:homework-01/tommasoNocchi/frontend/src/components/ui/select.tsx:20"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"homework-01/tommasoNocchi/frontend/src/components/ui/select.tsx","line":43,"fingerprint":"typescript.react.best-practice.react-props-spreading:homework-01/tommasoNocchi/frontend/src/components/ui/select.tsx:43"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"homework-01/tommasoNocchi/frontend/src/components/ui/select.tsx","line":63,"fingerprint":"typescript.react.best-practice.react-props-spreading:homework-01/tommasoNocchi/frontend/src/components/ui/select.tsx:63"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"homework-01/tommasoNocchi/frontend/src/components/ui/select.tsx","line":79,"fingerprint":"typescript.react.best-practice.react-props-spreading:homework-01/tommasoNocchi/frontend/src/components/ui/select.tsx:79"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"homework-01/tommasoNocchi/frontend/src/components/ui/select.tsx","line":87,"fingerprint":"typescript.react.best-practice.react-props-spreading:homework-01/tommasoNocchi/frontend/src/components/ui/select.tsx:87"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"homework-01/tommasoNocchi/frontend/src/components/ui/tabs.tsx","line":14,"fingerprint":"typescript.react.best-practice.react-props-spreading:homework-01/tommasoNocchi/frontend/src/components/ui/tabs.tsx:14"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"homework-01/tommasoNocchi/frontend/src/components/ui/tabs.tsx","line":29,"fingerprint":"typescript.react.best-practice.react-props-spreading:homework-01/tommasoNocchi/frontend/src/components/ui/tabs.tsx:29"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"homework-01/tommasoNocchi/frontend/src/components/ui/tabs.tsx","line":41,"fingerprint":"typescript.react.best-practice.react-props-spreading:homework-01/tommasoNocchi/frontend/src/components/ui/tabs.tsx:41"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"homework-01/tommasoNocchi/frontend/src/components/ui/textarea.tsx","line":14,"fingerprint":"typescript.react.best-practice.react-props-spreading:homework-01/tommasoNocchi/frontend/src/components/ui/textarea.tsx:14"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"homework-01/tommasoNocchi/frontend/src/pages/auth/LoginPage.tsx","line":62,"fingerprint":"typescript.react.best-practice.react-props-spreading:homework-01/tommasoNocchi/frontend/src/pages/auth/LoginPage.tsx:62"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"homework-01/tommasoNocchi/frontend/src/pages/auth/LoginPage.tsx","line":67,"fingerprint":"typescript.react.best-practice.react-props-spreading:homework-01/tommasoNocchi/frontend/src/pages/auth/LoginPage.tsx:67"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"homework-01/tommasoNocchi/frontend/src/pages/auth/RegisterPage.tsx","line":170,"fingerprint":"typescript.react.best-practice.react-props-spreading:homework-01/tommasoNocchi/frontend/src/pages/auth/RegisterPage.tsx:170"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"homework-01/tommasoNocchi/frontend/src/pages/auth/RegisterPage.tsx","line":175,"fingerprint":"typescript.react.best-practice.react-props-spreading:homework-01/tommasoNocchi/frontend/src/pages/auth/RegisterPage.tsx:175"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"homework-01/tommasoNocchi/frontend/src/pages/auth/RegisterPage.tsx","line":181,"fingerprint":"typescript.react.best-practice.react-props-spreading:homework-01/tommasoNocchi/frontend/src/pages/auth/RegisterPage.tsx:181"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"homework-01/tommasoNocchi/frontend/src/pages/auth/RegisterPage.tsx","line":186,"fingerprint":"typescript.react.best-practice.react-props-spreading:homework-01/tommasoNocchi/frontend/src/pages/auth/RegisterPage.tsx:186"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"homework-01/tommasoNocchi/frontend/src/pages/auth/RegisterPage.tsx","line":191,"fingerprint":"typescript.react.best-practice.react-props-spreading:homework-01/tommasoNocchi/frontend/src/pages/auth/RegisterPage.tsx:191"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"homework-01/tommasoNocchi/frontend/src/pages/auth/RegisterPage.tsx","line":196,"fingerprint":"typescript.react.best-practice.react-props-spreading:homework-01/tommasoNocchi/frontend/src/pages/auth/RegisterPage.tsx:196"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"homework-01/tommasoNocchi/frontend/src/pages/auth/RegisterPage.tsx","line":214,"fingerprint":"typescript.react.best-practice.react-props-spreading:homework-01/tommasoNocchi/frontend/src/pages/auth/RegisterPage.tsx:214"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"homework-01/tommasoNocchi/frontend/src/pages/auth/RegisterPage.tsx","line":219,"fingerprint":"typescript.react.best-practice.react-props-spreading:homework-01/tommasoNocchi/frontend/src/pages/auth/RegisterPage.tsx:219"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"homework-01/tommasoNocchi/frontend/src/pages/auth/RegisterPage.tsx","line":225,"fingerprint":"typescript.react.best-practice.react-props-spreading:homework-01/tommasoNocchi/frontend/src/pages/auth/RegisterPage.tsx:225"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"homework-01/tommasoNocchi/frontend/src/pages/auth/RegisterPage.tsx","line":230,"fingerprint":"typescript.react.best-practice.react-props-spreading:homework-01/tommasoNocchi/frontend/src/pages/auth/RegisterPage.tsx:230"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"homework-01/tommasoNocchi/frontend/src/pages/auth/RegisterPage.tsx","line":235,"fingerprint":"typescript.react.best-practice.react-props-spreading:homework-01/tommasoNocchi/frontend/src/pages/auth/RegisterPage.tsx:235"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"homework-01/tommasoNocchi/frontend/src/pages/auth/RegisterPage.tsx","line":240,"fingerprint":"typescript.react.best-practice.react-props-spreading:homework-01/tommasoNocchi/frontend/src/pages/auth/RegisterPage.tsx:240"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"homework-01/tommasoNocchi/frontend/src/pages/auth/RegisterPage.tsx","line":257,"fingerprint":"typescript.react.best-practice.react-props-spreading:homework-01/tommasoNocchi/frontend/src/pages/auth/RegisterPage.tsx:257"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"homework-01/tommasoNocchi/frontend/src/pages/auth/RegisterPage.tsx","line":272,"fingerprint":"typescript.react.best-practice.react-props-spreading:homework-01/tommasoNocchi/frontend/src/pages/auth/RegisterPage.tsx:272"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"homework-01/tommasoNocchi/frontend/src/pages/auth/RegisterPage.tsx","line":276,"fingerprint":"typescript.react.best-practice.react-props-spreading:homework-01/tommasoNocchi/frontend/src/pages/auth/RegisterPage.tsx:276"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"homework-01/tommasoNocchi/frontend/src/pages/auth/RegisterPage.tsx","line":306,"fingerprint":"typescript.react.best-practice.react-props-spreading:homework-01/tommasoNocchi/frontend/src/pages/auth/RegisterPage.tsx:306"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"homework-01/tommasoNocchi/frontend/src/pages/auth/RegisterPage.tsx","line":310,"fingerprint":"typescript.react.best-practice.react-props-spreading:homework-01/tommasoNocchi/frontend/src/pages/auth/RegisterPage.tsx:310"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"homework-01/tommasoNocchi/frontend/src/pages/auth/RegisterPage.tsx","line":314,"fingerprint":"typescript.react.best-practice.react-props-spreading:homework-01/tommasoNocchi/frontend/src/pages/auth/RegisterPage.tsx:314"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"homework-01/diego-tomba/src/infrastructure/github/octokit-git-platform.adapter.ts","line":190,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:homework-01/diego-tomba/src/infrastructure/github/octokit-git-platform.adapter.ts:190"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"homework-01/tommasoNocchi/frontend/src/pages/patient/BookVisitPage.tsx","line":77,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:homework-01/tommasoNocchi/frontend/src/pages/patient/BookVisitPage.tsx:77"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"homework-01/tommasoNocchi/frontend/src/pages/patient/BookVisitPage.tsx","line":77,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:homework-01/tommasoNocchi/frontend/src/pages/patient/BookVisitPage.tsx:77"}],"evidence":[],"data":{},"error":null},{"analyzer":"qual-testing","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:has_tests":1.0,"check:test_ratio":0.0654,"check:ci_present":0.0,"check:ci_runs_tests":0.0,"check:ci_runs_lint":0.0,"check:tests_cochange":0.7742,"test_lines":1418.0,"source_lines":43353.0,"test_ratio":0.0327,"ci_files":0.0,"cochange_share":0.1935,"cochange_commits":31.0},"findings":[],"evidence":[],"data":{"test_commands":[],"lint_commands":[]},"error":null},{"analyzer":"qual-docs","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:readme":1.0,"check:license":0.0,"check:contributing":0.0,"check:changelog":0.0,"readme_lines":39.0},"findings":[],"evidence":[{"kind":"docs","description":"README.md","ref":"README.md","url":null,"weight":0.0}],"data":{},"error":null},{"analyzer":"qual-type-safety","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:strict_config":0.6,"check:low_escape_density":1.0,"escapes":21.0,"escapes_per_kloc":0.885},"findings":[],"evidence":[{"kind":"typing","description":"TypeScript strict type checking: homework-01/diego-tomba/tsconfig.json","ref":"homework-01/diego-tomba/tsconfig.json","url":null,"weight":0.0}],"data":{},"error":null},{"analyzer":"x-blame","pillar":"ai_provenance","status":"ok","tool_version":"git-blame","metrics":{"ai_lines":10891.0,"other_lines":32462.0,"files_blamed":416.0,"blame_failures":0.0,"quality:ai_findings":12.0,"quality:ai_per_kloc":1.102,"quality:other_findings":106.0,"quality:other_per_kloc":3.265,"quality:ratio":0.34,"security:ai_findings":2.0,"security:ai_per_kloc":0.184,"security:other_findings":50.0,"security:other_per_kloc":1.54,"security:ratio":0.12},"findings":[],"evidence":[],"data":{"sampled":false,"comparable":true},"error":null}],"flags":[]}