{"schema_version":"2","scorer_version":"0.1.0","scoring_version":"prov-5+qual-2+sec-2","generated_at":"2026-11-14T14:52:06.893382Z","repo":{"ref":{"host":"github.com","owner":"prashantkumardagur","name":"chrome-notes-sidebar"},"default_branch":"main","clone_url":"https://github.com/prashantkumardagur/chrome-notes-sidebar.git","html_url":"https://github.com/prashantkumardagur/chrome-notes-sidebar","description":"A side bar chrome extension to write and store notes","stars":1,"forks":0,"is_fork":false,"is_archived":false,"is_private":false,"size_kb":309,"primary_language":"TypeScript","license_spdx":"MIT","created_at":"2026-07-15T16:14:50Z","pushed_at":"2026-07-25T05:09:20Z","security_policy_url":null,"distribution":{"owner_created_at":"2019-08-27T03:41:41Z","owner_type":"User","release_assets":[]}},"commit_sha":"1fdb2aeb8d203a18bbcadaf5a439a592752c000f","profile":{"lines_by_language":{"TypeScript":4300,"Svelte":3457,"JavaScript":5},"files_by_category":{"source":40,"test":22,"docs":9,"config":4,"binary":4,"other":2,"generated":1},"source_lines":5388,"test_lines":2374},"pillars":{"ai_provenance":{"score":100.0,"confidence":0.8,"coverage":1.0,"label":"explicit","breakdown":{"attributed_share":1.0,"suspected_share":0.0,"estimated_share":1.0,"ai_artifacts":1.0,"flagged_work_units":0.0,"flagged_releases":null,"style_index":0.742},"summary":"Explicit AI attribution on 100% of first-party code added; an estimated 100% including velocity signals."},"quality":{"score":76.8,"confidence":0.9,"coverage":1.0,"label":"adequate","breakdown":{"complexity":90.1,"duplication":77.1,"lint":100.0,"testing":52.0,"docs":65.0,"type_safety":100.0,"process":null},"summary":"Code quality is adequate: test-to-source ratio 0.44, no CI test run detected; 3% of function code in complex or long functions; 4% duplicated lines. Weakest area: testing."},"security":{"score":71.0,"confidence":0.85,"coverage":1.0,"label":"adequate","breakdown":{"secrets":100.0,"sast":98.4,"dependencies":32.7,"ci_actions":null,"posture":20.0,"scorecard":null},"summary":"Security posture is adequate: 48 known vulnerabilities in 10 dependencies. Weakest area: posture."}},"analyzer_results":[{"analyzer":"sec-scorecard","pillar":"security","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":"no published OpenSSF Scorecard result for this repo"},{"analyzer":"sec-registry","pillar":"security","status":"ok","tool_version":null,"metrics":{"declared":15.0,"checked":15.0,"missing":0.0,"recent":0.0,"lookup_errors":0.0},"findings":[],"evidence":[],"data":{"phantom":false},"error":null},{"analyzer":"ai-attribution","pillar":"ai_provenance","status":"ok","tool_version":"signatures-v1","metrics":{"commits":40.0,"attributed_commits":38.0,"attributed_commit_share":0.95,"effective_loc":8503.0,"attributed_loc":8503.0,"attributed_loc_share":1.0,"tools_detected":1.0},"findings":[],"evidence":[{"kind":"attribution-summary","description":"Claude Code: 38 attributed commits, 8,503 lines added","ref":null,"url":null,"weight":1.0},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-authored-by: Claude'","ref":"1fdb2aeb8d203a18bbcadaf5a439a592752c000f","url":"https://github.com/prashantkumardagur/chrome-notes-sidebar/commit/1fdb2aeb8d203a18bbcadaf5a439a592752c000f","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-authored-by: Claude'","ref":"ce6de9eae2c455204053bba177f1546676012c18","url":"https://github.com/prashantkumardagur/chrome-notes-sidebar/commit/ce6de9eae2c455204053bba177f1546676012c18","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-authored-by: Claude'","ref":"262cb056aa1bae638cf446c7bbafdc4d50eb7d7a","url":"https://github.com/prashantkumardagur/chrome-notes-sidebar/commit/262cb056aa1bae638cf446c7bbafdc4d50eb7d7a","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-authored-by: Claude'","ref":"f0969064fd569ebb0983286d7c2d8b8fbb28669b","url":"https://github.com/prashantkumardagur/chrome-notes-sidebar/commit/f0969064fd569ebb0983286d7c2d8b8fbb28669b","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-authored-by: Claude'","ref":"703d3c3214e6f2454eca4d4cf1dbfd46a602b554","url":"https://github.com/prashantkumardagur/chrome-notes-sidebar/commit/703d3c3214e6f2454eca4d4cf1dbfd46a602b554","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-authored-by: Claude'","ref":"d640c08bd5255a12cbd4905e503492361dbb4df6","url":"https://github.com/prashantkumardagur/chrome-notes-sidebar/commit/d640c08bd5255a12cbd4905e503492361dbb4df6","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-authored-by: Claude'","ref":"7bd8de9949ce011ab5f2d2e4d25a330ceb4676aa","url":"https://github.com/prashantkumardagur/chrome-notes-sidebar/commit/7bd8de9949ce011ab5f2d2e4d25a330ceb4676aa","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-authored-by: Claude'","ref":"da3fbba77972de48b0914a344ba6e1a3800e7c65","url":"https://github.com/prashantkumardagur/chrome-notes-sidebar/commit/da3fbba77972de48b0914a344ba6e1a3800e7c65","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-authored-by: Claude'","ref":"648ff98784dbdb78c1ef8b59ba3ecdef711d61e1","url":"https://github.com/prashantkumardagur/chrome-notes-sidebar/commit/648ff98784dbdb78c1ef8b59ba3ecdef711d61e1","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-authored-by: Claude'","ref":"5565649759dc53113e98e43db8f9dc7f40df8aa7","url":"https://github.com/prashantkumardagur/chrome-notes-sidebar/commit/5565649759dc53113e98e43db8f9dc7f40df8aa7","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-authored-by: Claude'","ref":"3851fb8e4f79e746f8b9b5ffae2bc019e7341d30","url":"https://github.com/prashantkumardagur/chrome-notes-sidebar/commit/3851fb8e4f79e746f8b9b5ffae2bc019e7341d30","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-authored-by: Claude'","ref":"3b24bca21519485014c357a51d250318db482c78","url":"https://github.com/prashantkumardagur/chrome-notes-sidebar/commit/3b24bca21519485014c357a51d250318db482c78","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-authored-by: Claude'","ref":"425e6443f419143e1d7affca9aadc22739342c27","url":"https://github.com/prashantkumardagur/chrome-notes-sidebar/commit/425e6443f419143e1d7affca9aadc22739342c27","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-authored-by: Claude'","ref":"71ee70bcc25b9828825f5167fc3d434f5fe81770","url":"https://github.com/prashantkumardagur/chrome-notes-sidebar/commit/71ee70bcc25b9828825f5167fc3d434f5fe81770","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-authored-by: Claude'","ref":"54c66928192437fee257b8d584a675b4bd360035","url":"https://github.com/prashantkumardagur/chrome-notes-sidebar/commit/54c66928192437fee257b8d584a675b4bd360035","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-authored-by: Claude'","ref":"52ccca2eafeea8964a585fe1ed641bf44d0a48d3","url":"https://github.com/prashantkumardagur/chrome-notes-sidebar/commit/52ccca2eafeea8964a585fe1ed641bf44d0a48d3","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-authored-by: Claude'","ref":"6a33d308cc49ee17327f5a1f98e7f05bb351bc5e","url":"https://github.com/prashantkumardagur/chrome-notes-sidebar/commit/6a33d308cc49ee17327f5a1f98e7f05bb351bc5e","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-authored-by: Claude'","ref":"5fcbf98ea002d5b12cd357c37542ef3a1c6c8a49","url":"https://github.com/prashantkumardagur/chrome-notes-sidebar/commit/5fcbf98ea002d5b12cd357c37542ef3a1c6c8a49","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-authored-by: Claude'","ref":"47c5a5bf933cc113b25c1051836da0f591033a34","url":"https://github.com/prashantkumardagur/chrome-notes-sidebar/commit/47c5a5bf933cc113b25c1051836da0f591033a34","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-authored-by: Claude'","ref":"d07b64cb6126b15e62b338288dad14597bc5fcea","url":"https://github.com/prashantkumardagur/chrome-notes-sidebar/commit/d07b64cb6126b15e62b338288dad14597bc5fcea","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-authored-by: Claude'","ref":"47f982529896c1f47fa0c9fd2858ce2ea742713f","url":"https://github.com/prashantkumardagur/chrome-notes-sidebar/commit/47f982529896c1f47fa0c9fd2858ce2ea742713f","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"830640c813850c4cda1fd5b581d39578b15ef9d0","url":"https://github.com/prashantkumardagur/chrome-notes-sidebar/commit/830640c813850c4cda1fd5b581d39578b15ef9d0","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-authored-by: Claude'","ref":"47d2592ac2928e4acfe4ef87de6f4e41653870b4","url":"https://github.com/prashantkumardagur/chrome-notes-sidebar/commit/47d2592ac2928e4acfe4ef87de6f4e41653870b4","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"90ff580020962359f06d884d050e2f006472dacb","url":"https://github.com/prashantkumardagur/chrome-notes-sidebar/commit/90ff580020962359f06d884d050e2f006472dacb","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-authored-by: Claude'","ref":"23556dd5017cdb910652aa082e4a215ff6bd2e4a","url":"https://github.com/prashantkumardagur/chrome-notes-sidebar/commit/23556dd5017cdb910652aa082e4a215ff6bd2e4a","weight":0.9}],"data":{"attributed_loc_by_commit":{"50a0f0d8b7e825808ed10d1e4cdb9ac90d13e79c":986,"12c95e97c9855713265d647a1f5765bfdc4e4c46":706,"5627bd5b9f113c3213d529bfbfcd7d314f679e53":0,"9b6ebf7a46e4c27be8f51e9d3142818a358869db":166,"5a6ce201f0b7b4bd2ce4207689668f752071ab78":0,"44c846b6fea55ba1652b4d55f6702c5ccfc23c20":256,"2397040f31cbbe0964b1a63fc18178e644eab80b":438,"437cb18fc2c7cce5cadb308341812d988e5dacb4":97,"b3b3322203bcf66ab8929c8a527e548014d4b35b":331,"776ed5b5211500753dac8a33dbb2d3c4d445636d":422,"3f8d530403365b7815f977560d49af6bf9db26b7":6,"e2e920307831f45271ef2d936e30bac24fa1b466":783,"3566c7fb3d18459c14fc27278b13c880c9318fd9":52,"23556dd5017cdb910652aa082e4a215ff6bd2e4a":86,"90ff580020962359f06d884d050e2f006472dacb":358,"47d2592ac2928e4acfe4ef87de6f4e41653870b4":299,"830640c813850c4cda1fd5b581d39578b15ef9d0":0,"47f982529896c1f47fa0c9fd2858ce2ea742713f":63,"d07b64cb6126b15e62b338288dad14597bc5fcea":64,"47c5a5bf933cc113b25c1051836da0f591033a34":195,"5fcbf98ea002d5b12cd357c37542ef3a1c6c8a49":180,"6a33d308cc49ee17327f5a1f98e7f05bb351bc5e":138,"52ccca2eafeea8964a585fe1ed641bf44d0a48d3":424,"54c66928192437fee257b8d584a675b4bd360035":0,"71ee70bcc25b9828825f5167fc3d434f5fe81770":49,"425e6443f419143e1d7affca9aadc22739342c27":171,"3b24bca21519485014c357a51d250318db482c78":359,"3851fb8e4f79e746f8b9b5ffae2bc019e7341d30":717,"5565649759dc53113e98e43db8f9dc7f40df8aa7":215,"648ff98784dbdb78c1ef8b59ba3ecdef711d61e1":30,"da3fbba77972de48b0914a344ba6e1a3800e7c65":43,"7bd8de9949ce011ab5f2d2e4d25a330ceb4676aa":76,"d640c08bd5255a12cbd4905e503492361dbb4df6":172,"703d3c3214e6f2454eca4d4cf1dbfd46a602b554":331,"f0969064fd569ebb0983286d7c2d8b8fbb28669b":33,"262cb056aa1bae638cf446c7bbafdc4d50eb7d7a":11,"ce6de9eae2c455204053bba177f1546676012c18":149,"1fdb2aeb8d203a18bbcadaf5a439a592752c000f":97},"tools":{"claude-code":{"name":"Claude Code","commits":38,"loc":8503,"first_seen":1784135067,"last_seen":1784956160}},"monthly":{"2026-07":{"loc":8503,"attributed_loc":8503}}},"error":null},{"analyzer":"ai-artifacts","pillar":"ai_provenance","status":"ok","tool_version":"signatures-v1","metrics":{"artifacts":1.0,"workflow_agents":0.0,"tools_configured":1.0,"earliest_adoption":1784135067.0},"findings":[],"evidence":[{"kind":"ai-artifact","description":"CLAUDE.md (claude-code configuration)","ref":"CLAUDE.md","url":"https://github.com/prashantkumardagur/chrome-notes-sidebar/blob/1fdb2aeb8d203a18bbcadaf5a439a592752c000f/CLAUDE.md","weight":0.5}],"data":{"artifacts":[{"tool":"claude-code","path":"CLAUDE.md","added_at":1784135067}],"workflows":[],"tools":["claude-code"]},"error":null},{"analyzer":"ai-velocity","pillar":"ai_provenance","status":"ok","tool_version":"prov-4","metrics":{"work_units":34.0,"flagged_units":0.0,"pre_ai_era_bursts":0.0,"pre_ai_era_measured_loc":0.0,"pre_ai_era_burst_loc":0.0,"measured_loc":8503.0,"flagged_loc":0.0,"flagged_loc_share":0.0,"max_loc_per_hour":1434.0,"median_loc_per_hour":298.0,"pr_timed_units":33.0,"excluded_import_loc":0.0},"findings":[],"evidence":[],"data":{"flagged_loc_by_commit":{},"excluded_import_commits":[]},"error":null},{"analyzer":"ai-release-velocity","pillar":"ai_provenance","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"ai-stylometry","pillar":"ai_provenance","status":"ok","tool_version":null,"metrics":{"lines_scanned":5388.0,"index":0.742,"count:narrated_steps":0.0,"per_kloc:narrated_steps":0.0,"files:narrated_steps":0.0,"count:placeholder":0.0,"per_kloc:placeholder":0.0,"files:placeholder":0.0,"count:emoji_in_code":8.0,"per_kloc:emoji_in_code":1.485,"files:emoji_in_code":5.0,"count:assistant_voice":0.0,"per_kloc:assistant_voice":0.0,"files:assistant_voice":0.0},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-secrets","pillar":"security","status":"ok","tool_version":"gitleaks 8.30.1","metrics":{"secrets_current":0.0,"secrets_history":0.0,"secrets_nonprod":0.0,"secrets_low_confidence":0.0},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-sast","pillar":"security","status":"ok","tool_version":"opengrep 1.33.1; rules f1d2b562b414","metrics":{"findings":1.0,"findings_high":0.0,"findings_medium":1.0,"findings_low":0.0,"weighted_findings":0.25,"scanned_lines":5388.0,"parse_errors":1.0},"findings":[{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-regexp","severity":"medium","message":"RegExp() called with a `query` function argument, this might allow an attacker to cause a Regular Expression Denial-of-Service (ReDoS) within your application as RegExP blocks the main thread. For this reason, it is recommended to use hardcoded regexes instead. If your regex is run on user-controlle [confidence low]","path":"src/lib/search/search.ts","line":83,"fingerprint":"javascript.lang.security.audit.detect-non-literal-regexp:src/lib/search/search.ts:83"}],"evidence":[],"data":{"rulesets":["javascript","typescript"]},"error":null},{"analyzer":"sec-deps","pillar":"security","status":"ok","tool_version":"osv-scanner version: 2.7.1","metrics":{"vulnerable_packages":10.0,"vulnerabilities":48.0,"vulns_critical":1.0,"vulns_high":15.0,"vulns_medium":25.0,"vulns_low":5.0,"vulns_unknown":2.0,"penalty":67.0},"findings":[{"rule_id":"osv/GHSA-cg2g-xh64-v4q7","severity":"critical","message":"dompurify@3.4.12 (npm) is affected by GHSA-cg2g-xh64-v4q7","path":"package-lock.json","line":null,"fingerprint":"dompurify@3.4.12 (npm):GHSA-cg2g-xh64-v4q7"},{"rule_id":"osv/GHSA-j22f-vq7h-c4qm","severity":"high","message":"devalue@5.8.1 (npm) is affected by GHSA-j22f-vq7h-c4qm","path":"package-lock.json","line":null,"fingerprint":"devalue@5.8.1 (npm):GHSA-j22f-vq7h-c4qm"},{"rule_id":"osv/GHSA-mcm9-63f2-9j32","severity":"high","message":"devalue@5.8.1 (npm) is affected by GHSA-mcm9-63f2-9j32","path":"package-lock.json","line":null,"fingerprint":"devalue@5.8.1 (npm):GHSA-mcm9-63f2-9j32"},{"rule_id":"osv/GHSA-r9w8-h9r3-54w4","severity":"high","message":"devalue@5.8.1 (npm) is affected by GHSA-r9w8-h9r3-54w4","path":"package-lock.json","line":null,"fingerprint":"devalue@5.8.1 (npm):GHSA-r9w8-h9r3-54w4"},{"rule_id":"osv/GHSA-x5rw-q4pp-hg5g","severity":"high","message":"devalue@5.8.1 (npm) is affected by GHSA-x5rw-q4pp-hg5g","path":"package-lock.json","line":null,"fingerprint":"devalue@5.8.1 (npm):GHSA-x5rw-q4pp-hg5g"},{"rule_id":"osv/GHSA-mrv2-3pqr-j5jr","severity":"high","message":"dompurify@3.4.12 (npm) is affected by GHSA-mrv2-3pqr-j5jr","path":"package-lock.json","line":null,"fingerprint":"dompurify@3.4.12 (npm):GHSA-mrv2-3pqr-j5jr"},{"rule_id":"osv/GHSA-2v37-7h3g-55p8","severity":"high","message":"nanoid@3.3.16 (npm) is affected by GHSA-2v37-7h3g-55p8","path":"package-lock.json","line":null,"fingerprint":"nanoid@3.3.16 (npm):GHSA-2v37-7h3g-55p8"},{"rule_id":"osv/GHSA-68fv-2mgg-jv7q","severity":"high","message":"source-map-js@1.2.1 (npm) is affected by GHSA-68fv-2mgg-jv7q","path":"package-lock.json","line":null,"fingerprint":"source-map-js@1.2.1 (npm):GHSA-68fv-2mgg-jv7q"},{"rule_id":"osv/GHSA-2m5v-pch6-74hx","severity":"high","message":"undici@7.28.0 (npm) is affected by GHSA-2m5v-pch6-74hx","path":"package-lock.json","line":null,"fingerprint":"undici@7.28.0 (npm):GHSA-2m5v-pch6-74hx"},{"rule_id":"osv/GHSA-4cwx-7wf7-3272","severity":"high","message":"undici@7.28.0 (npm) is affected by GHSA-4cwx-7wf7-3272","path":"package-lock.json","line":null,"fingerprint":"undici@7.28.0 (npm):GHSA-4cwx-7wf7-3272"},{"rule_id":"osv/GHSA-4w7w-5xrc-9h26","severity":"high","message":"undici@7.28.0 (npm) is affected by GHSA-4w7w-5xrc-9h26","path":"package-lock.json","line":null,"fingerprint":"undici@7.28.0 (npm):GHSA-4w7w-5xrc-9h26"},{"rule_id":"osv/GHSA-qrxm-fqhp-jwvm","severity":"high","message":"undici@7.28.0 (npm) is affected by GHSA-qrxm-fqhp-jwvm","path":"package-lock.json","line":null,"fingerprint":"undici@7.28.0 (npm):GHSA-qrxm-fqhp-jwvm"},{"rule_id":"osv/GHSA-rfgv-xxqx-mfg5","severity":"high","message":"undici@7.28.0 (npm) is affected by GHSA-rfgv-xxqx-mfg5","path":"package-lock.json","line":null,"fingerprint":"undici@7.28.0 (npm):GHSA-rfgv-xxqx-mfg5"},{"rule_id":"osv/GHSA-w293-vg96-wgc3","severity":"high","message":"undici@7.28.0 (npm) is affected by GHSA-w293-vg96-wgc3","path":"package-lock.json","line":null,"fingerprint":"undici@7.28.0 (npm):GHSA-w293-vg96-wgc3"},{"rule_id":"osv/GHSA-xjj6-f33q-929c","severity":"high","message":"undici@7.28.0 (npm) is affected by GHSA-xjj6-f33q-929c","path":"package-lock.json","line":null,"fingerprint":"undici@7.28.0 (npm):GHSA-xjj6-f33q-929c"},{"rule_id":"osv/GHSA-587h-7wmj-h5pm","severity":"high","message":"vite@8.1.5 (npm) is affected by GHSA-587h-7wmj-h5pm","path":"package-lock.json","line":null,"fingerprint":"vite@8.1.5 (npm):GHSA-587h-7wmj-h5pm"},{"rule_id":"osv/GHSA-82fw-gwwq-j7x9","severity":"medium","message":"@vitest/mocker@4.1.10 (npm) is affected by GHSA-82fw-gwwq-j7x9","path":"package-lock.json","line":null,"fingerprint":"@vitest/mocker@4.1.10 (npm):GHSA-82fw-gwwq-j7x9"},{"rule_id":"osv/GHSA-qxg6-89mg-rqv8","severity":"medium","message":"@vitest/mocker@4.1.10 (npm) is affected by GHSA-qxg6-89mg-rqv8","path":"package-lock.json","line":null,"fingerprint":"@vitest/mocker@4.1.10 (npm):GHSA-qxg6-89mg-rqv8"},{"rule_id":"osv/GHSA-gcqx-w48m-w2h4","severity":"medium","message":"deepmerge@4.3.1 (npm) is affected by GHSA-gcqx-w48m-w2h4","path":"package-lock.json","line":null,"fingerprint":"deepmerge@4.3.1 (npm):GHSA-gcqx-w48m-w2h4"},{"rule_id":"osv/GHSA-4q55-j62x-fr9h","severity":"medium","message":"devalue@5.8.1 (npm) is affected by GHSA-4q55-j62x-fr9h","path":"package-lock.json","line":null,"fingerprint":"devalue@5.8.1 (npm):GHSA-4q55-j62x-fr9h"},{"rule_id":"osv/GHSA-9rgm-9g3h-6x36","severity":"medium","message":"devalue@5.8.1 (npm) is affected by GHSA-9rgm-9g3h-6x36","path":"package-lock.json","line":null,"fingerprint":"devalue@5.8.1 (npm):GHSA-9rgm-9g3h-6x36"},{"rule_id":"osv/GHSA-hx4r-w6wj-j8fg","severity":"medium","message":"devalue@5.8.1 (npm) is affected by GHSA-hx4r-w6wj-j8fg","path":"package-lock.json","line":null,"fingerprint":"devalue@5.8.1 (npm):GHSA-hx4r-w6wj-j8fg"},{"rule_id":"osv/GHSA-55q2-fjhq-7xh7","severity":"medium","message":"dompurify@3.4.12 (npm) is affected by GHSA-55q2-fjhq-7xh7","path":"package-lock.json","line":null,"fingerprint":"dompurify@3.4.12 (npm):GHSA-55q2-fjhq-7xh7"},{"rule_id":"osv/GHSA-6688-9rhm-gjv2","severity":"medium","message":"dompurify@3.4.12 (npm) is affected by GHSA-6688-9rhm-gjv2","path":"package-lock.json","line":null,"fingerprint":"dompurify@3.4.12 (npm):GHSA-6688-9rhm-gjv2"},{"rule_id":"osv/GHSA-c6gr-qvv4-5v3f","severity":"medium","message":"dompurify@3.4.12 (npm) is affected by GHSA-c6gr-qvv4-5v3f","path":"package-lock.json","line":null,"fingerprint":"dompurify@3.4.12 (npm):GHSA-c6gr-qvv4-5v3f"},{"rule_id":"osv/GHSA-fxqj-rqcc-2cmp","severity":"medium","message":"postcss@8.5.19 (npm) is affected by GHSA-fxqj-rqcc-2cmp","path":"package-lock.json","line":null,"fingerprint":"postcss@8.5.19 (npm):GHSA-fxqj-rqcc-2cmp"},{"rule_id":"osv/GHSA-2jfj-6hjv-fm6j","severity":"medium","message":"undici@7.28.0 (npm) is affected by GHSA-2jfj-6hjv-fm6j","path":"package-lock.json","line":null,"fingerprint":"undici@7.28.0 (npm):GHSA-2jfj-6hjv-fm6j"},{"rule_id":"osv/GHSA-3wwx-pv8p-q78v","severity":"medium","message":"undici@7.28.0 (npm) is affected by GHSA-3wwx-pv8p-q78v","path":"package-lock.json","line":null,"fingerprint":"undici@7.28.0 (npm):GHSA-3wwx-pv8p-q78v"},{"rule_id":"osv/GHSA-3xpg-4rpp-hhhm","severity":"medium","message":"undici@7.28.0 (npm) is affected by GHSA-3xpg-4rpp-hhhm","path":"package-lock.json","line":null,"fingerprint":"undici@7.28.0 (npm):GHSA-3xpg-4rpp-hhhm"},{"rule_id":"osv/GHSA-4qv8-2p9j-2685","severity":"medium","message":"undici@7.28.0 (npm) is affected by GHSA-4qv8-2p9j-2685","path":"package-lock.json","line":null,"fingerprint":"undici@7.28.0 (npm):GHSA-4qv8-2p9j-2685"},{"rule_id":"osv/GHSA-55wc-3pg8-jfw6","severity":"medium","message":"undici@7.28.0 (npm) is affected by GHSA-55wc-3pg8-jfw6","path":"package-lock.json","line":null,"fingerprint":"undici@7.28.0 (npm):GHSA-55wc-3pg8-jfw6"},{"rule_id":"osv/GHSA-8xcm-r25x-g524","severity":"medium","message":"undici@7.28.0 (npm) is affected by GHSA-8xcm-r25x-g524","path":"package-lock.json","line":null,"fingerprint":"undici@7.28.0 (npm):GHSA-8xcm-r25x-g524"},{"rule_id":"osv/GHSA-9fm3-97px-rjf6","severity":"medium","message":"undici@7.28.0 (npm) is affected by GHSA-9fm3-97px-rjf6","path":"package-lock.json","line":null,"fingerprint":"undici@7.28.0 (npm):GHSA-9fm3-97px-rjf6"},{"rule_id":"osv/GHSA-f72v-6w45-q472","severity":"medium","message":"undici@7.28.0 (npm) is affected by GHSA-f72v-6w45-q472","path":"package-lock.json","line":null,"fingerprint":"undici@7.28.0 (npm):GHSA-f72v-6w45-q472"},{"rule_id":"osv/GHSA-jr45-8vmc-qm54","severity":"medium","message":"undici@7.28.0 (npm) is affected by GHSA-jr45-8vmc-qm54","path":"package-lock.json","line":null,"fingerprint":"undici@7.28.0 (npm):GHSA-jr45-8vmc-qm54"},{"rule_id":"osv/GHSA-m8rv-5g2x-5cg5","severity":"medium","message":"undici@7.28.0 (npm) is affected by GHSA-m8rv-5g2x-5cg5","path":"package-lock.json","line":null,"fingerprint":"undici@7.28.0 (npm):GHSA-m8rv-5g2x-5cg5"},{"rule_id":"osv/GHSA-pmjh-fq2x-6v4x","severity":"medium","message":"undici@7.28.0 (npm) is affected by GHSA-pmjh-fq2x-6v4x","path":"package-lock.json","line":null,"fingerprint":"undici@7.28.0 (npm):GHSA-pmjh-fq2x-6v4x"},{"rule_id":"osv/GHSA-rx4f-c7p8-82vq","severity":"medium","message":"undici@7.28.0 (npm) is affected by GHSA-rx4f-c7p8-82vq","path":"package-lock.json","line":null,"fingerprint":"undici@7.28.0 (npm):GHSA-rx4f-c7p8-82vq"},{"rule_id":"osv/GHSA-v3r7-h72x-cjcm","severity":"medium","message":"undici@7.28.0 (npm) is affected by GHSA-v3r7-h72x-cjcm","path":"package-lock.json","line":null,"fingerprint":"undici@7.28.0 (npm):GHSA-v3r7-h72x-cjcm"},{"rule_id":"osv/GHSA-698v-4r3x-3vcv","severity":"medium","message":"vite@8.1.5 (npm) is affected by GHSA-698v-4r3x-3vcv","path":"package-lock.json","line":null,"fingerprint":"vite@8.1.5 (npm):GHSA-698v-4r3x-3vcv"},{"rule_id":"osv/GHSA-r825-w8mm-5pxw","severity":"medium","message":"vite@8.1.5 (npm) is affected by GHSA-r825-w8mm-5pxw","path":"package-lock.json","line":null,"fingerprint":"vite@8.1.5 (npm):GHSA-r825-w8mm-5pxw"},{"rule_id":"osv/GHSA-rq7h-c2jc-7f22","severity":"medium","message":"vite@8.1.5 (npm) is affected by GHSA-rq7h-c2jc-7f22","path":"package-lock.json","line":null,"fingerprint":"vite@8.1.5 (npm):GHSA-rq7h-c2jc-7f22"},{"rule_id":"osv/GHSA-82fw-gwwq-j7x9","severity":"medium","message":"vitest@4.1.10 (npm) is affected by GHSA-82fw-gwwq-j7x9","path":"package-lock.json","line":null,"fingerprint":"vitest@4.1.10 (npm):GHSA-82fw-gwwq-j7x9"},{"rule_id":"osv/GHSA-wf3x-273g-mvxv","severity":"low","message":"devalue@5.8.1 (npm) is affected by GHSA-wf3x-273g-mvxv","path":"package-lock.json","line":null,"fingerprint":"devalue@5.8.1 (npm):GHSA-wf3x-273g-mvxv"},{"rule_id":"osv/GHSA-2gqq-gqf2-x968","severity":"low","message":"undici@7.28.0 (npm) is affected by GHSA-2gqq-gqf2-x968","path":"package-lock.json","line":null,"fingerprint":"undici@7.28.0 (npm):GHSA-2gqq-gqf2-x968"},{"rule_id":"osv/GHSA-8436-99hf-9mmv","severity":"low","message":"undici@7.28.0 (npm) is affected by GHSA-8436-99hf-9mmv","path":"package-lock.json","line":null,"fingerprint":"undici@7.28.0 (npm):GHSA-8436-99hf-9mmv"},{"rule_id":"osv/GHSA-r53p-7pc4-xj5r","severity":"low","message":"undici@7.28.0 (npm) is affected by GHSA-r53p-7pc4-xj5r","path":"package-lock.json","line":null,"fingerprint":"undici@7.28.0 (npm):GHSA-r53p-7pc4-xj5r"},{"rule_id":"osv/GHSA-9jrq-w75r-8gcw","severity":"low","message":"vite@8.1.5 (npm) is affected by GHSA-9jrq-w75r-8gcw","path":"package-lock.json","line":null,"fingerprint":"vite@8.1.5 (npm):GHSA-9jrq-w75r-8gcw"}],"evidence":[],"data":{"ecosystems":["npm"]},"error":null},{"analyzer":"sec-actions","pillar":"security","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-posture","pillar":"security","status":"ok","tool_version":null,"metrics":{"check:security_policy":0.0,"check:dependency_updates":0.0,"check:signed_commits":1.0,"check:lockfiles":1.0,"signed_commit_share":0.95,"unpinned_manifests":0.0},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-distribution","pillar":"security","status":"ok","tool_version":null,"metrics":{"signals":0.0,"binary_assets":0.0,"suspicious":0.0},"findings":[],"evidence":[],"data":{"signals":[],"suspicious":false,"unusual_traction":false,"metadata":true},"error":null},{"analyzer":"qual-complexity","pillar":"quality","status":"ok","tool_version":"lizard 1.25.1","metrics":{"functions":134.0,"function_nloc":778.0,"mean_ccn":2.42,"p90_ccn":5.0,"complex_functions":1.0,"long_functions":0.0,"many_param_functions":0.0,"risky_nloc_share":0.0347},"findings":[],"evidence":[{"kind":"complex-function","description":"normalizeSettings in src/lib/settings/settings.ts: complexity 24, 27 lines","ref":"src/lib/settings/settings.ts","url":"https://github.com/prashantkumardagur/chrome-notes-sidebar/blob/1fdb2aeb8d203a18bbcadaf5a439a592752c000f/src/lib/settings/settings.ts#L83","weight":0.4}],"data":{},"error":null},{"analyzer":"qual-duplication","pillar":"quality","status":"ok","tool_version":"repotrust-dup-w6","metrics":{"compared_lines":3983.0,"duplicated_lines":173.0,"duplicated_share":0.0434,"files":40.0},"findings":[],"evidence":[{"kind":"duplicate-code","description":"6+ duplicated lines: src/components/NoteSelector.svelte:285 and src/components/NoteSelector.svelte:387","ref":"src/components/NoteSelector.svelte","url":"https://github.com/prashantkumardagur/chrome-notes-sidebar/blob/1fdb2aeb8d203a18bbcadaf5a439a592752c000f/src/components/NoteSelector.svelte#L285","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: src/components/NoteSelector.svelte:317 and src/components/SearchPanel.svelte:249","ref":"src/components/NoteSelector.svelte","url":"https://github.com/prashantkumardagur/chrome-notes-sidebar/blob/1fdb2aeb8d203a18bbcadaf5a439a592752c000f/src/components/NoteSelector.svelte#L317","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: src/components/OrganizeNotes.svelte:242 and src/components/SearchPanel.svelte:228","ref":"src/components/OrganizeNotes.svelte","url":"https://github.com/prashantkumardagur/chrome-notes-sidebar/blob/1fdb2aeb8d203a18bbcadaf5a439a592752c000f/src/components/OrganizeNotes.svelte#L242","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: src/components/SettingsPanel.svelte:207 and src/components/SettingsPanel.svelte:223","ref":"src/components/SettingsPanel.svelte","url":"https://github.com/prashantkumardagur/chrome-notes-sidebar/blob/1fdb2aeb8d203a18bbcadaf5a439a592752c000f/src/components/SettingsPanel.svelte#L207","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: src/components/SettingsPanel.svelte:406 and src/components/ViewEditTabs.svelte:47","ref":"src/components/SettingsPanel.svelte","url":"https://github.com/prashantkumardagur/chrome-notes-sidebar/blob/1fdb2aeb8d203a18bbcadaf5a439a592752c000f/src/components/SettingsPanel.svelte#L406","weight":0.3}],"data":{},"error":null},{"analyzer":"qual-lint","pillar":"quality","status":"ok","tool_version":"opengrep 1.33.1; rules f1d2b562b414","metrics":{"findings":0.0,"weighted_findings":0.0,"scanned_lines":5388.0},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"qual-testing","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:has_tests":1.0,"check:test_ratio":0.8812,"check:ci_present":0.0,"check:ci_runs_tests":0.0,"check:ci_runs_lint":0.0,"check:tests_cochange":1.0,"test_lines":2374.0,"source_lines":5388.0,"test_ratio":0.4406,"ci_files":0.0,"cochange_share":0.8529,"cochange_commits":34.0},"findings":[],"evidence":[],"data":{"test_commands":[],"lint_commands":[]},"error":null},{"analyzer":"qual-docs","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:readme":1.0,"check:license":1.0,"check:contributing":0.0,"check:changelog":0.0,"readme_lines":49.0},"findings":[],"evidence":[{"kind":"docs","description":"README.md","ref":"README.md","url":null,"weight":0.0},{"kind":"docs","description":"LICENSE","ref":"LICENSE","url":null,"weight":0.0}],"data":{},"error":null},{"analyzer":"qual-type-safety","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:strict_config":1.0,"check:low_escape_density":1.0,"escapes":0.0,"escapes_per_kloc":0.0},"findings":[],"evidence":[{"kind":"typing","description":"TypeScript strict type checking: tsconfig.json","ref":"tsconfig.json","url":null,"weight":0.0}],"data":{},"error":null},{"analyzer":"x-blame","pillar":"ai_provenance","status":"ok","tool_version":"git-blame","metrics":{"ai_lines":5388.0,"other_lines":0.0,"files_blamed":40.0,"blame_failures":0.0,"quality:ai_findings":0.0,"quality:ai_per_kloc":0.0,"quality:other_findings":0.0,"security:ai_findings":1.0,"security:ai_per_kloc":0.186,"security:other_findings":0.0},"findings":[],"evidence":[],"data":{"sampled":false,"comparable":false},"error":null}],"flags":[]}