{"schema_version":"2","scorer_version":"0.1.0","scoring_version":"prov-5+qual-2+sec-2","generated_at":"2026-11-14T14:52:08.082214Z","repo":{"ref":{"host":"github.com","owner":"tmoody1973","name":"blk-exchange"},"default_branch":"main","clone_url":"https://github.com/tmoody1973/blk-exchange.git","html_url":"https://github.com/tmoody1973/blk-exchange","description":"BLK Exchange is a financial literacy game disguised as a stock trading app. Players start with $10,000 in virtual cash and trade 36 fictional companies that represent the sectors shaping Black cultural and economic life.","stars":0,"forks":0,"is_fork":false,"is_archived":false,"is_private":false,"size_kb":4819,"primary_language":"TypeScript","license_spdx":null,"created_at":"2026-03-26T00:07:05Z","pushed_at":"2026-04-01T20:33:11Z","security_policy_url":null,"distribution":{"owner_created_at":"2021-03-28T16:57:27Z","owner_type":"User","release_assets":[]}},"commit_sha":"e0e2dad2498e6cf39d94ef41e0b4eeeae9a456c4","profile":{"lines_by_language":{"TypeScript":20642,"JavaScript":1397},"files_by_category":{"source":155,"docs":31,"binary":19,"config":8,"generated":1,"oversized":1,"other":1},"source_lines":22039,"test_lines":0},"pillars":{"ai_provenance":{"score":0.0,"confidence":0.65,"coverage":1.0,"label":"possible","breakdown":{"attributed_share":0.0,"suspected_share":0.5123,"estimated_share":0.0,"ai_artifacts":2.0,"flagged_work_units":3.0,"flagged_releases":null,"style_index":0.544},"summary":"Weak signals consistent with AI-assisted development."},"quality":{"score":36.2,"confidence":0.9,"coverage":1.0,"label":"poor","breakdown":{"complexity":42.7,"duplication":60.8,"lint":39.2,"testing":0.0,"docs":40.0,"type_safety":100.0,"process":null},"summary":"Code quality is poor: test-to-source ratio 0.00, no CI test run detected; 28% of function code in complex or long functions; 8% duplicated lines. Weakest area: testing."},"security":{"score":59.1,"confidence":0.85,"coverage":1.0,"label":"weak","breakdown":{"secrets":96.7,"sast":99.9,"dependencies":0.9,"ci_actions":null,"posture":0.0,"scorecard":null},"summary":"Security posture is weak: 200 known vulnerabilities in 40 dependencies. Weakest area: posture."}},"analyzer_results":[{"analyzer":"sec-scorecard","pillar":"security","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":"no published OpenSSF Scorecard result for this repo"},{"analyzer":"sec-registry","pillar":"security","status":"ok","tool_version":null,"metrics":{"declared":34.0,"checked":34.0,"missing":0.0,"recent":0.0,"lookup_errors":0.0},"findings":[],"evidence":[],"data":{"phantom":false},"error":null},{"analyzer":"ai-attribution","pillar":"ai_provenance","status":"ok","tool_version":"signatures-v1","metrics":{"commits":132.0,"attributed_commits":0.0,"attributed_commit_share":0.0,"effective_loc":24404.0,"attributed_loc":0.0,"attributed_loc_share":0.0,"tools_detected":0.0},"findings":[],"evidence":[],"data":{"attributed_loc_by_commit":{},"tools":{},"monthly":{"2026-03":{"loc":23469,"attributed_loc":0},"2026-04":{"loc":935,"attributed_loc":0}}},"error":null},{"analyzer":"ai-artifacts","pillar":"ai_provenance","status":"ok","tool_version":"signatures-v1","metrics":{"artifacts":2.0,"workflow_agents":0.0,"tools_configured":1.0,"earliest_adoption":1774491735.0},"findings":[],"evidence":[{"kind":"ai-artifact","description":"docs/CLAUDE.md (claude-code configuration)","ref":"docs/CLAUDE.md","url":"https://github.com/tmoody1973/blk-exchange/blob/e0e2dad2498e6cf39d94ef41e0b4eeeae9a456c4/docs/CLAUDE.md","weight":0.5},{"kind":"ai-artifact","description":"docs/plans/CLAUDE.md (claude-code configuration)","ref":"docs/plans/CLAUDE.md","url":"https://github.com/tmoody1973/blk-exchange/blob/e0e2dad2498e6cf39d94ef41e0b4eeeae9a456c4/docs/plans/CLAUDE.md","weight":0.5}],"data":{"artifacts":[{"tool":"claude-code","path":"docs/CLAUDE.md","added_at":1774491735},{"tool":"claude-code","path":"docs/plans/CLAUDE.md","added_at":1774491735}],"workflows":[],"tools":["claude-code"]},"error":null},{"analyzer":"ai-velocity","pillar":"ai_provenance","status":"ok","tool_version":"prov-4","metrics":{"work_units":27.0,"flagged_units":3.0,"pre_ai_era_bursts":0.0,"pre_ai_era_measured_loc":0.0,"pre_ai_era_burst_loc":0.0,"measured_loc":24404.0,"flagged_loc":12502.0,"flagged_loc_share":0.5122930667103753,"max_loc_per_hour":2817.9112410310922,"median_loc_per_hour":128.26046308420766,"pr_timed_units":0.0,"excluded_import_loc":0.0},"findings":[],"evidence":[{"kind":"velocity-burst","description":"5,891 lines of first-party code in ~2.1h (2,818 lines/hour, 8 commit session)","ref":"47ad98eb07e34c3e6936398df83f3819767645a9","url":"https://github.com/tmoody1973/blk-exchange/commit/47ad98eb07e34c3e6936398df83f3819767645a9","weight":0.6},{"kind":"velocity-burst","description":"5,180 lines of first-party code in ~5.3h (982 lines/hour, 7 commit session)","ref":"59eb56aabb7796ebdbb754356a2dad85629a1992","url":"https://github.com/tmoody1973/blk-exchange/commit/59eb56aabb7796ebdbb754356a2dad85629a1992","weight":0.29461267049344353},{"kind":"velocity-burst","description":"1,431 lines of first-party code in ~1.6h (919 lines/hour, 1 commit session)","ref":"091b704e70eea42229853bab3e4c3f1767d405ba","url":"https://github.com/tmoody1973/blk-exchange/commit/091b704e70eea42229853bab3e4c3f1767d405ba","weight":0.2757815845824411}],"data":{"flagged_loc_by_commit":{"87318876b411d9baf866edb31ef73cb939636ba9":1959,"6f722210a3ca501f1ae211eeb10c57d84aab21a2":187,"f0f2bc77f2d317d56f54b62cded3cc7681126c36":966,"a381fe1da51ff9080d906abed626bd3587af3d3a":165,"0918bca70b0bc3a354b8823557ad520eace663a1":337,"ddc0954428fd2ce9c73e535ce8311ef760f5ad12":832,"7e4e53b92c958e1a80a898acc290e1ee69ce7a4c":651,"47ad98eb07e34c3e6936398df83f3819767645a9":794,"022d880fd792a3155c4fe2030f083d7046ba3f28":1065,"eb0949a8ccf5352106db424857745d7e891976df":966,"327fd34358b3a76711627c4fe1826acdbf751e04":521,"3ba3583a26ca88d49e948808baf192bcd4d7bc97":1234,"2ca98b99ac1d8a81421e0bbffc90c5a1d00ecee2":1028,"fbbb094c163cf7fcc5c3f2d61b818724e763057e":296,"59eb56aabb7796ebdbb754356a2dad85629a1992":70,"091b704e70eea42229853bab3e4c3f1767d405ba":1431},"excluded_import_commits":[]},"error":null},{"analyzer":"ai-release-velocity","pillar":"ai_provenance","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"ai-stylometry","pillar":"ai_provenance","status":"ok","tool_version":null,"metrics":{"lines_scanned":22039.0,"index":0.544,"count:narrated_steps":3.0,"per_kloc:narrated_steps":0.136,"files:narrated_steps":2.0,"count:placeholder":0.0,"per_kloc:placeholder":0.0,"files:placeholder":0.0,"count:emoji_in_code":14.0,"per_kloc:emoji_in_code":0.635,"files:emoji_in_code":3.0,"count:assistant_voice":1.0,"per_kloc:assistant_voice":0.045,"files:assistant_voice":1.0},"findings":[],"evidence":[{"kind":"stylometry:assistant_voice","description":"assistant-style phrasing left in code: 7. After the narrative, provide the structured sections exactly as requested.`,","ref":"convex/claude/generateDebrief.ts:145","url":"https://github.com/tmoody1973/blk-exchange/blob/e0e2dad2498e6cf39d94ef41e0b4eeeae9a456c4/convex/claude/generateDebrief.ts#L145","weight":0.0},{"kind":"stylometry:narrated_steps","description":"step-by-step narration comment: // Step 1: Delete ALL leaderboard entries (clean slate)","ref":"convex/leaderboards.ts:291","url":"https://github.com/tmoody1973/blk-exchange/blob/e0e2dad2498e6cf39d94ef41e0b4eeeae9a456c4/convex/leaderboards.ts#L291","weight":0.0},{"kind":"stylometry:narrated_steps","description":"step-by-step narration comment: // Step 2: Recalculate and insert fresh entries for all players","ref":"convex/leaderboards.ts:297","url":"https://github.com/tmoody1973/blk-exchange/blob/e0e2dad2498e6cf39d94ef41e0b4eeeae9a456c4/convex/leaderboards.ts#L297","weight":0.0},{"kind":"stylometry:narrated_steps","description":"step-by-step narration comment: // Step 2: animate price","ref":"docs/reference/onboarding-prototype.jsx:257","url":"https://github.com/tmoody1973/blk-exchange/blob/e0e2dad2498e6cf39d94ef41e0b4eeeae9a456c4/docs/reference/onboarding-prototype.jsx#L257","weight":0.0}],"data":{},"error":null},{"analyzer":"sec-secrets","pillar":"security","status":"ok","tool_version":"gitleaks 8.30.1","metrics":{"secrets_current":0.0,"secrets_history":0.0,"secrets_nonprod":1.0,"secrets_low_confidence":0.0},"findings":[{"rule_id":"gitleaks/generic-api-key","severity":"low","message":"Possible generic-api-key secret in the current tree (test/docs/example file)","path":"docs/plans/real-exchange-build-guide.md","line":54,"fingerprint":"docs/plans/real-exchange-build-guide.md:generic-api-key:54"}],"evidence":[],"data":{},"error":null},{"analyzer":"sec-sast","pillar":"security","status":"ok","tool_version":"opengrep 1.33.1; rules f1d2b562b414","metrics":{"findings":1.0,"findings_high":0.0,"findings_medium":0.0,"findings_low":1.0,"weighted_findings":0.062,"scanned_lines":22039.0,"parse_errors":0.0},"findings":[{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-formatstring","severity":"low","message":"Detected string concatenation with a non-literal variable in a util.format / console.log function. If an attacker injects a format specifier in the string, it will forge the log message. Try to use constant values for the format string. [confidence low]","path":"convex/sectorData.ts","line":184,"fingerprint":"javascript.lang.security.audit.unsafe-formatstring:convex/sectorData.ts:184"}],"evidence":[],"data":{"rulesets":["typescript","javascript"]},"error":null},{"analyzer":"sec-deps","pillar":"security","status":"ok","tool_version":"osv-scanner version: 2.7.1","metrics":{"vulnerable_packages":40.0,"vulnerabilities":200.0,"vulns_critical":6.0,"vulns_high":77.0,"vulns_medium":107.0,"vulns_low":10.0,"vulns_unknown":0.0,"penalty":286.0},"findings":[{"rule_id":"osv/GHSA-vqx2-fgx2-5wq9","severity":"critical","message":"@clerk/nextjs@5.7.5 (npm) is affected by GHSA-vqx2-fgx2-5wq9","path":"pnpm-lock.yaml","line":null,"fingerprint":"@clerk/nextjs@5.7.5 (npm):GHSA-vqx2-fgx2-5wq9"},{"rule_id":"osv/GHSA-vqx2-fgx2-5wq9","severity":"critical","message":"@clerk/shared@3.47.3 (npm) is affected by GHSA-vqx2-fgx2-5wq9","path":"pnpm-lock.yaml","line":null,"fingerprint":"@clerk/shared@3.47.3 (npm):GHSA-vqx2-fgx2-5wq9"},{"rule_id":"osv/GHSA-2464-fhr4-w9xw","severity":"critical","message":"next@14.2.35 (npm) is affected by GHSA-2464-fhr4-w9xw","path":"pnpm-lock.yaml","line":null,"fingerprint":"next@14.2.35 (npm):GHSA-2464-fhr4-w9xw"},{"rule_id":"osv/GHSA-2xp9-vwfh-vxw4","severity":"critical","message":"next@14.2.35 (npm) is affected by GHSA-2xp9-vwfh-vxw4","path":"pnpm-lock.yaml","line":null,"fingerprint":"next@14.2.35 (npm):GHSA-2xp9-vwfh-vxw4"},{"rule_id":"osv/GHSA-p293-qw3h-jr36","severity":"critical","message":"next@14.2.35 (npm) is affected by GHSA-p293-qw3h-jr36","path":"pnpm-lock.yaml","line":null,"fingerprint":"next@14.2.35 (npm):GHSA-p293-qw3h-jr36"},{"rule_id":"osv/GHSA-jqcg-44mw-7w3h","severity":"critical","message":"proxy-addr@2.0.7 (npm) is affected by GHSA-jqcg-44mw-7w3h","path":"pnpm-lock.yaml","line":null,"fingerprint":"proxy-addr@2.0.7 (npm):GHSA-jqcg-44mw-7w3h"},{"rule_id":"osv/GHSA-w24r-5266-9c3c","severity":"high","message":"@clerk/clerk-react@5.12.0 (npm) is affected by GHSA-w24r-5266-9c3c","path":"pnpm-lock.yaml","line":null,"fingerprint":"@clerk/clerk-react@5.12.0 (npm):GHSA-w24r-5266-9c3c"},{"rule_id":"osv/GHSA-w24r-5266-9c3c","severity":"high","message":"@clerk/shared@3.47.3 (npm) is affected by GHSA-w24r-5266-9c3c","path":"pnpm-lock.yaml","line":null,"fingerprint":"@clerk/shared@3.47.3 (npm):GHSA-w24r-5266-9c3c"},{"rule_id":"osv/GHSA-22jm-h49p-29qw","severity":"high","message":"@modelcontextprotocol/sdk@1.28.0 (npm) is affected by GHSA-22jm-h49p-29qw","path":"pnpm-lock.yaml","line":null,"fingerprint":"@modelcontextprotocol/sdk@1.28.0 (npm):GHSA-22jm-h49p-29qw"},{"rule_id":"osv/GHSA-46jr-4wx8-v453","severity":"high","message":"@modelcontextprotocol/sdk@1.28.0 (npm) is affected by GHSA-46jr-4wx8-v453","path":"pnpm-lock.yaml","line":null,"fingerprint":"@modelcontextprotocol/sdk@1.28.0 (npm):GHSA-46jr-4wx8-v453"},{"rule_id":"osv/GHSA-6qxp-vccf-f47h","severity":"high","message":"@modelcontextprotocol/sdk@1.28.0 (npm) is affected by GHSA-6qxp-vccf-f47h","path":"pnpm-lock.yaml","line":null,"fingerprint":"@modelcontextprotocol/sdk@1.28.0 (npm):GHSA-6qxp-vccf-f47h"},{"rule_id":"osv/GHSA-f897-62hf-6gxq","severity":"high","message":"@modelcontextprotocol/sdk@1.28.0 (npm) is affected by GHSA-f897-62hf-6gxq","path":"pnpm-lock.yaml","line":null,"fingerprint":"@modelcontextprotocol/sdk@1.28.0 (npm):GHSA-f897-62hf-6gxq"},{"rule_id":"osv/GHSA-35jp-ww65-95wh","severity":"high","message":"axios@1.13.6 (npm) is affected by GHSA-35jp-ww65-95wh","path":"pnpm-lock.yaml","line":null,"fingerprint":"axios@1.13.6 (npm):GHSA-35jp-ww65-95wh"},{"rule_id":"osv/GHSA-3g43-6gmg-66jw","severity":"high","message":"axios@1.13.6 (npm) is affected by GHSA-3g43-6gmg-66jw","path":"pnpm-lock.yaml","line":null,"fingerprint":"axios@1.13.6 (npm):GHSA-3g43-6gmg-66jw"},{"rule_id":"osv/GHSA-3pq3-5fj3-cg6v","severity":"high","message":"axios@1.13.6 (npm) is affected by GHSA-3pq3-5fj3-cg6v","path":"pnpm-lock.yaml","line":null,"fingerprint":"axios@1.13.6 (npm):GHSA-3pq3-5fj3-cg6v"},{"rule_id":"osv/GHSA-542g-h47m-68v8","severity":"high","message":"axios@1.13.6 (npm) is affected by GHSA-542g-h47m-68v8","path":"pnpm-lock.yaml","line":null,"fingerprint":"axios@1.13.6 (npm):GHSA-542g-h47m-68v8"},{"rule_id":"osv/GHSA-62hf-57xw-28j9","severity":"high","message":"axios@1.13.6 (npm) is affected by GHSA-62hf-57xw-28j9","path":"pnpm-lock.yaml","line":null,"fingerprint":"axios@1.13.6 (npm):GHSA-62hf-57xw-28j9"},{"rule_id":"osv/GHSA-6chq-wfr3-2hj9","severity":"high","message":"axios@1.13.6 (npm) is affected by GHSA-6chq-wfr3-2hj9","path":"pnpm-lock.yaml","line":null,"fingerprint":"axios@1.13.6 (npm):GHSA-6chq-wfr3-2hj9"},{"rule_id":"osv/GHSA-777c-7fjr-54vf","severity":"high","message":"axios@1.13.6 (npm) is affected by GHSA-777c-7fjr-54vf","path":"pnpm-lock.yaml","line":null,"fingerprint":"axios@1.13.6 (npm):GHSA-777c-7fjr-54vf"},{"rule_id":"osv/GHSA-hfxv-24rg-xrqf","severity":"high","message":"axios@1.13.6 (npm) is affected by GHSA-hfxv-24rg-xrqf","path":"pnpm-lock.yaml","line":null,"fingerprint":"axios@1.13.6 (npm):GHSA-hfxv-24rg-xrqf"},{"rule_id":"osv/GHSA-j5f8-grm9-p9fc","severity":"high","message":"axios@1.13.6 (npm) is affected by GHSA-j5f8-grm9-p9fc","path":"pnpm-lock.yaml","line":null,"fingerprint":"axios@1.13.6 (npm):GHSA-j5f8-grm9-p9fc"},{"rule_id":"osv/GHSA-p92q-9vqr-4j8v","severity":"high","message":"axios@1.13.6 (npm) is affected by GHSA-p92q-9vqr-4j8v","path":"pnpm-lock.yaml","line":null,"fingerprint":"axios@1.13.6 (npm):GHSA-p92q-9vqr-4j8v"},{"rule_id":"osv/GHSA-pf86-5x62-jrwf","severity":"high","message":"axios@1.13.6 (npm) is affected by GHSA-pf86-5x62-jrwf","path":"pnpm-lock.yaml","line":null,"fingerprint":"axios@1.13.6 (npm):GHSA-pf86-5x62-jrwf"},{"rule_id":"osv/GHSA-pmwg-cvhr-8vh7","severity":"high","message":"axios@1.13.6 (npm) is affected by GHSA-pmwg-cvhr-8vh7","path":"pnpm-lock.yaml","line":null,"fingerprint":"axios@1.13.6 (npm):GHSA-pmwg-cvhr-8vh7"},{"rule_id":"osv/GHSA-q8qp-cvcw-x6jj","severity":"high","message":"axios@1.13.6 (npm) is affected by GHSA-q8qp-cvcw-x6jj","path":"pnpm-lock.yaml","line":null,"fingerprint":"axios@1.13.6 (npm):GHSA-q8qp-cvcw-x6jj"},{"rule_id":"osv/GHSA-27r3-jxmh-p828","severity":"high","message":"body-parser@2.2.2 (npm) is affected by GHSA-27r3-jxmh-p828","path":"pnpm-lock.yaml","line":null,"fingerprint":"body-parser@2.2.2 (npm):GHSA-27r3-jxmh-p828"},{"rule_id":"osv/GHSA-3jxr-9vmj-r5cp","severity":"high","message":"brace-expansion@1.1.12 (npm) is affected by GHSA-3jxr-9vmj-r5cp","path":"pnpm-lock.yaml","line":null,"fingerprint":"brace-expansion@1.1.12 (npm):GHSA-3jxr-9vmj-r5cp"},{"rule_id":"osv/GHSA-6j4f-fj2g-mc7p","severity":"high","message":"brace-expansion@1.1.12 (npm) is affected by GHSA-6j4f-fj2g-mc7p","path":"pnpm-lock.yaml","line":null,"fingerprint":"brace-expansion@1.1.12 (npm):GHSA-6j4f-fj2g-mc7p"},{"rule_id":"osv/GHSA-mh99-v99m-4gvg","severity":"high","message":"brace-expansion@1.1.12 (npm) is affected by GHSA-mh99-v99m-4gvg","path":"pnpm-lock.yaml","line":null,"fingerprint":"brace-expansion@1.1.12 (npm):GHSA-mh99-v99m-4gvg"},{"rule_id":"osv/GHSA-qhr7-859c-m2p7","severity":"high","message":"brace-expansion@1.1.12 (npm) is affected by GHSA-qhr7-859c-m2p7","path":"pnpm-lock.yaml","line":null,"fingerprint":"brace-expansion@1.1.12 (npm):GHSA-qhr7-859c-m2p7"},{"rule_id":"osv/GHSA-rgw5-rvv9-x895","severity":"high","message":"brace-expansion@1.1.12 (npm) is affected by GHSA-rgw5-rvv9-x895","path":"pnpm-lock.yaml","line":null,"fingerprint":"brace-expansion@1.1.12 (npm):GHSA-rgw5-rvv9-x895"},{"rule_id":"osv/GHSA-3jxr-9vmj-r5cp","severity":"high","message":"brace-expansion@2.0.2 (npm) is affected by GHSA-3jxr-9vmj-r5cp","path":"pnpm-lock.yaml","line":null,"fingerprint":"brace-expansion@2.0.2 (npm):GHSA-3jxr-9vmj-r5cp"},{"rule_id":"osv/GHSA-6j4f-fj2g-mc7p","severity":"high","message":"brace-expansion@2.0.2 (npm) is affected by GHSA-6j4f-fj2g-mc7p","path":"pnpm-lock.yaml","line":null,"fingerprint":"brace-expansion@2.0.2 (npm):GHSA-6j4f-fj2g-mc7p"},{"rule_id":"osv/GHSA-mh99-v99m-4gvg","severity":"high","message":"brace-expansion@2.0.2 (npm) is affected by GHSA-mh99-v99m-4gvg","path":"pnpm-lock.yaml","line":null,"fingerprint":"brace-expansion@2.0.2 (npm):GHSA-mh99-v99m-4gvg"},{"rule_id":"osv/GHSA-qhr7-859c-m2p7","severity":"high","message":"brace-expansion@2.0.2 (npm) is affected by GHSA-qhr7-859c-m2p7","path":"pnpm-lock.yaml","line":null,"fingerprint":"brace-expansion@2.0.2 (npm):GHSA-qhr7-859c-m2p7"},{"rule_id":"osv/GHSA-rgw5-rvv9-x895","severity":"high","message":"brace-expansion@2.0.2 (npm) is affected by GHSA-rgw5-rvv9-x895","path":"pnpm-lock.yaml","line":null,"fingerprint":"brace-expansion@2.0.2 (npm):GHSA-rgw5-rvv9-x895"},{"rule_id":"osv/GHSA-3jxr-9vmj-r5cp","severity":"high","message":"brace-expansion@5.0.5 (npm) is affected by GHSA-3jxr-9vmj-r5cp","path":"pnpm-lock.yaml","line":null,"fingerprint":"brace-expansion@5.0.5 (npm):GHSA-3jxr-9vmj-r5cp"},{"rule_id":"osv/GHSA-6j4f-fj2g-mc7p","severity":"high","message":"brace-expansion@5.0.5 (npm) is affected by GHSA-6j4f-fj2g-mc7p","path":"pnpm-lock.yaml","line":null,"fingerprint":"brace-expansion@5.0.5 (npm):GHSA-6j4f-fj2g-mc7p"},{"rule_id":"osv/GHSA-mh99-v99m-4gvg","severity":"high","message":"brace-expansion@5.0.5 (npm) is affected by GHSA-mh99-v99m-4gvg","path":"pnpm-lock.yaml","line":null,"fingerprint":"brace-expansion@5.0.5 (npm):GHSA-mh99-v99m-4gvg"},{"rule_id":"osv/GHSA-qhr7-859c-m2p7","severity":"high","message":"brace-expansion@5.0.5 (npm) is affected by GHSA-qhr7-859c-m2p7","path":"pnpm-lock.yaml","line":null,"fingerprint":"brace-expansion@5.0.5 (npm):GHSA-qhr7-859c-m2p7"},{"rule_id":"osv/GHSA-rgw5-rvv9-x895","severity":"high","message":"brace-expansion@5.0.5 (npm) is affected by GHSA-rgw5-rvv9-x895","path":"pnpm-lock.yaml","line":null,"fingerprint":"brace-expansion@5.0.5 (npm):GHSA-rgw5-rvv9-x895"},{"rule_id":"osv/GHSA-73wf-gq98-2v4g","severity":"high","message":"browserslist@4.28.1 (npm) is affected by GHSA-73wf-gq98-2v4g","path":"pnpm-lock.yaml","line":null,"fingerprint":"browserslist@4.28.1 (npm):GHSA-73wf-gq98-2v4g"},{"rule_id":"osv/GHSA-c83g-rgw3-j3cx","severity":"high","message":"browserslist@4.28.1 (npm) is affected by GHSA-c83g-rgw3-j3cx","path":"pnpm-lock.yaml","line":null,"fingerprint":"browserslist@4.28.1 (npm):GHSA-c83g-rgw3-j3cx"},{"rule_id":"osv/GHSA-4c8g-83qw-93j6","severity":"high","message":"fast-uri@3.1.0 (npm) is affected by GHSA-4c8g-83qw-93j6","path":"pnpm-lock.yaml","line":null,"fingerprint":"fast-uri@3.1.0 (npm):GHSA-4c8g-83qw-93j6"},{"rule_id":"osv/GHSA-7p8r-x3mc-p8w7","severity":"high","message":"fast-uri@3.1.0 (npm) is affected by GHSA-7p8r-x3mc-p8w7","path":"pnpm-lock.yaml","line":null,"fingerprint":"fast-uri@3.1.0 (npm):GHSA-7p8r-x3mc-p8w7"},{"rule_id":"osv/GHSA-f65p-4m7j-42xc","severity":"high","message":"fast-uri@3.1.0 (npm) is affected by GHSA-f65p-4m7j-42xc","path":"pnpm-lock.yaml","line":null,"fingerprint":"fast-uri@3.1.0 (npm):GHSA-f65p-4m7j-42xc"},{"rule_id":"osv/GHSA-jqff-g426-hqxp","severity":"high","message":"fast-uri@3.1.0 (npm) is affected by GHSA-jqff-g426-hqxp","path":"pnpm-lock.yaml","line":null,"fingerprint":"fast-uri@3.1.0 (npm):GHSA-jqff-g426-hqxp"},{"rule_id":"osv/GHSA-q3j6-qgpj-74h6","severity":"high","message":"fast-uri@3.1.0 (npm) is affected by GHSA-q3j6-qgpj-74h6","path":"pnpm-lock.yaml","line":null,"fingerprint":"fast-uri@3.1.0 (npm):GHSA-q3j6-qgpj-74h6"},{"rule_id":"osv/GHSA-qw65-cvwx-89v3","severity":"high","message":"fast-uri@3.1.0 (npm) is affected by GHSA-qw65-cvwx-89v3","path":"pnpm-lock.yaml","line":null,"fingerprint":"fast-uri@3.1.0 (npm):GHSA-qw65-cvwx-89v3"},{"rule_id":"osv/GHSA-v2hh-gcrm-f6hx","severity":"high","message":"fast-uri@3.1.0 (npm) is affected by GHSA-v2hh-gcrm-f6hx","path":"pnpm-lock.yaml","line":null,"fingerprint":"fast-uri@3.1.0 (npm):GHSA-v2hh-gcrm-f6hx"},{"rule_id":"osv/GHSA-v39h-62p7-jpjc","severity":"high","message":"fast-uri@3.1.0 (npm) is affected by GHSA-v39h-62p7-jpjc","path":"pnpm-lock.yaml","line":null,"fingerprint":"fast-uri@3.1.0 (npm):GHSA-v39h-62p7-jpjc"},{"rule_id":"osv/GHSA-px8p-9vwx-vf98","severity":"high","message":"fflate@0.7.4 (npm) is affected by GHSA-px8p-9vwx-vf98","path":"pnpm-lock.yaml","line":null,"fingerprint":"fflate@0.7.4 (npm):GHSA-px8p-9vwx-vf98"},{"rule_id":"osv/GHSA-hmw2-7cc7-3qxx","severity":"high","message":"form-data@4.0.5 (npm) is affected by GHSA-hmw2-7cc7-3qxx","path":"pnpm-lock.yaml","line":null,"fingerprint":"form-data@4.0.5 (npm):GHSA-hmw2-7cc7-3qxx"},{"rule_id":"osv/GHSA-5j98-mcp5-4vw2","severity":"high","message":"glob@10.3.10 (npm) is affected by GHSA-5j98-mcp5-4vw2","path":"pnpm-lock.yaml","line":null,"fingerprint":"glob@10.3.10 (npm):GHSA-5j98-mcp5-4vw2"},{"rule_id":"osv/GHSA-88fw-hqm2-52qc","severity":"high","message":"hono@4.12.9 (npm) is affected by GHSA-88fw-hqm2-52qc","path":"pnpm-lock.yaml","line":null,"fingerprint":"hono@4.12.9 (npm):GHSA-88fw-hqm2-52qc"},{"rule_id":"osv/GHSA-mwp4-54f8-5fhr","severity":"high","message":"ip-address@10.1.0 (npm) is affected by GHSA-mwp4-54f8-5fhr","path":"pnpm-lock.yaml","line":null,"fingerprint":"ip-address@10.1.0 (npm):GHSA-mwp4-54f8-5fhr"},{"rule_id":"osv/GHSA-qjx8-664m-686j","severity":"high","message":"js-cookie@3.0.5 (npm) is affected by GHSA-qjx8-664m-686j","path":"pnpm-lock.yaml","line":null,"fingerprint":"js-cookie@3.0.5 (npm):GHSA-qjx8-664m-686j"},{"rule_id":"osv/GHSA-2883-xcg3-v3hh","severity":"high","message":"js-yaml@4.1.1 (npm) is affected by GHSA-2883-xcg3-v3hh","path":"pnpm-lock.yaml","line":null,"fingerprint":"js-yaml@4.1.1 (npm):GHSA-2883-xcg3-v3hh"},{"rule_id":"osv/GHSA-52cp-r559-cp3m","severity":"high","message":"js-yaml@4.1.1 (npm) is affected by GHSA-52cp-r559-cp3m","path":"pnpm-lock.yaml","line":null,"fingerprint":"js-yaml@4.1.1 (npm):GHSA-52cp-r559-cp3m"},{"rule_id":"osv/GHSA-5p4m-2wfm-xmqj","severity":"high","message":"js-yaml@4.1.1 (npm) is affected by GHSA-5p4m-2wfm-xmqj","path":"pnpm-lock.yaml","line":null,"fingerprint":"js-yaml@4.1.1 (npm):GHSA-5p4m-2wfm-xmqj"},{"rule_id":"osv/GHSA-28wg-ghj8-5hjv","severity":"high","message":"nanoid@3.3.11 (npm) is affected by GHSA-28wg-ghj8-5hjv","path":"pnpm-lock.yaml","line":null,"fingerprint":"nanoid@3.3.11 (npm):GHSA-28wg-ghj8-5hjv"},{"rule_id":"osv/GHSA-2v37-7h3g-55p8","severity":"high","message":"nanoid@3.3.11 (npm) is affected by GHSA-2v37-7h3g-55p8","path":"pnpm-lock.yaml","line":null,"fingerprint":"nanoid@3.3.11 (npm):GHSA-2v37-7h3g-55p8"},{"rule_id":"osv/GHSA-xwg4-73v4-xw9w","severity":"high","message":"nanoid@3.3.11 (npm) is affected by GHSA-xwg4-73v4-xw9w","path":"pnpm-lock.yaml","line":null,"fingerprint":"nanoid@3.3.11 (npm):GHSA-xwg4-73v4-xw9w"},{"rule_id":"osv/GHSA-36qx-fr4f-26g5","severity":"high","message":"next@14.2.35 (npm) is affected by GHSA-36qx-fr4f-26g5","path":"pnpm-lock.yaml","line":null,"fingerprint":"next@14.2.35 (npm):GHSA-36qx-fr4f-26g5"},{"rule_id":"osv/GHSA-89xv-2m56-2m9x","severity":"high","message":"next@14.2.35 (npm) is affected by GHSA-89xv-2m56-2m9x","path":"pnpm-lock.yaml","line":null,"fingerprint":"next@14.2.35 (npm):GHSA-89xv-2m56-2m9x"},{"rule_id":"osv/GHSA-8h8q-6873-q5fj","severity":"high","message":"next@14.2.35 (npm) is affected by GHSA-8h8q-6873-q5fj","path":"pnpm-lock.yaml","line":null,"fingerprint":"next@14.2.35 (npm):GHSA-8h8q-6873-q5fj"},{"rule_id":"osv/GHSA-c4j6-fc7j-m34r","severity":"high","message":"next@14.2.35 (npm) is affected by GHSA-c4j6-fc7j-m34r","path":"pnpm-lock.yaml","line":null,"fingerprint":"next@14.2.35 (npm):GHSA-c4j6-fc7j-m34r"},{"rule_id":"osv/GHSA-h25m-26qc-wcjf","severity":"high","message":"next@14.2.35 (npm) is affected by GHSA-h25m-26qc-wcjf","path":"pnpm-lock.yaml","line":null,"fingerprint":"next@14.2.35 (npm):GHSA-h25m-26qc-wcjf"},{"rule_id":"osv/GHSA-m99w-x7hq-7vfj","severity":"high","message":"next@14.2.35 (npm) is affected by GHSA-m99w-x7hq-7vfj","path":"pnpm-lock.yaml","line":null,"fingerprint":"next@14.2.35 (npm):GHSA-m99w-x7hq-7vfj"},{"rule_id":"osv/GHSA-p3m5-59mp-jv5r","severity":"high","message":"next@14.2.35 (npm) is affected by GHSA-p3m5-59mp-jv5r","path":"pnpm-lock.yaml","line":null,"fingerprint":"next@14.2.35 (npm):GHSA-p3m5-59mp-jv5r"},{"rule_id":"osv/GHSA-p9j2-gv94-2wf4","severity":"high","message":"next@14.2.35 (npm) is affected by GHSA-p9j2-gv94-2wf4","path":"pnpm-lock.yaml","line":null,"fingerprint":"next@14.2.35 (npm):GHSA-p9j2-gv94-2wf4"},{"rule_id":"osv/GHSA-q4gf-8mx6-v5v3","severity":"high","message":"next@14.2.35 (npm) is affected by GHSA-q4gf-8mx6-v5v3","path":"pnpm-lock.yaml","line":null,"fingerprint":"next@14.2.35 (npm):GHSA-q4gf-8mx6-v5v3"},{"rule_id":"osv/GHSA-j3q9-mxjg-w52f","severity":"high","message":"path-to-regexp@8.3.0 (npm) is affected by GHSA-j3q9-mxjg-w52f","path":"pnpm-lock.yaml","line":null,"fingerprint":"path-to-regexp@8.3.0 (npm):GHSA-j3q9-mxjg-w52f"},{"rule_id":"osv/GHSA-6g55-p6wh-862q","severity":"high","message":"postcss@8.4.31 (npm) is affected by GHSA-6g55-p6wh-862q","path":"pnpm-lock.yaml","line":null,"fingerprint":"postcss@8.4.31 (npm):GHSA-6g55-p6wh-862q"},{"rule_id":"osv/GHSA-r28c-9q8g-f849","severity":"high","message":"postcss@8.4.31 (npm) is affected by GHSA-r28c-9q8g-f849","path":"pnpm-lock.yaml","line":null,"fingerprint":"postcss@8.4.31 (npm):GHSA-r28c-9q8g-f849"},{"rule_id":"osv/GHSA-6g55-p6wh-862q","severity":"high","message":"postcss@8.5.8 (npm) is affected by GHSA-6g55-p6wh-862q","path":"pnpm-lock.yaml","line":null,"fingerprint":"postcss@8.5.8 (npm):GHSA-6g55-p6wh-862q"},{"rule_id":"osv/GHSA-r28c-9q8g-f849","severity":"high","message":"postcss@8.5.8 (npm) is affected by GHSA-r28c-9q8g-f849","path":"pnpm-lock.yaml","line":null,"fingerprint":"postcss@8.5.8 (npm):GHSA-r28c-9q8g-f849"},{"rule_id":"osv/GHSA-f88m-g3jw-g9cj","severity":"high","message":"sharp@0.34.5 (npm) is affected by GHSA-f88m-g3jw-g9cj","path":"pnpm-lock.yaml","line":null,"fingerprint":"sharp@0.34.5 (npm):GHSA-f88m-g3jw-g9cj"},{"rule_id":"osv/GHSA-rgj7-g3m4-5g8c","severity":"high","message":"sharp@0.34.5 (npm) is affected by GHSA-rgj7-g3m4-5g8c","path":"pnpm-lock.yaml","line":null,"fingerprint":"sharp@0.34.5 (npm):GHSA-rgj7-g3m4-5g8c"},{"rule_id":"osv/GHSA-wq5f-xc86-pv6w","severity":"high","message":"sharp@0.34.5 (npm) is affected by GHSA-wq5f-xc86-pv6w","path":"pnpm-lock.yaml","line":null,"fingerprint":"sharp@0.34.5 (npm):GHSA-wq5f-xc86-pv6w"},{"rule_id":"osv/GHSA-68fv-2mgg-jv7q","severity":"high","message":"source-map-js@1.2.1 (npm) is affected by GHSA-68fv-2mgg-jv7q","path":"pnpm-lock.yaml","line":null,"fingerprint":"source-map-js@1.2.1 (npm):GHSA-68fv-2mgg-jv7q"},{"rule_id":"osv/GHSA-96hv-2xvq-fx4p","severity":"high","message":"ws@8.18.0 (npm) is affected by GHSA-96hv-2xvq-fx4p","path":"pnpm-lock.yaml","line":null,"fingerprint":"ws@8.18.0 (npm):GHSA-96hv-2xvq-fx4p"},{"rule_id":"osv/GHSA-mrhx-c7xc-m3w5","severity":"high","message":"zod@3.25.76 (npm) is affected by GHSA-mrhx-c7xc-m3w5","path":"pnpm-lock.yaml","line":null,"fingerprint":"zod@3.25.76 (npm):GHSA-mrhx-c7xc-m3w5"},{"rule_id":"osv/GHSA-5474-4w2j-mq4c","severity":"medium","message":"@anthropic-ai/sdk@0.80.0 (npm) is affected by GHSA-5474-4w2j-mq4c","path":"pnpm-lock.yaml","line":null,"fingerprint":"@anthropic-ai/sdk@0.80.0 (npm):GHSA-5474-4w2j-mq4c"},{"rule_id":"osv/GHSA-p7fg-763f-g4gf","severity":"medium","message":"@anthropic-ai/sdk@0.80.0 (npm) is affected by GHSA-p7fg-763f-g4gf","path":"pnpm-lock.yaml","line":null,"fingerprint":"@anthropic-ai/sdk@0.80.0 (npm):GHSA-p7fg-763f-g4gf"},{"rule_id":"osv/GHSA-92pp-h63x-v22m","severity":"medium","message":"@hono/node-server@1.19.11 (npm) is affected by GHSA-92pp-h63x-v22m","path":"pnpm-lock.yaml","line":null,"fingerprint":"@hono/node-server@1.19.11 (npm):GHSA-92pp-h63x-v22m"},{"rule_id":"osv/GHSA-frvp-7c67-39w9","severity":"medium","message":"@hono/node-server@1.19.11 (npm) is affected by GHSA-frvp-7c67-39w9","path":"pnpm-lock.yaml","line":null,"fingerprint":"@hono/node-server@1.19.11 (npm):GHSA-frvp-7c67-39w9"},{"rule_id":"osv/GHSA-jpvv-r467-5p4w","severity":"medium","message":"@hono/node-server@1.19.11 (npm) is affected by GHSA-jpvv-r467-5p4w","path":"pnpm-lock.yaml","line":null,"fingerprint":"@hono/node-server@1.19.11 (npm):GHSA-jpvv-r467-5p4w"},{"rule_id":"osv/GHSA-rmxm-3fg6-px4f","severity":"medium","message":"@hono/node-server@1.19.11 (npm) is affected by GHSA-rmxm-3fg6-px4f","path":"pnpm-lock.yaml","line":null,"fingerprint":"@hono/node-server@1.19.11 (npm):GHSA-rmxm-3fg6-px4f"},{"rule_id":"osv/GHSA-6prh-2h8m-c8cw","severity":"medium","message":"@modelcontextprotocol/sdk@1.28.0 (npm) is affected by GHSA-6prh-2h8m-c8cw","path":"pnpm-lock.yaml","line":null,"fingerprint":"@modelcontextprotocol/sdk@1.28.0 (npm):GHSA-6prh-2h8m-c8cw"},{"rule_id":"osv/GHSA-rvq5-wwqv-78pq","severity":"medium","message":"@modelcontextprotocol/sdk@1.28.0 (npm) is affected by GHSA-rvq5-wwqv-78pq","path":"pnpm-lock.yaml","line":null,"fingerprint":"@modelcontextprotocol/sdk@1.28.0 (npm):GHSA-rvq5-wwqv-78pq"},{"rule_id":"osv/GHSA-3p68-rc4w-qgx5","severity":"medium","message":"axios@1.13.6 (npm) is affected by GHSA-3p68-rc4w-qgx5","path":"pnpm-lock.yaml","line":null,"fingerprint":"axios@1.13.6 (npm):GHSA-3p68-rc4w-qgx5"},{"rule_id":"osv/GHSA-3w6x-2g7m-8v23","severity":"medium","message":"axios@1.13.6 (npm) is affected by GHSA-3w6x-2g7m-8v23","path":"pnpm-lock.yaml","line":null,"fingerprint":"axios@1.13.6 (npm):GHSA-3w6x-2g7m-8v23"},{"rule_id":"osv/GHSA-42h9-826w-cgv3","severity":"medium","message":"axios@1.13.6 (npm) is affected by GHSA-42h9-826w-cgv3","path":"pnpm-lock.yaml","line":null,"fingerprint":"axios@1.13.6 (npm):GHSA-42h9-826w-cgv3"},{"rule_id":"osv/GHSA-445q-vr5w-6q77","severity":"medium","message":"axios@1.13.6 (npm) is affected by GHSA-445q-vr5w-6q77","path":"pnpm-lock.yaml","line":null,"fingerprint":"axios@1.13.6 (npm):GHSA-445q-vr5w-6q77"},{"rule_id":"osv/GHSA-4hqw-qxg8-jxx2","severity":"medium","message":"axios@1.13.6 (npm) is affected by GHSA-4hqw-qxg8-jxx2","path":"pnpm-lock.yaml","line":null,"fingerprint":"axios@1.13.6 (npm):GHSA-4hqw-qxg8-jxx2"},{"rule_id":"osv/GHSA-5c9x-8gcm-mpgx","severity":"medium","message":"axios@1.13.6 (npm) is affected by GHSA-5c9x-8gcm-mpgx","path":"pnpm-lock.yaml","line":null,"fingerprint":"axios@1.13.6 (npm):GHSA-5c9x-8gcm-mpgx"},{"rule_id":"osv/GHSA-7q8q-rj6j-mhjq","severity":"medium","message":"axios@1.13.6 (npm) is affected by GHSA-7q8q-rj6j-mhjq","path":"pnpm-lock.yaml","line":null,"fingerprint":"axios@1.13.6 (npm):GHSA-7q8q-rj6j-mhjq"},{"rule_id":"osv/GHSA-898c-q2cr-xwhg","severity":"medium","message":"axios@1.13.6 (npm) is affected by GHSA-898c-q2cr-xwhg","path":"pnpm-lock.yaml","line":null,"fingerprint":"axios@1.13.6 (npm):GHSA-898c-q2cr-xwhg"},{"rule_id":"osv/GHSA-9fr6-4gfg-395g","severity":"medium","message":"axios@1.13.6 (npm) is affected by GHSA-9fr6-4gfg-395g","path":"pnpm-lock.yaml","line":null,"fingerprint":"axios@1.13.6 (npm):GHSA-9fr6-4gfg-395g"},{"rule_id":"osv/GHSA-fvcv-3m26-pcqx","severity":"medium","message":"axios@1.13.6 (npm) is affected by GHSA-fvcv-3m26-pcqx","path":"pnpm-lock.yaml","line":null,"fingerprint":"axios@1.13.6 (npm):GHSA-fvcv-3m26-pcqx"},{"rule_id":"osv/GHSA-j8rh-479h-cp32","severity":"medium","message":"axios@1.13.6 (npm) is affected by GHSA-j8rh-479h-cp32","path":"pnpm-lock.yaml","line":null,"fingerprint":"axios@1.13.6 (npm):GHSA-j8rh-479h-cp32"},{"rule_id":"osv/GHSA-jqh4-m9w3-8hp9","severity":"medium","message":"axios@1.13.6 (npm) is affected by GHSA-jqh4-m9w3-8hp9","path":"pnpm-lock.yaml","line":null,"fingerprint":"axios@1.13.6 (npm):GHSA-jqh4-m9w3-8hp9"},{"rule_id":"osv/GHSA-m7pr-hjqh-92cm","severity":"medium","message":"axios@1.13.6 (npm) is affected by GHSA-m7pr-hjqh-92cm","path":"pnpm-lock.yaml","line":null,"fingerprint":"axios@1.13.6 (npm):GHSA-m7pr-hjqh-92cm"},{"rule_id":"osv/GHSA-mmx7-hfxf-jppx","severity":"medium","message":"axios@1.13.6 (npm) is affected by GHSA-mmx7-hfxf-jppx","path":"pnpm-lock.yaml","line":null,"fingerprint":"axios@1.13.6 (npm):GHSA-mmx7-hfxf-jppx"},{"rule_id":"osv/GHSA-mwf2-3pr3-8698","severity":"medium","message":"axios@1.13.6 (npm) is affected by GHSA-mwf2-3pr3-8698","path":"pnpm-lock.yaml","line":null,"fingerprint":"axios@1.13.6 (npm):GHSA-mwf2-3pr3-8698"},{"rule_id":"osv/GHSA-pmv8-rq9r-6j72","severity":"medium","message":"axios@1.13.6 (npm) is affected by GHSA-pmv8-rq9r-6j72","path":"pnpm-lock.yaml","line":null,"fingerprint":"axios@1.13.6 (npm):GHSA-pmv8-rq9r-6j72"},{"rule_id":"osv/GHSA-vf2m-468p-8v99","severity":"medium","message":"axios@1.13.6 (npm) is affected by GHSA-vf2m-468p-8v99","path":"pnpm-lock.yaml","line":null,"fingerprint":"axios@1.13.6 (npm):GHSA-vf2m-468p-8v99"},{"rule_id":"osv/GHSA-vh66-26gq-q6x8","severity":"medium","message":"axios@1.13.6 (npm) is affected by GHSA-vh66-26gq-q6x8","path":"pnpm-lock.yaml","line":null,"fingerprint":"axios@1.13.6 (npm):GHSA-vh66-26gq-q6x8"},{"rule_id":"osv/GHSA-w9j2-pvgh-6h63","severity":"medium","message":"axios@1.13.6 (npm) is affected by GHSA-w9j2-pvgh-6h63","path":"pnpm-lock.yaml","line":null,"fingerprint":"axios@1.13.6 (npm):GHSA-w9j2-pvgh-6h63"},{"rule_id":"osv/GHSA-xx6v-rp6x-q39c","severity":"medium","message":"axios@1.13.6 (npm) is affected by GHSA-xx6v-rp6x-q39c","path":"pnpm-lock.yaml","line":null,"fingerprint":"axios@1.13.6 (npm):GHSA-xx6v-rp6x-q39c"},{"rule_id":"osv/GHSA-w5vr-8v7q-w6rv","severity":"medium","message":"baseline-browser-mapping@2.10.10 (npm) is affected by GHSA-w5vr-8v7q-w6rv","path":"pnpm-lock.yaml","line":null,"fingerprint":"baseline-browser-mapping@2.10.10 (npm):GHSA-w5vr-8v7q-w6rv"},{"rule_id":"osv/GHSA-f886-m6hf-6m8v","severity":"medium","message":"brace-expansion@1.1.12 (npm) is affected by GHSA-f886-m6hf-6m8v","path":"pnpm-lock.yaml","line":null,"fingerprint":"brace-expansion@1.1.12 (npm):GHSA-f886-m6hf-6m8v"},{"rule_id":"osv/GHSA-q2hr-2g5m-vwhr","severity":"medium","message":"brace-expansion@1.1.12 (npm) is affected by GHSA-q2hr-2g5m-vwhr","path":"pnpm-lock.yaml","line":null,"fingerprint":"brace-expansion@1.1.12 (npm):GHSA-q2hr-2g5m-vwhr"},{"rule_id":"osv/GHSA-f886-m6hf-6m8v","severity":"medium","message":"brace-expansion@2.0.2 (npm) is affected by GHSA-f886-m6hf-6m8v","path":"pnpm-lock.yaml","line":null,"fingerprint":"brace-expansion@2.0.2 (npm):GHSA-f886-m6hf-6m8v"},{"rule_id":"osv/GHSA-q2hr-2g5m-vwhr","severity":"medium","message":"brace-expansion@2.0.2 (npm) is affected by GHSA-q2hr-2g5m-vwhr","path":"pnpm-lock.yaml","line":null,"fingerprint":"brace-expansion@2.0.2 (npm):GHSA-q2hr-2g5m-vwhr"},{"rule_id":"osv/GHSA-jxxr-4gwj-5jf2","severity":"medium","message":"brace-expansion@5.0.5 (npm) is affected by GHSA-jxxr-4gwj-5jf2","path":"pnpm-lock.yaml","line":null,"fingerprint":"brace-expansion@5.0.5 (npm):GHSA-jxxr-4gwj-5jf2"},{"rule_id":"osv/GHSA-q2hr-2g5m-vwhr","severity":"medium","message":"brace-expansion@5.0.5 (npm) is affected by GHSA-q2hr-2g5m-vwhr","path":"pnpm-lock.yaml","line":null,"fingerprint":"brace-expansion@5.0.5 (npm):GHSA-q2hr-2g5m-vwhr"},{"rule_id":"osv/GHSA-gcqx-w48m-w2h4","severity":"medium","message":"deepmerge@4.3.1 (npm) is affected by GHSA-gcqx-w48m-w2h4","path":"pnpm-lock.yaml","line":null,"fingerprint":"deepmerge@4.3.1 (npm):GHSA-gcqx-w48m-w2h4"},{"rule_id":"osv/GHSA-hrr3-gc8f-f4qj","severity":"medium","message":"fast-uri@3.1.0 (npm) is affected by GHSA-hrr3-gc8f-f4qj","path":"pnpm-lock.yaml","line":null,"fingerprint":"fast-uri@3.1.0 (npm):GHSA-hrr3-gc8f-f4qj"},{"rule_id":"osv/GHSA-w74x-v6f9-j3xg","severity":"medium","message":"fast-uri@3.1.0 (npm) is affected by GHSA-w74x-v6f9-j3xg","path":"pnpm-lock.yaml","line":null,"fingerprint":"fast-uri@3.1.0 (npm):GHSA-w74x-v6f9-j3xg"},{"rule_id":"osv/GHSA-r4q5-vmmm-2653","severity":"medium","message":"follow-redirects@1.15.11 (npm) is affected by GHSA-r4q5-vmmm-2653","path":"pnpm-lock.yaml","line":null,"fingerprint":"follow-redirects@1.15.11 (npm):GHSA-r4q5-vmmm-2653"},{"rule_id":"osv/GHSA-3g3m-2fjr-6pw4","severity":"medium","message":"glob@10.3.10 (npm) is affected by GHSA-3g3m-2fjr-6pw4","path":"pnpm-lock.yaml","line":null,"fingerprint":"glob@10.3.10 (npm):GHSA-3g3m-2fjr-6pw4"},{"rule_id":"osv/GHSA-26pp-8wgv-hjvm","severity":"medium","message":"hono@4.12.9 (npm) is affected by GHSA-26pp-8wgv-hjvm","path":"pnpm-lock.yaml","line":null,"fingerprint":"hono@4.12.9 (npm):GHSA-26pp-8wgv-hjvm"},{"rule_id":"osv/GHSA-2gcr-mfcq-wcc3","severity":"medium","message":"hono@4.12.9 (npm) is affected by GHSA-2gcr-mfcq-wcc3","path":"pnpm-lock.yaml","line":null,"fingerprint":"hono@4.12.9 (npm):GHSA-2gcr-mfcq-wcc3"},{"rule_id":"osv/GHSA-3hrh-pfw6-9m5x","severity":"medium","message":"hono@4.12.9 (npm) is affected by GHSA-3hrh-pfw6-9m5x","path":"pnpm-lock.yaml","line":null,"fingerprint":"hono@4.12.9 (npm):GHSA-3hrh-pfw6-9m5x"},{"rule_id":"osv/GHSA-458j-xx4x-4375","severity":"medium","message":"hono@4.12.9 (npm) is affected by GHSA-458j-xx4x-4375","path":"pnpm-lock.yaml","line":null,"fingerprint":"hono@4.12.9 (npm):GHSA-458j-xx4x-4375"},{"rule_id":"osv/GHSA-46wx-v44x-9hh2","severity":"medium","message":"hono@4.12.9 (npm) is affected by GHSA-46wx-v44x-9hh2","path":"pnpm-lock.yaml","line":null,"fingerprint":"hono@4.12.9 (npm):GHSA-46wx-v44x-9hh2"},{"rule_id":"osv/GHSA-4h7h-rv7c-7m2v","severity":"medium","message":"hono@4.12.9 (npm) is affected by GHSA-4h7h-rv7c-7m2v","path":"pnpm-lock.yaml","line":null,"fingerprint":"hono@4.12.9 (npm):GHSA-4h7h-rv7c-7m2v"},{"rule_id":"osv/GHSA-4m76-xfj5-7975","severity":"medium","message":"hono@4.12.9 (npm) is affected by GHSA-4m76-xfj5-7975","path":"pnpm-lock.yaml","line":null,"fingerprint":"hono@4.12.9 (npm):GHSA-4m76-xfj5-7975"},{"rule_id":"osv/GHSA-54fx-42gc-7vw4","severity":"medium","message":"hono@4.12.9 (npm) is affected by GHSA-54fx-42gc-7vw4","path":"pnpm-lock.yaml","line":null,"fingerprint":"hono@4.12.9 (npm):GHSA-54fx-42gc-7vw4"},{"rule_id":"osv/GHSA-5r4p-p66f-jhc7","severity":"medium","message":"hono@4.12.9 (npm) is affected by GHSA-5r4p-p66f-jhc7","path":"pnpm-lock.yaml","line":null,"fingerprint":"hono@4.12.9 (npm):GHSA-5r4p-p66f-jhc7"},{"rule_id":"osv/GHSA-69xw-7hcm-h432","severity":"medium","message":"hono@4.12.9 (npm) is affected by GHSA-69xw-7hcm-h432","path":"pnpm-lock.yaml","line":null,"fingerprint":"hono@4.12.9 (npm):GHSA-69xw-7hcm-h432"},{"rule_id":"osv/GHSA-8j4g-w8fx-2239","severity":"medium","message":"hono@4.12.9 (npm) is affected by GHSA-8j4g-w8fx-2239","path":"pnpm-lock.yaml","line":null,"fingerprint":"hono@4.12.9 (npm):GHSA-8j4g-w8fx-2239"},{"rule_id":"osv/GHSA-9vqf-7f2p-gf9v","severity":"medium","message":"hono@4.12.9 (npm) is affected by GHSA-9vqf-7f2p-gf9v","path":"pnpm-lock.yaml","line":null,"fingerprint":"hono@4.12.9 (npm):GHSA-9vqf-7f2p-gf9v"},{"rule_id":"osv/GHSA-crvj-82cr-hjcx","severity":"medium","message":"hono@4.12.9 (npm) is affected by GHSA-crvj-82cr-hjcx","path":"pnpm-lock.yaml","line":null,"fingerprint":"hono@4.12.9 (npm):GHSA-crvj-82cr-hjcx"},{"rule_id":"osv/GHSA-f23p-vx2j-j53r","severity":"medium","message":"hono@4.12.9 (npm) is affected by GHSA-f23p-vx2j-j53r","path":"pnpm-lock.yaml","line":null,"fingerprint":"hono@4.12.9 (npm):GHSA-f23p-vx2j-j53r"},{"rule_id":"osv/GHSA-f577-qrjj-4474","severity":"medium","message":"hono@4.12.9 (npm) is affected by GHSA-f577-qrjj-4474","path":"pnpm-lock.yaml","line":null,"fingerprint":"hono@4.12.9 (npm):GHSA-f577-qrjj-4474"},{"rule_id":"osv/GHSA-g6gw-c38x-mqfc","severity":"medium","message":"hono@4.12.9 (npm) is affected by GHSA-g6gw-c38x-mqfc","path":"pnpm-lock.yaml","line":null,"fingerprint":"hono@4.12.9 (npm):GHSA-g6gw-c38x-mqfc"},{"rule_id":"osv/GHSA-gqvv-2mrq-wpjv","severity":"medium","message":"hono@4.12.9 (npm) is affected by GHSA-gqvv-2mrq-wpjv","path":"pnpm-lock.yaml","line":null,"fingerprint":"hono@4.12.9 (npm):GHSA-gqvv-2mrq-wpjv"},{"rule_id":"osv/GHSA-h7mg-cq63-vhpq","severity":"medium","message":"hono@4.12.9 (npm) is affected by GHSA-h7mg-cq63-vhpq","path":"pnpm-lock.yaml","line":null,"fingerprint":"hono@4.12.9 (npm):GHSA-h7mg-cq63-vhpq"},{"rule_id":"osv/GHSA-hvrm-45r6-mjfj","severity":"medium","message":"hono@4.12.9 (npm) is affected by GHSA-hvrm-45r6-mjfj","path":"pnpm-lock.yaml","line":null,"fingerprint":"hono@4.12.9 (npm):GHSA-hvrm-45r6-mjfj"},{"rule_id":"osv/GHSA-hxh3-vqpv-xpqv","severity":"medium","message":"hono@4.12.9 (npm) is affected by GHSA-hxh3-vqpv-xpqv","path":"pnpm-lock.yaml","line":null,"fingerprint":"hono@4.12.9 (npm):GHSA-hxh3-vqpv-xpqv"},{"rule_id":"osv/GHSA-j6c9-x7qj-28xf","severity":"medium","message":"hono@4.12.9 (npm) is affected by GHSA-j6c9-x7qj-28xf","path":"pnpm-lock.yaml","line":null,"fingerprint":"hono@4.12.9 (npm):GHSA-j6c9-x7qj-28xf"},{"rule_id":"osv/GHSA-p77w-8qqv-26rm","severity":"medium","message":"hono@4.12.9 (npm) is affected by GHSA-p77w-8qqv-26rm","path":"pnpm-lock.yaml","line":null,"fingerprint":"hono@4.12.9 (npm):GHSA-p77w-8qqv-26rm"},{"rule_id":"osv/GHSA-qp7p-654g-cw7p","severity":"medium","message":"hono@4.12.9 (npm) is affected by GHSA-qp7p-654g-cw7p","path":"pnpm-lock.yaml","line":null,"fingerprint":"hono@4.12.9 (npm):GHSA-qp7p-654g-cw7p"},{"rule_id":"osv/GHSA-r5rp-j6wh-rvv4","severity":"medium","message":"hono@4.12.9 (npm) is affected by GHSA-r5rp-j6wh-rvv4","path":"pnpm-lock.yaml","line":null,"fingerprint":"hono@4.12.9 (npm):GHSA-r5rp-j6wh-rvv4"},{"rule_id":"osv/GHSA-rv63-4mwf-qqc2","severity":"medium","message":"hono@4.12.9 (npm) is affected by GHSA-rv63-4mwf-qqc2","path":"pnpm-lock.yaml","line":null,"fingerprint":"hono@4.12.9 (npm):GHSA-rv63-4mwf-qqc2"},{"rule_id":"osv/GHSA-w62v-xxxg-mg59","severity":"medium","message":"hono@4.12.9 (npm) is affected by GHSA-w62v-xxxg-mg59","path":"pnpm-lock.yaml","line":null,"fingerprint":"hono@4.12.9 (npm):GHSA-w62v-xxxg-mg59"},{"rule_id":"osv/GHSA-wgpf-jwqj-8h8p","severity":"medium","message":"hono@4.12.9 (npm) is affected by GHSA-wgpf-jwqj-8h8p","path":"pnpm-lock.yaml","line":null,"fingerprint":"hono@4.12.9 (npm):GHSA-wgpf-jwqj-8h8p"},{"rule_id":"osv/GHSA-wmmm-f939-6g9c","severity":"medium","message":"hono@4.12.9 (npm) is affected by GHSA-wmmm-f939-6g9c","path":"pnpm-lock.yaml","line":null,"fingerprint":"hono@4.12.9 (npm):GHSA-wmmm-f939-6g9c"},{"rule_id":"osv/GHSA-wwfh-h76j-fc44","severity":"medium","message":"hono@4.12.9 (npm) is affected by GHSA-wwfh-h76j-fc44","path":"pnpm-lock.yaml","line":null,"fingerprint":"hono@4.12.9 (npm):GHSA-wwfh-h76j-fc44"},{"rule_id":"osv/GHSA-xf4j-xp2r-rqqx","severity":"medium","message":"hono@4.12.9 (npm) is affected by GHSA-xf4j-xp2r-rqqx","path":"pnpm-lock.yaml","line":null,"fingerprint":"hono@4.12.9 (npm):GHSA-xf4j-xp2r-rqqx"},{"rule_id":"osv/GHSA-xgm2-5f3f-mvvc","severity":"medium","message":"hono@4.12.9 (npm) is affected by GHSA-xgm2-5f3f-mvvc","path":"pnpm-lock.yaml","line":null,"fingerprint":"hono@4.12.9 (npm):GHSA-xgm2-5f3f-mvvc"},{"rule_id":"osv/GHSA-xpcf-pg52-r92g","severity":"medium","message":"hono@4.12.9 (npm) is affected by GHSA-xpcf-pg52-r92g","path":"pnpm-lock.yaml","line":null,"fingerprint":"hono@4.12.9 (npm):GHSA-xpcf-pg52-r92g"},{"rule_id":"osv/GHSA-xrhx-7g5j-rcj5","severity":"medium","message":"hono@4.12.9 (npm) is affected by GHSA-xrhx-7g5j-rcj5","path":"pnpm-lock.yaml","line":null,"fingerprint":"hono@4.12.9 (npm):GHSA-xrhx-7g5j-rcj5"},{"rule_id":"osv/GHSA-h3mg-xc3c-68pw","severity":"medium","message":"ip-address@10.1.0 (npm) is affected by GHSA-h3mg-xc3c-68pw","path":"pnpm-lock.yaml","line":null,"fingerprint":"ip-address@10.1.0 (npm):GHSA-h3mg-xc3c-68pw"},{"rule_id":"osv/GHSA-j6r3-76f7-8jcv","severity":"medium","message":"ip-address@10.1.0 (npm) is affected by GHSA-j6r3-76f7-8jcv","path":"pnpm-lock.yaml","line":null,"fingerprint":"ip-address@10.1.0 (npm):GHSA-j6r3-76f7-8jcv"},{"rule_id":"osv/GHSA-rpw4-54j3-4h4q","severity":"medium","message":"ip-address@10.1.0 (npm) is affected by GHSA-rpw4-54j3-4h4q","path":"pnpm-lock.yaml","line":null,"fingerprint":"ip-address@10.1.0 (npm):GHSA-rpw4-54j3-4h4q"},{"rule_id":"osv/GHSA-rxp7-6hxx-x8q5","severity":"medium","message":"ip-address@10.1.0 (npm) is affected by GHSA-rxp7-6hxx-x8q5","path":"pnpm-lock.yaml","line":null,"fingerprint":"ip-address@10.1.0 (npm):GHSA-rxp7-6hxx-x8q5"},{"rule_id":"osv/GHSA-v2v4-37r5-5v8g","severity":"medium","message":"ip-address@10.1.0 (npm) is affected by GHSA-v2v4-37r5-5v8g","path":"pnpm-lock.yaml","line":null,"fingerprint":"ip-address@10.1.0 (npm):GHSA-v2v4-37r5-5v8g"},{"rule_id":"osv/GHSA-h67p-54hq-rp68","severity":"medium","message":"js-yaml@4.1.1 (npm) is affected by GHSA-h67p-54hq-rp68","path":"pnpm-lock.yaml","line":null,"fingerprint":"js-yaml@4.1.1 (npm):GHSA-h67p-54hq-rp68"},{"rule_id":"osv/GHSA-g3hv-75wg-m249","severity":"medium","message":"minimatch@10.2.4 (npm) is affected by GHSA-g3hv-75wg-m249","path":"pnpm-lock.yaml","line":null,"fingerprint":"minimatch@10.2.4 (npm):GHSA-g3hv-75wg-m249"},{"rule_id":"osv/GHSA-g3hv-75wg-m249","severity":"medium","message":"minimatch@9.0.9 (npm) is affected by GHSA-g3hv-75wg-m249","path":"pnpm-lock.yaml","line":null,"fingerprint":"minimatch@9.0.9 (npm):GHSA-g3hv-75wg-m249"},{"rule_id":"osv/GHSA-3x4c-7xq6-9pq8","severity":"medium","message":"next@14.2.35 (npm) is affected by GHSA-3x4c-7xq6-9pq8","path":"pnpm-lock.yaml","line":null,"fingerprint":"next@14.2.35 (npm):GHSA-3x4c-7xq6-9pq8"},{"rule_id":"osv/GHSA-4633-3j49-mh5q","severity":"medium","message":"next@14.2.35 (npm) is affected by GHSA-4633-3j49-mh5q","path":"pnpm-lock.yaml","line":null,"fingerprint":"next@14.2.35 (npm):GHSA-4633-3j49-mh5q"},{"rule_id":"osv/GHSA-4c39-4ccg-62r3","severity":"medium","message":"next@14.2.35 (npm) is affected by GHSA-4c39-4ccg-62r3","path":"pnpm-lock.yaml","line":null,"fingerprint":"next@14.2.35 (npm):GHSA-4c39-4ccg-62r3"},{"rule_id":"osv/GHSA-68g3-v927-f742","severity":"medium","message":"next@14.2.35 (npm) is affected by GHSA-68g3-v927-f742","path":"pnpm-lock.yaml","line":null,"fingerprint":"next@14.2.35 (npm):GHSA-68g3-v927-f742"},{"rule_id":"osv/GHSA-955p-x3mx-jcvp","severity":"medium","message":"next@14.2.35 (npm) is affected by GHSA-955p-x3mx-jcvp","path":"pnpm-lock.yaml","line":null,"fingerprint":"next@14.2.35 (npm):GHSA-955p-x3mx-jcvp"},{"rule_id":"osv/GHSA-9g9p-9gw9-jx7f","severity":"medium","message":"next@14.2.35 (npm) is affected by GHSA-9g9p-9gw9-jx7f","path":"pnpm-lock.yaml","line":null,"fingerprint":"next@14.2.35 (npm):GHSA-9g9p-9gw9-jx7f"},{"rule_id":"osv/GHSA-ffhc-5mcf-pf4q","severity":"medium","message":"next@14.2.35 (npm) is affected by GHSA-ffhc-5mcf-pf4q","path":"pnpm-lock.yaml","line":null,"fingerprint":"next@14.2.35 (npm):GHSA-ffhc-5mcf-pf4q"},{"rule_id":"osv/GHSA-ggv3-7p47-pfv8","severity":"medium","message":"next@14.2.35 (npm) is affected by GHSA-ggv3-7p47-pfv8","path":"pnpm-lock.yaml","line":null,"fingerprint":"next@14.2.35 (npm):GHSA-ggv3-7p47-pfv8"},{"rule_id":"osv/GHSA-gx5p-jg67-6x7h","severity":"medium","message":"next@14.2.35 (npm) is affected by GHSA-gx5p-jg67-6x7h","path":"pnpm-lock.yaml","line":null,"fingerprint":"next@14.2.35 (npm):GHSA-gx5p-jg67-6x7h"},{"rule_id":"osv/GHSA-h64f-5h5j-jqjh","severity":"medium","message":"next@14.2.35 (npm) is affected by GHSA-h64f-5h5j-jqjh","path":"pnpm-lock.yaml","line":null,"fingerprint":"next@14.2.35 (npm):GHSA-h64f-5h5j-jqjh"},{"rule_id":"osv/GHSA-wfc6-r584-vfw7","severity":"medium","message":"next@14.2.35 (npm) is affected by GHSA-wfc6-r584-vfw7","path":"pnpm-lock.yaml","line":null,"fingerprint":"next@14.2.35 (npm):GHSA-wfc6-r584-vfw7"},{"rule_id":"osv/GHSA-27v5-c462-wpq7","severity":"medium","message":"path-to-regexp@8.3.0 (npm) is affected by GHSA-27v5-c462-wpq7","path":"pnpm-lock.yaml","line":null,"fingerprint":"path-to-regexp@8.3.0 (npm):GHSA-27v5-c462-wpq7"},{"rule_id":"osv/GHSA-fxqj-rqcc-2cmp","severity":"medium","message":"postcss@8.4.31 (npm) is affected by GHSA-fxqj-rqcc-2cmp","path":"pnpm-lock.yaml","line":null,"fingerprint":"postcss@8.4.31 (npm):GHSA-fxqj-rqcc-2cmp"},{"rule_id":"osv/GHSA-qx2v-qp2m-jg93","severity":"medium","message":"postcss@8.4.31 (npm) is affected by GHSA-qx2v-qp2m-jg93","path":"pnpm-lock.yaml","line":null,"fingerprint":"postcss@8.4.31 (npm):GHSA-qx2v-qp2m-jg93"},{"rule_id":"osv/GHSA-fxqj-rqcc-2cmp","severity":"medium","message":"postcss@8.5.8 (npm) is affected by GHSA-fxqj-rqcc-2cmp","path":"pnpm-lock.yaml","line":null,"fingerprint":"postcss@8.5.8 (npm):GHSA-fxqj-rqcc-2cmp"},{"rule_id":"osv/GHSA-qx2v-qp2m-jg93","severity":"medium","message":"postcss@8.5.8 (npm) is affected by GHSA-qx2v-qp2m-jg93","path":"pnpm-lock.yaml","line":null,"fingerprint":"postcss@8.5.8 (npm):GHSA-qx2v-qp2m-jg93"},{"rule_id":"osv/GHSA-rj75-hqrm-r3gf","severity":"medium","message":"postcss-selector-parser@6.1.2 (npm) is affected by GHSA-rj75-hqrm-r3gf","path":"pnpm-lock.yaml","line":null,"fingerprint":"postcss-selector-parser@6.1.2 (npm):GHSA-rj75-hqrm-r3gf"},{"rule_id":"osv/GHSA-w9m9-85wc-3x92","severity":"medium","message":"postcss-selector-parser@6.1.2 (npm) is affected by GHSA-w9m9-85wc-3x92","path":"pnpm-lock.yaml","line":null,"fingerprint":"postcss-selector-parser@6.1.2 (npm):GHSA-w9m9-85wc-3x92"},{"rule_id":"osv/GHSA-rj75-hqrm-r3gf","severity":"medium","message":"postcss-selector-parser@7.1.1 (npm) is affected by GHSA-rj75-hqrm-r3gf","path":"pnpm-lock.yaml","line":null,"fingerprint":"postcss-selector-parser@7.1.1 (npm):GHSA-rj75-hqrm-r3gf"},{"rule_id":"osv/GHSA-w9m9-85wc-3x92","severity":"medium","message":"postcss-selector-parser@7.1.1 (npm) is affected by GHSA-w9m9-85wc-3x92","path":"pnpm-lock.yaml","line":null,"fingerprint":"postcss-selector-parser@7.1.1 (npm):GHSA-w9m9-85wc-3x92"},{"rule_id":"osv/GHSA-4mjr-xmp4-gh2g","severity":"medium","message":"qs@6.15.0 (npm) is affected by GHSA-4mjr-xmp4-gh2g","path":"pnpm-lock.yaml","line":null,"fingerprint":"qs@6.15.0 (npm):GHSA-4mjr-xmp4-gh2g"},{"rule_id":"osv/GHSA-6pq8-jhm2-2vcw","severity":"medium","message":"qs@6.15.0 (npm) is affected by GHSA-6pq8-jhm2-2vcw","path":"pnpm-lock.yaml","line":null,"fingerprint":"qs@6.15.0 (npm):GHSA-6pq8-jhm2-2vcw"},{"rule_id":"osv/GHSA-q8mj-m7cp-5q26","severity":"medium","message":"qs@6.15.0 (npm) is affected by GHSA-q8mj-m7cp-5q26","path":"pnpm-lock.yaml","line":null,"fingerprint":"qs@6.15.0 (npm):GHSA-q8mj-m7cp-5q26"},{"rule_id":"osv/GHSA-x5fp-wj9c-mxmx","severity":"medium","message":"qs@6.15.0 (npm) is affected by GHSA-x5fp-wj9c-mxmx","path":"pnpm-lock.yaml","line":null,"fingerprint":"qs@6.15.0 (npm):GHSA-x5fp-wj9c-mxmx"},{"rule_id":"osv/GHSA-wx4j-mvgx-mqwp","severity":"medium","message":"satori@0.25.0 (npm) is affected by GHSA-wx4j-mvgx-mqwp","path":"pnpm-lock.yaml","line":null,"fingerprint":"satori@0.25.0 (npm):GHSA-wx4j-mvgx-mqwp"},{"rule_id":"osv/GHSA-58qx-3vcg-4xpx","severity":"medium","message":"ws@8.18.0 (npm) is affected by GHSA-58qx-3vcg-4xpx","path":"pnpm-lock.yaml","line":null,"fingerprint":"ws@8.18.0 (npm):GHSA-58qx-3vcg-4xpx"},{"rule_id":"osv/GHSA-4x5r-pxfx-6jf8","severity":"low","message":"@babel/core@7.29.0 (npm) is affected by GHSA-4x5r-pxfx-6jf8","path":"pnpm-lock.yaml","line":null,"fingerprint":"@babel/core@7.29.0 (npm):GHSA-4x5r-pxfx-6jf8"},{"rule_id":"osv/GHSA-xhjh-pmcv-23jw","severity":"low","message":"axios@1.13.6 (npm) is affected by GHSA-xhjh-pmcv-23jw","path":"pnpm-lock.yaml","line":null,"fingerprint":"axios@1.13.6 (npm):GHSA-xhjh-pmcv-23jw"},{"rule_id":"osv/GHSA-v422-hmwv-36x6","severity":"low","message":"body-parser@2.2.2 (npm) is affected by GHSA-v422-hmwv-36x6","path":"pnpm-lock.yaml","line":null,"fingerprint":"body-parser@2.2.2 (npm):GHSA-v422-hmwv-36x6"},{"rule_id":"osv/GHSA-333x-w4r6-6crp","severity":"low","message":"fast-uri@3.1.0 (npm) is affected by GHSA-333x-w4r6-6crp","path":"pnpm-lock.yaml","line":null,"fingerprint":"fast-uri@3.1.0 (npm):GHSA-333x-w4r6-6crp"},{"rule_id":"osv/GHSA-xhq7-xmqj-769h","severity":"low","message":"fast-uri@3.1.0 (npm) is affected by GHSA-xhq7-xmqj-769h","path":"pnpm-lock.yaml","line":null,"fingerprint":"fast-uri@3.1.0 (npm):GHSA-xhq7-xmqj-769h"},{"rule_id":"osv/GHSA-3gg2-335m-rxc6","severity":"low","message":"hono@4.12.9 (npm) is affected by GHSA-3gg2-335m-rxc6","path":"pnpm-lock.yaml","line":null,"fingerprint":"hono@4.12.9 (npm):GHSA-3gg2-335m-rxc6"},{"rule_id":"osv/GHSA-79qm-7rj5-m7r9","severity":"low","message":"hono@4.12.9 (npm) is affected by GHSA-79qm-7rj5-m7r9","path":"pnpm-lock.yaml","line":null,"fingerprint":"hono@4.12.9 (npm):GHSA-79qm-7rj5-m7r9"},{"rule_id":"osv/GHSA-hm8q-7f3q-5f36","severity":"low","message":"hono@4.12.9 (npm) is affected by GHSA-hm8q-7f3q-5f36","path":"pnpm-lock.yaml","line":null,"fingerprint":"hono@4.12.9 (npm):GHSA-hm8q-7f3q-5f36"},{"rule_id":"osv/GHSA-3g8h-86w9-wvmq","severity":"low","message":"next@14.2.35 (npm) is affected by GHSA-3g8h-86w9-wvmq","path":"pnpm-lock.yaml","line":null,"fingerprint":"next@14.2.35 (npm):GHSA-3g8h-86w9-wvmq"},{"rule_id":"osv/GHSA-vfv6-92ff-j949","severity":"low","message":"next@14.2.35 (npm) is affected by GHSA-vfv6-92ff-j949","path":"pnpm-lock.yaml","line":null,"fingerprint":"next@14.2.35 (npm):GHSA-vfv6-92ff-j949"}],"evidence":[],"data":{"ecosystems":["npm"]},"error":null},{"analyzer":"sec-actions","pillar":"security","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-posture","pillar":"security","status":"ok","tool_version":null,"metrics":{"check:security_policy":0.0,"check:dependency_updates":0.0,"check:signed_commits":0.0,"check:lockfiles":1.0,"signed_commit_share":0.0,"unpinned_manifests":0.0},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-distribution","pillar":"security","status":"ok","tool_version":null,"metrics":{"signals":0.0,"binary_assets":0.0,"suspicious":0.0},"findings":[],"evidence":[],"data":{"signals":[],"suspicious":false,"unusual_traction":false,"metadata":true},"error":null},{"analyzer":"qual-complexity","pillar":"quality","status":"ok","tool_version":"lizard 1.25.1","metrics":{"functions":902.0,"function_nloc":13313.0,"mean_ccn":2.5,"p90_ccn":6.0,"complex_functions":12.0,"long_functions":19.0,"many_param_functions":0.0,"risky_nloc_share":0.2838},"findings":[],"evidence":[{"kind":"complex-function","description":"handler in convex/vault.ts: complexity 54, 171 lines","ref":"convex/vault.ts","url":"https://github.com/tmoody1973/blk-exchange/blob/e0e2dad2498e6cf39d94ef41e0b4eeeae9a456c4/convex/vault.ts#L93","weight":0.9},{"kind":"complex-function","description":"handler in convex/achievements.ts: complexity 27, 124 lines","ref":"convex/achievements.ts","url":"https://github.com/tmoody1973/blk-exchange/blob/e0e2dad2498e6cf39d94ef41e0b4eeeae9a456c4/convex/achievements.ts#L20","weight":0.45},{"kind":"complex-function","description":"(anonymous) in convex/news/firecrawl.ts: complexity 24, 14 lines","ref":"convex/news/firecrawl.ts","url":"https://github.com/tmoody1973/blk-exchange/blob/e0e2dad2498e6cf39d94ef41e0b4eeeae9a456c4/convex/news/firecrawl.ts#L109","weight":0.4},{"kind":"complex-function","description":"handler in convex/articles.ts: complexity 20, 31 lines","ref":"convex/articles.ts","url":"https://github.com/tmoody1973/blk-exchange/blob/e0e2dad2498e6cf39d94ef41e0b4eeeae9a456c4/convex/articles.ts#L166","weight":0.3333333333333333},{"kind":"complex-function","description":"TickerDetailPage in src/app/(app)/market/[symbol]/page.tsx: complexity 20, 198 lines","ref":"src/app/(app)/market/[symbol]/page.tsx","url":"https://github.com/tmoody1973/blk-exchange/blob/e0e2dad2498e6cf39d94ef41e0b4eeeae9a456c4/src/app/(app)/market/[symbol]/page.tsx#L40","weight":0.3333333333333333},{"kind":"complex-function","description":"GuidedFirstTrade in src/components/onboarding/guided-first-trade.tsx: complexity 19, 570 lines","ref":"src/components/onboarding/guided-first-trade.tsx","url":"https://github.com/tmoody1973/blk-exchange/blob/e0e2dad2498e6cf39d94ef41e0b4eeeae9a456c4/src/components/onboarding/guided-first-trade.tsx#L69","weight":0.31666666666666665},{"kind":"complex-function","description":"handler in convex/marketEngine.ts: complexity 18, 64 lines","ref":"convex/marketEngine.ts","url":"https://github.com/tmoody1973/blk-exchange/blob/e0e2dad2498e6cf39d94ef41e0b4eeeae9a456c4/convex/marketEngine.ts#L59","weight":0.3},{"kind":"complex-function","description":"SectorDetail in src/components/market/sector-performance.tsx: complexity 18, 102 lines","ref":"src/components/market/sector-performance.tsx","url":"https://github.com/tmoody1973/blk-exchange/blob/e0e2dad2498e6cf39d94ef41e0b4eeeae9a456c4/src/components/market/sector-performance.tsx#L193","weight":0.3},{"kind":"complex-function","description":"TradeModal in src/components/trade/trade-modal.tsx: complexity 18, 130 lines","ref":"src/components/trade/trade-modal.tsx","url":"https://github.com/tmoody1973/blk-exchange/blob/e0e2dad2498e6cf39d94ef41e0b4eeeae9a456c4/src/components/trade/trade-modal.tsx#L60","weight":0.3},{"kind":"complex-function","description":"handler in convex/claude/gradePortfolio.ts: complexity 17, 122 lines","ref":"convex/claude/gradePortfolio.ts","url":"https://github.com/tmoody1973/blk-exchange/blob/e0e2dad2498e6cf39d94ef41e0b4eeeae9a456c4/convex/claude/gradePortfolio.ts#L26","weight":0.2833333333333333}],"data":{},"error":null},{"analyzer":"qual-duplication","pillar":"quality","status":"ok","tool_version":"repotrust-dup-w6","metrics":{"compared_lines":16334.0,"duplicated_lines":1356.0,"duplicated_share":0.083,"files":155.0},"findings":[],"evidence":[{"kind":"duplicate-code","description":"6+ duplicated lines: convex/_generated/server.d.ts:65 and convex/_generated/server.js:62","ref":"convex/_generated/server.d.ts","url":"https://github.com/tmoody1973/blk-exchange/blob/e0e2dad2498e6cf39d94ef41e0b4eeeae9a456c4/convex/_generated/server.d.ts#L65","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: convex/articles.ts:18 and convex/schema.ts:89","ref":"convex/articles.ts","url":"https://github.com/tmoody1973/blk-exchange/blob/e0e2dad2498e6cf39d94ef41e0b4eeeae9a456c4/convex/articles.ts#L18","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: convex/challenges.ts:19 and convex/challenges.ts:38","ref":"convex/challenges.ts","url":"https://github.com/tmoody1973/blk-exchange/blob/e0e2dad2498e6cf39d94ef41e0b4eeeae9a456c4/convex/challenges.ts#L19","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: convex/challenges.ts:203 and convex/schema.ts:194","ref":"convex/challenges.ts","url":"https://github.com/tmoody1973/blk-exchange/blob/e0e2dad2498e6cf39d94ef41e0b4eeeae9a456c4/convex/challenges.ts#L203","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: convex/claude/generateDebrief.ts:181 and convex/claude/gradePortfolio.ts:201","ref":"convex/claude/generateDebrief.ts","url":"https://github.com/tmoody1973/blk-exchange/blob/e0e2dad2498e6cf39d94ef41e0b4eeeae9a456c4/convex/claude/generateDebrief.ts#L181","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: convex/claude/generateDebrief.ts:234 and convex/vault.ts:7","ref":"convex/claude/generateDebrief.ts","url":"https://github.com/tmoody1973/blk-exchange/blob/e0e2dad2498e6cf39d94ef41e0b4eeeae9a456c4/convex/claude/generateDebrief.ts#L234","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: convex/curriculumDebt.ts:32 and convex/vault.ts:92","ref":"convex/curriculumDebt.ts","url":"https://github.com/tmoody1973/blk-exchange/blob/e0e2dad2498e6cf39d94ef41e0b4eeeae9a456c4/convex/curriculumDebt.ts#L32","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: convex/events.ts:6 and convex/events.ts:18","ref":"convex/events.ts","url":"https://github.com/tmoody1973/blk-exchange/blob/e0e2dad2498e6cf39d94ef41e0b4eeeae9a456c4/convex/events.ts#L6","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: convex/leaderboards.ts:6 and src/lib/leaderboard-periods.ts:1","ref":"convex/leaderboards.ts","url":"https://github.com/tmoody1973/blk-exchange/blob/e0e2dad2498e6cf39d94ef41e0b4eeeae9a456c4/convex/leaderboards.ts#L6","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: convex/leaderboards.ts:33 and convex/leaderboards.ts:53","ref":"convex/leaderboards.ts","url":"https://github.com/tmoody1973/blk-exchange/blob/e0e2dad2498e6cf39d94ef41e0b4eeeae9a456c4/convex/leaderboards.ts#L33","weight":0.3}],"data":{},"error":null},{"analyzer":"qual-lint","pillar":"quality","status":"ok","tool_version":"opengrep 1.33.1; rules f1d2b562b414","metrics":{"findings":94.0,"weighted_findings":82.5,"scanned_lines":22039.0,"category:best-practice":74.0,"category:correctness":20.0},"findings":[{"rule_id":"opengrep/typescript.lang.correctness.useless-ternary","severity":"high","message":"It looks like no matter how type === \"buy\" is evaluated, this expression returns totalPortfolioValueInCents. This is probably a copy-paste error.","path":"src/components/trade/trade-preview.tsx","line":60,"fingerprint":"typescript.lang.correctness.useless-ternary:src/components/trade/trade-preview.tsx:60"},{"rule_id":"opengrep/javascript.lang.correctness.no-stringify-keys","severity":"medium","message":"JSON stringify does not produce a stable key ordering, and should not be relied on for producing object keys. Consider using json-stable-stringify instead.","path":"convex/groq/generateFictionalEvent.ts","line":160,"fingerprint":"javascript.lang.correctness.no-stringify-keys:convex/groq/generateFictionalEvent.ts:160"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"src/components/ui/badge.tsx","line":38,"fingerprint":"typescript.react.best-practice.react-props-spreading:src/components/ui/badge.tsx:38"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"src/components/ui/button.tsx","line":51,"fingerprint":"typescript.react.best-practice.react-props-spreading:src/components/ui/button.tsx:51"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"src/components/ui/card.tsx","line":13,"fingerprint":"typescript.react.best-practice.react-props-spreading:src/components/ui/card.tsx:13"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"src/components/ui/card.tsx","line":26,"fingerprint":"typescript.react.best-practice.react-props-spreading:src/components/ui/card.tsx:26"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"src/components/ui/card.tsx","line":36,"fingerprint":"typescript.react.best-practice.react-props-spreading:src/components/ui/card.tsx:36"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"src/components/ui/card.tsx","line":46,"fingerprint":"typescript.react.best-practice.react-props-spreading:src/components/ui/card.tsx:46"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"src/components/ui/card.tsx","line":59,"fingerprint":"typescript.react.best-practice.react-props-spreading:src/components/ui/card.tsx:59"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"src/components/ui/card.tsx","line":69,"fingerprint":"typescript.react.best-practice.react-props-spreading:src/components/ui/card.tsx:69"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"src/components/ui/card.tsx","line":79,"fingerprint":"typescript.react.best-practice.react-props-spreading:src/components/ui/card.tsx:79"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"src/components/ui/chart.tsx","line":63,"fingerprint":"typescript.react.best-practice.react-props-spreading:src/components/ui/chart.tsx:63"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"src/components/ui/dialog.tsx","line":13,"fingerprint":"typescript.react.best-practice.react-props-spreading:src/components/ui/dialog.tsx:13"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"src/components/ui/dialog.tsx","line":19,"fingerprint":"typescript.react.best-practice.react-props-spreading:src/components/ui/dialog.tsx:19"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"src/components/ui/dialog.tsx","line":25,"fingerprint":"typescript.react.best-practice.react-props-spreading:src/components/ui/dialog.tsx:25"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"src/components/ui/dialog.tsx","line":31,"fingerprint":"typescript.react.best-practice.react-props-spreading:src/components/ui/dialog.tsx:31"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"src/components/ui/dialog.tsx","line":45,"fingerprint":"typescript.react.best-practice.react-props-spreading:src/components/ui/dialog.tsx:45"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"src/components/ui/dialog.tsx","line":64,"fingerprint":"typescript.react.best-practice.react-props-spreading:src/components/ui/dialog.tsx:64"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"src/components/ui/dialog.tsx","line":81,"fingerprint":"typescript.react.best-practice.react-props-spreading:src/components/ui/dialog.tsx:81"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"src/components/ui/dialog.tsx","line":94,"fingerprint":"typescript.react.best-practice.react-props-spreading:src/components/ui/dialog.tsx:94"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"src/components/ui/dialog.tsx","line":110,"fingerprint":"typescript.react.best-practice.react-props-spreading:src/components/ui/dialog.tsx:110"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"src/components/ui/dialog.tsx","line":123,"fingerprint":"typescript.react.best-practice.react-props-spreading:src/components/ui/dialog.tsx:123"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"src/components/ui/input.tsx","line":14,"fingerprint":"typescript.react.best-practice.react-props-spreading:src/components/ui/input.tsx:14"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"src/components/ui/progress.tsx","line":23,"fingerprint":"typescript.react.best-practice.react-props-spreading:src/components/ui/progress.tsx:23"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"src/components/ui/sheet.tsx","line":11,"fingerprint":"typescript.react.best-practice.react-props-spreading:src/components/ui/sheet.tsx:11"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"src/components/ui/sheet.tsx","line":17,"fingerprint":"typescript.react.best-practice.react-props-spreading:src/components/ui/sheet.tsx:17"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"src/components/ui/sheet.tsx","line":23,"fingerprint":"typescript.react.best-practice.react-props-spreading:src/components/ui/sheet.tsx:23"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"src/components/ui/sheet.tsx","line":29,"fingerprint":"typescript.react.best-practice.react-props-spreading:src/components/ui/sheet.tsx:29"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"src/components/ui/sheet.tsx","line":43,"fingerprint":"typescript.react.best-practice.react-props-spreading:src/components/ui/sheet.tsx:43"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"src/components/ui/sheet.tsx","line":73,"fingerprint":"typescript.react.best-practice.react-props-spreading:src/components/ui/sheet.tsx:73"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"src/components/ui/sheet.tsx","line":90,"fingerprint":"typescript.react.best-practice.react-props-spreading:src/components/ui/sheet.tsx:90"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"src/components/ui/sheet.tsx","line":100,"fingerprint":"typescript.react.best-practice.react-props-spreading:src/components/ui/sheet.tsx:100"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"src/components/ui/sheet.tsx","line":113,"fingerprint":"typescript.react.best-practice.react-props-spreading:src/components/ui/sheet.tsx:113"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"src/components/ui/sheet.tsx","line":126,"fingerprint":"typescript.react.best-practice.react-props-spreading:src/components/ui/sheet.tsx:126"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"src/components/ui/sidebar.tsx","line":146,"fingerprint":"typescript.react.best-practice.react-props-spreading:src/components/ui/sidebar.tsx:146"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"src/components/ui/sidebar.tsx","line":177,"fingerprint":"typescript.react.best-practice.react-props-spreading:src/components/ui/sidebar.tsx:177"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"src/components/ui/sidebar.tsx","line":186,"fingerprint":"typescript.react.best-practice.react-props-spreading:src/components/ui/sidebar.tsx:186"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"src/components/ui/sidebar.tsx","line":243,"fingerprint":"typescript.react.best-practice.react-props-spreading:src/components/ui/sidebar.tsx:243"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"src/components/ui/sidebar.tsx","line":275,"fingerprint":"typescript.react.best-practice.react-props-spreading:src/components/ui/sidebar.tsx:275"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"src/components/ui/sidebar.tsx","line":303,"fingerprint":"typescript.react.best-practice.react-props-spreading:src/components/ui/sidebar.tsx:303"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"src/components/ui/sidebar.tsx","line":317,"fingerprint":"typescript.react.best-practice.react-props-spreading:src/components/ui/sidebar.tsx:317"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"src/components/ui/sidebar.tsx","line":334,"fingerprint":"typescript.react.best-practice.react-props-spreading:src/components/ui/sidebar.tsx:334"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"src/components/ui/sidebar.tsx","line":348,"fingerprint":"typescript.react.best-practice.react-props-spreading:src/components/ui/sidebar.tsx:348"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"src/components/ui/sidebar.tsx","line":362,"fingerprint":"typescript.react.best-practice.react-props-spreading:src/components/ui/sidebar.tsx:362"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"src/components/ui/sidebar.tsx","line":376,"fingerprint":"typescript.react.best-practice.react-props-spreading:src/components/ui/sidebar.tsx:376"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"src/components/ui/sidebar.tsx","line":390,"fingerprint":"typescript.react.best-practice.react-props-spreading:src/components/ui/sidebar.tsx:390"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"src/components/ui/sidebar.tsx","line":411,"fingerprint":"typescript.react.best-practice.react-props-spreading:src/components/ui/sidebar.tsx:411"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"src/components/ui/sidebar.tsx","line":434,"fingerprint":"typescript.react.best-practice.react-props-spreading:src/components/ui/sidebar.tsx:434"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"src/components/ui/sidebar.tsx","line":448,"fingerprint":"typescript.react.best-practice.react-props-spreading:src/components/ui/sidebar.tsx:448"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"src/components/ui/sidebar.tsx","line":459,"fingerprint":"typescript.react.best-practice.react-props-spreading:src/components/ui/sidebar.tsx:459"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"src/components/ui/sidebar.tsx","line":470,"fingerprint":"typescript.react.best-practice.react-props-spreading:src/components/ui/sidebar.tsx:470"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"src/components/ui/sidebar.tsx","line":513,"fingerprint":"typescript.react.best-practice.react-props-spreading:src/components/ui/sidebar.tsx:513"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"src/components/ui/sidebar.tsx","line":534,"fingerprint":"typescript.react.best-practice.react-props-spreading:src/components/ui/sidebar.tsx:534"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"src/components/ui/sidebar.tsx","line":566,"fingerprint":"typescript.react.best-practice.react-props-spreading:src/components/ui/sidebar.tsx:566"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"src/components/ui/sidebar.tsx","line":588,"fingerprint":"typescript.react.best-practice.react-props-spreading:src/components/ui/sidebar.tsx:588"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"src/components/ui/sidebar.tsx","line":610,"fingerprint":"typescript.react.best-practice.react-props-spreading:src/components/ui/sidebar.tsx:610"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"src/components/ui/sidebar.tsx","line":641,"fingerprint":"typescript.react.best-practice.react-props-spreading:src/components/ui/sidebar.tsx:641"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"src/components/ui/sidebar.tsx","line":655,"fingerprint":"typescript.react.best-practice.react-props-spreading:src/components/ui/sidebar.tsx:655"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"src/components/ui/sidebar.tsx","line":687,"fingerprint":"typescript.react.best-practice.react-props-spreading:src/components/ui/sidebar.tsx:687"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"src/components/ui/skeleton.tsx","line":11,"fingerprint":"typescript.react.best-practice.react-props-spreading:src/components/ui/skeleton.tsx:11"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"src/components/ui/table.tsx","line":14,"fingerprint":"typescript.react.best-practice.react-props-spreading:src/components/ui/table.tsx:14"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"src/components/ui/table.tsx","line":25,"fingerprint":"typescript.react.best-practice.react-props-spreading:src/components/ui/table.tsx:25"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"src/components/ui/table.tsx","line":35,"fingerprint":"typescript.react.best-practice.react-props-spreading:src/components/ui/table.tsx:35"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"src/components/ui/table.tsx","line":48,"fingerprint":"typescript.react.best-practice.react-props-spreading:src/components/ui/table.tsx:48"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"src/components/ui/table.tsx","line":61,"fingerprint":"typescript.react.best-practice.react-props-spreading:src/components/ui/table.tsx:61"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"src/components/ui/table.tsx","line":74,"fingerprint":"typescript.react.best-practice.react-props-spreading:src/components/ui/table.tsx:74"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"src/components/ui/table.tsx","line":87,"fingerprint":"typescript.react.best-practice.react-props-spreading:src/components/ui/table.tsx:87"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"src/components/ui/table.tsx","line":100,"fingerprint":"typescript.react.best-practice.react-props-spreading:src/components/ui/table.tsx:100"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"src/components/ui/tabs.tsx","line":17,"fingerprint":"typescript.react.best-practice.react-props-spreading:src/components/ui/tabs.tsx:17"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"src/components/ui/tabs.tsx","line":33,"fingerprint":"typescript.react.best-practice.react-props-spreading:src/components/ui/tabs.tsx:33"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"src/components/ui/tabs.tsx","line":49,"fingerprint":"typescript.react.best-practice.react-props-spreading:src/components/ui/tabs.tsx:49"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"src/components/ui/tabs.tsx","line":65,"fingerprint":"typescript.react.best-practice.react-props-spreading:src/components/ui/tabs.tsx:65"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"src/components/ui/tooltip.tsx","line":17,"fingerprint":"typescript.react.best-practice.react-props-spreading:src/components/ui/tooltip.tsx:17"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"src/components/ui/tooltip.tsx","line":25,"fingerprint":"typescript.react.best-practice.react-props-spreading:src/components/ui/tooltip.tsx:25"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"src/components/ui/tooltip.tsx","line":31,"fingerprint":"typescript.react.best-practice.react-props-spreading:src/components/ui/tooltip.tsx:31"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"src/components/ui/tooltip.tsx","line":47,"fingerprint":"typescript.react.best-practice.react-props-spreading:src/components/ui/tooltip.tsx:47"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"convex/claude/gradePortfolio.ts","line":118,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:convex/claude/gradePortfolio.ts:118"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"convex/groq/generateFictionalEvent.ts","line":132,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:convex/groq/generateFictionalEvent.ts:132"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"docs/reference/onboarding-prototype.jsx","line":1160,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:docs/reference/onboarding-prototype.jsx:1160"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"docs/reference/onboarding-prototype.jsx","line":1160,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:docs/reference/onboarding-prototype.jsx:1160"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"src/components/education/session-debrief.tsx","line":32,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:src/components/education/session-debrief.tsx:32"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"src/components/education/session-debrief.tsx","line":32,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:src/components/education/session-debrief.tsx:32"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"src/components/leaderboard/leaderboard-tabs.tsx","line":32,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:src/components/leaderboard/leaderboard-tabs.tsx:32"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"src/components/leaderboard/leaderboard-tabs.tsx","line":32,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:src/components/leaderboard/leaderboard-tabs.tsx:32"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"src/components/portfolio/portfolio-chart.tsx","line":26,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:src/components/portfolio/portfolio-chart.tsx:26"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"src/components/portfolio/portfolio-chart.tsx","line":26,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:src/components/portfolio/portfolio-chart.tsx:26"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"src/components/portfolio/portfolio-chart.tsx","line":146,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:src/components/portfolio/portfolio-chart.tsx:146"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"src/components/portfolio/portfolio-chart.tsx","line":146,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:src/components/portfolio/portfolio-chart.tsx:146"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"src/components/portfolio/share-portfolio-button.tsx","line":14,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:src/components/portfolio/share-portfolio-button.tsx:14"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"src/components/portfolio/share-portfolio-button.tsx","line":14,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:src/components/portfolio/share-portfolio-button.tsx:14"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"src/components/vault/concept-card.tsx","line":36,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:src/components/vault/concept-card.tsx:36"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"src/components/vault/concept-card.tsx","line":36,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:src/components/vault/concept-card.tsx:36"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"src/lib/constants/season.ts","line":22,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:src/lib/constants/season.ts:22"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"src/lib/constants/season.ts","line":22,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:src/lib/constants/season.ts:22"}],"evidence":[],"data":{},"error":null},{"analyzer":"qual-testing","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:has_tests":0.0,"check:test_ratio":0.0,"check:ci_present":0.0,"check:ci_runs_tests":0.0,"check:ci_runs_lint":0.0,"check:tests_cochange":0.0,"test_lines":0.0,"source_lines":22039.0,"test_ratio":0.0,"ci_files":0.0,"cochange_share":0.0,"cochange_commits":116.0},"findings":[],"evidence":[],"data":{"test_commands":[],"lint_commands":[]},"error":null},{"analyzer":"qual-docs","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:readme":1.0,"check:license":0.0,"check:contributing":0.0,"check:changelog":0.0,"readme_lines":218.0},"findings":[],"evidence":[{"kind":"docs","description":"README.md","ref":"README.md","url":null,"weight":0.0}],"data":{},"error":null},{"analyzer":"qual-type-safety","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:strict_config":1.0,"check:low_escape_density":1.0,"escapes":13.0,"escapes_per_kloc":0.63},"findings":[],"evidence":[{"kind":"typing","description":"TypeScript strict type checking: convex/tsconfig.json","ref":"convex/tsconfig.json","url":null,"weight":0.0}],"data":{},"error":null}],"flags":[]}