{"$schema":"https://json.schemastore.org/sarif-2.1.0.json","version":"2.1.0","runs":[{"tool":{"driver":{"name":"codehealth","informationUri":"https://codehealth.canine.dev","rules":[{"id":"D1","name":"Cyclomatic Complexity","shortDescription":{"text":"Cyclomatic Complexity"},"helpUri":"https://codehealth.canine.dev/dimensions/D1"},{"id":"D2","name":"Cognitive Complexity","shortDescription":{"text":"Cognitive Complexity"},"helpUri":"https://codehealth.canine.dev/dimensions/D2"},{"id":"D3","name":"God Classes","shortDescription":{"text":"God Classes"},"helpUri":"https://codehealth.canine.dev/dimensions/D3"},{"id":"D4","name":"Code Duplication","shortDescription":{"text":"Code Duplication"},"helpUri":"https://codehealth.canine.dev/dimensions/D4"},{"id":"D5","name":"Coupling","shortDescription":{"text":"Coupling"},"helpUri":"https://codehealth.canine.dev/dimensions/D5"},{"id":"D8","name":"Code Coverage","shortDescription":{"text":"Code Coverage"},"helpUri":"https://codehealth.canine.dev/dimensions/D8"},{"id":"D9","name":"Test Distribution","shortDescription":{"text":"Test Distribution"},"helpUri":"https://codehealth.canine.dev/dimensions/D9"},{"id":"D12","name":"Dependency Hygiene","shortDescription":{"text":"Dependency Hygiene"},"helpUri":"https://codehealth.canine.dev/dimensions/D12"},{"id":"D13","name":"Secret Scanning","shortDescription":{"text":"Secret Scanning"},"helpUri":"https://codehealth.canine.dev/dimensions/D13","relationships":[{"target":{"id":"CWE-798","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},"kinds":["relevant"]},{"target":{"id":"CWE-259","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},"kinds":["relevant"]}],"properties":{"cwe":["CWE-798","CWE-259"]}},{"id":"D15","name":"Churn \u00D7 Complexity Hotspots","shortDescription":{"text":"Churn \u00D7 Complexity Hotspots"},"helpUri":"https://codehealth.canine.dev/dimensions/D15"},{"id":"D16","name":"Bus Factor","shortDescription":{"text":"Bus Factor"},"helpUri":"https://codehealth.canine.dev/dimensions/D16"},{"id":"D19","name":"Documentation Quality","shortDescription":{"text":"Documentation Quality"},"helpUri":"https://codehealth.canine.dev/dimensions/D19"},{"id":"D21","name":"Naming Consistency","shortDescription":{"text":"Naming Consistency"},"helpUri":"https://codehealth.canine.dev/dimensions/D21"},{"id":"D26","name":"Project Cohesion","shortDescription":{"text":"Project Cohesion"},"helpUri":"https://codehealth.canine.dev/dimensions/D26"},{"id":"D27","name":"Navigability","shortDescription":{"text":"Navigability"},"helpUri":"https://codehealth.canine.dev/dimensions/D27"},{"id":"D28","name":"Secrets (history)","shortDescription":{"text":"Secrets (history)"},"helpUri":"https://codehealth.canine.dev/dimensions/D28","relationships":[{"target":{"id":"CWE-798","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},"kinds":["relevant"]},{"target":{"id":"CWE-259","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},"kinds":["relevant"]}],"properties":{"cwe":["CWE-798","CWE-259"]}},{"id":"D29","name":"Static Analysis (SAST)","shortDescription":{"text":"Static Analysis (SAST)"},"helpUri":"https://codehealth.canine.dev/dimensions/D29","relationships":[{"target":{"id":"CWE-79","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},"kinds":["relevant"]},{"target":{"id":"CWE-89","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},"kinds":["relevant"]},{"target":{"id":"CWE-78","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},"kinds":["relevant"]},{"target":{"id":"CWE-94","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},"kinds":["relevant"]},{"target":{"id":"CWE-77","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},"kinds":["relevant"]}],"properties":{"cwe":["CWE-79","CWE-89","CWE-78","CWE-94","CWE-77"]}},{"id":"D33","name":"JS/npm Dependency Vulnerabilities","shortDescription":{"text":"JS/npm Dependency Vulnerabilities"},"helpUri":"https://codehealth.canine.dev/dimensions/D33","relationships":[{"target":{"id":"CWE-1395","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},"kinds":["relevant"]},{"target":{"id":"CWE-937","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},"kinds":["relevant"]}],"properties":{"cwe":["CWE-1395","CWE-937"]}},{"id":"D34","name":"Knowledge Freshness","shortDescription":{"text":"Knowledge Freshness"},"helpUri":"https://codehealth.canine.dev/dimensions/D34"},{"id":"D35","name":"Change Coupling","shortDescription":{"text":"Change Coupling"},"helpUri":"https://codehealth.canine.dev/dimensions/D35"},{"id":"D37","name":"Vulnerability-disclosure Policy","shortDescription":{"text":"Vulnerability-disclosure Policy"},"helpUri":"https://codehealth.canine.dev/dimensions/D37","relationships":[{"target":{"id":"CWE-1059","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},"kinds":["relevant"]}],"properties":{"cwe":["CWE-1059"]}}]}},"results":[{"ruleId":"D1","level":"warning","message":{"text":"uninstall (cyclomatic 81): uninstall has cyclomatic complexity 81 (threshold 15)."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"cli/install.js"},"region":{"startLine":1184}}}],"partialFingerprints":{"codehealthFindingId/v1":"1b3a35aab3be10e4ab468598a30cf3d7351fb0b9915368c08e0a1655e3ee8e69"}},{"ruleId":"D1","level":"warning","message":{"text":"parseModeChange (cyclomatic 54): parseModeChange has cyclomatic complexity 54 (threshold 15)."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"src/hooks/caveman-parse.js"},"region":{"startLine":55}}}],"partialFingerprints":{"codehealthFindingId/v1":"22bfe3641fb6e63e7e0fc663c1ad07d4d39497bc202d9928cbc2f14346c60bfb"}},{"ruleId":"D1","level":"warning","message":{"text":"installOpencode (cyclomatic 48): installOpencode has cyclomatic complexity 48 (threshold 15)."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"cli/install.js"},"region":{"startLine":711}}}],"partialFingerprints":{"codehealthFindingId/v1":"96337e605737da726df08a8652108bb97a448780a84f31b0ed67af5a8730dd38"}},{"ruleId":"D1","level":"warning","message":{"text":"main (cyclomatic 42): main has cyclomatic complexity 42 (threshold 15)."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"cli/install.js"},"region":{"startLine":1479}}}],"partialFingerprints":{"codehealthFindingId/v1":"332a3a5db56a7225728f9d06efb2ae730148d68b496b26a61aa1c6a0545d8466"}},{"ruleId":"D1","level":"warning","message":{"text":"parseArgs (cyclomatic 39): parseArgs has cyclomatic complexity 39 (threshold 15)."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"cli/install.js"},"region":{"startLine":61}}}],"partialFingerprints":{"codehealthFindingId/v1":"b403367ac58d8d2e76a4f39ac7e3897faca225c11d55f305e9ecd263c04c4e1d"}},{"ruleId":"D1","level":"warning","message":{"text":"(anonymous) (cyclomatic 35): (anonymous) has cyclomatic complexity 35 (threshold 15)."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"src/hooks/caveman-mode-tracker.js"},"region":{"startLine":24}}}],"partialFingerprints":{"codehealthFindingId/v1":"56787c2ceb73434935175ff9f70ba047ef82770557a9b4f7cd450ba748c91815"}},{"ruleId":"D1","level":"warning","message":{"text":"formatStats (cyclomatic 31): formatStats has cyclomatic complexity 31 (threshold 15)."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"src/hooks/caveman-stats.js"},"region":{"startLine":397}}}],"partialFingerprints":{"codehealthFindingId/v1":"1ee9a3055d4f9b9b90be1cb2725df9578907e6b79864f76f16584a081e154de6"}},{"ruleId":"D1","level":"warning","message":{"text":"installHooks (cyclomatic 29): installHooks has cyclomatic complexity 29 (threshold 15)."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"cli/install.js"},"region":{"startLine":947}}}],"partialFingerprints":{"codehealthFindingId/v1":"0ca29e5ca6260b22da5dadc92b755222287c9536ebae63a78c154a1000febb5a"}},{"ruleId":"D1","level":"warning","message":{"text":"safeWriteFlag (cyclomatic 28): safeWriteFlag has cyclomatic complexity 28 (threshold 15)."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"src/hooks/caveman-config.js"},"region":{"startLine":138}}}],"partialFingerprints":{"codehealthFindingId/v1":"8216308f1e97c73ea73c67e5d451a47343ae9407f8b215d88036cca216bc5149"}},{"ruleId":"D1","level":"warning","message":{"text":"installClaude (cyclomatic 25): installClaude has cyclomatic complexity 25 (threshold 15)."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"cli/install.js"},"region":{"startLine":474}}}],"partialFingerprints":{"codehealthFindingId/v1":"e452f596174f32aaf5010d179c028856678262e3dcc433b77d74b34cc032ee0a"}},{"ruleId":"D1","level":"warning","message":{"text":"attributeByMode (cyclomatic 22): attributeByMode has cyclomatic complexity 22 (threshold 15)."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"src/hooks/caveman-stats.js"},"region":{"startLine":201}}}],"partialFingerprints":{"codehealthFindingId/v1":"7623e553ffeaa5e8756193f7b3f7a9c9719aa423148ed935e9d27d4b381a16b2"}},{"ruleId":"D1","level":"warning","message":{"text":"aggregateHistory (cyclomatic 21): aggregateHistory has cyclomatic complexity 21 (threshold 15)."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"src/hooks/caveman-stats.js"},"region":{"startLine":301}}}],"partialFingerprints":{"codehealthFindingId/v1":"4acc70f965d58aa33e02f09f0d2efa595377a8a5cf802857df5d97f10327e594"}},{"ruleId":"D1","level":"warning","message":{"text":"stripJsonComments (cyclomatic 19): stripJsonComments has cyclomatic complexity 19 (threshold 15)."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"cli/lib/settings.js"},"region":{"startLine":29}}}],"partialFingerprints":{"codehealthFindingId/v1":"8f09f690bdba3db0298317b243ae9dfd61825f4757ae7630a51e0ac4b69bd2ee"}},{"ruleId":"D1","level":"warning","message":{"text":"main (cyclomatic 17): main has cyclomatic complexity 17 (threshold 15)."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"src/hooks/caveman-stats.js"},"region":{"startLine":499}}}],"partialFingerprints":{"codehealthFindingId/v1":"12cbc1506c72ebbd56db7608e2c8b66b85f26e04cd940240672bdd74007016c1"}},{"ruleId":"D1","level":"warning","message":{"text":"appendFlag (cyclomatic 16): appendFlag has cyclomatic complexity 16 (threshold 15)."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"src/hooks/caveman-config.js"},"region":{"startLine":284}}}],"partialFingerprints":{"codehealthFindingId/v1":"5204b8bea28cb9d09f55f56f3c9c7fa7246be8e6eaa7421bd7d2a5d82c7f772c"}},{"ruleId":"D1","level":"warning","message":{"text":"rewriteLegacyManagedHookCommands (cyclomatic 16): rewriteLegacyManagedHookCommands has cyclomatic complexity 16 (threshold 15)."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"cli/lib/settings.js"},"region":{"startLine":251}}}],"partialFingerprints":{"codehealthFindingId/v1":"02b74e7e56d64c45ca3d382c0e4a95f221214c758b06fe9b428325b3d3f85534"}},{"ruleId":"D2","level":"warning","message":{"text":"uninstall (cognitive 203): uninstall has cognitive complexity 203 (threshold 15)."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"cli/install.js"},"region":{"startLine":1184}}}],"partialFingerprints":{"codehealthFindingId/v1":"a6d6263dcff2a6e4774c919c599084ab8fd1f83c9b63c76b4ce790f11cbfe649"}},{"ruleId":"D2","level":"warning","message":{"text":"parseModeChange (cognitive 90): parseModeChange has cognitive complexity 90 (threshold 15)."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"src/hooks/caveman-parse.js"},"region":{"startLine":55}}}],"partialFingerprints":{"codehealthFindingId/v1":"19b19eefdfb457b80edaee66a7f3cd51195622b48860b0db9e55834d292584e7"}},{"ruleId":"D2","level":"warning","message":{"text":"installOpencode (cognitive 84): installOpencode has cognitive complexity 84 (threshold 15)."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"cli/install.js"},"region":{"startLine":711}}}],"partialFingerprints":{"codehealthFindingId/v1":"5eb939224e058641bd5639b1185aec3eb4e00423ecfcf6bb8559184d7b009574"}},{"ruleId":"D2","level":"warning","message":{"text":"main (cognitive 58): main has cognitive complexity 58 (threshold 15)."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"cli/install.js"},"region":{"startLine":1479}}}],"partialFingerprints":{"codehealthFindingId/v1":"90eda022ba5d026c780dab04174de9db61c5a12bd33d5d25dad56ac71d7b1470"}},{"ruleId":"D2","level":"warning","message":{"text":"(anonymous) (cognitive 54): (anonymous) has cognitive complexity 54 (threshold 15)."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"src/hooks/caveman-mode-tracker.js"},"region":{"startLine":24}}}],"partialFingerprints":{"codehealthFindingId/v1":"87a5453fb260ab83cf9f5f386cfced33e6fc826b44a0afb5d6f84bdb74fef316"}},{"ruleId":"D2","level":"warning","message":{"text":"safeWriteFlag (cognitive 46): safeWriteFlag has cognitive complexity 46 (threshold 15)."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"src/hooks/caveman-config.js"},"region":{"startLine":138}}}],"partialFingerprints":{"codehealthFindingId/v1":"cb6ee8cb7d5bf640a3e5509173bd2f1180ce6f970caa386e4addeb4770ad8b75"}},{"ruleId":"D2","level":"warning","message":{"text":"formatStats (cognitive 45): formatStats has cognitive complexity 45 (threshold 15)."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"src/hooks/caveman-stats.js"},"region":{"startLine":397}}}],"partialFingerprints":{"codehealthFindingId/v1":"9b12c5ec937fd6f5fd98f905e3f7ebb93c033c217af4e2013e1120a556297d3c"}},{"ruleId":"D2","level":"warning","message":{"text":"installHooks (cognitive 42): installHooks has cognitive complexity 42 (threshold 15)."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"cli/install.js"},"region":{"startLine":947}}}],"partialFingerprints":{"codehealthFindingId/v1":"aaf6d546957f81edf1a18bfc2ef0803b7daa63b76697ecb0e3235a608c8e1e76"}},{"ruleId":"D2","level":"warning","message":{"text":"installClaude (cognitive 40): installClaude has cognitive complexity 40 (threshold 15)."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"cli/install.js"},"region":{"startLine":474}}}],"partialFingerprints":{"codehealthFindingId/v1":"5e672c366a7c2f1f7977cd53365767b651fef9a92f67df31b3ba0ee7014a7447"}},{"ruleId":"D2","level":"warning","message":{"text":"parseArgs (cognitive 37): parseArgs has cognitive complexity 37 (threshold 15)."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"cli/install.js"},"region":{"startLine":61}}}],"partialFingerprints":{"codehealthFindingId/v1":"91cd4f3d93f3a7c48300a3781ad46ef3abad43d7137fccea74d3dca6ff75da90"}},{"ruleId":"D2","level":"warning","message":{"text":"stripJsonComments (cognitive 36): stripJsonComments has cognitive complexity 36 (threshold 15)."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"cli/lib/settings.js"},"region":{"startLine":29}}}],"partialFingerprints":{"codehealthFindingId/v1":"26edf03f3c3acb0c359167178e215dace70c8694729098c7746e2b643e3f7e3c"}},{"ruleId":"D2","level":"warning","message":{"text":"transformResponse (cognitive 33): transformResponse has cognitive complexity 33 (threshold 15)."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"src/mcp-servers/caveman-shrink/index.js"},"region":{"startLine":73}}}],"partialFingerprints":{"codehealthFindingId/v1":"fa4faf85c852720c66b4b9716e4d28129c1340601c06a84607f2b1305757ce9b"}},{"ruleId":"D2","level":"warning","message":{"text":"attributeByMode (cognitive 32): attributeByMode has cognitive complexity 32 (threshold 15)."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"src/hooks/caveman-stats.js"},"region":{"startLine":201}}}],"partialFingerprints":{"codehealthFindingId/v1":"acdf5cf8f626f86aa3c31f73e88db68f9f0fcee3acea3a58035a08657126b4c6"}},{"ruleId":"D2","level":"warning","message":{"text":"rewriteLegacyManagedHookCommands (cognitive 30): rewriteLegacyManagedHookCommands has cognitive complexity 30 (threshold 15)."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"cli/lib/settings.js"},"region":{"startLine":251}}}],"partialFingerprints":{"codehealthFindingId/v1":"87b406e6200ab11de7a11540854e0740c317dc96cd2429d06cfc08b756811498"}},{"ruleId":"D2","level":"warning","message":{"text":"stripTrailingCommas (cognitive 27): stripTrailingCommas has cognitive complexity 27 (threshold 15)."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"cli/lib/settings.js"},"region":{"startLine":69}}}],"partialFingerprints":{"codehealthFindingId/v1":"eb7c90eea2c6a5879f62e1369b4bbd182e1763b90cb71a4584374ac849843cae"}},{"ruleId":"D2","level":"warning","message":{"text":"appendFlag (cognitive 26): appendFlag has cognitive complexity 26 (threshold 15)."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"src/hooks/caveman-config.js"},"region":{"startLine":284}}}],"partialFingerprints":{"codehealthFindingId/v1":"ccbaf111775d9c691ff68cb57d169fd19c3677fbe1df416337649e5c397369bb"}},{"ruleId":"D2","level":"warning","message":{"text":"aggregateHistory (cognitive 25): aggregateHistory has cognitive complexity 25 (threshold 15)."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"src/hooks/caveman-stats.js"},"region":{"startLine":301}}}],"partialFingerprints":{"codehealthFindingId/v1":"4a7fa569eaab4483c4a4a635ffc4d502b59c09a324e5d49cf1a4cad50a1f45ac"}},{"ruleId":"D2","level":"warning","message":{"text":"parseSession (cognitive 21): parseSession has cognitive complexity 21 (threshold 15)."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"src/hooks/caveman-stats.js"},"region":{"startLine":93}}}],"partialFingerprints":{"codehealthFindingId/v1":"44a4dcc593cf93f5a41b7973aa89bb36289116adf831686afae07a16b72c4187"}},{"ruleId":"D2","level":"warning","message":{"text":"installOpenclaw (cognitive 21): installOpenclaw has cognitive complexity 21 (threshold 15)."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"cli/lib/openclaw.js"},"region":{"startLine":214}}}],"partialFingerprints":{"codehealthFindingId/v1":"67b2dae6c31836a8a075baac193e54000d7ff8ea387e9a41d80703b9afb18206"}},{"ruleId":"D2","level":"warning","message":{"text":"pruneOrphanedManagedHooks (cognitive 20): pruneOrphanedManagedHooks has cognitive complexity 20 (threshold 15)."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"cli/lib/settings.js"},"region":{"startLine":297}}}],"partialFingerprints":{"codehealthFindingId/v1":"6138378cffa96f36a405d93f97ff308613fb37df46480546083f21756a4ee3e2"}},{"ruleId":"D2","level":"warning","message":{"text":"main (cognitive 19): main has cognitive complexity 19 (threshold 15)."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"src/hooks/caveman-stats.js"},"region":{"startLine":499}}}],"partialFingerprints":{"codehealthFindingId/v1":"8325dca7ba3c2c35b9c5d8d455a4b1faef1d2a1a07db0d0cfa1432b9fd95ae73"}},{"ruleId":"D2","level":"warning","message":{"text":"processAgent (cognitive 17): processAgent has cognitive complexity 17 (threshold 15)."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"src/tools/caveman-init.js"},"region":{"startLine":82}}}],"partialFingerprints":{"codehealthFindingId/v1":"2172c2b2cba7d4e5b75a28b80f91772c0740ce8c3b8099d5efa56e1a2ae7a9e8"}},{"ruleId":"D2","level":"warning","message":{"text":"main (cognitive 17): main has cognitive complexity 17 (threshold 15)."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"src/tools/caveman-init.js"},"region":{"startLine":179}}}],"partialFingerprints":{"codehealthFindingId/v1":"0992ad183510b0717026bed7d233a9273b725f116fd24c918d4532075ac88bbb"}},{"ruleId":"D2","level":"warning","message":{"text":"findRecentSession (cognitive 16): findRecentSession has cognitive complexity 16 (threshold 15)."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"src/hooks/caveman-stats.js"},"region":{"startLine":70}}}],"partialFingerprints":{"codehealthFindingId/v1":"754a610b717ec4d25ede5449a6e93fdadc9ac02b6c61c6595467dd01b201db8e"}},{"ruleId":"D2","level":"warning","message":{"text":"appendBootstrapToSoul (cognitive 16): appendBootstrapToSoul has cognitive complexity 16 (threshold 15)."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"cli/lib/openclaw.js"},"region":{"startLine":163}}}],"partialFingerprints":{"codehealthFindingId/v1":"231ca56da02223ebf1740b753f8c6b3292971458f61dd1a65030d90f798b0f7b"}},{"ruleId":"D2","level":"warning","message":{"text":"uninstallOpenclaw (cognitive 16): uninstallOpenclaw has cognitive complexity 16 (threshold 15)."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"cli/lib/openclaw.js"},"region":{"startLine":263}}}],"partialFingerprints":{"codehealthFindingId/v1":"c5d603027ea19154681230f72d69ded6939f20ade5a8d8bbde6e428c81191f71"}},{"ruleId":"D3","level":"warning","message":{"text":"FileTooLong: cli/install.js: FileTooLong \u2014 1600 lines."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"cli/install.js"},"region":{"startLine":0}}}],"partialFingerprints":{"codehealthFindingId/v1":"c767be3c05ecd9b81797f454ff9c966d16e8eb886ed621fb22e0a6600f5308f6"}},{"ruleId":"D3","level":"warning","message":{"text":"FileTooLong: hooks/caveman-stats.js: FileTooLong \u2014 590 lines."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"src/hooks/caveman-stats.js"},"region":{"startLine":0}}}],"partialFingerprints":{"codehealthFindingId/v1":"a317610497d134290d65b3465a63709412c5f0f14b0724ed0b2219c0acd9f33d"}},{"ruleId":"D3","level":"warning","message":{"text":"FileTooLong: installer/e2e.freshinstall.test.mjs: FileTooLong \u2014 701 lines."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"tests/installer/e2e.freshinstall.test.mjs"},"region":{"startLine":0}}}],"partialFingerprints":{"codehealthFindingId/v1":"89af89688fbf038b6aa7c7493f5b04f92191836fc625c0649329f66423075fb9"}},{"ruleId":"D8","level":"warning","message":{"text":"Coverage not measured \u2014 test suite did not build: Coverage NOT MEASURED: the repo\u0027s own test suite did not build (a C#/MSBuild compiler error in the test code), so no coverage could be collected. It is excluded from the score rather than counted as a near-zero defect. Fix the test build, or commit the Cobertura/OpenCover/lcov report your CI already produces, and real coverage will be measured."},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"8beb176c604706486df63d2215f767f50520c8d949b1d464345de14ded442c69"}},{"ruleId":"D9","level":"note","message":{"text":"No tests found: No test projects found in the repository."},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"c9bf64cbb5a4ae13d6bcd01fa3bc8d2879d860c73bc67f176ee3c2cecb8adce3"}},{"ruleId":"D15","level":"warning","message":{"text":"Hotspot: src/hooks/caveman-mode-tracker.js: src/hooks/caveman-mode-tracker.js changed 7 times in last 90 days, max complexity 35. 5 of those changes were fix/bug commits \u2014 a defect-dense hotspot worth prioritising."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"src/hooks/caveman-mode-tracker.js"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"17f65846ab100cf726d8375a3727a8dc7376649a3b6585703d7fdeeadb89f4f8"}},{"ruleId":"D15","level":"warning","message":{"text":"Hotspot: src/hooks/caveman-stats.js: src/hooks/caveman-stats.js changed 6 times in last 90 days, max complexity 31. 3 of those changes were fix/bug commits \u2014 a defect-dense hotspot worth prioritising."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"src/hooks/caveman-stats.js"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"2582cfca6391f1798fbbd0acff0dea9f013b73c95bb7ecf6d6127070c4b599c2"}},{"ruleId":"D15","level":"warning","message":{"text":"Hotspot: cli/install.js: cli/install.js changed 2 times in last 90 days, max complexity 81. 1 of those changes were fix/bug commits \u2014 a defect-dense hotspot worth prioritising."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"cli/install.js"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"595bed5d3509be9a758fc94273c444e60fc0a7b2f56cc7e2bf51266b86ea4c90"}},{"ruleId":"D15","level":"warning","message":{"text":"Hotspot: src/hooks/caveman-config.js: src/hooks/caveman-config.js changed 4 times in last 90 days, max complexity 28. 2 of those changes were fix/bug commits \u2014 a defect-dense hotspot worth prioritising."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"src/hooks/caveman-config.js"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"62fd529fda6fe39936a0cc0343ffb22fbab71284053282a27f265d41311f8a84"}},{"ruleId":"D15","level":"warning","message":{"text":"Hotspot: src/tools/caveman-init.js: src/tools/caveman-init.js changed 7 times in last 90 days, max complexity 15. 3 of those changes were fix/bug commits \u2014 a defect-dense hotspot worth prioritising."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"src/tools/caveman-init.js"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"e5870363334284b741aa3767ddbb70e8097f3c818ed15c7ed0ac2583644e6ee2"}},{"ruleId":"D15","level":"warning","message":{"text":"Hotspot: src/hooks/caveman-parse.js: src/hooks/caveman-parse.js changed 1 times in last 90 days, max complexity 54. 1 of those changes were fix/bug commits \u2014 a defect-dense hotspot worth prioritising."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"src/hooks/caveman-parse.js"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"cafcb35ea2dc852145ba042e14bc7ed0c82d1d898a566db19245cf37371a7ce7"}},{"ruleId":"D15","level":"warning","message":{"text":"Hotspot: cli/lib/settings.js: cli/lib/settings.js changed 1 times in last 90 days, max complexity 19. 1 of those changes were fix/bug commits \u2014 a defect-dense hotspot worth prioritising."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"cli/lib/settings.js"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"348ca1f7d1f3e5962a765a0e5f5fff0b36ab28963aca1939230a1a41a0463ae3"}},{"ruleId":"D19","level":"note","message":{"text":"The \u0027why use many token when few do trick\u0027 hook is an excellent one-liner but it does not explain what the agent actually does (e.g. how output tokens are saved) and there is no link to the benchmarks section that measures this.: Add a brief What-you-get section or a short paragraph stating the token-saving guarantee so readers can skip the hook if they already know the value."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"README.md"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"ba3728320974519417077068d3214baa88ba8cf6f04de2df4d25199175e8451c"}},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"0dbb915274563a1a1c7710b67a8c19d2a107f22fcaf0daddfce999f66be50e9d"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"0dbb915274563a1a1c7710b67a8c19d2a107f22fcaf0daddfce999f66be50e9d"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"0dbb915274563a1a1c7710b67a8c19d2a107f22fcaf0daddfce999f66be50e9d"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"0dbb915274563a1a1c7710b67a8c19d2a107f22fcaf0daddfce999f66be50e9d"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"0dbb915274563a1a1c7710b67a8c19d2a107f22fcaf0daddfce999f66be50e9d"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"d23d6b2b242f78d10774327a172db8a1604040ff60d66014a814a1b9b98e0433"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"c3e036788745f9cff54275de010de552b6963b69b58dc890ebce4fbf85d4d616"},"taxa":[{"id":"CWE-78","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"c3e036788745f9cff54275de010de552b6963b69b58dc890ebce4fbf85d4d616"},"taxa":[{"id":"CWE-78","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"c3e036788745f9cff54275de010de552b6963b69b58dc890ebce4fbf85d4d616"},"taxa":[{"id":"CWE-78","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}}]},{"ruleId":"D29","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"f8ad214f39b6f0a72663d5dd6151f872284609a74b80e3dd5a668aa416196a77"},"taxa":[{"id":"CWE-78","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}}]}],"taxonomies":[{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d","organization":"MITRE","informationUri":"https://cwe.mitre.org/","isComprehensive":false,"shortDescription":{"text":"The MITRE Common Weakness Enumeration (CWE)."},"taxa":[{"id":"CWE-1059","guid":"a2381a08-60f6-9554-a8b8-f3018cfaaca5","name":"Insufficient Technical Documentation","shortDescription":{"text":"Insufficient Technical Documentation"},"helpUri":"https://cwe.mitre.org/data/definitions/1059.html"},{"id":"CWE-1357","guid":"e4d2e772-757e-0a5c-bd7d-77052949d866","name":"Reliance on Insufficiently Trustworthy Component","shortDescription":{"text":"Reliance on Insufficiently Trustworthy Component"},"helpUri":"https://cwe.mitre.org/data/definitions/1357.html"},{"id":"CWE-1395","guid":"800e09e7-c11a-8654-9fa6-86f398995fed","name":"Dependency on Vulnerable Third-Party Component","shortDescription":{"text":"Dependency on Vulnerable Third-Party Component"},"helpUri":"https://cwe.mitre.org/data/definitions/1395.html"},{"id":"CWE-259","guid":"ae9ad959-fbb6-9d5e-892d-3dca66da0b69","name":"Use of Hard-coded Password","shortDescription":{"text":"Use of Hard-coded Password"},"helpUri":"https://cwe.mitre.org/data/definitions/259.html"},{"id":"CWE-353","guid":"09d7e902-d4ee-f05d-ae6c-0a1554d0c18f","name":"CWE-353","shortDescription":{"text":"CWE-353"},"helpUri":"https://cwe.mitre.org/data/definitions/353.html"},{"id":"CWE-77","guid":"332c8ade-6612-9f56-a06b-d8d90b1a8750","name":"Command Injection","shortDescription":{"text":"Command Injection"},"helpUri":"https://cwe.mitre.org/data/definitions/77.html"},{"id":"CWE-78","guid":"2e31ceaf-c7ae-2e5e-9661-cfb1362789cf","name":"OS Command Injection","shortDescription":{"text":"OS Command Injection"},"helpUri":"https://cwe.mitre.org/data/definitions/78.html"},{"id":"CWE-79","guid":"fd45580b-e8c4-fc5e-8c2f-aa8fab0b4dbf","name":"Cross-site Scripting (XSS)","shortDescription":{"text":"Cross-site Scripting (XSS)"},"helpUri":"https://cwe.mitre.org/data/definitions/79.html"},{"id":"CWE-798","guid":"5e8f057d-fee3-995a-a0cb-9fc5b0d174d1","name":"Use of Hard-coded Credentials","shortDescription":{"text":"Use of Hard-coded Credentials"},"helpUri":"https://cwe.mitre.org/data/definitions/798.html"},{"id":"CWE-89","guid":"6d08fdad-37eb-c150-bbf0-d7d946863407","name":"SQL Injection","shortDescription":{"text":"SQL Injection"},"helpUri":"https://cwe.mitre.org/data/definitions/89.html"},{"id":"CWE-937","guid":"16f316ae-415c-b354-a59b-1f7905f756e9","name":"Using Components with Known Vulnerabilities","shortDescription":{"text":"Using Components with Known Vulnerabilities"},"helpUri":"https://cwe.mitre.org/data/definitions/937.html"},{"id":"CWE-94","guid":"75e7f50c-6c2f-dd52-bf40-bf6c52b861fd","name":"Code Injection","shortDescription":{"text":"Code Injection"},"helpUri":"https://cwe.mitre.org/data/definitions/94.html"}]}],"properties":{"codehealthPublication":{"public":true,"notice":"This is the PUBLIC form of this artifact. Findings are listed in full, but the details of SECURITY findings \u2014 which rule fired, in which file, on which line, and how to fix it \u2014 are deliberately withheld, and any secret-scanner results are excluded entirely. Where detail is absent here it was REMOVED FOR PUBLICATION; it is not missing from the analysis. The complete artifact is available from the repository owner.","securityFindingsRedacted":10,"secretScannerRunsExcluded":0}},"redactionTokens":["A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."]}]}