{"$schema":"https://json.schemastore.org/sarif-2.1.0.json","version":"2.1.0","runs":[{"tool":{"driver":{"name":"codehealth","informationUri":"https://codehealth.canine.dev","rules":[{"id":"D1","name":"Cyclomatic Complexity","shortDescription":{"text":"Cyclomatic Complexity"},"helpUri":"https://codehealth.canine.dev/dimensions/D1"},{"id":"D2","name":"Cognitive Complexity","shortDescription":{"text":"Cognitive Complexity"},"helpUri":"https://codehealth.canine.dev/dimensions/D2"},{"id":"D3","name":"God Classes","shortDescription":{"text":"God Classes"},"helpUri":"https://codehealth.canine.dev/dimensions/D3"},{"id":"D5","name":"Coupling","shortDescription":{"text":"Coupling"},"helpUri":"https://codehealth.canine.dev/dimensions/D5"},{"id":"D6","name":"Cohesion (LCOM4)","shortDescription":{"text":"Cohesion (LCOM4)"},"helpUri":"https://codehealth.canine.dev/dimensions/D6"},{"id":"D8","name":"Code Coverage","shortDescription":{"text":"Code Coverage"},"helpUri":"https://codehealth.canine.dev/dimensions/D8"},{"id":"D9","name":"Test Distribution","shortDescription":{"text":"Test Distribution"},"helpUri":"https://codehealth.canine.dev/dimensions/D9"},{"id":"D10","name":"Test Quality","shortDescription":{"text":"Test Quality"},"helpUri":"https://codehealth.canine.dev/dimensions/D10"},{"id":"D12","name":"Dependency Hygiene","shortDescription":{"text":"Dependency Hygiene"},"helpUri":"https://codehealth.canine.dev/dimensions/D12"},{"id":"D13","name":"Secret Scanning","shortDescription":{"text":"Secret Scanning"},"helpUri":"https://codehealth.canine.dev/dimensions/D13","relationships":[{"target":{"id":"CWE-798","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},"kinds":["relevant"]},{"target":{"id":"CWE-259","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},"kinds":["relevant"]},{"target":{"id":"A07:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},"kinds":["relevant"]}],"properties":{"cwe":["CWE-798","CWE-259"],"owasp":"A07:2025"}},{"id":"D14","name":"License Compliance","shortDescription":{"text":"License Compliance"},"helpUri":"https://codehealth.canine.dev/dimensions/D14"},{"id":"D15","name":"Churn \u00D7 Complexity Hotspots","shortDescription":{"text":"Churn \u00D7 Complexity Hotspots"},"helpUri":"https://codehealth.canine.dev/dimensions/D15"},{"id":"D16","name":"Bus Factor","shortDescription":{"text":"Bus Factor"},"helpUri":"https://codehealth.canine.dev/dimensions/D16"},{"id":"D17","name":"Explicit Debt","shortDescription":{"text":"Explicit Debt"},"helpUri":"https://codehealth.canine.dev/dimensions/D17"},{"id":"D19","name":"Documentation Quality","shortDescription":{"text":"Documentation Quality"},"helpUri":"https://codehealth.canine.dev/dimensions/D19"},{"id":"D21","name":"Naming Consistency","shortDescription":{"text":"Naming Consistency"},"helpUri":"https://codehealth.canine.dev/dimensions/D21"},{"id":"D26","name":"Project Cohesion","shortDescription":{"text":"Project Cohesion"},"helpUri":"https://codehealth.canine.dev/dimensions/D26"},{"id":"D28","name":"Secrets (history)","shortDescription":{"text":"Secrets (history)"},"helpUri":"https://codehealth.canine.dev/dimensions/D28","relationships":[{"target":{"id":"CWE-798","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},"kinds":["relevant"]},{"target":{"id":"CWE-259","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},"kinds":["relevant"]},{"target":{"id":"A07:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},"kinds":["relevant"]}],"properties":{"cwe":["CWE-798","CWE-259"],"owasp":"A07:2025"}},{"id":"D29","name":"Static Analysis (SAST)","shortDescription":{"text":"Static Analysis (SAST)"},"helpUri":"https://codehealth.canine.dev/dimensions/D29","relationships":[{"target":{"id":"CWE-79","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},"kinds":["relevant"]},{"target":{"id":"CWE-89","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},"kinds":["relevant"]},{"target":{"id":"CWE-78","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},"kinds":["relevant"]},{"target":{"id":"CWE-94","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},"kinds":["relevant"]},{"target":{"id":"CWE-77","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},"kinds":["relevant"]},{"target":{"id":"A05:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},"kinds":["relevant"]}],"properties":{"cwe":["CWE-79","CWE-89","CWE-78","CWE-94","CWE-77"],"owasp":"A05:2025"}},{"id":"D30","name":"Dependency Vulnerabilities","shortDescription":{"text":"Dependency Vulnerabilities"},"helpUri":"https://codehealth.canine.dev/dimensions/D30","relationships":[{"target":{"id":"CWE-1395","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},"kinds":["relevant"]},{"target":{"id":"CWE-937","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},"kinds":["relevant"]},{"target":{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},"kinds":["relevant"]}],"properties":{"cwe":["CWE-1395","CWE-937"],"owasp":"A03:2025"}},{"id":"D31","name":"IaC \u0026 Container Security","shortDescription":{"text":"IaC \u0026 Container Security"},"helpUri":"https://codehealth.canine.dev/dimensions/D31","relationships":[{"target":{"id":"CWE-1032","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},"kinds":["relevant"]},{"target":{"id":"CWE-732","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},"kinds":["relevant"]},{"target":{"id":"CWE-16","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},"kinds":["relevant"]},{"target":{"id":"A02:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},"kinds":["relevant"]}],"properties":{"cwe":["CWE-1032","CWE-732","CWE-16"],"owasp":"A02:2025"}},{"id":"D34","name":"Knowledge Freshness","shortDescription":{"text":"Knowledge Freshness"},"helpUri":"https://codehealth.canine.dev/dimensions/D34"},{"id":"D35","name":"Change Coupling","shortDescription":{"text":"Change Coupling"},"helpUri":"https://codehealth.canine.dev/dimensions/D35"},{"id":"D36","name":"Supply-chain Provenance \u0026 Signing","shortDescription":{"text":"Supply-chain Provenance \u0026 Signing"},"helpUri":"https://codehealth.canine.dev/dimensions/D36","relationships":[{"target":{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},"kinds":["relevant"]},{"target":{"id":"CWE-494","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},"kinds":["relevant"]},{"target":{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},"kinds":["relevant"]}],"properties":{"cwe":["CWE-1357","CWE-494"],"owasp":"A03:2025"}},{"id":"D37","name":"Vulnerability-disclosure Policy","shortDescription":{"text":"Vulnerability-disclosure Policy"},"helpUri":"https://codehealth.canine.dev/dimensions/D37","relationships":[{"target":{"id":"CWE-1059","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},"kinds":["relevant"]},{"target":{"id":"A02:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},"kinds":["relevant"]}],"properties":{"cwe":["CWE-1059"],"owasp":"A02:2025"}},{"id":"D43","name":"Malicious Dependencies","shortDescription":{"text":"Malicious Dependencies"},"helpUri":"https://codehealth.canine.dev/dimensions/D43","relationships":[{"target":{"id":"CWE-506","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},"kinds":["relevant"]},{"target":{"id":"A08:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},"kinds":["relevant"]}],"properties":{"cwe":["CWE-506"],"owasp":"A08:2025"}},{"id":"AC1","name":"Text alternatives","shortDescription":{"text":"Text alternatives"},"helpUri":"https://codehealth.canine.dev/dimensions/AC1"},{"id":"AC2","name":"Forms \u0026 labels","shortDescription":{"text":"Forms \u0026 labels"},"helpUri":"https://codehealth.canine.dev/dimensions/AC2"},{"id":"AC3","name":"Page structure","shortDescription":{"text":"Page structure"},"helpUri":"https://codehealth.canine.dev/dimensions/AC3"},{"id":"AC4","name":"Keyboard semantics","shortDescription":{"text":"Keyboard semantics"},"helpUri":"https://codehealth.canine.dev/dimensions/AC4"},{"id":"AC5","name":"ARIA correctness","shortDescription":{"text":"ARIA correctness"},"helpUri":"https://codehealth.canine.dev/dimensions/AC5"},{"id":"AC6","name":"Visual \u0026 motion safety","shortDescription":{"text":"Visual \u0026 motion safety"},"helpUri":"https://codehealth.canine.dev/dimensions/AC6"},{"id":"AC7","name":"A11y enforcement","shortDescription":{"text":"A11y enforcement"},"helpUri":"https://codehealth.canine.dev/dimensions/AC7"},{"id":"AX10","name":"Code composition","shortDescription":{"text":"Code composition"},"helpUri":"https://codehealth.canine.dev/dimensions/AX10"},{"id":"AX3","name":"Project dependency cycles","shortDescription":{"text":"Project dependency cycles"},"helpUri":"https://codehealth.canine.dev/dimensions/AX3"},{"id":"AX4","name":"Dependency direction","shortDescription":{"text":"Dependency direction"},"helpUri":"https://codehealth.canine.dev/dimensions/AX4"},{"id":"AX6","name":"Interface segregation","shortDescription":{"text":"Interface segregation"},"helpUri":"https://codehealth.canine.dev/dimensions/AX6"},{"id":"AX8","name":"Test isolation","shortDescription":{"text":"Test isolation"},"helpUri":"https://codehealth.canine.dev/dimensions/AX8"},{"id":"AXB2","name":"Runtime readiness","shortDescription":{"text":"Runtime readiness"},"helpUri":"https://codehealth.canine.dev/dimensions/AXB2"},{"id":"C1","name":"Data Protection","shortDescription":{"text":"Data Protection"},"helpUri":"https://codehealth.canine.dev/dimensions/C1"},{"id":"C2","name":"Access Controls","shortDescription":{"text":"Access Controls"},"helpUri":"https://codehealth.canine.dev/dimensions/C2"},{"id":"C3","name":"Audit Trail","shortDescription":{"text":"Audit Trail"},"helpUri":"https://codehealth.canine.dev/dimensions/C3"},{"id":"ED5","name":"Idempotency","shortDescription":{"text":"Idempotency"},"helpUri":"https://codehealth.canine.dev/dimensions/ED5"},{"id":"GD1","name":"Unfinished \u0026 placeholder code","shortDescription":{"text":"Unfinished \u0026 placeholder code"},"helpUri":"https://codehealth.canine.dev/dimensions/GD1"},{"id":"IC1","name":"Incompleteness \u0026 stubs","shortDescription":{"text":"Incompleteness \u0026 stubs"},"helpUri":"https://codehealth.canine.dev/dimensions/IC1"},{"id":"M1","name":"Documentation (README)","shortDescription":{"text":"Documentation (README)"},"helpUri":"https://codehealth.canine.dev/dimensions/M1"},{"id":"M2","name":"Architecture documentation","shortDescription":{"text":"Architecture documentation"},"helpUri":"https://codehealth.canine.dev/dimensions/M2"},{"id":"M3","name":"Folder \u0026 project structure","shortDescription":{"text":"Folder \u0026 project structure"},"helpUri":"https://codehealth.canine.dev/dimensions/M3"},{"id":"M4","name":"Documentation accuracy","shortDescription":{"text":"Documentation accuracy"},"helpUri":"https://codehealth.canine.dev/dimensions/M4"},{"id":"P1","name":"CI/CD gates","shortDescription":{"text":"CI/CD gates"},"helpUri":"https://codehealth.canine.dev/dimensions/P1"},{"id":"P10","name":"Library API \u0026 versioning","shortDescription":{"text":"Library API \u0026 versioning"},"helpUri":"https://codehealth.canine.dev/dimensions/P10"},{"id":"P12","name":"CI test-gate honesty","shortDescription":{"text":"CI test-gate honesty"},"helpUri":"https://codehealth.canine.dev/dimensions/P12"},{"id":"P2","name":"Observability","shortDescription":{"text":"Observability"},"helpUri":"https://codehealth.canine.dev/dimensions/P2"},{"id":"P3","name":"Security \u0026 performance tooling","shortDescription":{"text":"Security \u0026 performance tooling"},"helpUri":"https://codehealth.canine.dev/dimensions/P3"},{"id":"P4","name":"Deployment \u0026 Rollback","shortDescription":{"text":"Deployment \u0026 Rollback"},"helpUri":"https://codehealth.canine.dev/dimensions/P4"},{"id":"P5","name":"DR \u0026 Backup","shortDescription":{"text":"DR \u0026 Backup"},"helpUri":"https://codehealth.canine.dev/dimensions/P5"},{"id":"P6","name":"Release Hygiene","shortDescription":{"text":"Release Hygiene"},"helpUri":"https://codehealth.canine.dev/dimensions/P6"},{"id":"P7","name":"Outbound HTTP resilience","shortDescription":{"text":"Outbound HTTP resilience"},"helpUri":"https://codehealth.canine.dev/dimensions/P7"},{"id":"PF3","name":"Async \u0026 latency hygiene","shortDescription":{"text":"Async \u0026 latency hygiene"},"helpUri":"https://codehealth.canine.dev/dimensions/PF3"},{"id":"R1","name":"Type Safety","shortDescription":{"text":"Type Safety"},"helpUri":"https://codehealth.canine.dev/dimensions/R1"},{"id":"R10","name":"Code Duplication","shortDescription":{"text":"Code Duplication"},"helpUri":"https://codehealth.canine.dev/dimensions/R10"},{"id":"R11","name":"Import Boundaries","shortDescription":{"text":"Import Boundaries"},"helpUri":"https://codehealth.canine.dev/dimensions/R11"},{"id":"R2","name":"Cyclomatic Complexity","shortDescription":{"text":"Cyclomatic Complexity"},"helpUri":"https://codehealth.canine.dev/dimensions/R2"},{"id":"R3","name":"Large Files","shortDescription":{"text":"Large Files"},"helpUri":"https://codehealth.canine.dev/dimensions/R3"},{"id":"R4","name":"Test Coverage","shortDescription":{"text":"Test Coverage"},"helpUri":"https://codehealth.canine.dev/dimensions/R4"},{"id":"R6","name":"Tooling","shortDescription":{"text":"Tooling"},"helpUri":"https://codehealth.canine.dev/dimensions/R6"},{"id":"R7","name":"Dead Code","shortDescription":{"text":"Dead Code"},"helpUri":"https://codehealth.canine.dev/dimensions/R7"},{"id":"R8","name":"Dependency Hygiene","shortDescription":{"text":"Dependency Hygiene"},"helpUri":"https://codehealth.canine.dev/dimensions/R8"},{"id":"R9","name":"Circular Imports","shortDescription":{"text":"Circular Imports"},"helpUri":"https://codehealth.canine.dev/dimensions/R9"},{"id":"S1","name":"Web-Security Posture","shortDescription":{"text":"Web-Security Posture"},"helpUri":"https://codehealth.canine.dev/dimensions/S1"},{"id":"SC1","name":"Supply-chain hygiene","shortDescription":{"text":"Supply-chain hygiene"},"helpUri":"https://codehealth.canine.dev/dimensions/SC1"},{"id":"X1","name":"Async correctness","shortDescription":{"text":"Async correctness"},"helpUri":"https://codehealth.canine.dev/dimensions/X1"},{"id":"X10","name":"Duplicated predicate","shortDescription":{"text":"Duplicated predicate"},"helpUri":"https://codehealth.canine.dev/dimensions/X10"},{"id":"X12","name":"Unreachable branch","shortDescription":{"text":"Unreachable branch"},"helpUri":"https://codehealth.canine.dev/dimensions/X12"},{"id":"X13","name":"Undrained process stream","shortDescription":{"text":"Undrained process stream"},"helpUri":"https://codehealth.canine.dev/dimensions/X13"},{"id":"X14","name":"Bypassable address classification","shortDescription":{"text":"Bypassable address classification"},"helpUri":"https://codehealth.canine.dev/dimensions/X14"},{"id":"X15","name":"Unvalidated length from an untrusted reader","shortDescription":{"text":"Unvalidated length from an untrusted reader"},"helpUri":"https://codehealth.canine.dev/dimensions/X15"},{"id":"X16","name":"Unfloored truncation loop","shortDescription":{"text":"Unfloored truncation loop"},"helpUri":"https://codehealth.canine.dev/dimensions/X16"},{"id":"X17","name":"Uncapped recursion over a caller-supplied document","shortDescription":{"text":"Uncapped recursion over a caller-supplied document"},"helpUri":"https://codehealth.canine.dev/dimensions/X17"},{"id":"X18","name":"Disposal-pattern correctness","shortDescription":{"text":"Disposal-pattern correctness"},"helpUri":"https://codehealth.canine.dev/dimensions/X18"},{"id":"X19","name":"Unrestored process-global state","shortDescription":{"text":"Unrestored process-global state"},"helpUri":"https://codehealth.canine.dev/dimensions/X19"},{"id":"X2","name":"Cancellation propagation","shortDescription":{"text":"Cancellation propagation"},"helpUri":"https://codehealth.canine.dev/dimensions/X2"},{"id":"X20","name":"Mistyped argument guard","shortDescription":{"text":"Mistyped argument guard"},"helpUri":"https://codehealth.canine.dev/dimensions/X20"},{"id":"X21","name":"Side-effecting pattern guard","shortDescription":{"text":"Side-effecting pattern guard"},"helpUri":"https://codehealth.canine.dev/dimensions/X21"},{"id":"X22","name":"Contradicted release guard","shortDescription":{"text":"Contradicted release guard"},"helpUri":"https://codehealth.canine.dev/dimensions/X22"},{"id":"X23","name":"Unguarded diagnostic materialisation","shortDescription":{"text":"Unguarded diagnostic materialisation"},"helpUri":"https://codehealth.canine.dev/dimensions/X23"},{"id":"X24","name":"Document value interpolated into markup unescaped","shortDescription":{"text":"Document value interpolated into markup unescaped"},"helpUri":"https://codehealth.canine.dev/dimensions/X24"},{"id":"X25","name":"Inert configuration knob","shortDescription":{"text":"Inert configuration knob"},"helpUri":"https://codehealth.canine.dev/dimensions/X25"},{"id":"X26","name":"Unsynchronised callback handoff","shortDescription":{"text":"Unsynchronised callback handoff"},"helpUri":"https://codehealth.canine.dev/dimensions/X26"},{"id":"X27","name":"Collection changed while being enumerated","shortDescription":{"text":"Collection changed while being enumerated"},"helpUri":"https://codehealth.canine.dev/dimensions/X27"},{"id":"X28","name":"Index access outside its own emptiness guard","shortDescription":{"text":"Index access outside its own emptiness guard"},"helpUri":"https://codehealth.canine.dev/dimensions/X28"},{"id":"X29","name":"Per-element action decided by a fixed element","shortDescription":{"text":"Per-element action decided by a fixed element"},"helpUri":"https://codehealth.canine.dev/dimensions/X29"},{"id":"X3","name":"Exception handling","shortDescription":{"text":"Exception handling"},"helpUri":"https://codehealth.canine.dev/dimensions/X3"},{"id":"X30","name":"Support guard that admits what it rejects","shortDescription":{"text":"Support guard that admits what it rejects"},"helpUri":"https://codehealth.canine.dev/dimensions/X30"},{"id":"X32","name":"Type resolved by simple name across every loaded assembly","shortDescription":{"text":"Type resolved by simple name across every loaded assembly"},"helpUri":"https://codehealth.canine.dev/dimensions/X32"},{"id":"X5","name":"Nullable reference types","shortDescription":{"text":"Nullable reference types"},"helpUri":"https://codehealth.canine.dev/dimensions/X5"},{"id":"X6","name":"Hand-rolled structured-format parsing","shortDescription":{"text":"Hand-rolled structured-format parsing"},"helpUri":"https://codehealth.canine.dev/dimensions/X6"},{"id":"X7","name":"Silent fallback defaults","shortDescription":{"text":"Silent fallback defaults"},"helpUri":"https://codehealth.canine.dev/dimensions/X7"},{"id":"X9","name":"Subsumed condition operand","shortDescription":{"text":"Subsumed condition operand"},"helpUri":"https://codehealth.canine.dev/dimensions/X9"}]}},"results":[{"ruleId":"D1","level":"warning","message":{"text":"ProxyHostModal.ProxyHostModal (cyclomatic 48): ProxyHostModal.ProxyHostModal has cyclomatic complexity 48 (threshold 15). Of this number, 36 points are the body\u0027s own statements and 12 belong to 5 function items inside it that branch. To reduce it, name the conditions: bind each compound test to a well-named local or a small predicate function, so the body reads as a sequence of named decisions rather than a chain of operators."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/modals/ProxyHostModal.tsx"},"region":{"startLine":32}}}],"partialFingerprints":{"codehealthFindingId/v1":"90291a13820dbb074bff76651f41e88f5067376b8945727a181c5c70bd88d931"}},{"ruleId":"D1","level":"warning","message":{"text":"RedirectionHostModal.RedirectionHostModal (cyclomatic 38): RedirectionHostModal.RedirectionHostModal has cyclomatic complexity 38 (threshold 15). Of this number, 26 points are the body\u0027s own statements and 12 belong to 5 function items inside it that branch. To reduce it, name the conditions: bind each compound test to a well-named local or a small predicate function, so the body reads as a sequence of named decisions rather than a chain of operators."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/modals/RedirectionHostModal.tsx"},"region":{"startLine":28}}}],"partialFingerprints":{"codehealthFindingId/v1":"511f3ce244c720e79ba2e950edf0e8391c422fb04ba5c87dadce6c3d1e9c5a94"}},{"ruleId":"D1","level":"warning","message":{"text":"UserModal.UserModal (cyclomatic 33): UserModal.UserModal has cyclomatic complexity 33 (threshold 15). Of this number, 17 points are the body\u0027s own statements and 16 belong to 5 function items inside it that branch. To reduce it, name the conditions: bind each compound test to a well-named local or a small predicate function, so the body reads as a sequence of named decisions rather than a chain of operators."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/modals/UserModal.tsx"},"region":{"startLine":19}}}],"partialFingerprints":{"codehealthFindingId/v1":"78a2b070b5c979dc8f827890f28b1355fc8102b3025d146af012d007337b6619"}},{"ruleId":"D1","level":"warning","message":{"text":"StreamModal.StreamModal (cyclomatic 28): StreamModal.StreamModal has cyclomatic complexity 28 (threshold 15). Of this number, 14 points are the body\u0027s own statements and 14 belong to 7 function items inside it that branch. To reduce it, split the body: these branches sit side by side rather than nested inside one another, so extracting each one on its own would leave a function per branch. Group the statements between the checks into named steps and move each step into its own function, so the body reads as a short sequence of named stages."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/modals/StreamModal.tsx"},"region":{"startLine":19}}}],"partialFingerprints":{"codehealthFindingId/v1":"9fc877d3e3b6d561d2ebc562832ab27279d8f3ceec6364b254b52242c6c5956b"}},{"ruleId":"D1","level":"warning","message":{"text":"TwoFactorModal.TwoFactorModal (cyclomatic 28): TwoFactorModal.TwoFactorModal has cyclomatic complexity 28 (threshold 15). Most of this is not in the body itself: 1 of the 28 points is its own statement and the rest belongs to 9 function items inside it that branch (renderContent, a function literal at line 32, handleStartSetup, \u2026). The named helpers are already separate functions; the literals\u0027 work cannot be called, reviewed or tested from outside this body. To reduce it, move the named helpers out of the body to the enclosing scope and lift each literal\u0027s work into a named function there, so each is measured, reviewed and tested on its own, and reduce whichever one then reads as the largest."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/modals/TwoFactorModal.tsx"},"region":{"startLine":23}}}],"partialFingerprints":{"codehealthFindingId/v1":"0a7a52e6bd6a889ffe18c75dbe83ad1e390b9562d8dda4addd966f8061edda7f"}},{"ruleId":"D1","level":"warning","message":{"text":"SSLCertificateField.SSLCertificateField (cyclomatic 27): SSLCertificateField.SSLCertificateField has cyclomatic complexity 27 (threshold 15). Most of this is not in the body itself: 6 of the 27 points are its own statements and the rest belongs to 3 function items inside it that branch (handleChange, a function literal at line 108, a function literal at line 77). The named helpers are already separate functions; the literals\u0027 work cannot be called, reviewed or tested from outside this body. To reduce it, move the named helpers out of the body to the enclosing scope and lift each literal\u0027s work into a named function there, so each is measured, reviewed and tested on its own, and reduce whichever one then reads as the largest."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/components/Form/SSLCertificateField.tsx"},"region":{"startLine":37}}}],"partialFingerprints":{"codehealthFindingId/v1":"40483b02072ed8474cab9c9537b85be3cdbb9bb935672d84cbed56a6fe6dbefa"}},{"ruleId":"D1","level":"warning","message":{"text":"config.configure (cyclomatic 26): config.configure has cyclomatic complexity 26 (threshold 15). Of this number, 25 points are the body\u0027s own statements and 1 belongs to one function item inside it that branches. To reduce it, name the conditions: bind each compound test to a well-named local or a small predicate function, so the body reads as a sequence of named decisions rather than a chain of operators."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/lib/config.js"},"region":{"startLine":17}}}],"partialFingerprints":{"codehealthFindingId/v1":"1f47b57392c7107838866c80ae17e50daf6d7a421608226a806b49a69d207213"}},{"ruleId":"D1","level":"warning","message":{"text":"SSLOptionsFields.SSLOptionsFields (cyclomatic 26): SSLOptionsFields.SSLOptionsFields has cyclomatic complexity 26 (threshold 15). Of this number, 14 points are the body\u0027s own statements and 12 belong to 7 function items inside it that branch. To reduce it, split the body: these branches sit side by side rather than nested inside one another, so extracting each one on its own would leave a function per branch. Group the statements between the checks into named steps and move each step into its own function, so the body reads as a short sequence of named stages."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/components/Form/SSLOptionsFields.tsx"},"region":{"startLine":13}}}],"partialFingerprints":{"codehealthFindingId/v1":"3b87fa1b79ed496327a126615a66eb56f39a65b2a337aae2feaa0abc2c296a9d"}},{"ruleId":"D1","level":"warning","message":{"text":"AccessListModal.AccessListModal (cyclomatic 25): AccessListModal.AccessListModal has cyclomatic complexity 25 (threshold 15). Most of this is not in the body itself: 12 of the 25 points are its own statements and the rest belongs to 6 function items inside it that branch (onSubmit, validate, a function literal at line 164, \u2026). The named helpers are already separate functions; the literals\u0027 work cannot be called, reviewed or tested from outside this body. To reduce it, move the named helpers out of the body to the enclosing scope and lift each literal\u0027s work into a named function there, so each is measured, reviewed and tested on its own, and reduce whichever one then reads as the largest."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/modals/AccessListModal.tsx"},"region":{"startLine":21}}}],"partialFingerprints":{"codehealthFindingId/v1":"f292fbe956c33180837262d4f026b92806f44db25784d6d570c16bdad9e71357"}},{"ruleId":"D1","level":"warning","message":{"text":"PermissionsModal.PermissionsModal (cyclomatic 22): PermissionsModal.PermissionsModal has cyclomatic complexity 22 (threshold 15). Most of this is not in the body itself: 8 of the 22 points are its own statements and the rest belongs to 4 function items inside it that branch (handleChange, getPermissionButtons, onSubmit, \u2026). Those helpers are already separate functions, so extracting the branching again is not available. To reduce it, move them out of the body to the enclosing scope, where each is measured, reviewed and tested on its own, and reduce whichever one then reads as the largest."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/modals/PermissionsModal.tsx"},"region":{"startLine":21}}}],"partialFingerprints":{"codehealthFindingId/v1":"cfaebca16df2a2ddce49b801ca18e59822a5d73515d2fd2fcef43687ff00c1e4"}},{"ruleId":"D1","level":"warning","message":{"text":"LogViewer.LogViewer (cyclomatic 22): LogViewer.LogViewer has cyclomatic complexity 22 (threshold 15). Of this number, 19 points are the body\u0027s own statements and 3 belong to 3 function items inside it that branch. To reduce it, name the conditions: bind each compound test to a well-named local or a small predicate function, so the body reads as a sequence of named decisions rather than a chain of operators."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Logs/LogViewer.tsx"},"region":{"startLine":55}}}],"partialFingerprints":{"codehealthFindingId/v1":"cc96050e39820946e693139280449d2f34851ede54df59d786835b5ef721fc63"}},{"ruleId":"D1","level":"warning","message":{"text":"LocationsFields.LocationsFields (cyclomatic 20): LocationsFields.LocationsFields has cyclomatic complexity 20 (threshold 15). Most of this is not in the body itself: 6 of the 20 points are its own statements and the rest belongs to 8 function items inside it that branch (a function literal at line 163, forwardSummary, a function literal at line 170, \u2026). The named helpers are already separate functions; the literals\u0027 work cannot be called, reviewed or tested from outside this body. To reduce it, move the named helpers out of the body to the enclosing scope and lift each literal\u0027s work into a named function there, so each is measured, reviewed and tested on its own, and reduce whichever one then reads as the largest."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/components/Form/LocationsFields.tsx"},"region":{"startLine":34}}}],"partialFingerprints":{"codehealthFindingId/v1":"cc466532e628bf9f18fe8d2a49be592504d3d12594d4475bd88d367b98dd0c16"}},{"ruleId":"D1","level":"warning","message":{"text":"ChangePasswordModal.ChangePasswordModal (cyclomatic 19): ChangePasswordModal.ChangePasswordModal has cyclomatic complexity 19 (threshold 15). Most of this is not in the body itself: 1 of the 19 points is its own statement and the rest belongs to 4 function items inside it that branch (a function literal at line 68, a function literal at line 97, a function literal at line 122, \u2026). The named helpers are already separate functions; the literals\u0027 work cannot be called, reviewed or tested from outside this body. To reduce it, move the named helpers out of the body to the enclosing scope and lift each literal\u0027s work into a named function there, so each is measured, reviewed and tested on its own, and reduce whichever one then reads as the largest."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/modals/ChangePasswordModal.tsx"},"region":{"startLine":18}}}],"partialFingerprints":{"codehealthFindingId/v1":"8ba407430dbe15f2d15c17ade86a5e7b0cc38a177ddeeeb9acaedd7c0ef33f8e"}},{"ruleId":"D1","level":"warning","message":{"text":"CustomCertificateModal.CustomCertificateModal (cyclomatic 19): CustomCertificateModal.CustomCertificateModal has cyclomatic complexity 19 (threshold 15). Most of this is not in the body itself: 1 of the 19 points is its own statement and the rest belongs to 8 function items inside it that branch (onSubmit, a function literal at line 91, a function literal at line 115, \u2026). The named helpers are already separate functions; the literals\u0027 work cannot be called, reviewed or tested from outside this body. To reduce it, move the named helpers out of the body to the enclosing scope and lift each literal\u0027s work into a named function there, so each is measured, reviewed and tested on its own, and reduce whichever one then reads as the largest."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/modals/CustomCertificateModal.tsx"},"region":{"startLine":18}}}],"partialFingerprints":{"codehealthFindingId/v1":"b3324476eb8b696b22e2e1f644c17e3f65520fa6b67735d8a95b1b86c22785a6"}},{"ruleId":"D1","level":"warning","message":{"text":"index.Setup (cyclomatic 19): index.Setup has cyclomatic complexity 19 (threshold 15). Most of this is not in the body itself: 1 of the 19 points is its own statement and the rest belongs to 4 function items inside it that branch (a function literal at line 103, a function literal at line 127, a function literal at line 152, \u2026). The named helpers are already separate functions; the literals\u0027 work cannot be called, reviewed or tested from outside this body. To reduce it, move the named helpers out of the body to the enclosing scope and lift each literal\u0027s work into a named function there, so each is measured, reviewed and tested on its own, and reduce whichever one then reads as the largest."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Setup/index.tsx"},"region":{"startLine":19}}}],"partialFingerprints":{"codehealthFindingId/v1":"05eec20229df55e26818f45c203ab604761a5707f1cd5706bf8bdfc1fb8e8eb7"}},{"ruleId":"D1","level":"warning","message":{"text":"token.default (cyclomatic 17): token.default has cyclomatic complexity 17 (threshold 15). Most of this is not in the body itself: 1 of the 17 points is its own statement and the rest belongs to 8 function literals inside it that branch (lines 58, 67, 23, \u2026). The decisions are inside those literals, which nothing outside this body can call, review or test on its own, so splitting the enclosing body is not the move available here. To reduce it, lift the literals\u0027 work into a named function or method at the enclosing scope and have each literal call it, then reduce whichever part then reads as the largest."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/models/token.js"},"region":{"startLine":15}}}],"partialFingerprints":{"codehealthFindingId/v1":"144118c62c01d9ab463f91ac28100fdef338760f383ad93980b5395909af7d6a"}},{"ruleId":"D1","level":"warning","message":{"text":"(anonymous) (cyclomatic 17): (anonymous) has cyclomatic complexity 17 (threshold 15). Most of this is not in the body itself: 1 of the 17 points is its own statement and the rest belongs to 10 function items inside it that branch (a function literal at line 58, a function literal at line 67, create, \u2026). The named helpers are already separate functions; the literals\u0027 work cannot be called, reviewed or tested from outside this body. To reduce it, move the named helpers out of the body to the enclosing scope and lift each literal\u0027s work into a named function there, so each is measured, reviewed and tested on its own, and reduce whichever one then reads as the largest."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/models/token.js"},"region":{"startLine":15}}}],"partialFingerprints":{"codehealthFindingId/v1":"5fe1c4c2f4b060952f132adbfea9b0264cf6b298d90700b8e385bbeeaeb18206"}},{"ruleId":"D1","level":"warning","message":{"text":"DefaultSite.DefaultSite (cyclomatic 16): DefaultSite.DefaultSite has cyclomatic complexity 16 (threshold 15). Most of this is not in the body itself: 7 of the 16 points are its own statements and the rest belongs to 4 function items inside it that branch (a function literal at line 76, a function literal at line 185, a function literal at line 214, \u2026). The named helpers are already separate functions; the literals\u0027 work cannot be called, reviewed or tested from outside this body. To reduce it, move the named helpers out of the body to the enclosing scope and lift each literal\u0027s work into a named function there, so each is measured, reviewed and tested on its own, and reduce whichever one then reads as the largest."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Settings/DefaultSite.tsx"},"region":{"startLine":11}}}],"partialFingerprints":{"codehealthFindingId/v1":"effc01661c5471586f36c8b3d3464b1d20f95782c6071ebdc38effa89d174ffc"}},{"ruleId":"D1","level":"warning","message":{"text":"update (cyclomatic 16): update has cyclomatic complexity 16 (threshold 15). Of this number, 15 points are the body\u0027s own statements and 1 belongs to 4 function literals inside it that branch. To reduce it, separate the cases: extract each independent branch into its own named function, and where the body has guards that only reject input, fold those into early returns at the top."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/access-list.js"},"region":{"startLine":133}}}],"partialFingerprints":{"codehealthFindingId/v1":"a5c97212cf3605f8dabcff07ae60dd737be3aedd6653a5c9baf692833e00284d"}},{"ruleId":"D2","level":"warning","message":{"text":"TwoFactorModal.TwoFactorModal (cognitive 33): TwoFactorModal.TwoFactorModal has cognitive complexity 33 (threshold 15). Drivers by points: ternaries 6 (12 pts), boolean chains 10, if/else 6, error handling 5 (nesting depth added 6). None of this is in the body itself: all 33 points belong to 9 function items inside it that branch (renderContent, a function literal at line 32, handleStartSetup, \u2026). The named helpers are already separate functions; the literals\u0027 work cannot be called, reviewed or tested from outside this body. To reduce it, move the named helpers out of the body to the enclosing scope and lift each literal\u0027s work into a named function there, so each is measured, reviewed and tested on its own, and reduce whichever one then reads as the largest."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/modals/TwoFactorModal.tsx"},"region":{"startLine":23}}}],"partialFingerprints":{"codehealthFindingId/v1":"962d6d73ed4900b6478f9f8deab250dcb510b18a676150d74490a2522eb6d2a3"}},{"ruleId":"D2","level":"warning","message":{"text":"ProxyHostModal.ProxyHostModal (cognitive 32): ProxyHostModal.ProxyHostModal has cognitive complexity 32 (threshold 15). Drivers by points: boolean chains 30, if/else 1, ternaries 1. Of this number, 30 points are the body\u0027s own statements and 2 belong to 5 function items inside it that branch. To reduce it, name the conditions: bind each compound test to a well-named local or a small predicate function, so the body reads as a sequence of named decisions rather than a chain of operators."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/modals/ProxyHostModal.tsx"},"region":{"startLine":32}}}],"partialFingerprints":{"codehealthFindingId/v1":"efbbb3660a14ea6a711c7148c82184bc84f4bea53f5f3bfaeb00f0a7e3fc7504"}},{"ruleId":"D2","level":"warning","message":{"text":"SSLOptionsFields.SSLOptionsFields (cognitive 28): SSLOptionsFields.SSLOptionsFields has cognitive complexity 28 (threshold 15). Drivers by points: ternaries 12 (16 pts), boolean chains 10, if/else 2 (nesting depth added 4). Of this number, 14 points are the body\u0027s own statements and 14 belong to 7 function items inside it that branch. To reduce it, split the body: most of this score is breadth rather than depth \u2014 checks laid out side by side rather than stacked \u2014 so group the statements between the checks into named steps and move each step into its own function. Some of it IS depth: where a check sits inside another whose only job is to reach it, merge the two into one condition."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/components/Form/SSLOptionsFields.tsx"},"region":{"startLine":13}}}],"partialFingerprints":{"codehealthFindingId/v1":"7d312a4d412e046c24bc2c1191f99f35ec1c3a098152af0a1ba49b6e3fb264ec"}},{"ruleId":"D2","level":"warning","message":{"text":"configure (cognitive 27): configure has cognitive complexity 27 (threshold 15). Drivers by points: boolean chains 13, if/else 5 (8 pts), ternaries 3 (4 pts), error handling 1 (2 pts) (nesting depth added 5). Of this number, 26 points are the body\u0027s own statements and 1 belongs to one function item inside it that branches. To reduce it, name the conditions: bind each compound test to a well-named local or a small predicate function, so the body reads as a sequence of named decisions rather than a chain of operators."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/lib/config.js"},"region":{"startLine":17}}}],"partialFingerprints":{"codehealthFindingId/v1":"b7c482228edb5efcbd8bfa117b6747e00e056cc411c02bc6d0382e0a6a8ee678"}},{"ruleId":"D2","level":"warning","message":{"text":"SSLCertificateField.SSLCertificateField (cognitive 26): SSLCertificateField.SSLCertificateField has cognitive complexity 26 (threshold 15). Drivers by points: boolean chains 14, ternaries 6 (8 pts), if/else 4 (nesting depth added 2). Most of this is not in the body itself: 6 of the 26 points are its own statements and the rest belongs to 3 function items inside it that branch (handleChange, a function literal at line 108, a function literal at line 77). The named helpers are already separate functions; the literals\u0027 work cannot be called, reviewed or tested from outside this body. To reduce it, move the named helpers out of the body to the enclosing scope and lift each literal\u0027s work into a named function there, so each is measured, reviewed and tested on its own, and reduce whichever one then reads as the largest."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/components/Form/SSLCertificateField.tsx"},"region":{"startLine":37}}}],"partialFingerprints":{"codehealthFindingId/v1":"a076ad54bca102f2c110a59735a01aaf22ef486fda35db7dcf6a7cff2aa043e7"}},{"ruleId":"D2","level":"warning","message":{"text":"RedirectionHostModal.RedirectionHostModal (cognitive 25): RedirectionHostModal.RedirectionHostModal has cognitive complexity 25 (threshold 15). Drivers by points: boolean chains 23, if/else 1, ternaries 1. Of this number, 23 points are the body\u0027s own statements and 2 belong to 5 function items inside it that branch. To reduce it, name the conditions: bind each compound test to a well-named local or a small predicate function, so the body reads as a sequence of named decisions rather than a chain of operators."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/modals/RedirectionHostModal.tsx"},"region":{"startLine":28}}}],"partialFingerprints":{"codehealthFindingId/v1":"0566a533d8239209f8c0c8052ac1da98ab3ad4a7e338cd7cec77e019d0fdc607"}},{"ruleId":"D2","level":"warning","message":{"text":"(anonymous) (cognitive 25): (anonymous) has cognitive complexity 25 (threshold 15). Drivers by points: if/else 13 (18 pts), boolean chains 6, error handling 1 (nesting depth added 5). None of this is in the body itself: all 25 points belong to 10 function items inside it that branch (a function literal at line 67, a function literal at line 58, create, \u2026). The named helpers are already separate functions; the literals\u0027 work cannot be called, reviewed or tested from outside this body. To reduce it, move the named helpers out of the body to the enclosing scope and lift each literal\u0027s work into a named function there, so each is measured, reviewed and tested on its own, and reduce whichever one then reads as the largest."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/models/token.js"},"region":{"startLine":15}}}],"partialFingerprints":{"codehealthFindingId/v1":"68eaffd1322b5a8943538b51f4e6433d17d069c98ac115158b6edff49e07f914"}},{"ruleId":"D2","level":"warning","message":{"text":"token.default (cognitive 24): token.default has cognitive complexity 24 (threshold 15). Drivers by points: if/else 13 (18 pts), boolean chains 5, error handling 1 (nesting depth added 5). None of this is in the body itself: all 24 points belong to 8 function literals inside it that branch (lines 67, 58, 23, \u2026). The decisions are inside those literals, which nothing outside this body can call, review or test on its own, so splitting the enclosing body is not the move available here. To reduce it, lift the literals\u0027 work into a named function or method at the enclosing scope and have each literal call it, then reduce whichever part then reads as the largest."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/models/token.js"},"region":{"startLine":15}}}],"partialFingerprints":{"codehealthFindingId/v1":"13c70d603042c23890b609bf68582368d5ad61068c059d3c37dafcded295b225"}},{"ruleId":"D2","level":"warning","message":{"text":"(anonymous).loadObjects (cognitive 24): (anonymous).loadObjects has cognitive complexity 24 (threshold 15). Drivers by points: if/else 6 (14 pts), ternaries 2 (6 pts), match/switch 1 (3 pts), boolean chains 1 (nesting depth added 14). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/lib/access.js"},"region":{"startLine":118}}}],"partialFingerprints":{"codehealthFindingId/v1":"ac1fcd7594c57e14429b8ae1c0f787194a061f3568efcb1a0cfcbcabcf18e834"}},{"ruleId":"D2","level":"warning","message":{"text":"index.Setup (cognitive 23): index.Setup has cognitive complexity 23 (threshold 15). Drivers by points: ternaries 9 (12 pts), boolean chains 6, error handling 2 (3 pts), if/else 2 (nesting depth added 4). None of this is in the body itself: all 23 points belong to 4 function items inside it that branch (a function literal at line 103, a function literal at line 127, a function literal at line 152, \u2026). The named helpers are already separate functions; the literals\u0027 work cannot be called, reviewed or tested from outside this body. To reduce it, move the named helpers out of the body to the enclosing scope and lift each literal\u0027s work into a named function there, so each is measured, reviewed and tested on its own, and reduce whichever one then reads as the largest."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Setup/index.tsx"},"region":{"startLine":19}}}],"partialFingerprints":{"codehealthFindingId/v1":"68160b537a91b240ae02cb396a49ad1b4d451902fb2610598c0dff9fd623d10e"}},{"ruleId":"D2","level":"warning","message":{"text":"update (cognitive 23): update has cognitive complexity 23 (threshold 15). Drivers by points: if/else 12 (18 pts), boolean chains 3, loops 1 (2 pts) (nesting depth added 7). Of this number, 20 points are the body\u0027s own statements and 3 belong to 4 function literals inside it that branch. To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/access-list.js"},"region":{"startLine":133}}}],"partialFingerprints":{"codehealthFindingId/v1":"754d8129d04160fcd992c1435f72a4cd17d32f3ed16e7e1ff2519ec554c1ec29"}},{"ruleId":"D2","level":"warning","message":{"text":"CustomCertificateModal.CustomCertificateModal (cognitive 22): CustomCertificateModal.CustomCertificateModal has cognitive complexity 22 (threshold 15). Drivers by points: ternaries 11 (15 pts), boolean chains 4, if/else 2, error handling 1 (nesting depth added 4). None of this is in the body itself: all 22 points belong to 8 function items inside it that branch (a function literal at line 91, a function literal at line 115, a function literal at line 146, \u2026). The named helpers are already separate functions; the literals\u0027 work cannot be called, reviewed or tested from outside this body. To reduce it, move the named helpers out of the body to the enclosing scope and lift each literal\u0027s work into a named function there, so each is measured, reviewed and tested on its own, and reduce whichever one then reads as the largest."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/modals/CustomCertificateModal.tsx"},"region":{"startLine":18}}}],"partialFingerprints":{"codehealthFindingId/v1":"c5c1346ca67edcc82294d219eaf23e0fd60ab5dd0e7e7b89b7a8e0debc3dbbcf"}},{"ruleId":"D2","level":"warning","message":{"text":"LocationsFields.LocationsFields (cognitive 21): LocationsFields.LocationsFields has cognitive complexity 21 (threshold 15). Drivers by points: ternaries 9 (11 pts), boolean chains 6, if/else 3 (4 pts) (nesting depth added 3). Most of this is not in the body itself: 4 of the 21 points are its own statements and the rest belongs to 8 function items inside it that branch (a function literal at line 163, forwardSummary, a function literal at line 170, \u2026). The named helpers are already separate functions; the literals\u0027 work cannot be called, reviewed or tested from outside this body. To reduce it, move the named helpers out of the body to the enclosing scope and lift each literal\u0027s work into a named function there, so each is measured, reviewed and tested on its own, and reduce whichever one then reads as the largest."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/components/Form/LocationsFields.tsx"},"region":{"startLine":34}}}],"partialFingerprints":{"codehealthFindingId/v1":"adc480c7dc24beee04eb5b55e90231312298d28b1d5d7b7d98a0a9c44f2b69f8"}},{"ruleId":"D2","level":"warning","message":{"text":"ChangePasswordModal.ChangePasswordModal (cognitive 21): ChangePasswordModal.ChangePasswordModal has cognitive complexity 21 (threshold 15). Drivers by points: ternaries 9 (12 pts), boolean chains 6, if/else 2, error handling 1 (nesting depth added 3). None of this is in the body itself: all 21 points belong to 4 function items inside it that branch (a function literal at line 68, a function literal at line 97, a function literal at line 122, \u2026). The named helpers are already separate functions; the literals\u0027 work cannot be called, reviewed or tested from outside this body. To reduce it, move the named helpers out of the body to the enclosing scope and lift each literal\u0027s work into a named function there, so each is measured, reviewed and tested on its own, and reduce whichever one then reads as the largest."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/modals/ChangePasswordModal.tsx"},"region":{"startLine":18}}}],"partialFingerprints":{"codehealthFindingId/v1":"7ae91240680168093c1311bcbac277a941efb6170750def8a37acdb8732cb3bf"}},{"ruleId":"D2","level":"warning","message":{"text":"isHostnameTaken (cognitive 21): isHostnameTaken has cognitive complexity 21 (threshold 15). Drivers by points: if/else 6 (9 pts), ternaries 3 (9 pts), boolean chains 3 (nesting depth added 9). None of this is in the body itself: all 21 points belong to one function literal inside it that branches (line 124). The decisions are inside the literal, which nothing outside this body can call, review or test on its own, so splitting the enclosing body is not the move available here. To reduce it, lift the literal\u0027s work into a named function or method at the enclosing scope and have the literal call it, then reduce whichever part then reads as the largest."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/host.js"},"region":{"startLine":108}}}],"partialFingerprints":{"codehealthFindingId/v1":"2f446eff76b733ea97b34247011d91e90a32670dacf03e6011c3f6d21956c183"}},{"ruleId":"D2","level":"warning","message":{"text":"HTTPCertificateModal.HTTPCertificateModal (cognitive 19): HTTPCertificateModal.HTTPCertificateModal has cognitive complexity 19 (threshold 15). Drivers by points: if/else 9 (12 pts), boolean chains 3, error handling 2, loops 1, ternaries 1 (nesting depth added 3). None of this is in the body itself: all 19 points belong to 4 function items inside it that branch (parseTestResults, a function literal at line 125, onSubmit, \u2026). The named helpers are already separate functions; the literals\u0027 work cannot be called, reviewed or tested from outside this body. To reduce it, move the named helpers out of the body to the enclosing scope and lift each literal\u0027s work into a named function there, so each is measured, reviewed and tested on its own, and reduce whichever one then reads as the largest."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/modals/HTTPCertificateModal.tsx"},"region":{"startLine":17}}}],"partialFingerprints":{"codehealthFindingId/v1":"8cd2240eca1ee27eb04956e950491a1bf85d26efd1db7d298d758b8da1f8d398"}},{"ruleId":"D2","level":"warning","message":{"text":"LogViewer.LogViewer (cognitive 19): LogViewer.LogViewer has cognitive complexity 19 (threshold 15). Drivers by points: boolean chains 13, ternaries 5, if/else 1. Of this number, 16 points are the body\u0027s own statements and 3 belong to 3 function items inside it that branch. To reduce it, name the conditions: bind each compound test to a well-named local or a small predicate function, so the body reads as a sequence of named decisions rather than a chain of operators."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Logs/LogViewer.tsx"},"region":{"startLine":55}}}],"partialFingerprints":{"codehealthFindingId/v1":"cafb23fa9bb372caa204702ee3860c007faac50ef784244d033a2f695d53a6bc"}},{"ruleId":"D2","level":"warning","message":{"text":"(anonymous).init (cognitive 19): (anonymous).init has cognitive complexity 19 (threshold 15). Drivers by points: if/else 8 (15 pts), boolean chains 4 (nesting depth added 7). Of this number, 16 points are the body\u0027s own statements and 3 belong to one function literal inside it that branches. To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/lib/access.js"},"region":{"startLine":40}}}],"partialFingerprints":{"codehealthFindingId/v1":"5f54f258a8bb5f6a54e1a4d095c2f3c651662d37e1a71f98343e0a3e348cb676"}},{"ruleId":"D2","level":"warning","message":{"text":"fetch (cognitive 19): fetch has cognitive complexity 19 (threshold 15). Drivers by points: if/else 7 (15 pts), boolean chains 2, error handling 1 (2 pts) (nesting depth added 9). Most of this is not in the body itself: 3 of the 19 points are its own statements and the rest belongs to 14 function literals inside it that branch (lines 66, 70, 79, \u2026). The decisions are inside those literals, which nothing outside this body can call, review or test on its own, so splitting the enclosing body is not the move available here. To reduce it, lift the literals\u0027 work into a named function or method at the enclosing scope and have each literal call it, then reduce whichever part then reads as the largest."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/ip_ranges.js"},"region":{"startLine":57}}}],"partialFingerprints":{"codehealthFindingId/v1":"2a1a3d388bc34123c68f2612b19b1dd28b4dd2c163269eab3c3abc52fa17c90d"}},{"ruleId":"D2","level":"warning","message":{"text":"AccessListModal.AccessListModal (cognitive 17): AccessListModal.AccessListModal has cognitive complexity 17 (threshold 15). Drivers by points: boolean chains 12, if/else 4, ternaries 1. Of this number, 9 points are the body\u0027s own statements and 8 belong to 6 function items inside it that branch. To reduce it, name the conditions: bind each compound test to a well-named local or a small predicate function, so the body reads as a sequence of named decisions rather than a chain of operators."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/modals/AccessListModal.tsx"},"region":{"startLine":21}}}],"partialFingerprints":{"codehealthFindingId/v1":"953571276113ac5d42f1abcc516c2983ba1915b3591ca9eb1e4838ee06f80fa3"}},{"ruleId":"D2","level":"warning","message":{"text":"create (cognitive 17): create has cognitive complexity 17 (threshold 15). Drivers by points: error handling 4 (9 pts), if/else 5 (7 pts), boolean chains 1 (nesting depth added 7). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/certificate.js"},"region":{"startLine":117}}}],"partialFingerprints":{"codehealthFindingId/v1":"b22e1f8e953a9b18a59c3ab5cac97ac410758c05a0e8ecc57da9fdc4c7e589cd"}},{"ruleId":"D2","level":"warning","message":{"text":"UserModal.UserModal (cognitive 16): UserModal.UserModal has cognitive complexity 16 (threshold 15). Drivers by points: boolean chains 12, if/else 3, ternaries 1. Of this number, 12 points are the body\u0027s own statements and 4 belong to 5 function items inside it that branch. To reduce it, name the conditions: bind each compound test to a well-named local or a small predicate function, so the body reads as a sequence of named decisions rather than a chain of operators."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/modals/UserModal.tsx"},"region":{"startLine":19}}}],"partialFingerprints":{"codehealthFindingId/v1":"e58d59783ac80df0a160b10632817db5f43942a1edf269559719cdd852f7f599"}},{"ruleId":"D2","level":"warning","message":{"text":"loadRenderRelations (cognitive 16): loadRenderRelations has cognitive complexity 16 (threshold 15). Drivers by points: if/else 5 (7 pts), ternaries 2 (5 pts), boolean chains 4 (nesting depth added 5). To reduce it, split the body into named stages: move each independent step or branch into its own named function so the body reads as a short sequence of named calls rather than one long body."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/nginx.js"},"region":{"startLine":315}}}],"partialFingerprints":{"codehealthFindingId/v1":"f41d4ae4544e38ec9d1b7cd274d1ba3f75553a4045a025ba42131e44b6bf270c"}},{"ruleId":"D3","level":"warning","message":{"text":"FunctionTooLong: ProxyHostModal.ProxyHostModal: FunctionTooLong \u2014 ProxyHostModal runs 315 significant lines (blank, comment-only and punctuation-only lines excluded) in one body. The bar is 100 significant lines; this is 215 over it, 3.15\u00D7 the bar. This is length, not branching: a long straight-line body scores low on complexity and is still read whole to change any part of it, so the complexity numbers beside this row neither confirm nor excuse it. To reduce it, extract each cohesive step of the body \u2014 the runs of statements that work on the same values and would earn the same name \u2014 into its own named unit, and have this one call them in order."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/modals/ProxyHostModal.tsx"},"region":{"startLine":32}}}],"partialFingerprints":{"codehealthFindingId/v1":"c3ba1092061f0dc2cfd25e9ce99c6ebda88b049c3a5023571d0e547c6c19f8d0"}},{"ruleId":"D3","level":"warning","message":{"text":"FunctionTooLong: RedirectionHostModal.RedirectionHostModal: FunctionTooLong \u2014 RedirectionHostModal runs 296 significant lines (blank, comment-only and punctuation-only lines excluded) in one body. The bar is 100 significant lines; this is 196 over it, 2.96\u00D7 the bar. This is length, not branching: a long straight-line body scores low on complexity and is still read whole to change any part of it, so the complexity numbers beside this row neither confirm nor excuse it. To reduce it, extract each cohesive step of the body \u2014 the runs of statements that work on the same values and would earn the same name \u2014 into its own named unit, and have this one call them in order."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/modals/RedirectionHostModal.tsx"},"region":{"startLine":28}}}],"partialFingerprints":{"codehealthFindingId/v1":"a5ceed7ba305c33f6e47be8d3df6f7e6548921c66143e38dc9f4e66422b64c69"}},{"ruleId":"D3","level":"warning","message":{"text":"FunctionTooLong: TwoFactorModal.TwoFactorModal: FunctionTooLong \u2014 TwoFactorModal runs 281 significant lines (blank, comment-only and punctuation-only lines excluded) in one body. The bar is 100 significant lines; this is 181 over it, 2.81\u00D7 the bar. This is length, not branching: a long straight-line body scores low on complexity and is still read whole to change any part of it, so the complexity numbers beside this row neither confirm nor excuse it. To reduce it, extract each cohesive step of the body \u2014 the runs of statements that work on the same values and would earn the same name \u2014 into its own named unit, and have this one call them in order."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/modals/TwoFactorModal.tsx"},"region":{"startLine":23}}}],"partialFingerprints":{"codehealthFindingId/v1":"9fb20ca2d13da48cade1330ac736f8348fba16255873540979c1207a581e94f7"}},{"ruleId":"D3","level":"warning","message":{"text":"FunctionTooLong: StreamModal.StreamModal: FunctionTooLong \u2014 StreamModal runs 276 significant lines (blank, comment-only and punctuation-only lines excluded) in one body. The bar is 100 significant lines; this is 176 over it, 2.76\u00D7 the bar. This is length, not branching: a long straight-line body scores low on complexity and is still read whole to change any part of it, so the complexity numbers beside this row neither confirm nor excuse it. To reduce it, extract each cohesive step of the body \u2014 the runs of statements that work on the same values and would earn the same name \u2014 into its own named unit, and have this one call them in order."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/modals/StreamModal.tsx"},"region":{"startLine":19}}}],"partialFingerprints":{"codehealthFindingId/v1":"c55018eca12bedb91ba14c2ece88c8380579aabc28df39dcc9c9ea60a20b8b5d"}},{"ruleId":"D3","level":"warning","message":{"text":"FunctionTooLong: LocationsFields.LocationsFields: FunctionTooLong \u2014 LocationsFields runs 266 significant lines (blank, comment-only and punctuation-only lines excluded) in one body. The bar is 100 significant lines; this is 166 over it, 2.66\u00D7 the bar. This is length, not branching: a long straight-line body scores low on complexity and is still read whole to change any part of it, so the complexity numbers beside this row neither confirm nor excuse it. To reduce it, extract each cohesive step of the body \u2014 the runs of statements that work on the same values and would earn the same name \u2014 into its own named unit, and have this one call them in order."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/components/Form/LocationsFields.tsx"},"region":{"startLine":34}}}],"partialFingerprints":{"codehealthFindingId/v1":"73c95a8c8df42b875d938238d4d0fa54d72006d91d4ea8c641139b4410b037aa"}},{"ruleId":"D3","level":"warning","message":{"text":"FunctionTooLong: PermissionsModal.PermissionsModal: FunctionTooLong \u2014 PermissionsModal runs 232 significant lines (blank, comment-only and punctuation-only lines excluded) in one body. The bar is 100 significant lines; this is 132 over it, 2.32\u00D7 the bar. This is length, not branching: a long straight-line body scores low on complexity and is still read whole to change any part of it, so the complexity numbers beside this row neither confirm nor excuse it. To reduce it, extract each cohesive step of the body \u2014 the runs of statements that work on the same values and would earn the same name \u2014 into its own named unit, and have this one call them in order."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/modals/PermissionsModal.tsx"},"region":{"startLine":21}}}],"partialFingerprints":{"codehealthFindingId/v1":"f6ebc8af49df420a9ee2cbe79a9b3c41f83c2fb768e0d69adc93a5b632c3459e"}},{"ruleId":"D3","level":"warning","message":{"text":"FunctionTooLong: DefaultSite.DefaultSite: FunctionTooLong \u2014 DefaultSite runs 229 significant lines (blank, comment-only and punctuation-only lines excluded) in one body. The bar is 100 significant lines; this is 129 over it, 2.29\u00D7 the bar. This is length, not branching: a long straight-line body scores low on complexity and is still read whole to change any part of it, so the complexity numbers beside this row neither confirm nor excuse it. To reduce it, extract each cohesive step of the body \u2014 the runs of statements that work on the same values and would earn the same name \u2014 into its own named unit, and have this one call them in order."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Settings/DefaultSite.tsx"},"region":{"startLine":11}}}],"partialFingerprints":{"codehealthFindingId/v1":"1fe67c834eb371ad2985bcc3102e200e16075c7818517d42e7e73118ceea294b"}},{"ruleId":"D3","level":"warning","message":{"text":"FunctionTooLong: AccessListModal.AccessListModal: FunctionTooLong \u2014 AccessListModal runs 227 significant lines (blank, comment-only and punctuation-only lines excluded) in one body. The bar is 100 significant lines; this is 127 over it, 2.27\u00D7 the bar. This is length, not branching: a long straight-line body scores low on complexity and is still read whole to change any part of it, so the complexity numbers beside this row neither confirm nor excuse it. To reduce it, extract each cohesive step of the body \u2014 the runs of statements that work on the same values and would earn the same name \u2014 into its own named unit, and have this one call them in order."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/modals/AccessListModal.tsx"},"region":{"startLine":21}}}],"partialFingerprints":{"codehealthFindingId/v1":"7f8f86b7f17706cda429c5921dff7e969e604d5f37440c5a4ce48ef3b2b0baf4"}},{"ruleId":"D3","level":"warning","message":{"text":"FunctionTooLong: UserModal.UserModal: FunctionTooLong \u2014 UserModal runs 200 significant lines (blank, comment-only and punctuation-only lines excluded) in one body. The bar is 100 significant lines; this is 100 over it, 2.00\u00D7 the bar. This is length, not branching: a long straight-line body scores low on complexity and is still read whole to change any part of it, so the complexity numbers beside this row neither confirm nor excuse it. To reduce it, extract each cohesive step of the body \u2014 the runs of statements that work on the same values and would earn the same name \u2014 into its own named unit, and have this one call them in order."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/modals/UserModal.tsx"},"region":{"startLine":19}}}],"partialFingerprints":{"codehealthFindingId/v1":"1d26344c4fdfc53e20d01a1c857214b62437523620cfc9ec85d646c6bf13d1c0"}},{"ruleId":"D3","level":"warning","message":{"text":"FunctionTooLong: CustomCertificateModal.CustomCertificateModal: FunctionTooLong \u2014 CustomCertificateModal runs 182 significant lines (blank, comment-only and punctuation-only lines excluded) in one body. The bar is 100 significant lines; this is 82 over it, 1.82\u00D7 the bar. This is length, not branching: a long straight-line body scores low on complexity and is still read whole to change any part of it, so the complexity numbers beside this row neither confirm nor excuse it. To reduce it, extract each cohesive step of the body \u2014 the runs of statements that work on the same values and would earn the same name \u2014 into its own named unit, and have this one call them in order."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/modals/CustomCertificateModal.tsx"},"region":{"startLine":18}}}],"partialFingerprints":{"codehealthFindingId/v1":"e43415591fc7072fa3ab29c26a56bfc21fab637cc46128439137b217ca941ede"}},{"ruleId":"D3","level":"warning","message":{"text":"FunctionTooLong: Table.Table: FunctionTooLong \u2014 Table runs 173 significant lines (blank, comment-only and punctuation-only lines excluded) in one body. The bar is 100 significant lines; this is 73 over it, 1.73\u00D7 the bar. This is length, not branching: a long straight-line body scores low on complexity and is still read whole to change any part of it, so the complexity numbers beside this row neither confirm nor excuse it. To reduce it, extract each cohesive step of the body \u2014 the runs of statements that work on the same values and would earn the same name \u2014 into its own named unit, and have this one call them in order."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Users/Table.tsx"},"region":{"startLine":38}}}],"partialFingerprints":{"codehealthFindingId/v1":"edbe16f47b061b38537d3770592cc08a2b876fd50dd257c4f2634f55260a25d1"}},{"ruleId":"D3","level":"warning","message":{"text":"FunctionTooLong: Table.Table: FunctionTooLong \u2014 Table runs 171 significant lines (blank, comment-only and punctuation-only lines excluded) in one body. The bar is 100 significant lines; this is 71 over it, 1.71\u00D7 the bar. This is length, not branching: a long straight-line body scores low on complexity and is still read whole to change any part of it, so the complexity numbers beside this row neither confirm nor excuse it. To reduce it, extract each cohesive step of the body \u2014 the runs of statements that work on the same values and would earn the same name \u2014 into its own named unit, and have this one call them in order."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Certificates/Table.tsx"},"region":{"startLine":27}}}],"partialFingerprints":{"codehealthFindingId/v1":"3c8054d7a441aa07fc1982a5d52e9457ef3d31454573c3ad99022130893bccb0"}},{"ruleId":"D3","level":"warning","message":{"text":"FunctionTooLong: LogViewer.LogViewer: FunctionTooLong \u2014 LogViewer runs 170 significant lines (blank, comment-only and punctuation-only lines excluded) in one body. The bar is 100 significant lines; this is 70 over it, 1.70\u00D7 the bar. This is length, not branching: a long straight-line body scores low on complexity and is still read whole to change any part of it, so the complexity numbers beside this row neither confirm nor excuse it. To reduce it, extract each cohesive step of the body \u2014 the runs of statements that work on the same values and would earn the same name \u2014 into its own named unit, and have this one call them in order."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Logs/LogViewer.tsx"},"region":{"startLine":55}}}],"partialFingerprints":{"codehealthFindingId/v1":"33ba2a56ecda3dd85476b8033826f64eee8fc8914f3da9d1bf34b67f38b89519"}},{"ruleId":"D3","level":"warning","message":{"text":"FunctionTooLong: HTTPCertificateModal.HTTPCertificateModal: FunctionTooLong \u2014 HTTPCertificateModal runs 166 significant lines (blank, comment-only and punctuation-only lines excluded) in one body. The bar is 100 significant lines; this is 66 over it, 1.66\u00D7 the bar. This is length, not branching: a long straight-line body scores low on complexity and is still read whole to change any part of it, so the complexity numbers beside this row neither confirm nor excuse it. To reduce it, extract each cohesive step of the body \u2014 the runs of statements that work on the same values and would earn the same name \u2014 into its own named unit, and have this one call them in order."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/modals/HTTPCertificateModal.tsx"},"region":{"startLine":17}}}],"partialFingerprints":{"codehealthFindingId/v1":"97e083feb9dae1f14fe5ce6c4c9e46cb4bae84b9072271890e5caa9eeb75eeec"}},{"ruleId":"D3","level":"warning","message":{"text":"FunctionTooLong: index.Setup: FunctionTooLong \u2014 Setup runs 155 significant lines (blank, comment-only and punctuation-only lines excluded) in one body. The bar is 100 significant lines; this is 55 over it, 1.55\u00D7 the bar. This is length, not branching: a long straight-line body scores low on complexity and is still read whole to change any part of it, so the complexity numbers beside this row neither confirm nor excuse it. To reduce it, extract each cohesive step of the body \u2014 the runs of statements that work on the same values and would earn the same name \u2014 into its own named unit, and have this one call them in order."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Setup/index.tsx"},"region":{"startLine":19}}}],"partialFingerprints":{"codehealthFindingId/v1":"baf2dfb4fbe9731406aee7c90d935802f72b321f57625c15066f64a3be09fa83"}},{"ruleId":"D3","level":"warning","message":{"text":"FunctionTooLong: SSLOptionsFields.SSLOptionsFields: FunctionTooLong \u2014 SSLOptionsFields runs 151 significant lines (blank, comment-only and punctuation-only lines excluded) in one body. The bar is 100 significant lines; this is 51 over it, 1.51\u00D7 the bar. This is length, not branching: a long straight-line body scores low on complexity and is still read whole to change any part of it, so the complexity numbers beside this row neither confirm nor excuse it. To reduce it, extract each cohesive step of the body \u2014 the runs of statements that work on the same values and would earn the same name \u2014 into its own named unit, and have this one call them in order."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/components/Form/SSLOptionsFields.tsx"},"region":{"startLine":13}}}],"partialFingerprints":{"codehealthFindingId/v1":"b487305ba5ac9f38bd35e7de2b9b3789e5a550ae2062bb7a1ee89826c566e76a"}},{"ruleId":"D3","level":"warning","message":{"text":"FunctionTooLong: Table.Table: FunctionTooLong \u2014 Table runs 151 significant lines (blank, comment-only and punctuation-only lines excluded) in one body. The bar is 100 significant lines; this is 51 over it, 1.51\u00D7 the bar. This is length, not branching: a long straight-line body scores low on complexity and is still read whole to change any part of it, so the complexity numbers beside this row neither confirm nor excuse it. To reduce it, extract each cohesive step of the body \u2014 the runs of statements that work on the same values and would earn the same name \u2014 into its own named unit, and have this one call them in order."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Nginx/ProxyHosts/Table.tsx"},"region":{"startLine":29}}}],"partialFingerprints":{"codehealthFindingId/v1":"22037d906b2e0f770490a92066bc9dc5463275d32bc8d65844c4b651f77e6e95"}},{"ruleId":"D3","level":"warning","message":{"text":"FunctionTooLong: Table.Table: FunctionTooLong \u2014 Table runs 142 significant lines (blank, comment-only and punctuation-only lines excluded) in one body. The bar is 100 significant lines; this is 42 over it, 1.42\u00D7 the bar. This is length, not branching: a long straight-line body scores low on complexity and is still read whole to change any part of it, so the complexity numbers beside this row neither confirm nor excuse it. To reduce it, extract each cohesive step of the body \u2014 the runs of statements that work on the same values and would earn the same name \u2014 into its own named unit, and have this one call them in order."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Nginx/Streams/Table.tsx"},"region":{"startLine":27}}}],"partialFingerprints":{"codehealthFindingId/v1":"8a363ef7446647ab416c7b9c3fca8fd50fea9ef83b5d2174cafe3e9e0161510d"}},{"ruleId":"D3","level":"warning","message":{"text":"FileTooLong: internal/certificate.js: FileTooLong \u2014 699 significant lines (blank, comment-only and punctuation-only lines excluded), about 96% of them inside a single declaration: internalCertificate (31-1324). The bar is 500 significant lines; this is 199 over it, 1.40\u00D7 the bar. Moving the declarations that sit BESIDE it into sibling files will not shorten this file. Extract from INSIDE that declaration instead: lift each cohesive group of its body \u2014 the parts that share the same inputs and are named together \u2014 into its own unit in a sibling file, and have the original call them."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/certificate.js"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"1dfafb0f8d588c61f1a5671b0c186d18af4164d2d855cca64c75ae3dcfddaf7d"}},{"ruleId":"D3","level":"warning","message":{"text":"FunctionTooLong: ChangePasswordModal.ChangePasswordModal: FunctionTooLong \u2014 ChangePasswordModal runs 135 significant lines (blank, comment-only and punctuation-only lines excluded) in one body. The bar is 100 significant lines; this is 35 over it, 1.35\u00D7 the bar. This is length, not branching: a long straight-line body scores low on complexity and is still read whole to change any part of it, so the complexity numbers beside this row neither confirm nor excuse it. To reduce it, extract each cohesive step of the body \u2014 the runs of statements that work on the same values and would earn the same name \u2014 into its own named unit, and have this one call them in order."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/modals/ChangePasswordModal.tsx"},"region":{"startLine":18}}}],"partialFingerprints":{"codehealthFindingId/v1":"2b119dc3825e4b27fa8645c8ff0e83d8a5a02306f5cd8b20bc76ef9a141d3779"}},{"ruleId":"D3","level":"warning","message":{"text":"FunctionTooLong: DeadHostModal.DeadHostModal: FunctionTooLong \u2014 DeadHostModal runs 131 significant lines (blank, comment-only and punctuation-only lines excluded) in one body. The bar is 100 significant lines; this is 31 over it, 1.31\u00D7 the bar. This is length, not branching: a long straight-line body scores low on complexity and is still read whole to change any part of it, so the complexity numbers beside this row neither confirm nor excuse it. To reduce it, extract each cohesive step of the body \u2014 the runs of statements that work on the same values and would earn the same name \u2014 into its own named unit, and have this one call them in order."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/modals/DeadHostModal.tsx"},"region":{"startLine":26}}}],"partialFingerprints":{"codehealthFindingId/v1":"57b4bee5f4ab0135e6538304af136483fefb33937987ad4d66aaca2a092c5bd2"}},{"ruleId":"D3","level":"warning","message":{"text":"FunctionTooLong: Table.Table: FunctionTooLong \u2014 Table runs 131 significant lines (blank, comment-only and punctuation-only lines excluded) in one body. The bar is 100 significant lines; this is 31 over it, 1.31\u00D7 the bar. This is length, not branching: a long straight-line body scores low on complexity and is still read whole to change any part of it, so the complexity numbers beside this row neither confirm nor excuse it. To reduce it, extract each cohesive step of the body \u2014 the runs of statements that work on the same values and would earn the same name \u2014 into its own named unit, and have this one call them in order."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Nginx/RedirectionHosts/Table.tsx"},"region":{"startLine":27}}}],"partialFingerprints":{"codehealthFindingId/v1":"f84ad62b06fa8c86b8a3e6f638312e9604a101d74e77e07d801721d5593ede65"}},{"ruleId":"D3","level":"warning","message":{"text":"FunctionTooLong: SiteHeader.SiteHeader: FunctionTooLong \u2014 SiteHeader runs 128 significant lines (blank, comment-only and punctuation-only lines excluded) in one body. The bar is 100 significant lines; this is 28 over it, 1.28\u00D7 the bar. This is length, not branching: a long straight-line body scores low on complexity and is still read whole to change any part of it, so the complexity numbers beside this row neither confirm nor excuse it. To reduce it, extract each cohesive step of the body \u2014 the runs of statements that work on the same values and would earn the same name \u2014 into its own named unit, and have this one call them in order."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/components/SiteHeader.tsx"},"region":{"startLine":9}}}],"partialFingerprints":{"codehealthFindingId/v1":"b960881811a12184094f1e45efecac1c9984467c06d4a0a6aee39e40e154b2ca"}},{"ruleId":"D3","level":"warning","message":{"text":"FunctionTooLong: TableWrapper.TableWrapper: FunctionTooLong \u2014 TableWrapper runs 120 significant lines (blank, comment-only and punctuation-only lines excluded) in one body. The bar is 100 significant lines; this is 20 over it, 1.20\u00D7 the bar. This is length, not branching: a long straight-line body scores low on complexity and is still read whole to change any part of it, so the complexity numbers beside this row neither confirm nor excuse it. To reduce it, extract each cohesive step of the body \u2014 the runs of statements that work on the same values and would earn the same name \u2014 into its own named unit, and have this one call them in order."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Certificates/TableWrapper.tsx"},"region":{"startLine":20}}}],"partialFingerprints":{"codehealthFindingId/v1":"0c27bbe9f6dcbdcae6db030f01c926d629e62723ece8f39490af460973b3c551"}},{"ruleId":"D3","level":"warning","message":{"text":"FunctionTooLong: index.Dashboard: FunctionTooLong \u2014 Dashboard runs 116 significant lines (blank, comment-only and punctuation-only lines excluded) in one body. The bar is 100 significant lines; this is 16 over it, 1.16\u00D7 the bar. This is length, not branching: a long straight-line body scores low on complexity and is still read whole to change any part of it, so the complexity numbers beside this row neither confirm nor excuse it. To reduce it, extract each cohesive step of the body \u2014 the runs of statements that work on the same values and would earn the same name \u2014 into its own named unit, and have this one call them in order."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Dashboard/index.tsx"},"region":{"startLine":8}}}],"partialFingerprints":{"codehealthFindingId/v1":"fcbe0aef2833e9dcc619c6e49d5abccbc2f26b54011b7b32d2a4181463c3feee"}},{"ruleId":"D3","level":"warning","message":{"text":"FunctionTooLong: Table.Table: FunctionTooLong \u2014 Table runs 116 significant lines (blank, comment-only and punctuation-only lines excluded) in one body. The bar is 100 significant lines; this is 16 over it, 1.16\u00D7 the bar. This is length, not branching: a long straight-line body scores low on complexity and is still read whole to change any part of it, so the complexity numbers beside this row neither confirm nor excuse it. To reduce it, extract each cohesive step of the body \u2014 the runs of statements that work on the same values and would earn the same name \u2014 into its own named unit, and have this one call them in order."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Nginx/DeadHosts/Table.tsx"},"region":{"startLine":27}}}],"partialFingerprints":{"codehealthFindingId/v1":"b2e0d7b6c8c84c59822302512f5f12aa1d8d7c03357d2d837d250d7a2b23d8c4"}},{"ruleId":"D3","level":"warning","message":{"text":"FunctionTooLong: AccessClientFields.AccessClientFields: FunctionTooLong \u2014 AccessClientFields runs 105 significant lines (blank, comment-only and punctuation-only lines excluded) in one body. The bar is 100 significant lines; this is 5 over it, 1.05\u00D7 the bar. This is length, not branching: a long straight-line body scores low on complexity and is still read whole to change any part of it, so the complexity numbers beside this row neither confirm nor excuse it. To reduce it, extract each cohesive step of the body \u2014 the runs of statements that work on the same values and would earn the same name \u2014 into its own named unit, and have this one call them in order."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/components/Form/AccessClientFields.tsx"},"region":{"startLine":12}}}],"partialFingerprints":{"codehealthFindingId/v1":"2330b5c64bf97d88dfce5e4613c2bf4e477dd1de8b240936ecedfa723db64335"}},{"ruleId":"D3","level":"warning","message":{"text":"FunctionTooLong: SetPasswordModal.SetPasswordModal: FunctionTooLong \u2014 SetPasswordModal runs 104 significant lines (blank, comment-only and punctuation-only lines excluded) in one body. The bar is 100 significant lines; this is 4 over it, 1.04\u00D7 the bar. This is length, not branching: a long straight-line body scores low on complexity and is still read whole to change any part of it, so the complexity numbers beside this row neither confirm nor excuse it. To reduce it, extract each cohesive step of the body \u2014 the runs of statements that work on the same values and would earn the same name \u2014 into its own named unit, and have this one call them in order."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/modals/SetPasswordModal.tsx"},"region":{"startLine":19}}}],"partialFingerprints":{"codehealthFindingId/v1":"66e198411410ce9a1ed492e902ae02395c4322d5e350858dc33ca243db59070d"}},{"ruleId":"D3","level":"warning","message":{"text":"FunctionTooLong: Table.Table: FunctionTooLong \u2014 Table runs 102 significant lines (blank, comment-only and punctuation-only lines excluded) in one body. The bar is 100 significant lines; this is 2 over it, 1.02\u00D7 the bar. This is length, not branching: a long straight-line body scores low on complexity and is still read whole to change any part of it, so the complexity numbers beside this row neither confirm nor excuse it. To reduce it, extract each cohesive step of the body \u2014 the runs of statements that work on the same values and would earn the same name \u2014 into its own named unit, and have this one call them in order."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Access/Table.tsx"},"region":{"startLine":19}}}],"partialFingerprints":{"codehealthFindingId/v1":"127ebcb406ef694d8e99e2b791e8c20d23fd845010465ca886e270a8e7b9f3fd"}},{"ruleId":"D8","level":"warning","message":{"text":"Coverage not measured \u2014 JavaScript/TypeScript suite: Coverage NOT MEASURED: the JavaScript/TypeScript half could not be measured \u2014 frontend/ runs vitest but declares no coverage provider, so the suite can run and still produce no lcov \u2014 add \u0060@vitest/coverage-v8\u0060 (or \u0060@vitest/coverage-istanbul\u0060) as a devDependency. Coverage is excluded from the score rather than counted as a near-zero. The named suite step is one the repository\u0027s maintainers can perform; once it passes, the real number is measured on the next scan. Alternatively, commit the lcov/Cobertura report your CI produces and it is read without a re-run."},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"62e63e619c28f057e129f2997c965d32a457366a9ce18ca019ffb6bdfba85c99"}},{"ruleId":"D9","level":"note","message":{"text":"Inverted test pyramid: Most tests are end-to-end, which tends to be brittle and slow."},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"3fc0c6fc621cd18b83a2d2c03ea6976b61fb4769f62dc21043f0af4cad912d10"}},{"ruleId":"D10","level":"warning","message":{"text":"No assertions: Should be a completely valid schema: This method\u0027s body runs code, and no assertion call was recognised in it. Recognised by name: Assert*, *Should*/ShouldBe*, Verify, Expect, Throws, Record, Received/DidNotReceive, MustHaveHappened/MustNotHaveHappened, EnsureSuccessStatusCode and *AndEnsure* \u2014 so verification routed through a helper of your own naming, through a base-class or callback object whose members hold the assertions, or through a harness that fails by throwing under some other name, is not visible to this check and is not counted here. Read it as \u0027no assertion this check knows how to see\u0027, and if that is right, add one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"test/cypress/e2e/api/SwaggerSchema.cy.js"},"region":{"startLine":4}}}],"partialFingerprints":{"codehealthFindingId/v1":"c39e4538eff98f5c43fa224e6b2ea5acdade1d7822d4d19bfd64abab71510680"}},{"ruleId":"D10","level":"warning","message":{"text":"No assertions: Should return a valid health payload: This method\u0027s body runs code, and no assertion call was recognised in it. Recognised by name: Assert*, *Should*/ShouldBe*, Verify, Expect, Throws, Record, Received/DidNotReceive, MustHaveHappened/MustNotHaveHappened, EnsureSuccessStatusCode and *AndEnsure* \u2014 so verification routed through a helper of your own naming, through a base-class or callback object whose members hold the assertions, or through a harness that fails by throwing under some other name, is not visible to this check and is not counted here. Read it as \u0027no assertion this check knows how to see\u0027, and if that is right, add one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"test/cypress/e2e/api/Health.cy.js"},"region":{"startLine":4}}}],"partialFingerprints":{"codehealthFindingId/v1":"edd10b5ab6055eb38aba6c4b99afcfced0292fb02ae6dd7c03389dd5a89e388d"}},{"ruleId":"D10","level":"warning","message":{"text":"No assertions: Should return a valid payload for version check: This method\u0027s body runs code, and no assertion call was recognised in it. Recognised by name: Assert*, *Should*/ShouldBe*, Verify, Expect, Throws, Record, Received/DidNotReceive, MustHaveHappened/MustNotHaveHappened, EnsureSuccessStatusCode and *AndEnsure* \u2014 so verification routed through a helper of your own naming, through a base-class or callback object whose members hold the assertions, or through a harness that fails by throwing under some other name, is not visible to this check and is not counted here. Read it as \u0027no assertion this check knows how to see\u0027, and if that is right, add one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"test/cypress/e2e/api/Health.cy.js"},"region":{"startLine":21}}}],"partialFingerprints":{"codehealthFindingId/v1":"156eccd8e6da7ad40df04ffcb21b24303ba5482f4f6c5c35aec08424330293ea"}},{"ruleId":"D12","level":"note","message":{"text":"Deprecated: prebuild-install: prebuild-install 7.1.3 is resolved in backend/yarn.lock and is marked deprecated by its publisher: \u0022No longer maintained. Please contact the author of the relevant native addon; alternatives are available.\u0022. This repository does not declare it \u2014 a direct dependency pulls it in, so the move is to upgrade or replace that dependency."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/yarn.lock"},"region":{"startLine":1842}}}],"partialFingerprints":{"codehealthFindingId/v1":"09cc6c7aeb0e4d0f48cc3d165df8e8b62d74f6fcbe0550efcf920309fb1888de"}},{"ruleId":"D12","level":"note","message":{"text":"Deprecated: querystring: querystring 0.2.0 is resolved in backend/yarn.lock and is marked deprecated by its publisher: \u0022The querystring API is considered Legacy. new code should use the URLSearchParams API instead.\u0022. This repository does not declare it \u2014 a direct dependency pulls it in, so the move is to upgrade or replace that dependency."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/yarn.lock"},"region":{"startLine":1928}}}],"partialFingerprints":{"codehealthFindingId/v1":"a5feedd99853d1de580dcadd20b7c6f6a3f3cbd171e1b77f5cbaddcaabc2ba5f"}},{"ruleId":"D13","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"54ff14b2b74f161ea89a2277f5cefd2f3e243b7e7d8172b7d54c96dd39e6c960"},"taxa":[{"id":"CWE-259","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-798","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A07:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D13","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"8e58fc249dcc7612448f5f286c04709088bcf2fbee17c85e20e9a2348d6fcc73"},"taxa":[{"id":"CWE-259","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-798","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A07:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D13","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"c7913ed4152998c07ed65abf0dc39e0927b735cb49c459ecb1fa72c702ce467b"},"taxa":[{"id":"CWE-259","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-798","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A07:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D13","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"07d0c25eb3a4ca675d7972dfdda0a3fc3483c5c5ca10aedb935c14fa53bd2938"},"taxa":[{"id":"CWE-259","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-798","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A07:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D13","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"98b7e4113f8793ef377343b5d35bcb328b54adfbe100bb8021696fc336fe7e45"},"taxa":[{"id":"CWE-259","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-798","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A07:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D13","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"70c848a729894d2f288e9cd49f84803b92b20abc43a4d707b7dcb4b0651dd63d"},"taxa":[{"id":"CWE-259","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-798","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A07:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D13","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"acae0fdd7d0dcf2a02e28023c53e908d9cb6ac690614f38cc664277bcea66ffd"},"taxa":[{"id":"CWE-259","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-798","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A07:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D13","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"f2e16c338b94b07a1c387da43d8baede4881f89f4582bfdfa78049bdc8984e8f"},"taxa":[{"id":"CWE-259","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-798","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A07:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D13","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"4724fa3b941673c24e6bdd6a988e3367b1d10335b3e76ee02288c19187d8a3bb"},"taxa":[{"id":"CWE-259","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-798","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A07:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D13","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"6c8aeaafceec2b57ab92c80117947c486447e29ca43d6d608690e02b26f5887a"},"taxa":[{"id":"CWE-259","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-798","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A07:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D13","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"ebd879f2f1dbd65536cb23c0a8cf84f651f7458985fcd41dea2426a8dfc422b8"},"taxa":[{"id":"CWE-259","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-798","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A07:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D13","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"09049ff6e826bab91c94154215950222a0372e7b5ff1ad3cdc6fd6326ac77660"},"taxa":[{"id":"CWE-259","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-798","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A07:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D13","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"36a57fc788afced28827732f3fbf2f2488813ad601da6e7c4a6c377b5069b922"},"taxa":[{"id":"CWE-259","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-798","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A07:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D15","level":"warning","message":{"text":"Hotspot: backend/lib/access.js: backend/lib/access.js changed 4 times in last 90 days, and the most complex body those changes touched has cyclomatic complexity 24 in access.default at line 26. 1 of those changes was a fix/bug commit, and the other 3 changed it for other reasons \u2014 this file is under both repair and feature pressure. Before the next change lands here, make sure the area it touches is under test, then split that area out of the file so the following change is smaller than this one \u2014 a file this often edited pays the complexity back every time. Counted over 2026-07-16..2026-10-14, the 90 days ending at the analysed commit. Reproduce with \u0060git log --since=\u00272026-07-16 07:10:53 \u002B10:00\u0027 --until=\u00272026-10-14 07:10:53 \u002B10:00\u0027 --full-history --no-merges -- backend/lib/access.js\u0060: merges are excluded because a merge re-states changes already counted at their own commits, and history is NOT path-simplified because a change that reached the file through a merged branch is still a change to it. That command counts raw commits and can read HIGHER than this row, which counts a cherry-picked re-land, and a revert together with the commit it undoes, once each \u2014 a difference of several commits on a file whose history was re-landed or reverted inside the window."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/lib/access.js"},"region":{"startLine":26}}}],"partialFingerprints":{"codehealthFindingId/v1":"573bc292780d90d0a8a74cce558a7d64e13fe45ab781dbc50d8ed760af8bd2cf"}},{"ruleId":"D15","level":"warning","message":{"text":"Hotspot: frontend/src/modals/TwoFactorModal.tsx: frontend/src/modals/TwoFactorModal.tsx changed 3 times in last 90 days, and the most complex body those changes touched has cyclomatic complexity 28 in TwoFactorModal.TwoFactorModal at line 23. 1 of those changes was a fix/bug commit, and the other 2 changed it for other reasons \u2014 this file is under both repair and feature pressure. Before the next change lands here, make sure the area it touches is under test, then split that area out of the file so the following change is smaller than this one \u2014 a file this often edited pays the complexity back every time. Counted over 2026-07-16..2026-10-14, the 90 days ending at the analysed commit. Reproduce with \u0060git log --since=\u00272026-07-16 07:10:53 \u002B10:00\u0027 --until=\u00272026-10-14 07:10:53 \u002B10:00\u0027 --full-history --no-merges -- frontend/src/modals/TwoFactorModal.tsx\u0060: merges are excluded because a merge re-states changes already counted at their own commits, and history is NOT path-simplified because a change that reached the file through a merged branch is still a change to it. That command counts raw commits and can read HIGHER than this row, which counts a cherry-picked re-land, and a revert together with the commit it undoes, once each \u2014 a difference of several commits on a file whose history was re-landed or reverted inside the window."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/modals/TwoFactorModal.tsx"},"region":{"startLine":23}}}],"partialFingerprints":{"codehealthFindingId/v1":"699349dcf421a6588aa927d066019e41b11b40070e62215c7ee0fb70195e290e"}},{"ruleId":"D15","level":"warning","message":{"text":"Hotspot: frontend/src/components/Form/LocationsFields.tsx: frontend/src/components/Form/LocationsFields.tsx changed 4 times in last 90 days, and the most complex body those changes touched has cyclomatic complexity 20 in LocationsFields.LocationsFields at line 34. 2 of those changes were fix/bug commits, and the other 2 changed it for other reasons \u2014 this file is under both repair and feature pressure. Before the next change lands here, make sure the area it touches is under test, then split that area out of the file so the following change is smaller than this one \u2014 a file this often edited pays the complexity back every time. Counted over 2026-07-16..2026-10-14, the 90 days ending at the analysed commit. Reproduce with \u0060git log --since=\u00272026-07-16 07:10:53 \u002B10:00\u0027 --until=\u00272026-10-14 07:10:53 \u002B10:00\u0027 --full-history --no-merges -- frontend/src/components/Form/LocationsFields.tsx\u0060: merges are excluded because a merge re-states changes already counted at their own commits, and history is NOT path-simplified because a change that reached the file through a merged branch is still a change to it. That command counts raw commits and can read HIGHER than this row, which counts a cherry-picked re-land, and a revert together with the commit it undoes, once each \u2014 a difference of several commits on a file whose history was re-landed or reverted inside the window."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/components/Form/LocationsFields.tsx"},"region":{"startLine":34}}}],"partialFingerprints":{"codehealthFindingId/v1":"2ce8aefd805c1493747f69a026a007cfbba24ce178b54e83132bd749f6831bf3"}},{"ruleId":"D15","level":"warning","message":{"text":"Repeated repair: backend/internal/nginx.js: backend/internal/nginx.js changed 5 times in last 90 days and 3 of those changes were fix/bug commits, so repair is the majority of this file\u0027s churn. Its max cyclomatic complexity is 13 (its worst body is loadRenderRelations at line 315), UNDER the 15 threshold, so this is deliberately not filed as a churn \u00D7 complexity hotspot \u2014 the difficulty here is in the behaviour the file has to get right, not in its control flow, and refactoring it for complexity would be the wrong move. The repairs counted were: \u201CFix access list rules and SSL missing from re-rendered host configs\u201D; \u201CAdds integration tests for per path access lists, fixes ipv6 jsv,\u201D; \u201Cfix(stream): bracket IPv6 forward host for valid nginx upstream\u201D. Each one is a case this code did not handle. Before the next change lands here, check that every one of them is pinned by a test that fails without its fix; where the same area keeps coming back, the durable fix is usually at the interface that keeps being misused rather than at the line that was last corrected. Counted over 2026-07-16..2026-10-14, the 90 days ending at the analysed commit. Reproduce with \u0060git log --since=\u00272026-07-16 07:10:53 \u002B10:00\u0027 --until=\u00272026-10-14 07:10:53 \u002B10:00\u0027 --full-history --no-merges -- backend/internal/nginx.js\u0060: merges are excluded because a merge re-states changes already counted at their own commits, and history is NOT path-simplified because a change that reached the file through a merged branch is still a change to it. That command counts raw commits and can read HIGHER than this row, which counts a cherry-picked re-land, and a revert together with the commit it undoes, once each \u2014 a difference of several commits on a file whose history was re-landed or reverted inside the window."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/nginx.js"},"region":{"startLine":315}}}],"partialFingerprints":{"codehealthFindingId/v1":"1bd957b01d80783b16e0e3d7ce1b210853caad314e7bf7a4fe5aadb06fb1e289"}},{"ruleId":"D16","level":"note","message":{"text":"Off-boarding risk: anonymized user #1: If anonymized user #1 becomes unavailable, 19 significant file(s) lose their only recent owner: backend/internal/redirection-host.js, frontend/src/modals/PermissionsModal.tsx, frontend/src/modals/UserModal.tsx, frontend/src/pages/Certificates/Table.tsx, frontend/src/pages/Users/Table.tsx, backend/internal/host.js, frontend/src/modals/DeadHostModal.tsx, backend/routes/nginx/dead_hosts.js (\u002B11 more). Pair on, review, or document these before any departure."},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"581177674610c68195b85f2e171a6875228f6dab1b01521619d7fc4d596adaf6"}},{"ruleId":"D17","level":"warning","message":{"text":"HackComment: // Hack to reuse domains formatter \u2014 a workaround marked in source: record what it is compensating for and what would allow its removal (the upstream fix, the API it is waiting on, the invariant it restores), so the next reader can judge whether it is still needed rather than rediscovering why it is there."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Users/Table.tsx"},"region":{"startLine":69}}}],"partialFingerprints":{"codehealthFindingId/v1":"606c264ee7c573dbd8aac4c7414c1b0ac9fb66b17e17d0900d918f14f199eafb"}},{"ruleId":"D26","level":"note","message":{"text":"Split frontend: A generic \u0027frontend\u0027 catch-all at 28 namespaces is a sprawling grab-bag. Suggested: "},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"a8df59dae73905898a4c04b5fd63bf01bc9771153f773f0906269281d218dee2"}},{"ruleId":"D28","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"aa9632732af8c601dc6e604f775d3e0fef014425217761cc9992e381332850a5"},"properties":{"commitSha":"34374cbe099580e62dfb17c436640e48d3f0b11f"}},{"ruleId":"D28","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"5c9a62a84f5e6e19ef0fc3e931f282f34b31999df81b0b8a9a5ea39e2e10ef2a"},"properties":{"commitSha":"34374cbe099580e62dfb17c436640e48d3f0b11f"}},{"ruleId":"D28","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"e5ffff1c5905c075cb16ebed779d8e8ca7e4802bf79ebaf2f3639bdfb1d2d39d"},"properties":{"commitSha":"34374cbe099580e62dfb17c436640e48d3f0b11f"}},{"ruleId":"D28","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"3d3533f2e5feec52c8a259f38e172607497947eb765e04cce1d8deadd0630c39"},"properties":{"commitSha":"34374cbe099580e62dfb17c436640e48d3f0b11f"}},{"ruleId":"D28","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"cacbefe0aa89f32871874fb962c8d40fee1d7d8a46e43619f65e1f63082fb079"},"properties":{"commitSha":"c869d5a42b222a3f22c7a848e4f8397c98546efc"}},{"ruleId":"D28","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"25358bb15f1cce0352870889ecd719e3481ed99f0697fb9122ad9dd7e05aafd3"},"properties":{"commitSha":"8b07a67133bf9d2ee80beeb40262d83d236b9e20"}},{"ruleId":"D28","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"88a9ba92e785e4cad63e5a95bf44de796a4e2a51b92d2424641ad8626fed7c4e"},"properties":{"commitSha":"8b07a67133bf9d2ee80beeb40262d83d236b9e20"}},{"ruleId":"D28","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"e767312fb79ad7bd22c98d339cf624a01ef1ac1b37b06c5bb8d7b40b24050f15"},"properties":{"commitSha":"8b07a67133bf9d2ee80beeb40262d83d236b9e20"}},{"ruleId":"D28","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"35df8539fe1f0961b714ec87e9a4daa27032678c3653992f34232a470f859399"},"properties":{"commitSha":"8b07a67133bf9d2ee80beeb40262d83d236b9e20"}},{"ruleId":"D28","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"dbbcdd36d731f4d54d574ecc60bdaec1b71d6848ce8d00853ea8e52d801ec099"},"properties":{"commitSha":"dfe2588523a602dd275fb6aadebfe37701dcbb36"}},{"ruleId":"D28","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"9cb7537cf5295bc17d538f6db665863e1515c81609025ef69edac5bc91298091"},"taxa":[{"id":"CWE-540","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-798","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A07:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D28","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"7d8e54866db6215cf3741882ebe042560e855788bd4b02428cc6ea555d6f1383"},"taxa":[{"id":"CWE-540","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-798","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A07:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D28","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"599b6bd1e5a251eb42cede18018ec11e74c1494b9334510f91a1f7143f62136e"},"taxa":[{"id":"CWE-540","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-798","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A07:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D28","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"c17ba08e621ea805c16d0548a9c2cd8953449dbda5a5782b12a56ab4ef5cdacc"},"taxa":[{"id":"CWE-540","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-798","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A07:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D28","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"41fef0fe1613424fe23a22b0399e2775209c5f8606c3e6aa133311cc409f90f6"},"properties":{"commitSha":"1406e75c2c0b4f1a1dab894533de73a8ac945dcd"}},{"ruleId":"D28","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"ebd05976f69f1b7474c7bb2eadbc0a8b805690b4ab5f522c62d1dc7e2f688ef5"},"properties":{"commitSha":"2893ffb1e400352a430b1d7f3cf82922a449f0c9"}},{"ruleId":"D28","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"652c083897265d45e4922a7e771d7dfb171d90115fcfda0ca9d9120ead025181"},"properties":{"commitSha":"1406e75c2c0b4f1a1dab894533de73a8ac945dcd"}},{"ruleId":"D28","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"49887edf189e8a3d46cc0d4cb6223609c070f458ea5bfaa01090b5757f6b8eb7"},"properties":{"commitSha":"bb0f4bfa626bfa30e3ad2fa31b5d759c9de98559"},"taxa":[{"id":"CWE-259","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-540","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A01:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D28","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"d02fd66f523065154ecb75bfbbe72fa7105fbcb7acc8120b617715d92eba5d70"},"properties":{"commitSha":"bb0f4bfa626bfa30e3ad2fa31b5d759c9de98559"},"taxa":[{"id":"CWE-259","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-540","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A01:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D28","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"5b6e8c1f0c006d7df6b80ccdc6f5ca4a76994bec2ff1ef16e478428885f73c9a"},"properties":{"commitSha":"10f0eb17d783f50456de887ecd7a3d2ffffeda09"}},{"ruleId":"D28","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"6d0557fc840d6f2e0f2e74e4b942cab0dc58fd8221cd6676a22a1f4bcc3a2b65"},"properties":{"commitSha":"10f0eb17d783f50456de887ecd7a3d2ffffeda09"}},{"ruleId":"D28","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"ae635d774e3c93845fd466ce0eca325c0bde24630faf185ba853d09b216b2dc7"},"properties":{"commitSha":"10f0eb17d783f50456de887ecd7a3d2ffffeda09"}},{"ruleId":"D28","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"5eba343a22dab1c0bf65164e00533a3a12e1d34d99d503fe1f59aaa46071b847"},"properties":{"commitSha":"9af2f50d8131e770a4db68525ab3010ed2c4887c"}},{"ruleId":"D28","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"77df8cb5148611924aa4dad7837afc762194428dc9e04e5ef185962259f2ab23"},"properties":{"commitSha":"e20a11de4aa20d40a7882ffd97672537f5681577"}},{"ruleId":"D28","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"02def79148e3c51d030d700db077775ce89d0d6f7d6925f028a14575dc762a2e"},"properties":{"commitSha":"f11dc5d7c1d8fc6ac4f71c4078c2be4291c9950f"}},{"ruleId":"D28","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"30f10c3b38589084329b6d3cd8bc358178822683221723d6c9169d11c15d90f5"},"properties":{"commitSha":"db23c9a52f129db1e21f077f270764877921fc05"}},{"ruleId":"D28","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"85060c2975269b470a34b3d466b6dea0c3d7cae18ebd5079cd23ab5eab93edfb"},"properties":{"commitSha":"db23c9a52f129db1e21f077f270764877921fc05"}},{"ruleId":"D28","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"7fbfe0d5390738a17bc9bdaba59aee866a3487ab6fe28804a01917dde6082cae"},"properties":{"commitSha":"db23c9a52f129db1e21f077f270764877921fc05"}},{"ruleId":"D28","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"df97314c0eeb6f1c146088f3ea10729c2ea03576408e44aa0ac888c5346dccff"},"properties":{"commitSha":"80d78cbf2505bf48bfbd05ea8ed6cf8414d8cfa9"}},{"ruleId":"D28","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"4d850878a04125599ffb53950d3d3bfd75e658782c3339a30e33856f61f43eef"},"properties":{"commitSha":"c5450eaa1a3813736c74695f6dca83c47f3ea164"},"taxa":[{"id":"CWE-259","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-540","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A01:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D28","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"6f037c90f496ff34abc86f12a7521b193c71bdd30b223bb73c3b52e9a4556a28"},"properties":{"commitSha":"54d220a191b103e329b517ea1b48cb526cc5f2e3"},"taxa":[{"id":"CWE-259","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-540","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A01:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D28","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"c0ea9fb6e99d960b1e3b1e4c7dfb93daec1a9a41ece2695cadd88b2174854bfc"},"properties":{"commitSha":"54d220a191b103e329b517ea1b48cb526cc5f2e3"},"taxa":[{"id":"CWE-259","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-540","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A01:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D28","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"74cfcb6e31815e2dabb296f2b06c405e015f7e7ab8661ad06b4969f04d10ae92"},"properties":{"commitSha":"54d220a191b103e329b517ea1b48cb526cc5f2e3"},"taxa":[{"id":"CWE-259","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-540","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A01:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D28","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"94bb86f9c01bd6bba7837ebf77ab4d9cf1dfe4f0e65db66bcd483901a97bc887"},"properties":{"commitSha":"54d220a191b103e329b517ea1b48cb526cc5f2e3"},"taxa":[{"id":"CWE-259","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-540","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A01:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D28","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"94fbb432c881981ec7605b670b275c2b8b085930552b89571eb299351999c829"},"properties":{"commitSha":"c5450eaa1a3813736c74695f6dca83c47f3ea164"},"taxa":[{"id":"CWE-259","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-540","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A01:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D28","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"dbb5578405082d1a2361d223dffc58671a9fa6240445330dd823881d6dd08436"},"properties":{"commitSha":"bfc319cff9527e1db159d8d499695b9be325b4aa"},"taxa":[{"id":"CWE-259","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-540","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A01:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D28","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"c52ecbad0a50ec2a9f89a2bafffe76b06dff0599dc0608c2829cc3534fbb5d71"},"properties":{"commitSha":"30924a692258f1ef1b42318943df18345b32a478"},"taxa":[{"id":"CWE-259","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-540","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A01:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D28","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"931bb014f9855ca9ea20712028b19061c9b0be8edd69571e056f59e52e31a488"},"properties":{"commitSha":"b81325d7bf4606a37b3c19a9ab2676c4b209e6ef"}},{"ruleId":"D28","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"ab0babdfdc2b44f387c885c7b67a1dd6dfe224ca246316c0f9685f15ab5e0a03"},"properties":{"commitSha":"b81325d7bf4606a37b3c19a9ab2676c4b209e6ef"}},{"ruleId":"D28","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"cabbacff5a18499b2cbc62cff2123e60293ace062eb5d8541dd06feb413b5519"},"properties":{"commitSha":"b81325d7bf4606a37b3c19a9ab2676c4b209e6ef"}},{"ruleId":"D28","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"5a7bb8d1e6deece3fb194803a10c42e9e176c1ba97ce7cbae507a7568ad80d63"},"properties":{"commitSha":"05f6a55a0b4e16e678e20c3b66588122d4c5669e"}},{"ruleId":"D28","level":"note","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"3cdfd7beb31b791ae18dcb425e21eb157c842e7bbcd522cc330573c1a6538db1"}},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"d5b8f11381d61a58459ffc7c595fd52d09c03c711894a63a9578043d2338412b"},"taxa":[{"id":"CWE-829","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A08:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"ab8d83539c5ebe567cb6deae98d392d6617f9ea4001a34a9a21fb3f393c0be8f"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"a470aaead2c4b55d7131f53b21a80a2de31cba592f80a03c6fad9269e5dbfa95"},"taxa":[{"id":"CWE-1321","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A08:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"7f4a9c4ab843edf114cf177f2678046341335289ae4b31088f52285037d0aaa2"},"taxa":[{"id":"CWE-532","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A09:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"e1e94a86f47c2fc197587091536c05c5d9b8de3194c72f5766d2478ab2c92907"},"taxa":[{"id":"CWE-117","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A09:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"c913b623c35ac5f327755ab322612153fbc3cdfbb70389bbf3be11e5a513866b"},"taxa":[{"id":"CWE-125","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A06:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"b4b9854904d6e9935d189c9645423ee3196c86adbb7f9f38bfc10ca8fd25026c"},"taxa":[{"id":"CWE-125","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A06:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"2302a076102978743311bf92298c488b05da8cfd5b7c8948db2afa981543a2bb"},"taxa":[{"id":"CWE-319","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A04:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"ece1d9624ae0efacbe532ef7f951b643bbb37f97fc09f310e9ae81503205743f"},"taxa":[{"id":"CWE-346","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A07:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"e29e619496501afb91adb6a7fc9359e2c3d52f15427f1b011ef036fbdc9894a7"},"taxa":[{"id":"CWE-441","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A01:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"note","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"4df2d1983f8eb63663daeaf4406113bca8b408e91a07adf5799c3f3eecd56147"},"taxa":[{"id":"CWE-290","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A07:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"note","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"eb81a2ec63e2c9ced76d614d08fd37a52715ab4400e852622bd2446a4ef7b358"},"taxa":[{"id":"CWE-290","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A07:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"note","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"434af24adfdc6deb741cc6885fbc52aaf04f3b0394b7897a8bbd87f55d770e93"},"taxa":[{"id":"CWE-444","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A06:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"note","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"a258867200a549261be49dc826dee56024b789c3085f9ec6a4fe0adf7783513f"},"taxa":[{"id":"CWE-290","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A07:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"note","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"4e7a0abb356180ac0753932a83ac15b23373fcf2f3421b1899d60f14ff080130"},"taxa":[{"id":"CWE-290","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A07:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"note","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"ca2471c308a828dcf8ebe9f731150add6f9af0fc014d7fff513f4b025191f668"},"taxa":[{"id":"CWE-290","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A07:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"note","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"2ce9cf3f13843db59da990b3da21ec9ff0833be1f85be189776b934ba883e4bb"},"taxa":[{"id":"CWE-290","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A07:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"note","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"90a31d25adbd6c92272a908976cc738d2f09d0a0c3bf329082ea402855e541af"},"taxa":[{"id":"CWE-290","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A07:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"note","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"6f3802e306eca951344aa8acb02f69d51e662a62777b090c547ebae7a003e6d3"},"taxa":[{"id":"CWE-16","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A02:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"note","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"e20286c59c1e2002304d97962751f84b85455b076971639c4ce4e741f858b258"},"taxa":[{"id":"CWE-290","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A07:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D29","level":"note","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"164209d4043a8ff5c9d53041ab4c3df55d5df4772d6fdc403f44cf05501b1d3d"},"taxa":[{"id":"CWE-290","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A07:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D30","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"4fa7ec492f17603c8364639cbbcfc791c288627d8055c314553bbc5f81e0d8c6"},"properties":{"dependency":{"package":"seroval","version":"1.5.6","advisory":"[GHSA redacted]","aliases":["[CVE redacted]","[CVE redacted]","[GHSA redacted]"],"reachability":{"kind":"not-imported"}}}},{"ruleId":"D30","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"f29cf4942d42087e6bb6356a343a5e7eb37a763c01898fe3697a93cab095bb90"},"properties":{"dependency":{"package":"basic-ftp","version":"5.3.1","advisory":"[GHSA redacted]","aliases":["[CVE redacted]"],"reachability":{"kind":"not-imported"}}}},{"ruleId":"D30","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"e4b87211b661e8c81c22dd06577f8847f3598303deb5418d67a6c6667ad698f1"},"properties":{"dependency":{"package":"brace-expansion","version":"5.0.9","advisory":"[GHSA redacted]","aliases":["[CVE redacted]","[CVE redacted]","[CVE redacted]","[GHSA redacted]","[GHSA redacted]"],"reachability":{"kind":"not-imported"}}}},{"ruleId":"D30","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"d98a639cee9cd28a03e09ddef04e9b5e2fb86086194d1712a57a1c2b695ddf33"},"properties":{"dependency":{"package":"braces","version":"3.0.3","advisory":"[GHSA redacted]","aliases":["[CVE redacted]"],"reachability":{"kind":"not-imported"}}}},{"ruleId":"D30","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"337b65bbb4fd915177c56f480f58703e8eda351d192cd29c7a6ebcecafc3c06b"},"properties":{"dependency":{"package":"undici","version":"6.28.0","advisory":"[GHSA redacted]","aliases":["[CVE redacted]","[CVE redacted]","[CVE redacted]","[GHSA redacted]","[GHSA redacted]"],"reachability":{"kind":"not-imported"}}}},{"ruleId":"D30","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"077ba048986d72a8cf9c9c49ab2e9e9b89c02cdfd757e442c86ab83907aa556e"},"properties":{"dependency":{"package":"source-map-js","version":"1.2.1","advisory":"[GHSA redacted]","aliases":["[CVE redacted]"],"reachability":{"kind":"not-imported"}}}},{"ruleId":"D30","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"bb8e13aca43f25f6186fcf0707e178a94f8d3734f0dccbe80e07cf96d96641fb"},"properties":{"dependency":{"package":"vite","version":"8.3.0","advisory":"[GHSA redacted]","aliases":["[CVE redacted]","[CVE redacted]","[CVE redacted]","[GHSA redacted]","[GHSA redacted]"],"reachability":{"kind":"test-or-tooling","file":"frontend/vite.config.ts","line":2}}}},{"ruleId":"D31","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"f9deb0b3e9568df1171bacf908174d514cb7e71041f1c1975b38340d1bde8fc0"}},{"ruleId":"D31","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"1fad97769c001a5ca60624d8aa81c4f3b30beae375dd218f58b24f10546ec26b"}},{"ruleId":"D31","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"a7e31e6af97b1b25250a0dd53cb8687f7dbecbc9c18c742d267b2ddd93bf7637"}},{"ruleId":"D31","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"a6841fa010814b6070035cd42b1f21e7c6e20d6972851d8e45312e1cceb3b151"},"taxa":[{"id":"CWE-494","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A08:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}},{"id":"CICD-SEC-3","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"D31","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"6bd61fb8774522135b99f21a638c277ef0149ab0bd69c96a04ff28baa8819257"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D31","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"e69be88b13445cc82137089680cb41b25cd822c57f232c3ca96a276f364cfead"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D31","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"3222a491a031135c9824a0f5a609c55496db1f424df63e421c44da4d410c9702"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D31","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"4afa3950ca59a079977d2f9c0f5d8d8d8d388a37fc6680ac6cf70fd7264241f9"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D31","level":"error","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"da0727d80027044b247ba1367a2083af8885e17a45f6aa36ec43655b0ecf694b"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"b09b72c3ebbe1a0fd4b5b82f02046db0bb8df33944176d96c070415ac6b2c1c2"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"456d2c3f511799653c765ed1632fec68481d07b1aa9db4d76a6f5dab8c714fd8"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"9e8397ff1fd1d152dd5ee0168cf1d4a84bb104a72ba76e3ca43de249279d23db"}},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"8a2e365f853f5996d664fb1d2bb0fa7c557200de881e43ccb79af96384dd01e8"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"fcad3b84375010b18af0e015de362d4568a877ad3d384fde855549387b379f63"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"b84fa91dc74acb6e16b1ab34d65b7f5c5d61e1714b05ee74190a9dda0b8d0d65"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"3fb1791f692ad309131388b576924bbc90275a5daa9f7e652825820cd9d3711b"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"c4c0cd8a513aee7964a93d8a5a564e61eed70d379053a147b958df43c1e2869c"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"334a815cc758c7351bb35d064be89ae4ec5d4db9da4b1e1dbb5d5649f2da57ea"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D31","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"672cfde158e34df623243f2f6e7c376cace91b89a4e6efcb3696a035b7a47367"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D31","level":"note","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"ccc0cc717a360059224d480b2bc872b7f88a881960a07fa78798e15be3c752b9"}},{"ruleId":"D31","level":"note","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"6f1c98d56296580bb969f13e80c74bf2abf009565de3cb306d1f2f2e9433096c"}},{"ruleId":"D31","level":"note","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"8e2b38a133f6edf11ae570794f11a2510bd279a4e9370e8be7d5dbe4d32e3d6b"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D31","level":"note","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"d47fde487bee695ae242a7feb53b54211668f6c6ef68095c28d5c0197b3db0c8"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D31","level":"note","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"1f0fec93439aa14f1e80bfdeee49a43ab0fa2c60244c3963a8b7aef65c5c4193"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D31","level":"note","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"76633a63ebfb60a46d68b271660731b0565fd35daac112fc82cd8647c890c76b"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D31","level":"note","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"b9347db6096808a6b413b6183b91295b5ae148e0efb44e625180ac22e802c921"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D31","level":"note","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"3ebcb725c238367e61b5ec8959a1f2d008246644ce4d2a0360799e4aed25359a"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D31","level":"note","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"0e97898a8405073c5d16a77c714adab1fcf2c3ee77b8011552944fa2f4b5aa10"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D31","level":"note","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"83cbfeab4adba6f275070bd9c6390ac11fbcc1588b2f8bfcc63fa1120d4a6d43"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D31","level":"note","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"b78fafd5a8301d09c0aaa292558a9e71eec5afb265bb0846fb63a276289f4c93"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D31","level":"note","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"5c5c8bc6f124e87e2f9427a00f3fc130b64a7d78ac89ea57981df0bc01021ed2"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D31","level":"note","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"ffe57785c51830452b310534d5256ac71eda4ae8cffe683f99ea0fe6f3b581ed"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D31","level":"note","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"a9f673e8471edfd39f90d2c5359536b92d4ae37899a1c2a0b58572f1928e8bea"},"taxa":[{"id":"CWE-1357","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"CWE-353","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},{"id":"A03:2025","toolComponent":{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61"}}]},{"ruleId":"D35","level":"warning","message":{"text":"Change coupling clique: check-locales.cjs, IntlProvider.tsx, index.ts: 3 files \u2014 \u0060frontend/check-locales.cjs\u0060, \u0060frontend/src/locale/IntlProvider.tsx\u0060, \u0060frontend/src/locale/src/HelpDoc/index.ts\u0060 \u2014 all change together with no explicit dependency: a fully-connected co-change clique, not 3 separate couplings. They share one concern (thin parallel siblings over a common abstraction), so extract the shared part into ONE unit and the whole clique\u0027s coupling clears at once \u2014 you do not need to break each pair individually."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/check-locales.cjs"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"4560d31be26c881e55a859ccf1989772a9f108c3887fc8e2487c72a393c6442d"}},{"ruleId":"D35","level":"warning","message":{"text":"Change coupling: access-list.js \u2194 proxy-host.js: \u0060backend/internal/access-list.js\u0060 and \u0060backend/internal/proxy-host.js\u0060 change together 50% of the time (6 of the 12 commits that touched whichever of the two files changed less often, counting a file under its earlier names as well \u2014 a repo-wide or module-wide sweep is evidence about the sweep rather than about any pair inside it and is left out of BOTH sides of this ratio, while a dependency bump, a formatter/rename sweep, or a commit whose edit to one of the two files was a tool directive such as //go:generate or whitespace only is left out of the shared count ONLY, so the two sides are not taken over identical commit sets) with no explicit dependency between them. They sit in the same directory, but in this ecosystem each file is its own module \u2014 a sibling reference still needs an import \u2014 so the missing import edge is real: the coupling runs through shared behaviour, not a declared dependency. If they duplicate structure, extract the common part into one unit; otherwise the coupling is hidden and worth breaking. You can check this without leaving the row: of the 6 shared commits counted here, the most recent 3 are \u00602cfd3395\u0060 Adds integration tests for per path access lists, fixes ipv6 jsv,; \u006035ad8227\u0060 fix: resolve biome lint errors; \u00604a0f2122\u0060 feat: per-path access lists, host logs modal, PostgreSQL support \u2014 run \u0060git show\u0060 on any of them."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/access-list.js"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"aee1f2f03b2ef0f71814d25f51fc31655e4706e50c1550cf32b8ed1311d4251d"}},{"ruleId":"D36","level":"warning","message":{"text":"A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."},"partialFingerprints":{"codehealthFindingId/v1":"fc5445989f2ed1a6cdd8ba1d81af8788542d376cfec71d00d96fee7fbe6ee193"},"taxa":[{"id":"CICD-SEC-5","toolComponent":{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35"}}]},{"ruleId":"AC2","level":"error","message":{"text":"\u003Cselect\u003E without a programmatic label: This control has no associated label. Add a \u003Clabel htmlFor\u003E / wrapping \u003Clabel\u003E / aria-label / aria-labelledby so assistive tech can name it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/components/Form/AccessClientFields.tsx"},"region":{"startLine":58}}}],"partialFingerprints":{"codehealthFindingId/v1":"3233df1eb995af69172b7a593958e6001a558d90531edccc9fdda627add12180"}},{"ruleId":"AC2","level":"error","message":{"text":"\u003Cinput\u003E without a programmatic label: This control has only a placeholder \u2014 a placeholder is not a label (it vanishes on input and many AT ignore it). Add a \u003Clabel htmlFor\u003E, a wrapping \u003Clabel\u003E, or aria-label."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/components/Form/AccessClientFields.tsx"},"region":{"startLine":76}}}],"partialFingerprints":{"codehealthFindingId/v1":"d569a2163c7577552cc2c6a92e1ada4bca408b4150aa85ae9139301ac05ef57e"}},{"ruleId":"AC2","level":"error","message":{"text":"\u003Cbutton\u003E with no accessible text: A button with no text and no aria-label has no accessible name. Add visible text or an aria-label (an icon-only button still needs one)."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/components/Form/AccessClientFields.tsx"},"region":{"startLine":88}}}],"partialFingerprints":{"codehealthFindingId/v1":"4314c8cfe9f5c1f452a07ff68f6ddf1cf6b14012e16ff899e802922d9c420a39"}},{"ruleId":"AC2","level":"error","message":{"text":"\u003Cselect\u003E without a programmatic label: This control has no associated label. Add a \u003Clabel htmlFor\u003E / wrapping \u003Clabel\u003E / aria-label / aria-labelledby so assistive tech can name it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/components/Form/AccessClientFields.tsx"},"region":{"startLine":110}}}],"partialFingerprints":{"codehealthFindingId/v1":"0f1f84af6a34cfe598e7c98bf8456c28bf2b2451117ded1b1ca4c67759f80c5b"}},{"ruleId":"AC2","level":"error","message":{"text":"\u003Cinput\u003E without a programmatic label: This control has no associated label. Add a \u003Clabel htmlFor\u003E / wrapping \u003Clabel\u003E / aria-label / aria-labelledby so assistive tech can name it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/components/Form/AccessClientFields.tsx"},"region":{"startLine":121}}}],"partialFingerprints":{"codehealthFindingId/v1":"aca3140e171bbc3e05c412dee50aa2d255cf168efcc352430b687c9e5fba2d07"}},{"ruleId":"AC2","level":"warning","message":{"text":"\u003CSelect\u003E field component without a label: This UI-library field component has no label / aria-label / aria-labelledby / id \u2014 and neither does anything it renders (a name prop is the form-submission key, not a label) \u2014 so it likely renders an unlabelled control. Name it whichever way this library supports: a label prop, an aria-label, or an id on the rendered control with a \u003Clabel htmlFor\u003E pointing at it. For a group of controls, name the group itself (aria-label, or a fieldset with a legend) \u2014 labelling each item leaves the set unnamed."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/components/Form/AccessField.tsx"},"region":{"startLine":98}}}],"partialFingerprints":{"codehealthFindingId/v1":"c19f1c19b14a70b93e529ced55a0212ebdd48dfad0a166693a217f7dd619b105"}},{"ruleId":"AC2","level":"error","message":{"text":"\u003Cinput\u003E without a programmatic label: This control has no associated label. Add a \u003Clabel htmlFor\u003E / wrapping \u003Clabel\u003E / aria-label / aria-labelledby so assistive tech can name it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/components/Form/BasicAuthFields.tsx"},"region":{"startLine":62}}}],"partialFingerprints":{"codehealthFindingId/v1":"aea456c9ca35670cd45bd9dcdef0635e49e3b99e386c4e4e536e081e76a71c36"}},{"ruleId":"AC2","level":"error","message":{"text":"\u003Cinput\u003E without a programmatic label: This control has only a placeholder \u2014 a placeholder is not a label (it vanishes on input and many AT ignore it). Add a \u003Clabel htmlFor\u003E, a wrapping \u003Clabel\u003E, or aria-label."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/components/Form/BasicAuthFields.tsx"},"region":{"startLine":71}}}],"partialFingerprints":{"codehealthFindingId/v1":"0e3f48b2796916928ecfad9fe814ef33f8a2b8d6103b93b6370cee0ae103d8d7"}},{"ruleId":"AC2","level":"error","message":{"text":"\u003Cbutton\u003E with no accessible text: A button with no text and no aria-label has no accessible name. Add visible text or an aria-label (an icon-only button still needs one)."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/components/Form/BasicAuthFields.tsx"},"region":{"startLine":85}}}],"partialFingerprints":{"codehealthFindingId/v1":"07a69c1e3872b59d4b2b3d6d9466624bdba90a2172f2e26487e95fdd965e9339"}},{"ruleId":"AC2","level":"error","message":{"text":"\u003Cinput\u003E without a programmatic label: This control has only a placeholder \u2014 a placeholder is not a label (it vanishes on input and many AT ignore it). Add a \u003Clabel htmlFor\u003E, a wrapping \u003Clabel\u003E, or aria-label."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/components/Form/LocationsFields.tsx"},"region":{"startLine":221}}}],"partialFingerprints":{"codehealthFindingId/v1":"45329c8855e7f427bc681fae16f7baf9172f7efcf759556cc48af491f8134435"}},{"ruleId":"AC2","level":"warning","message":{"text":"\u003CSelect\u003E field component without a label: This UI-library field component has no label / aria-label / aria-labelledby / id \u2014 and neither does anything it renders (a name prop is the form-submission key, not a label) \u2014 so it likely renders an unlabelled control. Name it whichever way this library supports: a label prop, an aria-label, or an id on the rendered control with a \u003Clabel htmlFor\u003E pointing at it. For a group of controls, name the group itself (aria-label, or a fieldset with a legend) \u2014 labelling each item leaves the set unnamed."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/components/Form/SSLCertificateField.tsx"},"region":{"startLine":116}}}],"partialFingerprints":{"codehealthFindingId/v1":"e2119c8f20add6839756a8c8b4cfd1ecb4174e9f5d86b5d193ab335cc685fe31"}},{"ruleId":"AC2","level":"error","message":{"text":"\u003Cbutton\u003E with no accessible text: A button with no text and no aria-label has no accessible name. Add visible text or an aria-label (an icon-only button still needs one)."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Access/Table.tsx"},"region":{"startLine":65}}}],"partialFingerprints":{"codehealthFindingId/v1":"6754f7bb938c5e0738bff891cbafd10b276b8ab03e2ef5d8f660dea7bc6a1166"}},{"ruleId":"AC2","level":"error","message":{"text":"\u003Cinput\u003E without a programmatic label: This control has no associated label. Add a \u003Clabel htmlFor\u003E / wrapping \u003Clabel\u003E / aria-label / aria-labelledby so assistive tech can name it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Access/TableWrapper.tsx"},"region":{"startLine":59}}}],"partialFingerprints":{"codehealthFindingId/v1":"20741a7b85831de2e8c8d6f157dd7ef0bab0ee2102d379ad1f87ccb6b14f7f54"}},{"ruleId":"AC2","level":"error","message":{"text":"\u003Cbutton\u003E with no accessible text: A button with no text and no aria-label has no accessible name. Add visible text or an aria-label (an icon-only button still needs one)."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Certificates/Table.tsx"},"region":{"startLine":104}}}],"partialFingerprints":{"codehealthFindingId/v1":"3f2d459359f4f2d8386367ead018f0113060949ce8d1548b86beaaee2e6bf416"}},{"ruleId":"AC2","level":"error","message":{"text":"\u003Cinput\u003E without a programmatic label: This control has no associated label. Add a \u003Clabel htmlFor\u003E / wrapping \u003Clabel\u003E / aria-label / aria-labelledby so assistive tech can name it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Certificates/TableWrapper.tsx"},"region":{"startLine":81}}}],"partialFingerprints":{"codehealthFindingId/v1":"c8452817664a076ba85a018ec749baca98548fe9303e7b8ba8a190a7d82096a7"}},{"ruleId":"AC2","level":"error","message":{"text":"\u003Cselect\u003E without a programmatic label: This control has no associated label. Add a \u003Clabel htmlFor\u003E / wrapping \u003Clabel\u003E / aria-label / aria-labelledby so assistive tech can name it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Logs/LogViewer.tsx"},"region":{"startLine":120}}}],"partialFingerprints":{"codehealthFindingId/v1":"cea499a93910a4fc09baad6ae142ce337f7102cc8bbc14d07941fcd0289970ec"}},{"ruleId":"AC2","level":"error","message":{"text":"\u003Cselect\u003E without a programmatic label: This control has no associated label. Add a \u003Clabel htmlFor\u003E / wrapping \u003Clabel\u003E / aria-label / aria-labelledby so assistive tech can name it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Logs/LogViewer.tsx"},"region":{"startLine":163}}}],"partialFingerprints":{"codehealthFindingId/v1":"9ac3df828c687f16ac901768990b2feb576fd20609d7f739b80321c5e8475b3b"}},{"ruleId":"AC2","level":"error","message":{"text":"\u003Cinput\u003E without a programmatic label: This control has only a placeholder \u2014 a placeholder is not a label (it vanishes on input and many AT ignore it). Add a \u003Clabel htmlFor\u003E, a wrapping \u003Clabel\u003E, or aria-label."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Logs/LogViewer.tsx"},"region":{"startLine":178}}}],"partialFingerprints":{"codehealthFindingId/v1":"9477885a200e596d15d27ec868ab656f1f27422066cd7234252d914169dcb76d"}},{"ruleId":"AC2","level":"error","message":{"text":"\u003Cselect\u003E without a programmatic label: This control has no associated label. Add a \u003Clabel htmlFor\u003E / wrapping \u003Clabel\u003E / aria-label / aria-labelledby so assistive tech can name it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Logs/LogViewer.tsx"},"region":{"startLine":187}}}],"partialFingerprints":{"codehealthFindingId/v1":"961941d399a6187ac52a6bb12d75d626f1689e835bb1f89273b0c16d389ebe3e"}},{"ruleId":"AC2","level":"error","message":{"text":"\u003Cbutton\u003E with no accessible text: A button with no text and no aria-label has no accessible name. Add visible text or an aria-label (an icon-only button still needs one)."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Nginx/DeadHosts/Table.tsx"},"region":{"startLine":75}}}],"partialFingerprints":{"codehealthFindingId/v1":"1414d691d75bcf54e35b38710e708c15c0fabcb082a0ee64b54a488c6efff172"}},{"ruleId":"AC2","level":"error","message":{"text":"\u003Cinput\u003E without a programmatic label: This control has no associated label. Add a \u003Clabel htmlFor\u003E / wrapping \u003Clabel\u003E / aria-label / aria-labelledby so assistive tech can name it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Nginx/DeadHosts/TableWrapper.tsx"},"region":{"startLine":68}}}],"partialFingerprints":{"codehealthFindingId/v1":"4fcad640aa95afb247ce895f5bcb07cafea3765fc341a0d8e34e50b2452e569f"}},{"ruleId":"AC2","level":"error","message":{"text":"\u003Cbutton\u003E with no accessible text: A button with no text and no aria-label has no accessible name. Add visible text or an aria-label (an icon-only button still needs one)."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Nginx/ProxyHosts/Table.tsx"},"region":{"startLine":107}}}],"partialFingerprints":{"codehealthFindingId/v1":"1a530003d9537e55bf213c34f27ec6aa019ec08c22faca9ff08002c8d0081181"}},{"ruleId":"AC2","level":"error","message":{"text":"\u003Cinput\u003E without a programmatic label: This control has no associated label. Add a \u003Clabel htmlFor\u003E / wrapping \u003Clabel\u003E / aria-label / aria-labelledby so assistive tech can name it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Nginx/ProxyHosts/TableWrapper.tsx"},"region":{"startLine":70}}}],"partialFingerprints":{"codehealthFindingId/v1":"95941887be1874aa16e43a82c0802546cdd644632fa3955c70dcb8189eafe952"}},{"ruleId":"AC2","level":"error","message":{"text":"\u003Cbutton\u003E with no accessible text: A button with no text and no aria-label has no accessible name. Add visible text or an aria-label (an icon-only button still needs one)."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Nginx/RedirectionHosts/Table.tsx"},"region":{"startLine":96}}}],"partialFingerprints":{"codehealthFindingId/v1":"baf17f3a9d3dfc93f7aa61f96c4c71ba6595a9364870bd504bdc3c99acfa61dc"}},{"ruleId":"AC2","level":"error","message":{"text":"\u003Cinput\u003E without a programmatic label: This control has no associated label. Add a \u003Clabel htmlFor\u003E / wrapping \u003Clabel\u003E / aria-label / aria-labelledby so assistive tech can name it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Nginx/RedirectionHosts/TableWrapper.tsx"},"region":{"startLine":70}}}],"partialFingerprints":{"codehealthFindingId/v1":"8d6f99c854a9ff7a89121bc6d2a2586aaae96bf292db445a825605b564fd223b"}},{"ruleId":"AC2","level":"error","message":{"text":"\u003Cbutton\u003E with no accessible text: A button with no text and no aria-label has no accessible name. Add visible text or an aria-label (an icon-only button still needs one)."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Nginx/Streams/Table.tsx"},"region":{"startLine":106}}}],"partialFingerprints":{"codehealthFindingId/v1":"8ce1e2bfc3b78a1dbbaa1321cc1251efec69202fc1ca8d903046376eb7a6b018"}},{"ruleId":"AC2","level":"error","message":{"text":"\u003Cinput\u003E without a programmatic label: This control has no associated label. Add a \u003Clabel htmlFor\u003E / wrapping \u003Clabel\u003E / aria-label / aria-labelledby so assistive tech can name it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Nginx/Streams/TableWrapper.tsx"},"region":{"startLine":72}}}],"partialFingerprints":{"codehealthFindingId/v1":"7c9b8adc3a7414ed472d2330569051206eb4c98e94261e39a59647cfb02ce0b4"}},{"ruleId":"AC2","level":"error","message":{"text":"\u003Cbutton\u003E with no accessible text: A button with no text and no aria-label has no accessible name. Add visible text or an aria-label (an icon-only button still needs one)."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Users/Table.tsx"},"region":{"startLine":105}}}],"partialFingerprints":{"codehealthFindingId/v1":"509933a720f3d9fcf2cf94bfee8c03c7d8b9ddf7fafe78cc764b14b58344fa9d"}},{"ruleId":"AC2","level":"error","message":{"text":"\u003Cinput\u003E without a programmatic label: This control has no associated label. Add a \u003Clabel htmlFor\u003E / wrapping \u003Clabel\u003E / aria-label / aria-labelledby so assistive tech can name it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Users/TableWrapper.tsx"},"region":{"startLine":83}}}],"partialFingerprints":{"codehealthFindingId/v1":"24af4c70a7a0e5d0fd956a3f639392ce6f31b1ab84507d457bb60ea479ace7a5"}},{"ruleId":"AC3","level":"warning","message":{"text":"Page without a main landmark: No \u003Cmain\u003E (or role=\u0022main\u0022) means no \u0022skip to content\u0022 target and a weaker landmark map. Wrap the primary content in \u003Cmain\u003E."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docker/rootfs/var/www/html/index.html"},"region":{"startLine":2}}}],"partialFingerprints":{"codehealthFindingId/v1":"830003263ba12dbe74fe5e598ecfbee90d8798391fda68178426075245ff742d"}},{"ruleId":"AC3","level":"warning","message":{"text":"Page without a main landmark: No \u003Cmain\u003E (or role=\u0022main\u0022) means no \u0022skip to content\u0022 target and a weaker landmark map. This document\u0027s body is only the mount point \u003Cdiv id=\u0022root\u0022\u003E, so there is no content here to wrap \u2014 render the \u003Cmain\u003E from the component mounted into it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/index.html"},"region":{"startLine":2}}}],"partialFingerprints":{"codehealthFindingId/v1":"963180a58f160911d5cc234ade89435dbbcab97255eefb2ef06173d86c4d845c"}},{"ruleId":"AC4","level":"error","message":{"text":"Click handler on a non-interactive \u003Cth\u003E: A click handler on a plain element isn\u0027t keyboard-operable. Use a \u003Cbutton\u003E, or add role \u002B tabIndex={0} \u002B a key handler."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/components/Table/TableHeader.tsx"},"region":{"startLine":36}}}],"partialFingerprints":{"codehealthFindingId/v1":"bde23789c0787b943b87fb26651a837a9a39f18bca4352860f2956465ad6a974"}},{"ruleId":"AC4","level":"warning","message":{"text":"Link used as a button (placeholder href): An \u003Ca href=\u0022#\u0022\u003E (or javascript:) with a click handler is a button dressed as a link \u2014 it announces the wrong role and stops working without JS. Use a \u003Cbutton\u003E for an action."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/modals/HostLogsModal.tsx"},"region":{"startLine":37}}}],"partialFingerprints":{"codehealthFindingId/v1":"fe91f3f0d99e1b8cb0e3496ff0c2737320915cd2d4f012e18a9b1e64bc72d046"}},{"ruleId":"AC4","level":"warning","message":{"text":"Link used as a button (placeholder href): An \u003Ca href=\u0022#\u0022\u003E (or javascript:) with a click handler is a button dressed as a link \u2014 it announces the wrong role and stops working without JS. Use a \u003Cbutton\u003E for an action."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/modals/HostLogsModal.tsx"},"region":{"startLine":49}}}],"partialFingerprints":{"codehealthFindingId/v1":"7ea1f830b34f775ed3b4c7a92a25d3e06f73df1d1ed7d96ee0133ff502021c3b"}},{"ruleId":"AC4","level":"warning","message":{"text":"Link used as a button (placeholder href): An \u003Ca href=\u0022#\u0022\u003E (or javascript:) with a click handler is a button dressed as a link \u2014 it announces the wrong role and stops working without JS. Use a \u003Cbutton\u003E for an action."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/modals/SetPasswordModal.tsx"},"region":{"startLine":64}}}],"partialFingerprints":{"codehealthFindingId/v1":"92f9e2c5a48fa9bb89227461a942ec0f216ca546eb257b155f5a08bce26f5a00"}},{"ruleId":"AC4","level":"warning","message":{"text":"Link used as a button (placeholder href): An \u003Ca href=\u0022#\u0022\u003E (or javascript:) with a click handler is a button dressed as a link \u2014 it announces the wrong role and stops working without JS. Use a \u003Cbutton\u003E for an action."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/modals/SetPasswordModal.tsx"},"region":{"startLine":81}}}],"partialFingerprints":{"codehealthFindingId/v1":"483f8a7571b6f4f2a77469720b04d58a4fcc2cbdec8186de8846258cffa71b05"}},{"ruleId":"AC4","level":"warning","message":{"text":"Link used as a button (placeholder href): An \u003Ca href=\u0022#\u0022\u003E (or javascript:) with a click handler is a button dressed as a link \u2014 it announces the wrong role and stops working without JS. Use a \u003Cbutton\u003E for an action."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Access/Table.tsx"},"region":{"startLine":81}}}],"partialFingerprints":{"codehealthFindingId/v1":"562c512dbbfef90dd234a49944b21c1427d62f1d268e02482edc695a1c269f14"}},{"ruleId":"AC4","level":"warning","message":{"text":"Link used as a button (placeholder href): An \u003Ca href=\u0022#\u0022\u003E (or javascript:) with a click handler is a button dressed as a link \u2014 it announces the wrong role and stops working without JS. Use a \u003Cbutton\u003E for an action."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Access/Table.tsx"},"region":{"startLine":94}}}],"partialFingerprints":{"codehealthFindingId/v1":"ff29c6a3f5df6a52ab49f11d204d5048833141fc3308089a2df185204a821c25"}},{"ruleId":"AC4","level":"warning","message":{"text":"Link used as a button (placeholder href): An \u003Ca href=\u0022#\u0022\u003E (or javascript:) with a click handler is a button dressed as a link \u2014 it announces the wrong role and stops working without JS. Use a \u003Cbutton\u003E for an action."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Certificates/Table.tsx"},"region":{"startLine":120}}}],"partialFingerprints":{"codehealthFindingId/v1":"8ffbbbed7e0f2554d0073e1bcfd49996e3c4a7906e0065db601f8079ffa14004"}},{"ruleId":"AC4","level":"warning","message":{"text":"Link used as a button (placeholder href): An \u003Ca href=\u0022#\u0022\u003E (or javascript:) with a click handler is a button dressed as a link \u2014 it announces the wrong role and stops working without JS. Use a \u003Cbutton\u003E for an action."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Certificates/Table.tsx"},"region":{"startLine":132}}}],"partialFingerprints":{"codehealthFindingId/v1":"364d59d46ba9a8c3af06bc9cf97a7c4989dd97339199acb9417dc9416e7f3f8f"}},{"ruleId":"AC4","level":"warning","message":{"text":"Link used as a button (placeholder href): An \u003Ca href=\u0022#\u0022\u003E (or javascript:) with a click handler is a button dressed as a link \u2014 it announces the wrong role and stops working without JS. Use a \u003Cbutton\u003E for an action."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Certificates/Table.tsx"},"region":{"startLine":144}}}],"partialFingerprints":{"codehealthFindingId/v1":"9cacc846e2f52ce1ba17ef1ba12d93a2048ab8d820c5c29b2a371fd1c87464c8"}},{"ruleId":"AC4","level":"warning","message":{"text":"Link used as a button (placeholder href): An \u003Ca href=\u0022#\u0022\u003E (or javascript:) with a click handler is a button dressed as a link \u2014 it announces the wrong role and stops working without JS. Use a \u003Cbutton\u003E for an action."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Certificates/Table.tsx"},"region":{"startLine":184}}}],"partialFingerprints":{"codehealthFindingId/v1":"f45d4aca476c4fba461943d1c36f7d78e8e342f28c87e01d2f75595961ed250a"}},{"ruleId":"AC4","level":"warning","message":{"text":"Link used as a button (placeholder href): An \u003Ca href=\u0022#\u0022\u003E (or javascript:) with a click handler is a button dressed as a link \u2014 it announces the wrong role and stops working without JS. Use a \u003Cbutton\u003E for an action."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Certificates/Table.tsx"},"region":{"startLine":194}}}],"partialFingerprints":{"codehealthFindingId/v1":"2f5f89081d42023966f8c6ee8b6a7754e286b00d30b9d59e6e871936f257c064"}},{"ruleId":"AC4","level":"warning","message":{"text":"Link used as a button (placeholder href): An \u003Ca href=\u0022#\u0022\u003E (or javascript:) with a click handler is a button dressed as a link \u2014 it announces the wrong role and stops working without JS. Use a \u003Cbutton\u003E for an action."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Certificates/Table.tsx"},"region":{"startLine":205}}}],"partialFingerprints":{"codehealthFindingId/v1":"1f3459e24b9d3019471761b196007cdadcd0d18cb1517cf09e54b0100a63ecbb"}},{"ruleId":"AC4","level":"warning","message":{"text":"Link used as a button (placeholder href): An \u003Ca href=\u0022#\u0022\u003E (or javascript:) with a click handler is a button dressed as a link \u2014 it announces the wrong role and stops working without JS. Use a \u003Cbutton\u003E for an action."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Certificates/TableWrapper.tsx"},"region":{"startLine":104}}}],"partialFingerprints":{"codehealthFindingId/v1":"0616a764269b0fb12d707907d7c9924d3e9b0ab96c03cdcbd63cd718ff40d303"}},{"ruleId":"AC4","level":"warning","message":{"text":"Link used as a button (placeholder href): An \u003Ca href=\u0022#\u0022\u003E (or javascript:) with a click handler is a button dressed as a link \u2014 it announces the wrong role and stops working without JS. Use a \u003Cbutton\u003E for an action."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Certificates/TableWrapper.tsx"},"region":{"startLine":114}}}],"partialFingerprints":{"codehealthFindingId/v1":"98bed47c65cc9672376141e8572e790799e9cf1590dc4c37554edd70de53a334"}},{"ruleId":"AC4","level":"warning","message":{"text":"Link used as a button (placeholder href): An \u003Ca href=\u0022#\u0022\u003E (or javascript:) with a click handler is a button dressed as a link \u2014 it announces the wrong role and stops working without JS. Use a \u003Cbutton\u003E for an action."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Certificates/TableWrapper.tsx"},"region":{"startLine":125}}}],"partialFingerprints":{"codehealthFindingId/v1":"509506b67967ab4ddea486f74f5a76bc14516daa58f73cb0fad8d9a308e6faf5"}},{"ruleId":"AC4","level":"warning","message":{"text":"Link used as a button (placeholder href): An \u003Ca href=\u0022#\u0022\u003E (or javascript:) with a click handler is a button dressed as a link \u2014 it announces the wrong role and stops working without JS. Use a \u003Cbutton\u003E for an action."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Nginx/DeadHosts/Table.tsx"},"region":{"startLine":91}}}],"partialFingerprints":{"codehealthFindingId/v1":"25829e3e2a4836d1a295e17eee54221b413db1f00d22198add3939d4f923779a"}},{"ruleId":"AC4","level":"warning","message":{"text":"Link used as a button (placeholder href): An \u003Ca href=\u0022#\u0022\u003E (or javascript:) with a click handler is a button dressed as a link \u2014 it announces the wrong role and stops working without JS. Use a \u003Cbutton\u003E for an action."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Nginx/DeadHosts/Table.tsx"},"region":{"startLine":103}}}],"partialFingerprints":{"codehealthFindingId/v1":"022a84c9d1f77f2b7056827a5a623b34866f70b491e3b391f96d667499439ddd"}},{"ruleId":"AC4","level":"warning","message":{"text":"Link used as a button (placeholder href): An \u003Ca href=\u0022#\u0022\u003E (or javascript:) with a click handler is a button dressed as a link \u2014 it announces the wrong role and stops working without JS. Use a \u003Cbutton\u003E for an action."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Nginx/DeadHosts/Table.tsx"},"region":{"startLine":115}}}],"partialFingerprints":{"codehealthFindingId/v1":"6687d7449863298206833582d49f6978e3e5f7b2812e503e3655ba6cbb39426c"}},{"ruleId":"AC4","level":"warning","message":{"text":"Link used as a button (placeholder href): An \u003Ca href=\u0022#\u0022\u003E (or javascript:) with a click handler is a button dressed as a link \u2014 it announces the wrong role and stops working without JS. Use a \u003Cbutton\u003E for an action."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Nginx/ProxyHosts/Table.tsx"},"region":{"startLine":123}}}],"partialFingerprints":{"codehealthFindingId/v1":"88c238ff9e4d9b9177503eaa75cc753afaa16a7c994ab6e6de173d829ad6a212"}},{"ruleId":"AC4","level":"warning","message":{"text":"Link used as a button (placeholder href): An \u003Ca href=\u0022#\u0022\u003E (or javascript:) with a click handler is a button dressed as a link \u2014 it announces the wrong role and stops working without JS. Use a \u003Cbutton\u003E for an action."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Nginx/ProxyHosts/Table.tsx"},"region":{"startLine":135}}}],"partialFingerprints":{"codehealthFindingId/v1":"f89aeffa95d474c2eb09e993047280186aeca3b0f0a7af51acddd83eccf48207"}},{"ruleId":"AC4","level":"warning","message":{"text":"Link used as a button (placeholder href): An \u003Ca href=\u0022#\u0022\u003E (or javascript:) with a click handler is a button dressed as a link \u2014 it announces the wrong role and stops working without JS. Use a \u003Cbutton\u003E for an action."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Nginx/ProxyHosts/Table.tsx"},"region":{"startLine":146}}}],"partialFingerprints":{"codehealthFindingId/v1":"5e00c34a95fc1e7ebb8632a4d350ab597646d57420fdb93e732e69288465c490"}},{"ruleId":"AC4","level":"warning","message":{"text":"Link used as a button (placeholder href): An \u003Ca href=\u0022#\u0022\u003E (or javascript:) with a click handler is a button dressed as a link \u2014 it announces the wrong role and stops working without JS. Use a \u003Cbutton\u003E for an action."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Nginx/ProxyHosts/Table.tsx"},"region":{"startLine":158}}}],"partialFingerprints":{"codehealthFindingId/v1":"7e8f9ebf6f164758dc6533a1625d051b4015eecbeb704ca4285835743ab4ab9d"}},{"ruleId":"AC4","level":"warning","message":{"text":"Link used as a button (placeholder href): An \u003Ca href=\u0022#\u0022\u003E (or javascript:) with a click handler is a button dressed as a link \u2014 it announces the wrong role and stops working without JS. Use a \u003Cbutton\u003E for an action."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Nginx/RedirectionHosts/Table.tsx"},"region":{"startLine":112}}}],"partialFingerprints":{"codehealthFindingId/v1":"a5517be827d70d27f60772c797d10a5df9c5fcaf7cef924dea9aacb5eff9ea10"}},{"ruleId":"AC4","level":"warning","message":{"text":"Link used as a button (placeholder href): An \u003Ca href=\u0022#\u0022\u003E (or javascript:) with a click handler is a button dressed as a link \u2014 it announces the wrong role and stops working without JS. Use a \u003Cbutton\u003E for an action."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Nginx/RedirectionHosts/Table.tsx"},"region":{"startLine":124}}}],"partialFingerprints":{"codehealthFindingId/v1":"781ca08031da2802639ab997e83728d9a52364e3549425b6696cc901aad74971"}},{"ruleId":"AC4","level":"warning","message":{"text":"Link used as a button (placeholder href): An \u003Ca href=\u0022#\u0022\u003E (or javascript:) with a click handler is a button dressed as a link \u2014 it announces the wrong role and stops working without JS. Use a \u003Cbutton\u003E for an action."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Nginx/RedirectionHosts/Table.tsx"},"region":{"startLine":136}}}],"partialFingerprints":{"codehealthFindingId/v1":"e86e384aeeeb47b890e54713ec9260d55cf659bb176629f02386dbed695888df"}},{"ruleId":"AC4","level":"warning","message":{"text":"Link used as a button (placeholder href): An \u003Ca href=\u0022#\u0022\u003E (or javascript:) with a click handler is a button dressed as a link \u2014 it announces the wrong role and stops working without JS. Use a \u003Cbutton\u003E for an action."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Nginx/Streams/Table.tsx"},"region":{"startLine":122}}}],"partialFingerprints":{"codehealthFindingId/v1":"85c02cdc812b9b02c0502047440471e1cf562f5b53583c0405079ac31fef9224"}},{"ruleId":"AC4","level":"warning","message":{"text":"Link used as a button (placeholder href): An \u003Ca href=\u0022#\u0022\u003E (or javascript:) with a click handler is a button dressed as a link \u2014 it announces the wrong role and stops working without JS. Use a \u003Cbutton\u003E for an action."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Nginx/Streams/Table.tsx"},"region":{"startLine":134}}}],"partialFingerprints":{"codehealthFindingId/v1":"a1ab3c060363dc5cf19036dd295ab6577387b1c3cd5eb5c193f5d56d8f237eaf"}},{"ruleId":"AC4","level":"warning","message":{"text":"Link used as a button (placeholder href): An \u003Ca href=\u0022#\u0022\u003E (or javascript:) with a click handler is a button dressed as a link \u2014 it announces the wrong role and stops working without JS. Use a \u003Cbutton\u003E for an action."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Nginx/Streams/Table.tsx"},"region":{"startLine":146}}}],"partialFingerprints":{"codehealthFindingId/v1":"c3bd6c7ea7312b1421dc7f4c21cd20dc0932c495fd84698f95bb996961364243"}},{"ruleId":"AC4","level":"warning","message":{"text":"Link used as a button (placeholder href): An \u003Ca href=\u0022#\u0022\u003E (or javascript:) with a click handler is a button dressed as a link \u2014 it announces the wrong role and stops working without JS. Use a \u003Cbutton\u003E for an action."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Settings/Layout.tsx"},"region":{"startLine":23}}}],"partialFingerprints":{"codehealthFindingId/v1":"eae734026dd1bfad4dc671004a7710a071c0ccefe700c81900173c47fe589cb7"}},{"ruleId":"AC4","level":"warning","message":{"text":"Link used as a button (placeholder href): An \u003Ca href=\u0022#\u0022\u003E (or javascript:) with a click handler is a button dressed as a link \u2014 it announces the wrong role and stops working without JS. Use a \u003Cbutton\u003E for an action."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Users/Table.tsx"},"region":{"startLine":121}}}],"partialFingerprints":{"codehealthFindingId/v1":"7d999839a066787a3990959a92f3831cbf9ca730fe4dfb8e260912396edd7f0c"}},{"ruleId":"AC4","level":"warning","message":{"text":"Link used as a button (placeholder href): An \u003Ca href=\u0022#\u0022\u003E (or javascript:) with a click handler is a button dressed as a link \u2014 it announces the wrong role and stops working without JS. Use a \u003Cbutton\u003E for an action."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Users/Table.tsx"},"region":{"startLine":134}}}],"partialFingerprints":{"codehealthFindingId/v1":"65011c705cbb08fa7fbf2a13d37f69cccf4ed36e0451979d747661c7ec50f611"}},{"ruleId":"AC4","level":"warning","message":{"text":"Link used as a button (placeholder href): An \u003Ca href=\u0022#\u0022\u003E (or javascript:) with a click handler is a button dressed as a link \u2014 it announces the wrong role and stops working without JS. Use a \u003Cbutton\u003E for an action."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Users/Table.tsx"},"region":{"startLine":145}}}],"partialFingerprints":{"codehealthFindingId/v1":"b88b8173615e96adcdd30643ccdcea527d511d50d68506f67cb5839e81ed4783"}},{"ruleId":"AC4","level":"warning","message":{"text":"Link used as a button (placeholder href): An \u003Ca href=\u0022#\u0022\u003E (or javascript:) with a click handler is a button dressed as a link \u2014 it announces the wrong role and stops working without JS. Use a \u003Cbutton\u003E for an action."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Users/Table.tsx"},"region":{"startLine":156}}}],"partialFingerprints":{"codehealthFindingId/v1":"31942caf130e7227ebc4fec30ccb060e9f0bc8d2969da43409aa4d859ed39444"}},{"ruleId":"AC4","level":"warning","message":{"text":"Link used as a button (placeholder href): An \u003Ca href=\u0022#\u0022\u003E (or javascript:) with a click handler is a button dressed as a link \u2014 it announces the wrong role and stops working without JS. Use a \u003Cbutton\u003E for an action."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Users/Table.tsx"},"region":{"startLine":173}}}],"partialFingerprints":{"codehealthFindingId/v1":"31b62f8437b47f0e4b1479eb75b135dffcce9b4a62b1bfe2ddbe3fb7d905f5e6"}},{"ruleId":"AC4","level":"warning","message":{"text":"Link used as a button (placeholder href): An \u003Ca href=\u0022#\u0022\u003E (or javascript:) with a click handler is a button dressed as a link \u2014 it announces the wrong role and stops working without JS. Use a \u003Cbutton\u003E for an action."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Users/Table.tsx"},"region":{"startLine":186}}}],"partialFingerprints":{"codehealthFindingId/v1":"d5aaa2af7ff93d47d1caacfc30967d07b839550e5c5b1b10fb777531878183e6"}},{"ruleId":"AC7","level":"note","message":{"text":"Accessibility enforcement below the top rung: An a11y linter is configured (Documented) but there\u0027s no automated a11y test or CI gate. Add cypress-axe to verify at runtime, then gate it in CI. What was searched, so you can tell an absence from a miss: the 101 markup file(s) this pass actually assessed, the linter configuration checked in beside them, and this repository\u0027s test and CI files \u2014 matched by name against the accessibility checkers this dimension carries. An audit run outside the repository, a hosted scanner, or a check whose name is not one of those, is not seen here."},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"d46019b86eff5ddad9db289e6802ac158899e980df54c34f67722442787ead62"}},{"ruleId":"C2","level":"note","message":{"text":"No named authorization policies: Authorization IS enforced here (by route guards, auth middleware or checks that refuse a caller) \u2014 this is NOT a claim that endpoints are unprotected. What\u0027s missing is a NAMED rule set: who may do what is encoded inline where it is checked, so the rules can\u0027t be listed, reviewed or tested apart from the code that applies them. Recommendation, not a defect."},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"b048fdf3fa524ac68c7874fdfcdb4c49d5f010013f2cb22a0bd84cb12ceb951f"}},{"ruleId":"M2","level":"note","message":{"text":"No ADRs: No Architecture Decision Records found \u2014 no conventional ADR directory, no numbered \u0060NNNN-title\u0060 documents in any markup this check reads, and nothing ADR-shaped by content. Design rationale recorded elsewhere (a design-notes tree, a mailing list, pull-request discussion) is not visible to this check and is not re-findable per decision, so a future maintainer cannot ask why one choice was made and get an answer."},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"670b3d6e36a756d63097d0dfbf90afd5fc761308800b9354894a07c3f4e4aa14"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: test/README.md changes into \u0060nginxproxymanager/test\u0060, but no such folder exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"test/README.md"},"region":{"startLine":6}}}],"partialFingerprints":{"codehealthFindingId/v1":"8eca51396f28a50843c326d537411ee25fbe86b8c4344516c683010de6a11b9c"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/src/advanced-config/index.md names \u0060docker-compose.yml\u0060, but no file or folder \u0060docker-compose.yml\u0060 exists. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/src/advanced-config/index.md"},"region":{"startLine":40}}}],"partialFingerprints":{"codehealthFindingId/v1":"9383c869997f02a397833627a260fd91d7f61bfdc3a5499d279b3c9bc1aae1aa"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/src/guide/index.md links to \u0060/setup/\u0060, but \u0060setup\u0060 does not exist. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/src/guide/index.md"},"region":{"startLine":22}}}],"partialFingerprints":{"codehealthFindingId/v1":"504d462615d99a64540cc1462b96dc8789103fb2fa50f25b1013c157da2c847e"}},{"ruleId":"M4","level":"note","message":{"text":"README/code drift: docs/src/guide/index.md links to \u0060/screenshots/\u0060, but \u0060screenshots\u0060 does not exist. Checked without a model against the repository: its files and folders, the scripts and dependencies of every package.json, the projects, namespaces, package references and target frameworks of the .NET build, the SDK and Node pins, and the identifiers of every file that is not a document; the documents\u0027 own text never counts. A footprint generated at build time, read only by a platform, or living outside this repository is not seen, and this row is then wrong."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"docs/src/guide/index.md"},"region":{"startLine":23}}}],"partialFingerprints":{"codehealthFindingId/v1":"bededf9ac514b05bd88ab707db0963acb4d627f64aaad8dad4e63efb2125bc8a"}},{"ruleId":"P1","level":"warning","message":{"text":"No CI gate on code changes: A workflow is configured, but the repository\u0027s only workflow is \u0060stale.yml\u0060, which neither runs on a code change (no \u0060push\u0060 or \u0060pull_request\u0060 trigger) nor checks the code out \u2014 so nothing here builds or tests a change before it merges. This is automation for the repository\u0027s ISSUES AND HOUSEKEEPING, not a gate on its code: a pull request can land without anything having compiled or run it. The rows about missing build and test steps are deliberately not reported beside this one, because there is no pipeline for them to be missing from \u2014 adding the gate is one action, not three."},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"b0ba1c8608b43ed04d2217aa2900d0f6ba895092c5773bfba19a542bfee5943e"}},{"ruleId":"P3","level":"note","message":{"text":"No SAST: No static application security testing detected. For this repository\u0027s stack, add CodeQL\u0027s javascript-typescript pack, \u0060semgrep --config=p/typescript\u0060, or eslint-plugin-security as a CI step. What was searched, so you can tell an absence from a miss: the 720 CI workflow file(s) in this repository, and the scanner and linter configuration checked in beside them. A scan that runs outside CI, one configured in your forge\u0027s web UI rather than in a committed file, or a tool whose name is none of those this check carries, is not seen \u2014 if that is your case the row is wrong, and saying so is more useful than adding a second scanner."},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"6e54424179c892f03ef2fd003130ac4bd43f39bbf3b1ca0a0143e25acb80ec87"}},{"ruleId":"P5","level":"warning","message":{"text":"No DR/backup evidence: A persistence guard (data volume / purge-protection) was found, but no backup, geo-recovery or RTO/RPO controls were evidenced \u2014 a volume that survives a container recreate is not a tested restore from catastrophic loss."},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"5daabb38c90b07af65b8738cf94ce884e90a7d8fef810d341de5c186188c8fe0"}},{"ruleId":"P6","level":"note","message":{"text":"No changelog: No CHANGELOG/HISTORY/RELEASES file \u2014 what shipped when isn\u0027t easy to reconstruct for support or audit. (Versioning/tagging makes releases traceable, but a changelog records the what.)"},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"dda5aa5aed8cbb292c3ef2b733bc138f614293ae6426c85e98bf31ef330d9415"}},{"ruleId":"P7","level":"warning","message":{"text":"Outbound HTTP without resilience: \u0060https.request(\u0060 makes an outbound HTTP call, and nothing bounds it: no timeout, deadline, retry or circuit breaker is set for it here, and the client has no process-wide default. A slow or failing dependency will hold this service\u0027s request, thread or connection until the call gives up on its own \u2014 or never, for a client with no default timeout."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/certificate.js"},"region":{"startLine":1215}}}],"partialFingerprints":{"codehealthFindingId/v1":"31d113e7eeff0ae11dc0c39894f3f78c13cbbcdef7fced7af7fb9d6b21a14321"}},{"ruleId":"PF3","level":"warning","message":{"text":"Sync-over-async blocking: \u0060fs.unlinkSync\u0060 in \u0060anonymous function\u0060 blocks the event loop until it finishes \u2014 a blocking call inside async code stalls the event loop \u2014 every other request waits for as long as it runs."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/access-list.js"},"region":{"startLine":359}}}],"partialFingerprints":{"codehealthFindingId/v1":"7342ce1e4f4e4d49df7e3029a05511e59f490bd26a80cbc2c40dcf5d2568d45e"}},{"ruleId":"PF3","level":"warning","message":{"text":"Sync-over-async blocking: \u0060fs.unlinkSync\u0060 in \u0060build\u0060 blocks the event loop until it finishes \u2014 a blocking call inside async code stalls the event loop \u2014 every other request waits for as long as it runs."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/access-list.js"},"region":{"startLine":487}}}],"partialFingerprints":{"codehealthFindingId/v1":"237a18f783db9c4a607cde08650dffb4ec8cb70d3b557ee621cd1c499311074f"}},{"ruleId":"PF3","level":"warning","message":{"text":"Sync-over-async blocking: \u0060fs.writeFileSync\u0060 in \u0060build\u0060 blocks the event loop until it finishes \u2014 a blocking call inside async code stalls the event loop \u2014 every other request waits for as long as it runs."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/access-list.js"},"region":{"startLine":493}}}],"partialFingerprints":{"codehealthFindingId/v1":"fe6b57fde4826c1b9e63401150be768e47e797a7557319cdb235717366cb268f"}},{"ruleId":"PF3","level":"warning","message":{"text":"Sync-over-async blocking: \u0060fs.appendFileSync\u0060 in \u0060callback to then\u0060 blocks the event loop until it finishes \u2014 a blocking call inside async code stalls the event loop \u2014 every other request waits for as long as it runs."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/access-list.js"},"region":{"startLine":508}}}],"partialFingerprints":{"codehealthFindingId/v1":"9bd68e3d72ab2223b3086d1ca09e543a6b2e0069479c22f8b6acdd379bc93d64"}},{"ruleId":"PF3","level":"warning","message":{"text":"Sync-over-async blocking: \u0060fs.existsSync\u0060 in \u0060download\u0060 blocks the event loop until it finishes \u2014 a blocking call inside async code stalls the event loop \u2014 every other request waits for as long as it runs."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/certificate.js"},"region":{"startLine":346}}}],"partialFingerprints":{"codehealthFindingId/v1":"c4beb0897d4349e3ad53bacc3d2d926427987e29c681057c5bc5211385387a88"}},{"ruleId":"PF3","level":"warning","message":{"text":"Sync-over-async blocking: \u0060fs.readdirSync\u0060 in \u0060download\u0060 blocks the event loop until it finishes \u2014 a blocking call inside async code stalls the event loop \u2014 every other request waits for as long as it runs."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/certificate.js"},"region":{"startLine":351}}}],"partialFingerprints":{"codehealthFindingId/v1":"b56a1b84d7d8d9c5b65d3fd0f920730210a3bb13249a8303e44afed9abe18d76"}},{"ruleId":"PF3","level":"warning","message":{"text":"Sync-over-async blocking: \u0060fs.realpathSync\u0060 in \u0060callback to map\u0060 blocks the event loop until it finishes \u2014 a blocking call inside async code stalls the event loop \u2014 every other request waits for as long as it runs."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/certificate.js"},"region":{"startLine":353}}}],"partialFingerprints":{"codehealthFindingId/v1":"1163f115542aeeab1665df0f0932fb472f32daf8441b5f2eb19c3c1ae3df72e4"}},{"ruleId":"PF3","level":"warning","message":{"text":"Sync-over-async blocking: \u0060fs.existsSync\u0060 in \u0060callback to Promise\u0060 blocks the event loop until it finishes \u2014 a blocking call inside async code stalls the event loop \u2014 every other request waits for as long as it runs."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/certificate.js"},"region":{"startLine":504}}}],"partialFingerprints":{"codehealthFindingId/v1":"dde428db7c03024a41afac69a053d44413fd65dc698fbe2575293635f748ef37"}},{"ruleId":"PF3","level":"warning","message":{"text":"Sync-over-async blocking: \u0060fs.mkdirSync\u0060 in \u0060callback to Promise\u0060 blocks the event loop until it finishes \u2014 a blocking call inside async code stalls the event loop \u2014 every other request waits for as long as it runs."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/certificate.js"},"region":{"startLine":505}}}],"partialFingerprints":{"codehealthFindingId/v1":"e340b8ef17778b08388c8a07c435cb886dfde55983a5fe17deb3741d5a695226"}},{"ruleId":"PF3","level":"warning","message":{"text":"Sync-over-async blocking: \u0060fs.unlinkSync\u0060 in \u0060checkPrivateKey\u0060 blocks the event loop until it finishes \u2014 a blocking call inside async code stalls the event loop \u2014 every other request waits for as long as it runs."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/certificate.js"},"region":{"startLine":648}}}],"partialFingerprints":{"codehealthFindingId/v1":"068b66c93b9435eb0a91d2243fcf472725ef96f0d0ea716d34b03a58d9990421"}},{"ruleId":"PF3","level":"warning","message":{"text":"Sync-over-async blocking: \u0060fs.unlinkSync\u0060 in \u0060checkPrivateKey\u0060 blocks the event loop until it finishes \u2014 a blocking call inside async code stalls the event loop \u2014 every other request waits for as long as it runs."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/certificate.js"},"region":{"startLine":652}}}],"partialFingerprints":{"codehealthFindingId/v1":"fd923cb99ed904d8f0af88553e5b50dc21d4063c356bede03925e304a3f01463"}},{"ruleId":"PF3","level":"warning","message":{"text":"Sync-over-async blocking: \u0060fs.unlinkSync\u0060 in \u0060getCertificateInfo\u0060 blocks the event loop until it finishes \u2014 a blocking call inside async code stalls the event loop \u2014 every other request waits for as long as it runs."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/certificate.js"},"region":{"startLine":668}}}],"partialFingerprints":{"codehealthFindingId/v1":"5fc508f6be89071241f5b98d919bc75e0e2a0876c7ee2113208dbc2da5749b4a"}},{"ruleId":"PF3","level":"warning","message":{"text":"Sync-over-async blocking: \u0060fs.unlinkSync\u0060 in \u0060getCertificateInfo\u0060 blocks the event loop until it finishes \u2014 a blocking call inside async code stalls the event loop \u2014 every other request waits for as long as it runs."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/certificate.js"},"region":{"startLine":671}}}],"partialFingerprints":{"codehealthFindingId/v1":"157a6ffbcb5e36b114acd73da52f572edf0319a7575673c53563a1b98cce392c"}},{"ruleId":"PF3","level":"warning","message":{"text":"Sync-over-async blocking: \u0060fs.mkdirSync\u0060 in \u0060requestLetsEncryptSslWithDnsChallenge\u0060 blocks the event loop until it finishes \u2014 a blocking call inside async code stalls the event loop \u2014 every other request waits for as long as it runs."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/certificate.js"},"region":{"startLine":834}}}],"partialFingerprints":{"codehealthFindingId/v1":"394f53f9f043ea0e963d9dff081bad384d2b2eb21aafc83efbacbb1cc56c58dd"}},{"ruleId":"PF3","level":"warning","message":{"text":"Sync-over-async blocking: \u0060fs.writeFileSync\u0060 in \u0060requestLetsEncryptSslWithDnsChallenge\u0060 blocks the event loop until it finishes \u2014 a blocking call inside async code stalls the event loop \u2014 every other request waits for as long as it runs."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/certificate.js"},"region":{"startLine":835}}}],"partialFingerprints":{"codehealthFindingId/v1":"e608a84a19aae72cc7a5de1883ef3be832e4ab13914e43c56d68092ef2ed2177"}},{"ruleId":"PF3","level":"warning","message":{"text":"Sync-over-async blocking: \u0060fs.mkdirSync\u0060 in \u0060renewLetsEncryptSslWithDnsChallenge\u0060 blocks the event loop until it finishes \u2014 a blocking call inside async code stalls the event loop \u2014 every other request waits for as long as it runs."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/certificate.js"},"region":{"startLine":1022}}}],"partialFingerprints":{"codehealthFindingId/v1":"492b015c9cffa06d4711efaf5157e603af34a9ac992731c14798aefd26ddf94a"}},{"ruleId":"PF3","level":"warning","message":{"text":"Sync-over-async blocking: \u0060fs.writeFileSync\u0060 in \u0060renewLetsEncryptSslWithDnsChallenge\u0060 blocks the event loop until it finishes \u2014 a blocking call inside async code stalls the event loop \u2014 every other request waits for as long as it runs."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/certificate.js"},"region":{"startLine":1023}}}],"partialFingerprints":{"codehealthFindingId/v1":"ffa024048404f7f929d17facdf2c3d0e91875df238805f0e8b52b462ac67fc42"}},{"ruleId":"PF3","level":"warning","message":{"text":"Sync-over-async blocking: \u0060fs.mkdirSync\u0060 in \u0060testHttpsChallenge\u0060 blocks the event loop until it finishes \u2014 a blocking call inside async code stalls the event loop \u2014 every other request waits for as long as it runs."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/certificate.js"},"region":{"startLine":1185}}}],"partialFingerprints":{"codehealthFindingId/v1":"ae2459c06395ce6b218da9a2d6c7dc977b053dcb53bb684c51911c669815968c"}},{"ruleId":"PF3","level":"warning","message":{"text":"Sync-over-async blocking: \u0060fs.writeFileSync\u0060 in \u0060testHttpsChallenge\u0060 blocks the event loop until it finishes \u2014 a blocking call inside async code stalls the event loop \u2014 every other request waits for as long as it runs."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/certificate.js"},"region":{"startLine":1186}}}],"partialFingerprints":{"codehealthFindingId/v1":"cbcfa70767fd8d1f0563e15957a41af343ad8dc4c24278bc9b512ce2c88b1da5"}},{"ruleId":"PF3","level":"warning","message":{"text":"Sync-over-async blocking: \u0060fs.unlinkSync\u0060 in \u0060testHttpsChallenge\u0060 blocks the event loop until it finishes \u2014 a blocking call inside async code stalls the event loop \u2014 every other request waits for as long as it runs."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/certificate.js"},"region":{"startLine":1194}}}],"partialFingerprints":{"codehealthFindingId/v1":"f748eeb0cc0fb5e56f8e0e6f284f9194b148845c38f850c1bc5de105e02e8b9a"}},{"ruleId":"PF3","level":"warning","message":{"text":"Sync-over-async blocking: \u0060fs.readFileSync\u0060 in \u0060can\u0060 blocks the event loop until it finishes \u2014 a blocking call inside async code stalls the event loop \u2014 every other request waits for as long as it runs."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/lib/access.js"},"region":{"startLine":269}}}],"partialFingerprints":{"codehealthFindingId/v1":"5a12473cb9f7c5c91ef825208633c1170be2b2ffa045b154f4d673c557da44e5"}},{"ruleId":"PF3","level":"warning","message":{"text":"Sync-over-async blocking: \u0060fs.existsSync\u0060 in \u0060callback to get\u0060 blocks the event loop until it finishes \u2014 a blocking call inside async code stalls the event loop \u2014 every other request waits for as long as it runs."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/routes/nginx/proxy_hosts.js"},"region":{"startLine":257}}}],"partialFingerprints":{"codehealthFindingId/v1":"2e0ff2d8af9127423549027f7e22fcf2e6797d4ba2b1cc7af074f05f0d960808"}},{"ruleId":"PF3","level":"warning","message":{"text":"Sync-over-async blocking: \u0060fs.readFileSync\u0060 in \u0060callback to get\u0060 blocks the event loop until it finishes \u2014 a blocking call inside async code stalls the event loop \u2014 every other request waits for as long as it runs."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/routes/nginx/proxy_hosts.js"},"region":{"startLine":258}}}],"partialFingerprints":{"codehealthFindingId/v1":"cc7b40ee31f9a0244dcec87f6136db75b644501b81e89d12fea5c9e693db0639"}},{"ruleId":"R1","level":"warning","message":{"text":"Type Safety: 237 typed \u00B7 115 plain JS \u2014 the untyped files are backend/app.js, backend/db.js, backend/index.js, backend/internal/2fa.js, backend/internal/access-list.js, backend/internal/audit-log.js (\u002B109 more)."},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"d00ee7953f55325a823d27e5db9657c80ca9b9861c0c0abf8fe487cd3fa586d3"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplication concentrated across 7 sibling directories (14 clone groups): 14 duplicated blocks under frontend/src/pages/ have copies in at least two of the sibling directories Access, AuditLog, Certificates, Logs, Nginx, Settings (\u002B1 more sibling(s) not listed) \u2014 12 of them are reported below, and 2 are counted here but not reported individually: those copies match on shape but no longer clear R10\u0027s bar for an individually reported row \u2014 either they kept neither their own names nor their values, or what was copied is too small to stand on its own (it reports near-exact duplication only, and only of substantial extent). What this row states is the concentration, which the detector measured over all 14 and which does not depend on how exactly each block\u0027s copies still match. That concentration is one structural fact, not 14 local ones: the siblings replicate behaviour none of them owns, which is the shape of a missing shared module \u2014 a common library every sibling imports \u2014 rather than 14 separate extractions. Check first whether the siblings are deliberately standalone deliverables (scaffold templates, demo apps that must stay copy-pasteable); where they are, the duplication is the design and the per-block rows are the ones to act on."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Nginx/ProxyHosts/Table.tsx"},"region":{"startLine":38}}}],"partialFingerprints":{"codehealthFindingId/v1":"17fb87cb22291c6dc5012efc9ac8f9d51d23a68c21348ea480ad74ff7a17c79c"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplication concentrated across 3 sibling directories (7 clone groups): 7 duplicated blocks under frontend/src/ have copies in at least two of the sibling directories components, modals, pages \u2014 5 of them are reported below, and 2 are counted here but not reported individually: those copies match on shape but no longer clear R10\u0027s bar for an individually reported row \u2014 either they kept neither their own names nor their values, or what was copied is too small to stand on its own (it reports near-exact duplication only, and only of substantial extent). What this row states is the concentration, which the detector measured over all 7 and which does not depend on how exactly each block\u0027s copies still match. That concentration is one structural fact, not 7 local ones: the siblings replicate behaviour none of them owns, which is the shape of a missing shared module \u2014 a common library every sibling imports \u2014 rather than 7 separate extractions. Check first whether the siblings are deliberately standalone deliverables (scaffold templates, demo apps that must stay copy-pasteable); where they are, the duplication is the design and the per-block rows are the ones to act on."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/modals/UserModal.tsx"},"region":{"startLine":145}}}],"partialFingerprints":{"codehealthFindingId/v1":"7169667b15c3deea404703daf459f84e4d0a55a1deee74346a92342f00d04d78"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block with local edits (267 matched lines \u00D7 2 locations): backend/internal/redirection-host.js:60 \u00B7 backend/internal/stream.js:42 \u2014 the two spans are one implementation copied and then locally edited \u2014 1598 tokens are still identical, in the same order in both files, with only local edits between them. The copies have already begun to drift, which is this row\u0027s finding: an edit made to one and not the other changes behaviour silently. Diff the two spans first to learn what genuinely differs, then extract the shared core into one module both sites use, passing the differences in as parameters \u2014 or, if one copy exists only because the other could not be imported from its context, make one of them the single source the other is generated or re-exported from. If one copy is no longer reachable, delete it rather than letting it shadow the live one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/redirection-host.js"},"region":{"startLine":60}}}],"partialFingerprints":{"codehealthFindingId/v1":"2f706b39703571e301086a840692f1ef2c6a86e85557dd4be5c2dc448b38ce62"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block with local edits (258 matched lines \u00D7 2 locations): backend/internal/proxy-host.js:22 \u00B7 backend/internal/redirection-host.js:22 \u2014 the two spans are one implementation copied and then locally edited \u2014 1545 tokens are still identical, in the same order in both files, with only local edits between them. The copies have already begun to drift, which is this row\u0027s finding: an edit made to one and not the other changes behaviour silently. Diff the two spans first to learn what genuinely differs, then extract the shared core into one module both sites use, passing the differences in as parameters \u2014 or, if one copy exists only because the other could not be imported from its context, make one of them the single source the other is generated or re-exported from. If one copy is no longer reachable, delete it rather than letting it shadow the live one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/proxy-host.js"},"region":{"startLine":22}}}],"partialFingerprints":{"codehealthFindingId/v1":"9fc10538906768524fc1159e675771526a04f43380bd32791c73b9db41288dbc"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (114 lines \u00D7 3 locations): frontend/src/pages/Nginx/DeadHosts/Table.tsx:53 \u00B7 frontend/src/pages/Nginx/RedirectionHosts/Table.tsx:74 \u00B7 frontend/src/pages/Nginx/Streams/Table.tsx:84 \u2014 the 3 copies are spread across 3 files, and the CITED SPAN is not a self-contained block \u2014 it runs from inside one construct into the next (the tail of a branch plus the head of the following one, a run of switch arms, the end of a declaration plus the list that follows it) rather than covering a whole unit. So do not lift these lines literally: no call can be substituted for a half-open construct. Extract the enclosing repeated UNIT instead \u2014 the whole function, component or branch these lines sit in \u2014 and where the repetition IS the construct (a run of switch arms, a stack of near-identical declarations) replace it with one table or registry looked up by key rather than a helper each arm calls. The copies still drift apart the first time only one of them is edited, which is why this is reported."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Nginx/DeadHosts/Table.tsx"},"region":{"startLine":53}}}],"partialFingerprints":{"codehealthFindingId/v1":"cb276e16c306ba27abf9f211340703f934ef1bc312a0d2df5b9995501327cabb"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block with local edits (100 matched lines \u00D7 2 locations): backend/internal/access-list.js:122 \u00B7 backend/internal/certificate.js:236 \u2014 the two spans are one implementation copied and then locally edited \u2014 688 tokens are still identical, in the same order in both files, with only local edits between them. The copies have already begun to drift, which is this row\u0027s finding: an edit made to one and not the other changes behaviour silently. Diff the two spans first to learn what genuinely differs, then extract the shared core into one module both sites use, passing the differences in as parameters \u2014 or, if one copy exists only because the other could not be imported from its context, make one of them the single source the other is generated or re-exported from. If one copy is no longer reachable, delete it rather than letting it shadow the live one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/access-list.js"},"region":{"startLine":122}}}],"partialFingerprints":{"codehealthFindingId/v1":"e598f765126113f2ede9b638db949b9708ce0274a8522ab0e0c3b7e186a95b02"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block with local edits (93 matched lines \u00D7 2 locations): frontend/src/components/Form/AccessField.tsx:14 \u00B7 frontend/src/components/Form/SSLCertificateField.tsx:13 \u2014 the two spans are one implementation copied and then locally edited \u2014 611 tokens are still identical, in the same order in both files, with only local edits between them. The copies have already begun to drift, which is this row\u0027s finding: an edit made to one and not the other changes behaviour silently. Diff the two spans first to learn what genuinely differs, then extract the shared core into one module both sites use, passing the differences in as parameters \u2014 or, if one copy exists only because the other could not be imported from its context, make one of them the single source the other is generated or re-exported from. If one copy is no longer reachable, delete it rather than letting it shadow the live one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/components/Form/AccessField.tsx"},"region":{"startLine":14}}}],"partialFingerprints":{"codehealthFindingId/v1":"9477aac88c16fd270b210848b058e8a83ec17dada0df48803895afd017e1bc60"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block with local edits (90 matched lines \u00D7 2 locations): frontend/src/modals/CustomCertificateModal.tsx:14 \u00B7 frontend/src/modals/DNSCertificateModal.tsx:12 \u2014 the two spans are one implementation copied and then locally edited \u2014 505 tokens are still identical, in the same order in both files, with only local edits between them. The copies have already begun to drift, which is this row\u0027s finding: an edit made to one and not the other changes behaviour silently. Diff the two spans first to learn what genuinely differs, then extract the shared core into one module both sites use, passing the differences in as parameters \u2014 or, if one copy exists only because the other could not be imported from its context, make one of them the single source the other is generated or re-exported from. If one copy is no longer reachable, delete it rather than letting it shadow the live one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/modals/CustomCertificateModal.tsx"},"region":{"startLine":14}}}],"partialFingerprints":{"codehealthFindingId/v1":"096097938bf476441bd0cbb0fef95251cc3fce5a70999333f4bb3c4b4f0aaece"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block with local edits (90 matched lines \u00D7 2 locations): frontend/src/modals/PermissionsModal.tsx:162 \u00B7 frontend/src/modals/UserModal.tsx:86 \u2014 the two spans are one implementation copied and then locally edited \u2014 412 tokens are still identical, in the same order in both files, with only local edits between them. The copies have already begun to drift, which is this row\u0027s finding: an edit made to one and not the other changes behaviour silently. Diff the two spans first to learn what genuinely differs, then extract the shared core into one module both sites use, passing the differences in as parameters \u2014 or, if one copy exists only because the other could not be imported from its context, make one of them the single source the other is generated or re-exported from. If one copy is no longer reachable, delete it rather than letting it shadow the live one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/modals/PermissionsModal.tsx"},"region":{"startLine":162}}}],"partialFingerprints":{"codehealthFindingId/v1":"6b60f0a9b086ee8d3a92e4c2d43cf9d683bbd2d92a9ebaa90dce239a0cc55fde"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block with local edits (90 matched lines \u00D7 2 locations): frontend/src/pages/Nginx/ProxyHosts/Table.tsx:38 \u00B7 frontend/src/pages/Users/Table.tsx:50 \u2014 the two spans are one implementation copied and then locally edited \u2014 547 tokens are still identical, in the same order in both files, with only local edits between them. The copies have already begun to drift, which is this row\u0027s finding: an edit made to one and not the other changes behaviour silently. Diff the two spans first to learn what genuinely differs, then extract the shared core into one module both sites use, passing the differences in as parameters \u2014 or, if one copy exists only because the other could not be imported from its context, make one of them the single source the other is generated or re-exported from. If one copy is no longer reachable, delete it rather than letting it shadow the live one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Nginx/ProxyHosts/Table.tsx"},"region":{"startLine":38}}}],"partialFingerprints":{"codehealthFindingId/v1":"7779eb6684ac1f4c18012d5539840a44fc5fbee507a2c21d1a71ab7461e4ecc4"}},{"ruleId":"R10","level":"warning","message":{"text":"Wholesale file copy (89 identical lines \u00D7 3 files): backend/routes/nginx/dead_hosts.js:1 \u00B7 backend/routes/nginx/redirection_hosts.js:1 \u00B7 backend/routes/nginx/streams.js:1 \u2014 these 3 files are line-for-line copies of one another \u2014 89 lines are identical, in the same order, in every one of them \u2014 so this is one fact about the file set, not a block to extract. An edit made to one file and not the others changes behaviour silently, which is the failure a wholesale copy guarantees. Pick one file as the single source and derive the others from it (re-export it, spread it into the local overrides each variant genuinely needs, or generate the copies at build time) \u2014 the few lines that differ between the files are exactly the part each variant should still own. Check first whether the copies are deliberately standalone deliverables (a translation file seeded from its sibling and waiting to be translated); where they are, the duplication is the design, and the honest move is to mark the seeded file as untranslated rather than to let it pass as done."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/routes/nginx/dead_hosts.js"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"5b1368d8af27512249d515a2c692d2955a6f0768bc4196d517d8a19965145850"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block with local edits (84 matched lines \u00D7 2 locations): frontend/src/modals/ChangePasswordModal.tsx:34 \u00B7 frontend/src/modals/SetPasswordModal.tsx:28 \u2014 the two spans are one implementation copied and then locally edited \u2014 448 tokens are still identical, in the same order in both files, with only local edits between them. The copies have already begun to drift, which is this row\u0027s finding: an edit made to one and not the other changes behaviour silently. Diff the two spans first to learn what genuinely differs, then extract the shared core into one module both sites use, passing the differences in as parameters \u2014 or, if one copy exists only because the other could not be imported from its context, make one of them the single source the other is generated or re-exported from. If one copy is no longer reachable, delete it rather than letting it shadow the live one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/modals/ChangePasswordModal.tsx"},"region":{"startLine":34}}}],"partialFingerprints":{"codehealthFindingId/v1":"d8fa929d75b7e238710f52474a4b2404ddbe71619e535578f783e7c75ddc3674"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block with local edits (61 matched lines \u00D7 2 locations): backend/internal/certificate.js:279 \u00B7 backend/internal/dead-host.js:177 \u2014 the two spans are one implementation copied and then locally edited \u2014 439 tokens are still identical, in the same order in both files, with only local edits between them. The copies have already begun to drift, which is this row\u0027s finding: an edit made to one and not the other changes behaviour silently. Diff the two spans first to learn what genuinely differs, then extract the shared core into one module both sites use, passing the differences in as parameters \u2014 or, if one copy exists only because the other could not be imported from its context, make one of them the single source the other is generated or re-exported from. If one copy is no longer reachable, delete it rather than letting it shadow the live one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/certificate.js"},"region":{"startLine":279}}}],"partialFingerprints":{"codehealthFindingId/v1":"3da915279bd1e5d0ea844ec1f5aa7755889b430d2f4ac961b92a3f8de51f68d4"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block with local edits (61 matched lines \u00D7 2 locations): backend/internal/dead-host.js:261 \u00B7 backend/internal/proxy-host.js:330 \u2014 the two spans are one implementation copied and then locally edited \u2014 460 tokens are still identical, in the same order in both files, with only local edits between them. The copies have already begun to drift, which is this row\u0027s finding: an edit made to one and not the other changes behaviour silently. Diff the two spans first to learn what genuinely differs, then extract the shared core into one module both sites use, passing the differences in as parameters \u2014 or, if one copy exists only because the other could not be imported from its context, make one of them the single source the other is generated or re-exported from. If one copy is no longer reachable, delete it rather than letting it shadow the live one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/dead-host.js"},"region":{"startLine":261}}}],"partialFingerprints":{"codehealthFindingId/v1":"1adbba8baa11743b8cf9f84f8b41162fa08c55eb7886a2ac5d9bc2735233380e"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (55 lines \u00D7 2 locations): frontend/src/modals/DeadHostModal.tsx:19 \u00B7 frontend/src/modals/StreamModal.tsx:12 \u2014 the 2 copies are spread across 2 files, and the SHAPE of this repetition could not be determined. It is not a run of declarations, a listing, a declaration header, a type body or a slice through a construct \u2014 and it was not measured as a run of executable statements either, so this row cannot tell you whether a function can stand where these lines are. Read the two spans before acting, because the move is opposite in the two cases. Where they are statements, the ordinary answer holds: give the shared part one home and call it from each site. Where they turn out to be declarations, a literal\u0027s entries, or the cases of an enumeration, there is no call site to call anything from, and collapsing them would delete what each copy pins \u2014 a shared base type, a generated set, or one exported constant each site refers to is the move instead, and sometimes the honest answer is that there is nothing to extract at all. Reported because the copies drift apart the first time only one of them is edited, which is true whichever of those they are."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/modals/DeadHostModal.tsx"},"region":{"startLine":19}}}],"partialFingerprints":{"codehealthFindingId/v1":"0f47e8a5acd00a0eac09621537cbe246b2666786c2135073a72eca68ecf679c2"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (53 lines \u00D7 3 locations): frontend/src/pages/Nginx/DeadHosts/TableWrapper.tsx:57 \u00B7 frontend/src/pages/Nginx/RedirectionHosts/TableWrapper.tsx:60 \u00B7 frontend/src/pages/Nginx/Streams/TableWrapper.tsx:62 \u2014 the 3 copies are spread across 3 files, and the SHAPE of this repetition could not be determined. It is not a run of declarations, a listing, a declaration header, a type body or a slice through a construct \u2014 and it was not measured as a run of executable statements either, so this row cannot tell you whether a function can stand where these lines are. Read the two spans before acting, because the move is opposite in the two cases. Where they are statements, the ordinary answer holds: give the shared part one home and call it from each site. Where they turn out to be declarations, a literal\u0027s entries, or the cases of an enumeration, there is no call site to call anything from, and collapsing them would delete what each copy pins \u2014 a shared base type, a generated set, or one exported constant each site refers to is the move instead, and sometimes the honest answer is that there is nothing to extract at all. Reported because the copies drift apart the first time only one of them is edited, which is true whichever of those they are."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Nginx/DeadHosts/TableWrapper.tsx"},"region":{"startLine":57}}}],"partialFingerprints":{"codehealthFindingId/v1":"ede43b3cc661de8c942f9535737a7312533e5d807cace3681d1a37f882f414fa"}},{"ruleId":"R10","level":"warning","message":{"text":"Wholesale file copy (50 identical lines \u00D7 2 files): backend/models/dead_host.js:4 \u00B7 backend/models/redirection_host.js:4 \u2014 these 2 files are line-for-line copies of one another \u2014 50 lines are identical, in the same order, in every one of them \u2014 so this is one fact about the file set, not a block to extract. An edit made to one file and not the others changes behaviour silently, which is the failure a wholesale copy guarantees. Pick one file as the single source and derive the others from it (re-export it, spread it into the local overrides each variant genuinely needs, or generate the copies at build time) \u2014 the few lines that differ between the files are exactly the part each variant should still own. Check first whether the copies are deliberately standalone deliverables (a translation file seeded from its sibling and waiting to be translated); where they are, the duplication is the design, and the honest move is to mark the seeded file as untranslated rather than to let it pass as done."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/models/dead_host.js"},"region":{"startLine":4}}}],"partialFingerprints":{"codehealthFindingId/v1":"12f7f9de63c2ab68f2f4cb68082d846ca720a86a67fcb74fc410fb0eb4319587"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (46 lines \u00D7 2 locations): frontend/src/pages/Certificates/Table.tsx:96 \u00B7 frontend/src/pages/Nginx/ProxyHosts/Table.tsx:99 \u2014 the 2 copies are spread across 2 files, and the CITED SPAN is not a self-contained block \u2014 it runs from inside one construct into the next (the tail of a branch plus the head of the following one, a run of switch arms, the end of a declaration plus the list that follows it) rather than covering a whole unit. So do not lift these lines literally: no call can be substituted for a half-open construct. Extract the enclosing repeated UNIT instead \u2014 the whole function, component or branch these lines sit in \u2014 and where the repetition IS the construct (a run of switch arms, a stack of near-identical declarations) replace it with one table or registry looked up by key rather than a helper each arm calls. The copies still drift apart the first time only one of them is edited, which is why this is reported."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Certificates/Table.tsx"},"region":{"startLine":96}}}],"partialFingerprints":{"codehealthFindingId/v1":"fbff156baa079d134d080d254cc1faf897d9e17de3b51199b979d143813876e4"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (45 lines \u00D7 4 locations): backend/routes/nginx/access_lists.js:94 \u00B7 backend/routes/nginx/dead_hosts.js:94 \u00B7 backend/routes/nginx/proxy_hosts.js:95 \u00B7 backend/routes/nginx/streams.js:94 \u2014 the 4 copies sit in sibling files in one directory, so check first whether one of them (or an existing module there) already owns this behaviour and the others should call it; otherwise extract it into one module in that directory and have each site call it. There is one copy in each of 4 separate files rather than several in one place, so check first whether these are sibling modules that each declare their own version of one shape \u2014 one per entity, per provider, per language. Where they are, no single extracted module collapses them: each module still has to be written, and what recurs is the TEMPLATE. The moves that do collapse a template are to generate these modules from the set they enumerate, or to replace the repeated construction with one factory each site calls with its own values \u2014 and where the set is the point, each module pinning one distinct thing, the repetition IS the enumeration and there is nothing to delete."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/routes/nginx/access_lists.js"},"region":{"startLine":94}}}],"partialFingerprints":{"codehealthFindingId/v1":"62e771204ca2ac1be85ed48b6d249b55e4997bbf7dfc343690761ce4d531cc3e"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (44 lines \u00D7 5 locations): backend/routes/nginx/access_lists.js:9 \u00B7 backend/routes/nginx/dead_hosts.js:9 \u00B7 backend/routes/nginx/proxy_hosts.js:10 \u00B7 backend/routes/nginx/redirection_hosts.js:9 \u00B7 \u002B1 more site(s) not listed \u2014 the 5 copies sit in sibling files in one directory, so check first whether one of them (or an existing module there) already owns this behaviour and the others should call it; otherwise extract it into one module in that directory and have each site call it. There is one copy in each of 5 separate files rather than several in one place, so check first whether these are sibling modules that each declare their own version of one shape \u2014 one per entity, per provider, per language. Where they are, no single extracted module collapses them: each module still has to be written, and what recurs is the TEMPLATE. The moves that do collapse a template are to generate these modules from the set they enumerate, or to replace the repeated construction with one factory each site calls with its own values \u2014 and where the set is the point, each module pinning one distinct thing, the repetition IS the enumeration and there is nothing to delete."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/routes/nginx/access_lists.js"},"region":{"startLine":9}}}],"partialFingerprints":{"codehealthFindingId/v1":"6cc208d6d54452610caf3df31d44d9d7482e718aebfa2c5b391d0fcc0440ac41"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block with local edits (44 matched lines \u00D7 2 locations): frontend/src/components/Form/AccessClientFields.tsx:38 \u00B7 frontend/src/components/Form/BasicAuthFields.tsx:35 \u2014 the two spans are one implementation copied and then locally edited \u2014 252 tokens are still identical, in the same order in both files, with only local edits between them. The copies have already begun to drift, which is this row\u0027s finding: an edit made to one and not the other changes behaviour silently. Diff the two spans first to learn what genuinely differs, then extract the shared core into one module both sites use, passing the differences in as parameters \u2014 or, if one copy exists only because the other could not be imported from its context, make one of them the single source the other is generated or re-exported from. If one copy is no longer reachable, delete it rather than letting it shadow the live one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/components/Form/AccessClientFields.tsx"},"region":{"startLine":38}}}],"partialFingerprints":{"codehealthFindingId/v1":"2698e35d6abb0ddd0b131702c9645c2f0b65aeefa95147a0fb5c25acb7f83f2b"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (43 lines \u00D7 3 locations): frontend/src/modals/TwoFactorModal.tsx:172 \u00B7 frontend/src/modals/TwoFactorModal.tsx:242 \u00B7 frontend/src/modals/TwoFactorModal.tsx:290 \u2014 all 3 copies are in the same file, and the SHAPE of this repetition could not be determined. It is not a run of declarations, a listing, a declaration header, a type body or a slice through a construct \u2014 and it was not measured as a run of executable statements either, so this row cannot tell you whether a function can stand where these lines are. Read the two spans before acting, because the move is opposite in the two cases. Where they are statements, the ordinary answer holds: give the shared part one home and call it from each site. Where they turn out to be declarations, a literal\u0027s entries, or the cases of an enumeration, there is no call site to call anything from, and collapsing them would delete what each copy pins \u2014 a shared base type, a generated set, or one exported constant each site refers to is the move instead, and sometimes the honest answer is that there is nothing to extract at all. Reported because the copies drift apart the first time only one of them is edited, which is true whichever of those they are."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/modals/TwoFactorModal.tsx"},"region":{"startLine":172}}}],"partialFingerprints":{"codehealthFindingId/v1":"379369cf7f1be09e95ebfa481a95a2c1c0810241ff89dc99a960fd6b831f3104"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (43 lines \u00D7 4 locations): frontend/src/pages/Access/TableWrapper.tsx:48 \u00B7 frontend/src/pages/Nginx/DeadHosts/TableWrapper.tsx:57 \u00B7 frontend/src/pages/Nginx/RedirectionHosts/TableWrapper.tsx:60 \u00B7 frontend/src/pages/Nginx/Streams/TableWrapper.tsx:62 \u2014 the 4 copies are spread across 4 files, and the SHAPE of this repetition could not be determined. It is not a run of declarations, a listing, a declaration header, a type body or a slice through a construct \u2014 and it was not measured as a run of executable statements either, so this row cannot tell you whether a function can stand where these lines are. Read the two spans before acting, because the move is opposite in the two cases. Where they are statements, the ordinary answer holds: give the shared part one home and call it from each site. Where they turn out to be declarations, a literal\u0027s entries, or the cases of an enumeration, there is no call site to call anything from, and collapsing them would delete what each copy pins \u2014 a shared base type, a generated set, or one exported constant each site refers to is the move instead, and sometimes the honest answer is that there is nothing to extract at all. Reported because the copies drift apart the first time only one of them is edited, which is true whichever of those they are."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Access/TableWrapper.tsx"},"region":{"startLine":48}}}],"partialFingerprints":{"codehealthFindingId/v1":"ca813a22e921946b38a18d4fdfaa025b23cbd96569b3205a96fde9aac8c00910"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (42 lines \u00D7 2 locations): frontend/src/hooks/useDeadHost.ts:15 \u00B7 frontend/src/hooks/useRedirectionHost.ts:25 \u2014 the 2 copies are spread across 2 files, and the CITED SPAN is not a self-contained block \u2014 it runs from inside one construct into the next (the tail of a branch plus the head of the following one, a run of switch arms, the end of a declaration plus the list that follows it) rather than covering a whole unit. So do not lift these lines literally: no call can be substituted for a half-open construct. Extract the enclosing repeated UNIT instead \u2014 the whole function, component or branch these lines sit in \u2014 and where the repetition IS the construct (a run of switch arms, a stack of near-identical declarations) replace it with one table or registry looked up by key rather than a helper each arm calls. The copies still drift apart the first time only one of them is edited, which is why this is reported."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/hooks/useDeadHost.ts"},"region":{"startLine":15}}}],"partialFingerprints":{"codehealthFindingId/v1":"1952e50287d423245a6485965787f8c5dc71c1494dfec801c89363bb687681aa"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (38 lines \u00D7 2 locations): frontend/src/pages/Certificates/Table.tsx:180 \u00B7 frontend/src/pages/Certificates/TableWrapper.tsx:97 \u2014 the 2 copies are spread across 2 files, and the SHAPE of this repetition could not be determined. It is not a run of declarations, a listing, a declaration header, a type body or a slice through a construct \u2014 and it was not measured as a run of executable statements either, so this row cannot tell you whether a function can stand where these lines are. Read the two spans before acting, because the move is opposite in the two cases. Where they are statements, the ordinary answer holds: give the shared part one home and call it from each site. Where they turn out to be declarations, a literal\u0027s entries, or the cases of an enumeration, there is no call site to call anything from, and collapsing them would delete what each copy pins \u2014 a shared base type, a generated set, or one exported constant each site refers to is the move instead, and sometimes the honest answer is that there is nothing to extract at all. Reported because the copies drift apart the first time only one of them is edited, which is true whichever of those they are."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Certificates/Table.tsx"},"region":{"startLine":180}}}],"partialFingerprints":{"codehealthFindingId/v1":"601071030a48f0bbd2d891a9b8d80ef60111bd7287aa731d62a3f7914892b476"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (37 lines \u00D7 3 locations): backend/internal/proxy-host.js:275 \u00B7 backend/internal/redirection-host.js:273 \u00B7 backend/internal/stream.js:222 \u2014 the 3 copies sit in sibling files in one directory, so check first whether one of them (or an existing module there) already owns this behaviour and the others should call it; otherwise extract it into one module in that directory and have each site call it. There is one copy in each of 3 separate files rather than several in one place, so check first whether these are sibling modules that each declare their own version of one shape \u2014 one per entity, per provider, per language. Where they are, no single extracted module collapses them: each module still has to be written, and what recurs is the TEMPLATE. The moves that do collapse a template are to generate these modules from the set they enumerate, or to replace the repeated construction with one factory each site calls with its own values \u2014 and where the set is the point, each module pinning one distinct thing, the repetition IS the enumeration and there is nothing to delete."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/proxy-host.js"},"region":{"startLine":275}}}],"partialFingerprints":{"codehealthFindingId/v1":"cd7440e3d76a4159258d61a4a382bc8f3876fe0eacef589edc9c750ce9f1166c"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (37 lines \u00D7 2 locations): backend/models/proxy_host.js:17 \u00B7 backend/models/redirection_host.js:14 \u2014 the 2 copies are spread across 2 files, and the CITED SPAN is not a self-contained block \u2014 it runs from inside one construct into the next (the tail of a branch plus the head of the following one, a run of switch arms, the end of a declaration plus the list that follows it) rather than covering a whole unit. So do not lift these lines literally: no call can be substituted for a half-open construct. Extract the enclosing repeated UNIT instead \u2014 the whole function, component or branch these lines sit in \u2014 and where the repetition IS the construct (a run of switch arms, a stack of near-identical declarations) replace it with one table or registry looked up by key rather than a helper each arm calls. The copies still drift apart the first time only one of them is edited, which is why this is reported."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/models/proxy_host.js"},"region":{"startLine":17}}}],"partialFingerprints":{"codehealthFindingId/v1":"f01d6dc28522c673a0577cf3e562388266d710e64aeb1a48e04901d79006864e"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (37 lines \u00D7 2 locations): frontend/src/modals/DeadHostModal.tsx:136 \u00B7 frontend/src/modals/RedirectionHostModal.tsx:313 \u2014 the 2 copies are spread across 2 files, and the CITED SPAN is a run of DECLARATIONS inside a construct \u2014 the members of a type, or the entries of an object or array literal \u2014 with no statement anywhere in it. Do not read this as an extract-a-helper row: nothing here executes, so there is no call site, and a call expression cannot stand where a member declaration or a literal\u0027s entry was. What repeats is a SHAPE, and which shape decides the move. Where the copies declare the same members, the repetition is a missing common ancestor: give it a base type, an interface both extend, a generic instantiated twice, or \u2014 where the copies are a literal\u0027s entries rather than a type\u0027s members \u2014 one shared constant each site spreads or refers to, so the set is written once. Where they declare DIFFERENT members and only the form is shared \u2014 a decorator and its options, an annotation, a registration table\u0027s keys \u2014 the form is prescribed by a framework or a schema rather than copied, and the only collapse available is to generate the declarations from that schema; where you do not own the generator, this is the cost of the framework and there is nothing to extract. Check which of the two it is before acting: these copies still drift apart the first time only one of them is edited, which is why the repetition is reported, but the sentence to act on is not the same in both cases."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/modals/DeadHostModal.tsx"},"region":{"startLine":136}}}],"partialFingerprints":{"codehealthFindingId/v1":"7e5c700882c146c3ffc396e7be4977a8740f93843b08304352b28599e5c4f07b"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (36 lines \u00D7 6 locations): frontend/src/pages/Access/Table.tsx:58 \u00B7 frontend/src/pages/Certificates/Table.tsx:97 \u00B7 frontend/src/pages/Nginx/DeadHosts/Table.tsx:68 \u00B7 frontend/src/pages/Nginx/ProxyHosts/Table.tsx:100 \u00B7 \u002B2 more site(s) not listed \u2014 the 6 copies are spread across 6 files, and the CITED SPAN is not a self-contained block \u2014 it runs from inside one construct into the next (the tail of a branch plus the head of the following one, a run of switch arms, the end of a declaration plus the list that follows it) rather than covering a whole unit. So do not lift these lines literally: no call can be substituted for a half-open construct. Extract the enclosing repeated UNIT instead \u2014 the whole function, component or branch these lines sit in \u2014 and where the repetition IS the construct (a run of switch arms, a stack of near-identical declarations) replace it with one table or registry looked up by key rather than a helper each arm calls. The copies still drift apart the first time only one of them is edited, which is why this is reported."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Access/Table.tsx"},"region":{"startLine":58}}}],"partialFingerprints":{"codehealthFindingId/v1":"6efd8eca821bcc00c58538009ffd538ddb9511ba63bcd579483f2ccc377f2d43"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (34 lines \u00D7 2 locations): frontend/src/modals/ProxyHostModal.tsx:25 \u00B7 frontend/src/modals/StreamModal.tsx:12 \u2014 the 2 copies sit in sibling files in one directory, so check first whether one of them (or an existing module there) already owns this behaviour and the others should call it; otherwise extract it into one module in that directory and have each site call it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/modals/ProxyHostModal.tsx"},"region":{"startLine":25}}}],"partialFingerprints":{"codehealthFindingId/v1":"4bf23d2e6c1aae9ccf02ff54c5d903714f49cc8114fceec9f7343776970b4243"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (29 lines \u00D7 3 locations): backend/models/dead_host.js:13 \u00B7 backend/models/proxy_host.js:25 \u00B7 backend/models/redirection_host.js:22 \u2014 the 3 copies are spread across 3 files, and the CITED SPAN is not a self-contained block \u2014 it runs from inside one construct into the next (the tail of a branch plus the head of the following one, a run of switch arms, the end of a declaration plus the list that follows it) rather than covering a whole unit. So do not lift these lines literally: no call can be substituted for a half-open construct. Extract the enclosing repeated UNIT instead \u2014 the whole function, component or branch these lines sit in \u2014 and where the repetition IS the construct (a run of switch arms, a stack of near-identical declarations) replace it with one table or registry looked up by key rather than a helper each arm calls. The copies still drift apart the first time only one of them is edited, which is why this is reported."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/models/dead_host.js"},"region":{"startLine":13}}}],"partialFingerprints":{"codehealthFindingId/v1":"6a433fcc365859f2628ddac053e5f106ccd29dda228a5cb02ae8d0378e13d319"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (28 lines \u00D7 2 locations): frontend/src/modals/StreamModal.tsx:222 \u00B7 frontend/src/modals/StreamModal.tsx:256 \u2014 all 2 copies are in the same file, and the SHAPE of this repetition could not be determined. It is not a run of declarations, a listing, a declaration header, a type body or a slice through a construct \u2014 and it was not measured as a run of executable statements either, so this row cannot tell you whether a function can stand where these lines are. Read the two spans before acting, because the move is opposite in the two cases. Where they are statements, the ordinary answer holds: give the shared part one home and call it from each site. Where they turn out to be declarations, a literal\u0027s entries, or the cases of an enumeration, there is no call site to call anything from, and collapsing them would delete what each copy pins \u2014 a shared base type, a generated set, or one exported constant each site refers to is the move instead, and sometimes the honest answer is that there is nothing to extract at all. Reported because the copies drift apart the first time only one of them is edited, which is true whichever of those they are."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/modals/StreamModal.tsx"},"region":{"startLine":222}}}],"partialFingerprints":{"codehealthFindingId/v1":"f7adae36e5a6684eb9fa4e9282a1308ac144aea3612b37448ed8c738cfc080e6"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (27 lines \u00D7 3 locations): backend/internal/proxy-host.js:217 \u00B7 backend/internal/redirection-host.js:212 \u00B7 backend/internal/stream.js:163 \u2014 the 3 copies are spread across 3 files, and the CITED SPAN is not a self-contained block \u2014 it runs from inside one construct into the next (the tail of a branch plus the head of the following one, a run of switch arms, the end of a declaration plus the list that follows it) rather than covering a whole unit. So do not lift these lines literally: no call can be substituted for a half-open construct. Extract the enclosing repeated UNIT instead \u2014 the whole function, component or branch these lines sit in \u2014 and where the repetition IS the construct (a run of switch arms, a stack of near-identical declarations) replace it with one table or registry looked up by key rather than a helper each arm calls. The copies still drift apart the first time only one of them is edited, which is why this is reported."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/proxy-host.js"},"region":{"startLine":217}}}],"partialFingerprints":{"codehealthFindingId/v1":"9fa11289b31aadc7d7707932072485dfe467e01712cf1d912226db3dd3bca26f"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (27 lines \u00D7 3 locations): backend/routes/nginx/dead_hosts.js:90 \u00B7 backend/routes/nginx/proxy_hosts.js:91 \u00B7 backend/routes/nginx/redirection_hosts.js:90 \u2014 the 3 copies are spread across 3 files, and the CITED SPAN is not a self-contained block \u2014 it runs from inside one construct into the next (the tail of a branch plus the head of the following one, a run of switch arms, the end of a declaration plus the list that follows it) rather than covering a whole unit. So do not lift these lines literally: no call can be substituted for a half-open construct. Extract the enclosing repeated UNIT instead \u2014 the whole function, component or branch these lines sit in \u2014 and where the repetition IS the construct (a run of switch arms, a stack of near-identical declarations) replace it with one table or registry looked up by key rather than a helper each arm calls. The copies still drift apart the first time only one of them is edited, which is why this is reported."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/routes/nginx/dead_hosts.js"},"region":{"startLine":90}}}],"partialFingerprints":{"codehealthFindingId/v1":"ddab7024ae52ef54ff04f09c89bc0852bd76007deaa996c970743cc488e95edb"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (27 lines \u00D7 2 locations): frontend/src/pages/Nginx/RedirectionHosts/TableWrapper.tsx:27 \u00B7 frontend/src/pages/Users/TableWrapper.tsx:39 \u2014 the 2 copies are spread across 2 directories, so the shared home is a decision rather than an obvious spot: check first whether one of them already owns this behaviour, and otherwise put the extracted module somewhere all of the sites already reach rather than making one of them depend on another."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Nginx/RedirectionHosts/TableWrapper.tsx"},"region":{"startLine":27}}}],"partialFingerprints":{"codehealthFindingId/v1":"b9884a5dea8af401bd54efa847efc09e335c1d6b32cd3f87e73af30f4a747f4d"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (26 lines \u00D7 8 locations): backend/routes/audit-log.js:28 \u00B7 backend/routes/nginx/access_lists.js:30 \u00B7 backend/routes/nginx/certificates.js:32 \u00B7 backend/routes/nginx/dead_hosts.js:30 \u00B7 \u002B4 more site(s) not listed \u2014 the 8 copies are spread across 8 files, and the SHAPE of this repetition could not be determined. It is not a run of declarations, a listing, a declaration header, a type body or a slice through a construct \u2014 and it was not measured as a run of executable statements either, so this row cannot tell you whether a function can stand where these lines are. Read the two spans before acting, because the move is opposite in the two cases. Where they are statements, the ordinary answer holds: give the shared part one home and call it from each site. Where they turn out to be declarations, a literal\u0027s entries, or the cases of an enumeration, there is no call site to call anything from, and collapsing them would delete what each copy pins \u2014 a shared base type, a generated set, or one exported constant each site refers to is the move instead, and sometimes the honest answer is that there is nothing to extract at all. Reported because the copies drift apart the first time only one of them is edited, which is true whichever of those they are."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/routes/audit-log.js"},"region":{"startLine":28}}}],"partialFingerprints":{"codehealthFindingId/v1":"f77c035b70c827c92af01cac2ab7925abbdcf78cbba7ba757d852e8d433bff14"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (25 lines \u00D7 5 locations): frontend/src/hooks/useAccessList.ts:29 \u00B7 frontend/src/hooks/useDeadHost.ts:28 \u00B7 frontend/src/hooks/useProxyHost.ts:36 \u00B7 frontend/src/hooks/useStream.ts:24 \u00B7 \u002B1 more site(s) not listed \u2014 the 5 copies are spread across 5 files, and the CITED SPAN is not a self-contained block \u2014 it runs from inside one construct into the next (the tail of a branch plus the head of the following one, a run of switch arms, the end of a declaration plus the list that follows it) rather than covering a whole unit. So do not lift these lines literally: no call can be substituted for a half-open construct. Extract the enclosing repeated UNIT instead \u2014 the whole function, component or branch these lines sit in \u2014 and where the repetition IS the construct (a run of switch arms, a stack of near-identical declarations) replace it with one table or registry looked up by key rather than a helper each arm calls. The copies still drift apart the first time only one of them is edited, which is why this is reported."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/hooks/useAccessList.ts"},"region":{"startLine":29}}}],"partialFingerprints":{"codehealthFindingId/v1":"e4fbca4d9d61b833770062a6592ac6f08a45a469e8881c68f6e73eda2ef3bbb1"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (25 lines \u00D7 2 locations): frontend/src/pages/Access/Table.tsx:11 \u00B7 frontend/src/pages/Certificates/Table.tsx:19 \u2014 the 2 copies are spread across 2 files, and the SHAPE of this repetition could not be determined. It is not a run of declarations, a listing, a declaration header, a type body or a slice through a construct \u2014 and it was not measured as a run of executable statements either, so this row cannot tell you whether a function can stand where these lines are. Read the two spans before acting, because the move is opposite in the two cases. Where they are statements, the ordinary answer holds: give the shared part one home and call it from each site. Where they turn out to be declarations, a literal\u0027s entries, or the cases of an enumeration, there is no call site to call anything from, and collapsing them would delete what each copy pins \u2014 a shared base type, a generated set, or one exported constant each site refers to is the move instead, and sometimes the honest answer is that there is nothing to extract at all. Reported because the copies drift apart the first time only one of them is edited, which is true whichever of those they are."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Access/Table.tsx"},"region":{"startLine":11}}}],"partialFingerprints":{"codehealthFindingId/v1":"33a66b8e6aee02f0aff05352dc583eb32edcfeb981502e23d9cf93a189681c7a"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (24 lines \u00D7 2 locations): frontend/src/components/Form/AccessClientFields.tsx:8 \u00B7 frontend/src/components/Form/BasicAuthFields.tsx:7 \u2014 the 2 copies sit in sibling files in one directory, so check first whether one of them (or an existing module there) already owns this behaviour and the others should call it; otherwise extract it into one module in that directory and have each site call it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/components/Form/AccessClientFields.tsx"},"region":{"startLine":8}}}],"partialFingerprints":{"codehealthFindingId/v1":"9ec2ff4b56f4c581b1ea313ad498b4d4ff67007d6452d7c50dd98813fe153c60"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (22 lines \u00D7 2 locations): frontend/src/modals/AccessListModal.tsx:203 \u00B7 frontend/src/modals/AccessListModal.tsx:235 \u2014 all 2 copies are in the same file, and the SHAPE of this repetition could not be determined. It is not a run of declarations, a listing, a declaration header, a type body or a slice through a construct \u2014 and it was not measured as a run of executable statements either, so this row cannot tell you whether a function can stand where these lines are. Read the two spans before acting, because the move is opposite in the two cases. Where they are statements, the ordinary answer holds: give the shared part one home and call it from each site. Where they turn out to be declarations, a literal\u0027s entries, or the cases of an enumeration, there is no call site to call anything from, and collapsing them would delete what each copy pins \u2014 a shared base type, a generated set, or one exported constant each site refers to is the move instead, and sometimes the honest answer is that there is nothing to extract at all. Reported because the copies drift apart the first time only one of them is edited, which is true whichever of those they are."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/modals/AccessListModal.tsx"},"region":{"startLine":203}}}],"partialFingerprints":{"codehealthFindingId/v1":"dc923d62b4db0564a58321900a8c53d595997168e019263deac8667fb6dd6518"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (22 lines \u00D7 2 locations): frontend/src/modals/DNSCertificateModal.tsx:66 \u00B7 frontend/src/modals/HTTPCertificateModal.tsx:147 \u2014 the 2 copies are spread across 2 files, and the CITED SPAN is a run of DECLARATIONS inside a construct \u2014 the members of a type, or the entries of an object or array literal \u2014 with no statement anywhere in it. Do not read this as an extract-a-helper row: nothing here executes, so there is no call site, and a call expression cannot stand where a member declaration or a literal\u0027s entry was. What repeats is a SHAPE, and which shape decides the move. Where the copies declare the same members, the repetition is a missing common ancestor: give it a base type, an interface both extend, a generic instantiated twice, or \u2014 where the copies are a literal\u0027s entries rather than a type\u0027s members \u2014 one shared constant each site spreads or refers to, so the set is written once. Where they declare DIFFERENT members and only the form is shared \u2014 a decorator and its options, an annotation, a registration table\u0027s keys \u2014 the form is prescribed by a framework or a schema rather than copied, and the only collapse available is to generate the declarations from that schema; where you do not own the generator, this is the cost of the framework and there is nothing to extract. Check which of the two it is before acting: these copies still drift apart the first time only one of them is edited, which is why the repetition is reported, but the sentence to act on is not the same in both cases."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/modals/DNSCertificateModal.tsx"},"region":{"startLine":66}}}],"partialFingerprints":{"codehealthFindingId/v1":"d01eadf06756cd6cf1e4e86e2e97c1b3f517b68eedebb91fb1a1f967478fe91c"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (22 lines \u00D7 2 locations): frontend/src/modals/ProxyHostModal.tsx:235 \u00B7 frontend/src/modals/StreamModal.tsx:189 \u2014 the 2 copies are spread across 2 files, and the CITED SPAN is a run of DECLARATIONS inside a construct \u2014 the members of a type, or the entries of an object or array literal \u2014 with no statement anywhere in it. Do not read this as an extract-a-helper row: nothing here executes, so there is no call site, and a call expression cannot stand where a member declaration or a literal\u0027s entry was. What repeats is a SHAPE, and which shape decides the move. Where the copies declare the same members, the repetition is a missing common ancestor: give it a base type, an interface both extend, a generic instantiated twice, or \u2014 where the copies are a literal\u0027s entries rather than a type\u0027s members \u2014 one shared constant each site spreads or refers to, so the set is written once. Where they declare DIFFERENT members and only the form is shared \u2014 a decorator and its options, an annotation, a registration table\u0027s keys \u2014 the form is prescribed by a framework or a schema rather than copied, and the only collapse available is to generate the declarations from that schema; where you do not own the generator, this is the cost of the framework and there is nothing to extract. Check which of the two it is before acting: these copies still drift apart the first time only one of them is edited, which is why the repetition is reported, but the sentence to act on is not the same in both cases."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/modals/ProxyHostModal.tsx"},"region":{"startLine":235}}}],"partialFingerprints":{"codehealthFindingId/v1":"6d4acee52b313c8b9620c4f5de1d6d8048cf7b2939085131c5ba755dd1d76783"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (21 lines \u00D7 5 locations): backend/migrations/20201014143841_pass_auth.js:3 \u00B7 backend/migrations/20210210154702_redirection_scheme.js:3 \u00B7 backend/migrations/20210210154703_redirection_status_code.js:3 \u00B7 backend/migrations/20240427161436_stream_ssl.js:3 \u00B7 \u002B1 more site(s) not listed \u2014 the 5 copies sit in sibling files in one directory, so check first whether one of them (or an existing module there) already owns this behaviour and the others should call it; otherwise extract it into one module in that directory and have each site call it. There is one copy in each of 5 separate files rather than several in one place, so check first whether these are sibling modules that each declare their own version of one shape \u2014 one per entity, per provider, per language. Where they are, no single extracted module collapses them: each module still has to be written, and what recurs is the TEMPLATE. The moves that do collapse a template are to generate these modules from the set they enumerate, or to replace the repeated construction with one factory each site calls with its own values \u2014 and where the set is the point, each module pinning one distinct thing, the repetition IS the enumeration and there is nothing to delete."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/migrations/20201014143841_pass_auth.js"},"region":{"startLine":3}}}],"partialFingerprints":{"codehealthFindingId/v1":"a9fd8795b58298cea6bdbc3915f2f8330461562bba75f5b9ae96d303b8f8f2cd"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (21 lines \u00D7 2 locations): frontend/src/modals/CustomCertificateModal.tsx:115 \u00B7 frontend/src/modals/CustomCertificateModal.tsx:146 \u2014 all 2 copies are in the same file, and the CITED SPAN is not a self-contained block \u2014 it runs from inside one construct into the next (the tail of a branch plus the head of the following one, a run of switch arms, the end of a declaration plus the list that follows it) rather than covering a whole unit. So do not lift these lines literally: no call can be substituted for a half-open construct. Extract the enclosing repeated UNIT instead \u2014 the whole function, component or branch these lines sit in \u2014 and where the repetition IS the construct (a run of switch arms, a stack of near-identical declarations) replace it with one table or registry looked up by key rather than a helper each arm calls. The copies still drift apart the first time only one of them is edited, which is why this is reported."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/modals/CustomCertificateModal.tsx"},"region":{"startLine":115}}}],"partialFingerprints":{"codehealthFindingId/v1":"f48c6d5dfb6cff6fe16275d532f9687540f073a34264a662fdcaeb2aedaf0fcb"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (21 lines \u00D7 4 locations): frontend/src/pages/Nginx/DeadHosts/TableWrapper.tsx:14 \u00B7 frontend/src/pages/Nginx/ProxyHosts/TableWrapper.tsx:14 \u00B7 frontend/src/pages/Nginx/RedirectionHosts/TableWrapper.tsx:14 \u00B7 frontend/src/pages/Nginx/Streams/TableWrapper.tsx:14 \u2014 the 4 copies are spread across 4 files, and the CITED SPAN is not a self-contained block \u2014 it runs from inside one construct into the next (the tail of a branch plus the head of the following one, a run of switch arms, the end of a declaration plus the list that follows it) rather than covering a whole unit. So do not lift these lines literally: no call can be substituted for a half-open construct. Extract the enclosing repeated UNIT instead \u2014 the whole function, component or branch these lines sit in \u2014 and where the repetition IS the construct (a run of switch arms, a stack of near-identical declarations) replace it with one table or registry looked up by key rather than a helper each arm calls. The copies still drift apart the first time only one of them is edited, which is why this is reported."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Nginx/DeadHosts/TableWrapper.tsx"},"region":{"startLine":14}}}],"partialFingerprints":{"codehealthFindingId/v1":"222315e50c2aeb604ba2f03404ce354ca3c647b7f3617cfc820e1b8faa25bd36"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (19 lines \u00D7 2 locations): backend/internal/certificate.js:779 \u00B7 backend/internal/certificate.js:945 \u2014 all 2 copies are in the same file, and the CITED SPAN is not a self-contained block \u2014 it runs from inside one construct into the next (the tail of a branch plus the head of the following one, a run of switch arms, the end of a declaration plus the list that follows it) rather than covering a whole unit. So do not lift these lines literally: no call can be substituted for a half-open construct. Extract the enclosing repeated UNIT instead \u2014 the whole function, component or branch these lines sit in \u2014 and where the repetition IS the construct (a run of switch arms, a stack of near-identical declarations) replace it with one table or registry looked up by key rather than a helper each arm calls. The copies still drift apart the first time only one of them is edited, which is why this is reported."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/certificate.js"},"region":{"startLine":779}}}],"partialFingerprints":{"codehealthFindingId/v1":"b6a604caebd30a859a92a33e0a7d84d268403e12d6f0196f82de791aed6cdb2a"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (19 lines \u00D7 3 locations): backend/models/access_list_auth.js:9 \u00B7 backend/models/access_list_client.js:9 \u00B7 backend/models/audit-log.js:9 \u2014 the 3 copies are spread across 3 files, and the CITED SPAN is not a self-contained block \u2014 it runs from inside one construct into the next (the tail of a branch plus the head of the following one, a run of switch arms, the end of a declaration plus the list that follows it) rather than covering a whole unit. So do not lift these lines literally: no call can be substituted for a half-open construct. Extract the enclosing repeated UNIT instead \u2014 the whole function, component or branch these lines sit in \u2014 and where the repetition IS the construct (a run of switch arms, a stack of near-identical declarations) replace it with one table or registry looked up by key rather than a helper each arm calls. The copies still drift apart the first time only one of them is edited, which is why this is reported."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/models/access_list_auth.js"},"region":{"startLine":9}}}],"partialFingerprints":{"codehealthFindingId/v1":"375a8c00480116ef833ee0203992dfb3e554e81af9a92a05112ee60f86015d75"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (19 lines \u00D7 4 locations): frontend/src/pages/Dashboard/index.tsx:19 \u00B7 frontend/src/pages/Dashboard/index.tsx:46 \u00B7 frontend/src/pages/Dashboard/index.tsx:74 \u00B7 frontend/src/pages/Dashboard/index.tsx:99 \u2014 all 4 copies are in the same file, so extract the block into one function there and call it from every one of those sites \u2014 resolving only two of them leaves the rest to drift apart the first time one is edited."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Dashboard/index.tsx"},"region":{"startLine":19}}}],"partialFingerprints":{"codehealthFindingId/v1":"bedd3d2783f79986b7147501f99b4bcdbccf3ae24ccb44b446bc774445a99786"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (18 lines \u00D7 2 locations): backend/internal/certificate.js:953 \u00B7 backend/internal/certificate.js:1036 \u2014 all 2 copies are in the same file, and the CITED SPAN is not a self-contained block \u2014 it runs from inside one construct into the next (the tail of a branch plus the head of the following one, a run of switch arms, the end of a declaration plus the list that follows it) rather than covering a whole unit. So do not lift these lines literally: no call can be substituted for a half-open construct. Extract the enclosing repeated UNIT instead \u2014 the whole function, component or branch these lines sit in \u2014 and where the repetition IS the construct (a run of switch arms, a stack of near-identical declarations) replace it with one table or registry looked up by key rather than a helper each arm calls. The copies still drift apart the first time only one of them is edited, which is why this is reported."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/certificate.js"},"region":{"startLine":953}}}],"partialFingerprints":{"codehealthFindingId/v1":"3e5fdcb4796580bc44519ec573042e53526c09f8e9078ef46b06105982cc3897"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (18 lines \u00D7 3 locations): backend/routes/logs.js:7 \u00B7 backend/routes/reports.js:6 \u00B7 backend/routes/settings.js:9 \u2014 the 3 copies sit in sibling files in one directory, so check first whether one of them (or an existing module there) already owns this behaviour and the others should call it; otherwise extract it into one module in that directory and have each site call it. There is one copy in each of 3 separate files rather than several in one place, so check first whether these are sibling modules that each declare their own version of one shape \u2014 one per entity, per provider, per language. Where they are, no single extracted module collapses them: each module still has to be written, and what recurs is the TEMPLATE. The moves that do collapse a template are to generate these modules from the set they enumerate, or to replace the repeated construction with one factory each site calls with its own values \u2014 and where the set is the point, each module pinning one distinct thing, the repetition IS the enumeration and there is nothing to delete."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/routes/logs.js"},"region":{"startLine":7}}}],"partialFingerprints":{"codehealthFindingId/v1":"45498a43beeee94a3ce7d0f4a1fcc48033e9de117f1567c4f29327965fcd481d"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (18 lines \u00D7 2 locations): frontend/src/modals/TwoFactorModal.tsx:55 \u00B7 frontend/src/modals/TwoFactorModal.tsx:81 \u2014 all 2 copies are in the same file, and the CITED SPAN is not a self-contained block \u2014 it runs from inside one construct into the next (the tail of a branch plus the head of the following one, a run of switch arms, the end of a declaration plus the list that follows it) rather than covering a whole unit. So do not lift these lines literally: no call can be substituted for a half-open construct. Extract the enclosing repeated UNIT instead \u2014 the whole function, component or branch these lines sit in \u2014 and where the repetition IS the construct (a run of switch arms, a stack of near-identical declarations) replace it with one table or registry looked up by key rather than a helper each arm calls. The copies still drift apart the first time only one of them is edited, which is why this is reported."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/modals/TwoFactorModal.tsx"},"region":{"startLine":55}}}],"partialFingerprints":{"codehealthFindingId/v1":"208d582c586d2e0cd054eac50bfbe1cf0b277ea00a4031e9f01a7d89f83a3701"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (18 lines \u00D7 5 locations): frontend/src/pages/AuditLog/Table.tsx:14 \u00B7 frontend/src/pages/Nginx/DeadHosts/Table.tsx:27 \u00B7 frontend/src/pages/Nginx/ProxyHosts/Table.tsx:38 \u00B7 frontend/src/pages/Nginx/RedirectionHosts/Table.tsx:27 \u00B7 \u002B1 more site(s) not listed \u2014 the 5 copies are spread across 5 files, and the CITED SPAN is not a self-contained block \u2014 it runs from inside one construct into the next (the tail of a branch plus the head of the following one, a run of switch arms, the end of a declaration plus the list that follows it) rather than covering a whole unit. So do not lift these lines literally: no call can be substituted for a half-open construct. Extract the enclosing repeated UNIT instead \u2014 the whole function, component or branch these lines sit in \u2014 and where the repetition IS the construct (a run of switch arms, a stack of near-identical declarations) replace it with one table or registry looked up by key rather than a helper each arm calls. The copies still drift apart the first time only one of them is edited, which is why this is reported."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/AuditLog/Table.tsx"},"region":{"startLine":14}}}],"partialFingerprints":{"codehealthFindingId/v1":"5b182483b5ccfb510e3c381300220e48c1ac060e2c5aa08e125097b2e8f16ad5"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (18 lines \u00D7 5 locations): frontend/src/pages/Settings/DefaultSite.tsx:89 \u00B7 frontend/src/pages/Settings/DefaultSite.tsx:107 \u00B7 frontend/src/pages/Settings/DefaultSite.tsx:125 \u00B7 frontend/src/pages/Settings/DefaultSite.tsx:143 \u00B7 \u002B1 more site(s) not listed \u2014 all 5 copies are in the same file, and the SHAPE of this repetition could not be determined. It is not a run of declarations, a listing, a declaration header, a type body or a slice through a construct \u2014 and it was not measured as a run of executable statements either, so this row cannot tell you whether a function can stand where these lines are. Read the two spans before acting, because the move is opposite in the two cases. Where they are statements, the ordinary answer holds: give the shared part one home and call it from each site. Where they turn out to be declarations, a literal\u0027s entries, or the cases of an enumeration, there is no call site to call anything from, and collapsing them would delete what each copy pins \u2014 a shared base type, a generated set, or one exported constant each site refers to is the move instead, and sometimes the honest answer is that there is nothing to extract at all. Reported because the copies drift apart the first time only one of them is edited, which is true whichever of those they are."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Settings/DefaultSite.tsx"},"region":{"startLine":89}}}],"partialFingerprints":{"codehealthFindingId/v1":"503c8f90b6cf7be723c49c0b62117c54e2f17adf7d284f480370aa4a3dd62a47"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (18 lines \u00D7 3 locations): frontend/src/pages/Setup/index.tsx:106 \u00B7 frontend/src/pages/Setup/index.tsx:131 \u00B7 frontend/src/pages/Setup/index.tsx:157 \u2014 all 3 copies are in the same file, and the SHAPE of this repetition could not be determined. It is not a run of declarations, a listing, a declaration header, a type body or a slice through a construct \u2014 and it was not measured as a run of executable statements either, so this row cannot tell you whether a function can stand where these lines are. Read the two spans before acting, because the move is opposite in the two cases. Where they are statements, the ordinary answer holds: give the shared part one home and call it from each site. Where they turn out to be declarations, a literal\u0027s entries, or the cases of an enumeration, there is no call site to call anything from, and collapsing them would delete what each copy pins \u2014 a shared base type, a generated set, or one exported constant each site refers to is the move instead, and sometimes the honest answer is that there is nothing to extract at all. Reported because the copies drift apart the first time only one of them is edited, which is true whichever of those they are."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Setup/index.tsx"},"region":{"startLine":106}}}],"partialFingerprints":{"codehealthFindingId/v1":"3363129b7232178a1d9f0a0432064e9772cff2044e9aa12c932783ffdee8890a"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (17 lines \u00D7 3 locations): backend/migrations/20181113041458_http2_support.js:3 \u00B7 backend/migrations/20190104035154_disabled.js:3 \u00B7 backend/migrations/20190218060101_hsts.js:3 \u2014 the 3 copies sit in sibling files in one directory, so check first whether one of them (or an existing module there) already owns this behaviour and the others should call it; otherwise extract it into one module in that directory and have each site call it. There is one copy in each of 3 separate files rather than several in one place, so check first whether these are sibling modules that each declare their own version of one shape \u2014 one per entity, per provider, per language. Where they are, no single extracted module collapses them: each module still has to be written, and what recurs is the TEMPLATE. The moves that do collapse a template are to generate these modules from the set they enumerate, or to replace the repeated construction with one factory each site calls with its own values \u2014 and where the set is the point, each module pinning one distinct thing, the repetition IS the enumeration and there is nothing to delete."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/migrations/20181113041458_http2_support.js"},"region":{"startLine":3}}}],"partialFingerprints":{"codehealthFindingId/v1":"c9b9f04954814b5316964b4b114d5547a779054499fa92aad8120f0cae1729ba"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (17 lines \u00D7 2 locations): frontend/src/components/Form/SSLOptionsFields.tsx:49 \u00B7 frontend/src/components/Form/SSLOptionsFields.tsx:67 \u2014 all 2 copies are in the same file, and the SHAPE of this repetition could not be determined. It is not a run of declarations, a listing, a declaration header, a type body or a slice through a construct \u2014 and it was not measured as a run of executable statements either, so this row cannot tell you whether a function can stand where these lines are. Read the two spans before acting, because the move is opposite in the two cases. Where they are statements, the ordinary answer holds: give the shared part one home and call it from each site. Where they turn out to be declarations, a literal\u0027s entries, or the cases of an enumeration, there is no call site to call anything from, and collapsing them would delete what each copy pins \u2014 a shared base type, a generated set, or one exported constant each site refers to is the move instead, and sometimes the honest answer is that there is nothing to extract at all. Reported because the copies drift apart the first time only one of them is edited, which is true whichever of those they are."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/components/Form/SSLOptionsFields.tsx"},"region":{"startLine":49}}}],"partialFingerprints":{"codehealthFindingId/v1":"d808d6a74bc853000f19fbfec780b9f1bcc192cce97b4a7f57b0acac227b3c66"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (17 lines \u00D7 3 locations): frontend/src/components/Form/SSLOptionsFields.tsx:87 \u00B7 frontend/src/components/Form/SSLOptionsFields.tsx:105 \u00B7 frontend/src/components/Form/SSLOptionsFields.tsx:134 \u2014 all 3 copies are in the same file, and the SHAPE of this repetition could not be determined. It is not a run of declarations, a listing, a declaration header, a type body or a slice through a construct \u2014 and it was not measured as a run of executable statements either, so this row cannot tell you whether a function can stand where these lines are. Read the two spans before acting, because the move is opposite in the two cases. Where they are statements, the ordinary answer holds: give the shared part one home and call it from each site. Where they turn out to be declarations, a literal\u0027s entries, or the cases of an enumeration, there is no call site to call anything from, and collapsing them would delete what each copy pins \u2014 a shared base type, a generated set, or one exported constant each site refers to is the move instead, and sometimes the honest answer is that there is nothing to extract at all. Reported because the copies drift apart the first time only one of them is edited, which is true whichever of those they are."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/components/Form/SSLOptionsFields.tsx"},"region":{"startLine":87}}}],"partialFingerprints":{"codehealthFindingId/v1":"a28f47d614d15d7a6ddfaeb440792ee235c2cfe528b7351c9e2a84259deab187"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (17 lines \u00D7 2 locations): frontend/src/components/SiteHeader.tsx:89 \u00B7 frontend/src/components/SiteHeader.tsx:106 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/components/SiteHeader.tsx"},"region":{"startLine":89}}}],"partialFingerprints":{"codehealthFindingId/v1":"938c82d270d82b3849bf2c9eece351068fb2b7463ff41628f080952a8c180a24"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (17 lines \u00D7 3 locations): frontend/src/modals/AccessListModal.tsx:86 \u00B7 frontend/src/modals/DeadHostModal.tsx:53 \u00B7 frontend/src/modals/StreamModal.tsx:46 \u2014 the 3 copies are spread across 3 files, and the CITED SPAN is not a self-contained block \u2014 it runs from inside one construct into the next (the tail of a branch plus the head of the following one, a run of switch arms, the end of a declaration plus the list that follows it) rather than covering a whole unit. So do not lift these lines literally: no call can be substituted for a half-open construct. Extract the enclosing repeated UNIT instead \u2014 the whole function, component or branch these lines sit in \u2014 and where the repetition IS the construct (a run of switch arms, a stack of near-identical declarations) replace it with one table or registry looked up by key rather than a helper each arm calls. The copies still drift apart the first time only one of them is edited, which is why this is reported."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/modals/AccessListModal.tsx"},"region":{"startLine":86}}}],"partialFingerprints":{"codehealthFindingId/v1":"b85c2865bac7dfecd11cdcac18fa7780889d2f3e77fa98183cf4acdf050198c7"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (17 lines \u00D7 2 locations): frontend/src/pages/Certificates/TableWrapper.tsx:49 \u00B7 frontend/src/pages/Nginx/ProxyHosts/TableWrapper.tsx:37 \u2014 the 2 copies are spread across 2 files, and the CITED SPAN is not a self-contained block \u2014 it runs from inside one construct into the next (the tail of a branch plus the head of the following one, a run of switch arms, the end of a declaration plus the list that follows it) rather than covering a whole unit. So do not lift these lines literally: no call can be substituted for a half-open construct. Extract the enclosing repeated UNIT instead \u2014 the whole function, component or branch these lines sit in \u2014 and where the repetition IS the construct (a run of switch arms, a stack of near-identical declarations) replace it with one table or registry looked up by key rather than a helper each arm calls. The copies still drift apart the first time only one of them is edited, which is why this is reported."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Certificates/TableWrapper.tsx"},"region":{"startLine":49}}}],"partialFingerprints":{"codehealthFindingId/v1":"7bf96cefe9e4191795fe2611003801dbf0c7e169a2e4cf50d8dfba8cbce4c112"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (17 lines \u00D7 2 locations): frontend/src/pages/Nginx/ProxyHosts/Table.tsx:60 \u00B7 frontend/src/pages/Nginx/Streams/Table.tsx:45 \u2014 the 2 copies are spread across 2 files, and the CITED SPAN is not a self-contained block \u2014 it runs from inside one construct into the next (the tail of a branch plus the head of the following one, a run of switch arms, the end of a declaration plus the list that follows it) rather than covering a whole unit. So do not lift these lines literally: no call can be substituted for a half-open construct. Extract the enclosing repeated UNIT instead \u2014 the whole function, component or branch these lines sit in \u2014 and where the repetition IS the construct (a run of switch arms, a stack of near-identical declarations) replace it with one table or registry looked up by key rather than a helper each arm calls. The copies still drift apart the first time only one of them is edited, which is why this is reported."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Nginx/ProxyHosts/Table.tsx"},"region":{"startLine":60}}}],"partialFingerprints":{"codehealthFindingId/v1":"49f003755190862a7d5be5f06981e3f5c575785dbaac5e27742de0cabd0d05b8"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (16 lines \u00D7 2 locations): backend/internal/ip_ranges.js:37 \u00B7 backend/internal/remote-version.js:50 \u2014 the 2 copies sit in sibling files in one directory, so check first whether one of them (or an existing module there) already owns this behaviour and the others should call it; otherwise extract it into one module in that directory and have each site call it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/ip_ranges.js"},"region":{"startLine":37}}}],"partialFingerprints":{"codehealthFindingId/v1":"9029c3fb881d78aceb81a08fa89878dd5523b16b10bb754ead8fbcb0905711e5"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (16 lines \u00D7 2 locations): backend/models/stream.js:19 \u00B7 backend/models/user.js:21 \u2014 the 2 copies are spread across 2 files, and the CITED SPAN is not a self-contained block \u2014 it runs from inside one construct into the next (the tail of a branch plus the head of the following one, a run of switch arms, the end of a declaration plus the list that follows it) rather than covering a whole unit. So do not lift these lines literally: no call can be substituted for a half-open construct. Extract the enclosing repeated UNIT instead \u2014 the whole function, component or branch these lines sit in \u2014 and where the repetition IS the construct (a run of switch arms, a stack of near-identical declarations) replace it with one table or registry looked up by key rather than a helper each arm calls. The copies still drift apart the first time only one of them is edited, which is why this is reported."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/models/stream.js"},"region":{"startLine":19}}}],"partialFingerprints":{"codehealthFindingId/v1":"e3368b4077a941ad04e29cd67cd8edfd990e8682b4cbcfc76b268809767a7b71"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (16 lines \u00D7 2 locations): backend/routes/nginx/certificates.js:137 \u00B7 backend/routes/nginx/certificates.js:236 \u2014 all 2 copies are in the same file, and the CITED SPAN is not a self-contained block \u2014 it runs from inside one construct into the next (the tail of a branch plus the head of the following one, a run of switch arms, the end of a declaration plus the list that follows it) rather than covering a whole unit. So do not lift these lines literally: no call can be substituted for a half-open construct. Extract the enclosing repeated UNIT instead \u2014 the whole function, component or branch these lines sit in \u2014 and where the repetition IS the construct (a run of switch arms, a stack of near-identical declarations) replace it with one table or registry looked up by key rather than a helper each arm calls. The copies still drift apart the first time only one of them is edited, which is why this is reported."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/routes/nginx/certificates.js"},"region":{"startLine":137}}}],"partialFingerprints":{"codehealthFindingId/v1":"0bac2283d636a302169a9b1e588f5e843d61c52c3425c1e12a6127fa269370a1"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (16 lines \u00D7 2 locations): frontend/src/modals/AccessListModal.tsx:178 \u00B7 frontend/src/modals/RedirectionHostModal.tsx:249 \u2014 the 2 copies are spread across 2 files, and the CITED SPAN is not a self-contained block \u2014 it runs from inside one construct into the next (the tail of a branch plus the head of the following one, a run of switch arms, the end of a declaration plus the list that follows it) rather than covering a whole unit. So do not lift these lines literally: no call can be substituted for a half-open construct. Extract the enclosing repeated UNIT instead \u2014 the whole function, component or branch these lines sit in \u2014 and where the repetition IS the construct (a run of switch arms, a stack of near-identical declarations) replace it with one table or registry looked up by key rather than a helper each arm calls. The copies still drift apart the first time only one of them is edited, which is why this is reported."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/modals/AccessListModal.tsx"},"region":{"startLine":178}}}],"partialFingerprints":{"codehealthFindingId/v1":"72ac2dea009678ac89e01ebc7db711b045c51b66a318f1ccb5608057c0c82588"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (16 lines \u00D7 2 locations): frontend/src/modals/DNSCertificateModal.tsx:19 \u00B7 frontend/src/modals/HTTPCertificateModal.tsx:23 \u2014 the 2 copies sit in sibling files in one directory, so check first whether one of them (or an existing module there) already owns this behaviour and the others should call it; otherwise extract it into one module in that directory and have each site call it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/modals/DNSCertificateModal.tsx"},"region":{"startLine":19}}}],"partialFingerprints":{"codehealthFindingId/v1":"6a0234b3ef43b2133f6aab754af98e9a64c990437be4688ca5c68060128b54b0"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (16 lines \u00D7 2 locations): frontend/src/modals/ProxyHostModal.tsx:282 \u00B7 frontend/src/modals/RedirectionHostModal.tsx:284 \u2014 the 2 copies are spread across 2 files, and the CITED SPAN is a run of DECLARATIONS inside a construct \u2014 the members of a type, or the entries of an object or array literal \u2014 with no statement anywhere in it. Do not read this as an extract-a-helper row: nothing here executes, so there is no call site, and a call expression cannot stand where a member declaration or a literal\u0027s entry was. What repeats is a SHAPE, and which shape decides the move. Where the copies declare the same members, the repetition is a missing common ancestor: give it a base type, an interface both extend, a generic instantiated twice, or \u2014 where the copies are a literal\u0027s entries rather than a type\u0027s members \u2014 one shared constant each site spreads or refers to, so the set is written once. Where they declare DIFFERENT members and only the form is shared \u2014 a decorator and its options, an annotation, a registration table\u0027s keys \u2014 the form is prescribed by a framework or a schema rather than copied, and the only collapse available is to generate the declarations from that schema; where you do not own the generator, this is the cost of the framework and there is nothing to extract. Check which of the two it is before acting: these copies still drift apart the first time only one of them is edited, which is why the repetition is reported, but the sentence to act on is not the same in both cases."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/modals/ProxyHostModal.tsx"},"region":{"startLine":282}}}],"partialFingerprints":{"codehealthFindingId/v1":"f3fb602697c9156fcb6e14f7ff146b989b4f17a7de2a1f7c75392bc77fb7574b"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (16 lines \u00D7 2 locations): frontend/src/pages/Login/index.tsx:19 \u00B7 frontend/src/pages/Login/index.tsx:88 \u2014 all 2 copies are in the same file, and the CITED SPAN is not a self-contained block \u2014 it runs from inside one construct into the next (the tail of a branch plus the head of the following one, a run of switch arms, the end of a declaration plus the list that follows it) rather than covering a whole unit. So do not lift these lines literally: no call can be substituted for a half-open construct. Extract the enclosing repeated UNIT instead \u2014 the whole function, component or branch these lines sit in \u2014 and where the repetition IS the construct (a run of switch arms, a stack of near-identical declarations) replace it with one table or registry looked up by key rather than a helper each arm calls. The copies still drift apart the first time only one of them is edited, which is why this is reported."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Login/index.tsx"},"region":{"startLine":19}}}],"partialFingerprints":{"codehealthFindingId/v1":"e63038f28dfccec0d4ec1c7ba6a216e4b51917904fe7c18169de9c849a457692"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (15 lines \u00D7 5 locations): backend/migrations/20180929054513_websockets.js:3 \u00B7 backend/migrations/20181019052346_forward_host.js:3 \u00B7 backend/migrations/20181213013211_forward_scheme.js:3 \u00B7 backend/migrations/20190215115310_customlocations.js:3 \u00B7 \u002B1 more site(s) not listed \u2014 the 5 copies sit in sibling files in one directory, so check first whether one of them (or an existing module there) already owns this behaviour and the others should call it; otherwise extract it into one module in that directory and have each site call it. There is one copy in each of 5 separate files rather than several in one place, so check first whether these are sibling modules that each declare their own version of one shape \u2014 one per entity, per provider, per language. Where they are, no single extracted module collapses them: each module still has to be written, and what recurs is the TEMPLATE. The moves that do collapse a template are to generate these modules from the set they enumerate, or to replace the repeated construction with one factory each site calls with its own values \u2014 and where the set is the point, each module pinning one distinct thing, the repetition IS the enumeration and there is nothing to delete."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/migrations/20180929054513_websockets.js"},"region":{"startLine":3}}}],"partialFingerprints":{"codehealthFindingId/v1":"76fed95f1dd768001ec5e3b9c59df1fdd87661e67ac62384365fbf7f1590cdb3"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (15 lines \u00D7 6 locations): frontend/src/modals/AccessListModal.tsx:276 \u00B7 frontend/src/modals/DeadHostModal.tsx:158 \u00B7 frontend/src/modals/PermissionsModal.tsx:271 \u00B7 frontend/src/modals/RedirectionHostModal.tsx:335 \u00B7 \u002B2 more site(s) not listed \u2014 the 6 copies are spread across 6 files, and the CITED SPAN is not a self-contained block \u2014 it runs from inside one construct into the next (the tail of a branch plus the head of the following one, a run of switch arms, the end of a declaration plus the list that follows it) rather than covering a whole unit. So do not lift these lines literally: no call can be substituted for a half-open construct. Extract the enclosing repeated UNIT instead \u2014 the whole function, component or branch these lines sit in \u2014 and where the repetition IS the construct (a run of switch arms, a stack of near-identical declarations) replace it with one table or registry looked up by key rather than a helper each arm calls. The copies still drift apart the first time only one of them is edited, which is why this is reported."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/modals/AccessListModal.tsx"},"region":{"startLine":276}}}],"partialFingerprints":{"codehealthFindingId/v1":"fa874e5242ed447c531f5c85d160ce5a4674ddb21cc87d8012f1303b1926b4ea"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (15 lines \u00D7 2 locations): frontend/src/modals/RedirectionHostModal.tsx:303 \u00B7 frontend/src/modals/StreamModal.tsx:276 \u2014 the 2 copies are spread across 2 files, and the CITED SPAN is not a self-contained block \u2014 it runs from inside one construct into the next (the tail of a branch plus the head of the following one, a run of switch arms, the end of a declaration plus the list that follows it) rather than covering a whole unit. So do not lift these lines literally: no call can be substituted for a half-open construct. Extract the enclosing repeated UNIT instead \u2014 the whole function, component or branch these lines sit in \u2014 and where the repetition IS the construct (a run of switch arms, a stack of near-identical declarations) replace it with one table or registry looked up by key rather than a helper each arm calls. The copies still drift apart the first time only one of them is edited, which is why this is reported."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/modals/RedirectionHostModal.tsx"},"region":{"startLine":303}}}],"partialFingerprints":{"codehealthFindingId/v1":"ba45c50c11ad720c06dc1717f4529a15e1583423d81c78435e0709d4b9c22d16"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (15 lines \u00D7 2 locations): frontend/src/modals/TwoFactorModal.tsx:233 \u00B7 frontend/src/modals/TwoFactorModal.tsx:281 \u2014 all 2 copies are in the same file, and the CITED SPAN is not a self-contained block \u2014 it runs from inside one construct into the next (the tail of a branch plus the head of the following one, a run of switch arms, the end of a declaration plus the list that follows it) rather than covering a whole unit. So do not lift these lines literally: no call can be substituted for a half-open construct. Extract the enclosing repeated UNIT instead \u2014 the whole function, component or branch these lines sit in \u2014 and where the repetition IS the construct (a run of switch arms, a stack of near-identical declarations) replace it with one table or registry looked up by key rather than a helper each arm calls. The copies still drift apart the first time only one of them is edited, which is why this is reported."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/modals/TwoFactorModal.tsx"},"region":{"startLine":233}}}],"partialFingerprints":{"codehealthFindingId/v1":"b377a2a500dcae4f28e55b1db24b362f92b3f2e1ba84b3b828624bc996ebcb9f"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (15 lines \u00D7 2 locations): frontend/src/modals/UserModal.tsx:185 \u00B7 frontend/src/modals/UserModal.tsx:206 \u2014 all 2 copies are in the same file, and the CITED SPAN is a run of DECLARATIONS inside a construct \u2014 the members of a type, or the entries of an object or array literal \u2014 with no statement anywhere in it. Do not read this as an extract-a-helper row: nothing here executes, so there is no call site, and a call expression cannot stand where a member declaration or a literal\u0027s entry was. What repeats is a SHAPE, and which shape decides the move. Where the copies declare the same members, the repetition is a missing common ancestor: give it a base type, an interface both extend, a generic instantiated twice, or \u2014 where the copies are a literal\u0027s entries rather than a type\u0027s members \u2014 one shared constant each site spreads or refers to, so the set is written once. Where they declare DIFFERENT members and only the form is shared \u2014 a decorator and its options, an annotation, a registration table\u0027s keys \u2014 the form is prescribed by a framework or a schema rather than copied, and the only collapse available is to generate the declarations from that schema; where you do not own the generator, this is the cost of the framework and there is nothing to extract. Check which of the two it is before acting: these copies still drift apart the first time only one of them is edited, which is why the repetition is reported, but the sentence to act on is not the same in both cases."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/modals/UserModal.tsx"},"region":{"startLine":185}}}],"partialFingerprints":{"codehealthFindingId/v1":"fed978d58d3156d7b54f581b550f93bf4ad3ad8f24e9956874b0b9ec3ab65d46"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (14 lines \u00D7 2 locations): backend/internal/dead-host.js:230 \u00B7 backend/internal/dead-host.js:306 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/dead-host.js"},"region":{"startLine":230}}}],"partialFingerprints":{"codehealthFindingId/v1":"56d2bfd7dbd62d76655cb0e7c55ec0c23a0808ed6b050d20e674bebf0c66d172"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (14 lines \u00D7 4 locations): backend/migrations/20181213013211_forward_scheme.js:3 \u00B7 backend/migrations/20201014143841_pass_auth.js:3 \u00B7 backend/migrations/20210210154702_redirection_scheme.js:3 \u00B7 backend/migrations/20260131163528_trust_forwarded_proto.js:3 \u2014 the 4 copies sit in sibling files in one directory, so check first whether one of them (or an existing module there) already owns this behaviour and the others should call it; otherwise extract it into one module in that directory and have each site call it. There is one copy in each of 4 separate files rather than several in one place, so check first whether these are sibling modules that each declare their own version of one shape \u2014 one per entity, per provider, per language. Where they are, no single extracted module collapses them: each module still has to be written, and what recurs is the TEMPLATE. The moves that do collapse a template are to generate these modules from the set they enumerate, or to replace the repeated construction with one factory each site calls with its own values \u2014 and where the set is the point, each module pinning one distinct thing, the repetition IS the enumeration and there is nothing to delete."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/migrations/20181213013211_forward_scheme.js"},"region":{"startLine":3}}}],"partialFingerprints":{"codehealthFindingId/v1":"8f230785151d812d14672ef464217d0cd990aec2adacdc12406f50f5b2c34794"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (14 lines \u00D7 6 locations): backend/migrations/20190215115310_customlocations.js:3 \u00B7 backend/migrations/20201014143841_pass_auth.js:3 \u00B7 backend/migrations/20210210154702_redirection_scheme.js:3 \u00B7 backend/migrations/20210210154703_redirection_status_code.js:3 \u00B7 \u002B2 more site(s) not listed \u2014 the 6 copies sit in sibling files in one directory, so check first whether one of them (or an existing module there) already owns this behaviour and the others should call it; otherwise extract it into one module in that directory and have each site call it. There is one copy in each of 6 separate files rather than several in one place, so check first whether these are sibling modules that each declare their own version of one shape \u2014 one per entity, per provider, per language. Where they are, no single extracted module collapses them: each module still has to be written, and what recurs is the TEMPLATE. The moves that do collapse a template are to generate these modules from the set they enumerate, or to replace the repeated construction with one factory each site calls with its own values \u2014 and where the set is the point, each module pinning one distinct thing, the repetition IS the enumeration and there is nothing to delete."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/migrations/20190215115310_customlocations.js"},"region":{"startLine":3}}}],"partialFingerprints":{"codehealthFindingId/v1":"44d8de871dc0db20c9b06a9fd9066ba8f84f3e5dd8989a7cf19cc6075977e8ce"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (14 lines \u00D7 2 locations): backend/models/access_list.js:15 \u00B7 backend/models/stream.js:10 \u2014 the 2 copies are spread across 2 files, and the CITED SPAN is not a self-contained block \u2014 it runs from inside one construct into the next (the tail of a branch plus the head of the following one, a run of switch arms, the end of a declaration plus the list that follows it) rather than covering a whole unit. So do not lift these lines literally: no call can be substituted for a half-open construct. Extract the enclosing repeated UNIT instead \u2014 the whole function, component or branch these lines sit in \u2014 and where the repetition IS the construct (a run of switch arms, a stack of near-identical declarations) replace it with one table or registry looked up by key rather than a helper each arm calls. The copies still drift apart the first time only one of them is edited, which is why this is reported."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/models/access_list.js"},"region":{"startLine":15}}}],"partialFingerprints":{"codehealthFindingId/v1":"3316017da8bfda25e7f4cf1c8accd2ec49698b952e6c144701c0035383bb9ef7"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (14 lines \u00D7 2 locations): backend/routes/users.js:369 \u00B7 backend/routes/users.js:398 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/routes/users.js"},"region":{"startLine":369}}}],"partialFingerprints":{"codehealthFindingId/v1":"7fb5c707a502731ed0d269ce403d63ec79e12f09b3d7d1b8e16bc3b09c74cc13"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (14 lines \u00D7 2 locations): frontend/src/modals/UserModal.tsx:145 \u00B7 frontend/src/pages/Setup/index.tsx:123 \u2014 the 2 copies are spread across 2 files, and the CITED SPAN is not a self-contained block \u2014 it runs from inside one construct into the next (the tail of a branch plus the head of the following one, a run of switch arms, the end of a declaration plus the list that follows it) rather than covering a whole unit. So do not lift these lines literally: no call can be substituted for a half-open construct. Extract the enclosing repeated UNIT instead \u2014 the whole function, component or branch these lines sit in \u2014 and where the repetition IS the construct (a run of switch arms, a stack of near-identical declarations) replace it with one table or registry looked up by key rather than a helper each arm calls. The copies still drift apart the first time only one of them is edited, which is why this is reported."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/modals/UserModal.tsx"},"region":{"startLine":145}}}],"partialFingerprints":{"codehealthFindingId/v1":"e580b806fe32f25ca33790a0ce0b051787f4c792c9c1418dcd6c92e9a798de95"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (14 lines \u00D7 3 locations): frontend/src/pages/Dashboard/index.tsx:58 \u00B7 frontend/src/pages/Dashboard/index.tsx:86 \u00B7 frontend/src/pages/Dashboard/index.tsx:111 \u2014 all 3 copies are in the same file, so extract the block into one function there and call it from every one of those sites \u2014 resolving only two of them leaves the rest to drift apart the first time one is edited."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Dashboard/index.tsx"},"region":{"startLine":58}}}],"partialFingerprints":{"codehealthFindingId/v1":"8d2ad2e715cc939ea381dcd4df6f6914374c19c65002c1389dfb67711a80ac8b"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (13 lines \u00D7 3 locations): backend/internal/proxy-host.js:448 \u00B7 backend/internal/redirection-host.js:454 \u00B7 backend/internal/stream.js:403 \u2014 the 3 copies are spread across 3 files, and the CITED SPAN is not a self-contained block \u2014 it runs from inside one construct into the next (the tail of a branch plus the head of the following one, a run of switch arms, the end of a declaration plus the list that follows it) rather than covering a whole unit. So do not lift these lines literally: no call can be substituted for a half-open construct. Extract the enclosing repeated UNIT instead \u2014 the whole function, component or branch these lines sit in \u2014 and where the repetition IS the construct (a run of switch arms, a stack of near-identical declarations) replace it with one table or registry looked up by key rather than a helper each arm calls. The copies still drift apart the first time only one of them is edited, which is why this is reported."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/proxy-host.js"},"region":{"startLine":448}}}],"partialFingerprints":{"codehealthFindingId/v1":"bd33ed93997da25e73f709011a4aee7528272014622f2059913e9f259e6673d1"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (13 lines \u00D7 2 locations): backend/internal/setting.js:38 \u00B7 backend/migrations/20211108145214_regenerate_default_host.js:10 \u2014 the 2 copies are spread across 2 files, and the CITED SPAN is not a self-contained block \u2014 it runs from inside one construct into the next (the tail of a branch plus the head of the following one, a run of switch arms, the end of a declaration plus the list that follows it) rather than covering a whole unit. So do not lift these lines literally: no call can be substituted for a half-open construct. Extract the enclosing repeated UNIT instead \u2014 the whole function, component or branch these lines sit in \u2014 and where the repetition IS the construct (a run of switch arms, a stack of near-identical declarations) replace it with one table or registry looked up by key rather than a helper each arm calls. The copies still drift apart the first time only one of them is edited, which is why this is reported."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/setting.js"},"region":{"startLine":38}}}],"partialFingerprints":{"codehealthFindingId/v1":"97d6ba5bac80bd5826dbf0aaaa00e5f69b5fa68b16b16c1eeddd1ed4bc499a1b"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (13 lines \u00D7 4 locations): backend/models/certificate.js:54 \u00B7 backend/models/dead_host.js:38 \u00B7 backend/models/proxy_host.js:50 \u00B7 backend/models/redirection_host.js:47 \u2014 the 4 copies are spread across 4 files, and what repeats is a LIST OF ENTRIES rather than behaviour \u2014 the same entries written out more than once. Extract them into one shared, exported constant and spread that constant into each site, rather than into a function the sites call: a list like this often lives in declarative metadata (a decorator\u0027s options object, a static configuration table) that a build step must be able to read statically, where a function call is not allowed. Adding an entry to one copy and not the other is the failure this prevents."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/models/certificate.js"},"region":{"startLine":54}}}],"partialFingerprints":{"codehealthFindingId/v1":"d8216f37c1d0f1b8302bb483d8c7967fbd2a36ecc5f22b0d20cd6899d1f2e9ff"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (13 lines \u00D7 2 locations): backend/routes/schema.js:6 \u00B7 backend/routes/version.js:5 \u2014 the 2 copies sit in sibling files in one directory, so check first whether one of them (or an existing module there) already owns this behaviour and the others should call it; otherwise extract it into one module in that directory and have each site call it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/routes/schema.js"},"region":{"startLine":6}}}],"partialFingerprints":{"codehealthFindingId/v1":"ba28a4f6cf3ee4d7b909134febca80cc81c531cb654f4163af01fc5f23318ebf"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (13 lines \u00D7 3 locations): frontend/src/components/Form/LocationsFields.tsx:243 \u00B7 frontend/src/components/Form/LocationsFields.tsx:264 \u00B7 frontend/src/components/Form/LocationsFields.tsx:285 \u2014 all 3 copies are in the same file, and the SHAPE of this repetition could not be determined. It is not a run of declarations, a listing, a declaration header, a type body or a slice through a construct \u2014 and it was not measured as a run of executable statements either, so this row cannot tell you whether a function can stand where these lines are. Read the two spans before acting, because the move is opposite in the two cases. Where they are statements, the ordinary answer holds: give the shared part one home and call it from each site. Where they turn out to be declarations, a literal\u0027s entries, or the cases of an enumeration, there is no call site to call anything from, and collapsing them would delete what each copy pins \u2014 a shared base type, a generated set, or one exported constant each site refers to is the move instead, and sometimes the honest answer is that there is nothing to extract at all. Reported because the copies drift apart the first time only one of them is edited, which is true whichever of those they are."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/components/Form/LocationsFields.tsx"},"region":{"startLine":243}}}],"partialFingerprints":{"codehealthFindingId/v1":"048efbae312cf526000296492f933648f7ed24467cb52de0acef87a5db05cb0d"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (13 lines \u00D7 3 locations): frontend/src/components/SiteHeader.tsx:122 \u00B7 frontend/src/pages/Certificates/Table.tsx:201 \u00B7 frontend/src/pages/Certificates/TableWrapper.tsx:121 \u2014 the 3 copies are spread across 3 files, and the SHAPE of this repetition could not be determined. It is not a run of declarations, a listing, a declaration header, a type body or a slice through a construct \u2014 and it was not measured as a run of executable statements either, so this row cannot tell you whether a function can stand where these lines are. Read the two spans before acting, because the move is opposite in the two cases. Where they are statements, the ordinary answer holds: give the shared part one home and call it from each site. Where they turn out to be declarations, a literal\u0027s entries, or the cases of an enumeration, there is no call site to call anything from, and collapsing them would delete what each copy pins \u2014 a shared base type, a generated set, or one exported constant each site refers to is the move instead, and sometimes the honest answer is that there is nothing to extract at all. Reported because the copies drift apart the first time only one of them is edited, which is true whichever of those they are."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/components/SiteHeader.tsx"},"region":{"startLine":122}}}],"partialFingerprints":{"codehealthFindingId/v1":"67f99318ae55d27a6c2dfc96a017df4fdf084ddbe782e8f6abf8b48b200cecd7"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (13 lines \u00D7 5 locations): frontend/src/modals/AccessListModal.tsx:70 \u00B7 frontend/src/modals/DeadHostModal.tsx:40 \u00B7 frontend/src/modals/ProxyHostModal.tsx:47 \u00B7 frontend/src/modals/RedirectionHostModal.tsx:42 \u00B7 \u002B1 more site(s) not listed \u2014 the 5 copies are spread across 5 files, and the CITED SPAN is not a self-contained block \u2014 it runs from inside one construct into the next (the tail of a branch plus the head of the following one, a run of switch arms, the end of a declaration plus the list that follows it) rather than covering a whole unit. So do not lift these lines literally: no call can be substituted for a half-open construct. Extract the enclosing repeated UNIT instead \u2014 the whole function, component or branch these lines sit in \u2014 and where the repetition IS the construct (a run of switch arms, a stack of near-identical declarations) replace it with one table or registry looked up by key rather than a helper each arm calls. The copies still drift apart the first time only one of them is edited, which is why this is reported."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/modals/AccessListModal.tsx"},"region":{"startLine":70}}}],"partialFingerprints":{"codehealthFindingId/v1":"e760f3d018e41eabe6e8aaf15e494334b63d0135fc0c60bdd75b6758c24ce036"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (13 lines \u00D7 2 locations): frontend/src/modals/PermissionsModal.tsx:87 \u00B7 frontend/src/modals/PermissionsModal.tsx:100 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/modals/PermissionsModal.tsx"},"region":{"startLine":87}}}],"partialFingerprints":{"codehealthFindingId/v1":"13fd953c0ace612ed6f31b2aa6ec0abacdee2e8c8d4e11e7ad98e834f379c606"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (13 lines \u00D7 4 locations): frontend/src/pages/Certificates/TableWrapper.tsx:135 \u00B7 frontend/src/pages/Nginx/DeadHosts/TableWrapper.tsx:83 \u00B7 frontend/src/pages/Nginx/ProxyHosts/TableWrapper.tsx:89 \u00B7 frontend/src/pages/Nginx/RedirectionHosts/TableWrapper.tsx:89 \u2014 the 4 copies are spread across 4 files, and the CITED SPAN is not a self-contained block \u2014 it runs from inside one construct into the next (the tail of a branch plus the head of the following one, a run of switch arms, the end of a declaration plus the list that follows it) rather than covering a whole unit. So do not lift these lines literally: no call can be substituted for a half-open construct. Extract the enclosing repeated UNIT instead \u2014 the whole function, component or branch these lines sit in \u2014 and where the repetition IS the construct (a run of switch arms, a stack of near-identical declarations) replace it with one table or registry looked up by key rather than a helper each arm calls. The copies still drift apart the first time only one of them is edited, which is why this is reported."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Certificates/TableWrapper.tsx"},"region":{"startLine":135}}}],"partialFingerprints":{"codehealthFindingId/v1":"acd6473abe1bda0544cdd84964adbf2ec37de14e0fcac8262db8bfe428ed1a35"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (12 lines \u00D7 4 locations): backend/internal/dead-host.js:190 \u00B7 backend/internal/proxy-host.js:238 \u00B7 backend/internal/redirection-host.js:235 \u00B7 backend/internal/stream.js:184 \u2014 the 4 copies sit in sibling files in one directory, so check first whether one of them (or an existing module there) already owns this behaviour and the others should call it; otherwise extract it into one module in that directory and have each site call it. There is one copy in each of 4 separate files rather than several in one place, so check first whether these are sibling modules that each declare their own version of one shape \u2014 one per entity, per provider, per language. Where they are, no single extracted module collapses them: each module still has to be written, and what recurs is the TEMPLATE. The moves that do collapse a template are to generate these modules from the set they enumerate, or to replace the repeated construction with one factory each site calls with its own values \u2014 and where the set is the point, each module pinning one distinct thing, the repetition IS the enumeration and there is nothing to delete."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/dead-host.js"},"region":{"startLine":190}}}],"partialFingerprints":{"codehealthFindingId/v1":"1dc39ce47c9fcb425b3df9e71e370c6d9edc928ac0057418aa9d52bf136dd758"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (12 lines \u00D7 7 locations): frontend/src/modals/ChangePasswordModal.tsx:85 \u00B7 frontend/src/modals/ProxyHostModal.tsx:188 \u00B7 frontend/src/modals/ProxyHostModal.tsx:215 \u00B7 frontend/src/modals/RedirectionHostModal.tsx:172 \u00B7 \u002B3 more site(s) not listed \u2014 the 7 copies are spread across 5 files, and the CITED SPAN is not a self-contained block \u2014 it runs from inside one construct into the next (the tail of a branch plus the head of the following one, a run of switch arms, the end of a declaration plus the list that follows it) rather than covering a whole unit. So do not lift these lines literally: no call can be substituted for a half-open construct. Extract the enclosing repeated UNIT instead \u2014 the whole function, component or branch these lines sit in \u2014 and where the repetition IS the construct (a run of switch arms, a stack of near-identical declarations) replace it with one table or registry looked up by key rather than a helper each arm calls. The copies still drift apart the first time only one of them is edited, which is why this is reported."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/modals/ChangePasswordModal.tsx"},"region":{"startLine":85}}}],"partialFingerprints":{"codehealthFindingId/v1":"7939ebf3895795358c727bea9d32eda63ee3f0be9e4b9500a13ee19165db6d1f"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (12 lines \u00D7 2 locations): frontend/src/modals/HostLogsModal.tsx:35 \u00B7 frontend/src/modals/HostLogsModal.tsx:47 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/modals/HostLogsModal.tsx"},"region":{"startLine":35}}}],"partialFingerprints":{"codehealthFindingId/v1":"0fefebdb5fb6155ce422696fe20b850d0b494af1f053f403b1ed26265b6b52cb"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (12 lines \u00D7 2 locations): frontend/src/modals/UserModal.tsx:94 \u00B7 frontend/src/pages/Setup/index.tsx:100 \u2014 the 2 copies are spread across 2 files, and the CITED SPAN is not a self-contained block \u2014 it runs from inside one construct into the next (the tail of a branch plus the head of the following one, a run of switch arms, the end of a declaration plus the list that follows it) rather than covering a whole unit. So do not lift these lines literally: no call can be substituted for a half-open construct. Extract the enclosing repeated UNIT instead \u2014 the whole function, component or branch these lines sit in \u2014 and where the repetition IS the construct (a run of switch arms, a stack of near-identical declarations) replace it with one table or registry looked up by key rather than a helper each arm calls. The copies still drift apart the first time only one of them is edited, which is why this is reported."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/modals/UserModal.tsx"},"region":{"startLine":94}}}],"partialFingerprints":{"codehealthFindingId/v1":"c08417d0670d0febcb747c6d4186ef7315e6cc84c476281f65f451dd45c69302"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block with local edits (11 matched lines \u00D7 2 locations): backend/migrations/20181113041458_http2_support.js:32 \u00B7 backend/migrations/20190227065017_settings.js:22 \u2014 the two spans are one implementation copied and then locally edited \u2014 57 tokens are still identical, in the same order in both files, with only local edits between them. The copies have already begun to drift, which is this row\u0027s finding: an edit made to one and not the other changes behaviour silently. Diff the two spans first to learn what genuinely differs, then extract the shared core into one module both sites use, passing the differences in as parameters \u2014 or, if one copy exists only because the other could not be imported from its context, make one of them the single source the other is generated or re-exported from. If one copy is no longer reachable, delete it rather than letting it shadow the live one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/migrations/20181113041458_http2_support.js"},"region":{"startLine":32}}}],"partialFingerprints":{"codehealthFindingId/v1":"d2361afda0aa674f04949cbdbbbdb941ff27c5a58d9796e256c8e57d5064bab2"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block with local edits (11 matched lines \u00D7 2 locations): backend/migrations/20190104035154_disabled.js:39 \u00B7 backend/migrations/20190227065017_settings.js:22 \u2014 the two spans are one implementation copied and then locally edited \u2014 57 tokens are still identical, in the same order in both files, with only local edits between them. The copies have already begun to drift, which is this row\u0027s finding: an edit made to one and not the other changes behaviour silently. Diff the two spans first to learn what genuinely differs, then extract the shared core into one module both sites use, passing the differences in as parameters \u2014 or, if one copy exists only because the other could not be imported from its context, make one of them the single source the other is generated or re-exported from. If one copy is no longer reachable, delete it rather than letting it shadow the live one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/migrations/20190104035154_disabled.js"},"region":{"startLine":39}}}],"partialFingerprints":{"codehealthFindingId/v1":"bc5d528d363eb908f66aa6ad1ff1761b0a3614e6eb50f0d4e6d49083fd999939"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (11 lines \u00D7 2 locations): backend/migrations/20251111090000_redirect_auto_scheme.js:3 \u00B7 backend/migrations/20251111090000_redirect_auto_scheme.js:25 \u2014 all 2 copies are in the same file, and the CITED SPAN is not a self-contained block \u2014 it runs from inside one construct into the next (the tail of a branch plus the head of the following one, a run of switch arms, the end of a declaration plus the list that follows it) rather than covering a whole unit. So do not lift these lines literally: no call can be substituted for a half-open construct. Extract the enclosing repeated UNIT instead \u2014 the whole function, component or branch these lines sit in \u2014 and where the repetition IS the construct (a run of switch arms, a stack of near-identical declarations) replace it with one table or registry looked up by key rather than a helper each arm calls. The copies still drift apart the first time only one of them is edited, which is why this is reported."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/migrations/20251111090000_redirect_auto_scheme.js"},"region":{"startLine":3}}}],"partialFingerprints":{"codehealthFindingId/v1":"6f20b31fe8718f56b23bdc032f1031e02c06892be3774138f35de2f5fc58b7a7"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (11 lines \u00D7 3 locations): backend/routes/ci.js:6 \u00B7 backend/routes/schema.js:6 \u00B7 backend/routes/version.js:5 \u2014 the 3 copies sit in sibling files in one directory, so check first whether one of them (or an existing module there) already owns this behaviour and the others should call it; otherwise extract it into one module in that directory and have each site call it. There is one copy in each of 3 separate files rather than several in one place, so check first whether these are sibling modules that each declare their own version of one shape \u2014 one per entity, per provider, per language. Where they are, no single extracted module collapses them: each module still has to be written, and what recurs is the TEMPLATE. The moves that do collapse a template are to generate these modules from the set they enumerate, or to replace the repeated construction with one factory each site calls with its own values \u2014 and where the set is the point, each module pinning one distinct thing, the repetition IS the enumeration and there is nothing to delete."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/routes/ci.js"},"region":{"startLine":6}}}],"partialFingerprints":{"codehealthFindingId/v1":"7237c636972a77bfed63566564c7036566940021c6b8941509cffd9ed478fbf6"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (11 lines \u00D7 2 locations): backend/routes/settings.js:9 \u00B7 backend/routes/tokens.js:8 \u2014 the 2 copies sit in sibling files in one directory, so check first whether one of them (or an existing module there) already owns this behaviour and the others should call it; otherwise extract it into one module in that directory and have each site call it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/routes/settings.js"},"region":{"startLine":9}}}],"partialFingerprints":{"codehealthFindingId/v1":"85f69efdbd9b3f3888c3ec52b5ec14c28c67ee3510a1d2fb6c951c9af4ad2eb7"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (11 lines \u00D7 4 locations): backend/routes/settings.js:89 \u00B7 backend/routes/users.js:183 \u00B7 backend/routes/users.js:230 \u00B7 backend/routes/users.js:260 \u2014 the 2 copies sit in sibling files in one directory, so check first whether one of them (or an existing module there) already owns this behaviour and the others should call it; otherwise extract it into one module in that directory and have each site call it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/routes/settings.js"},"region":{"startLine":89}}}],"partialFingerprints":{"codehealthFindingId/v1":"8a03bb0c82a4afd46436ec37200ad388e6acdc59ba9f2a2a12c3d9f16da4ed09"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (11 lines \u00D7 6 locations): backend/routes/users.js:125 \u00B7 backend/routes/users.js:210 \u00B7 backend/routes/users.js:240 \u00B7 backend/routes/users.js:299 \u00B7 \u002B2 more site(s) not listed \u2014 all 6 copies are in the same file, and the CITED SPAN is not a self-contained block \u2014 it runs from inside one construct into the next (the tail of a branch plus the head of the following one, a run of switch arms, the end of a declaration plus the list that follows it) rather than covering a whole unit. So do not lift these lines literally: no call can be substituted for a half-open construct. Extract the enclosing repeated UNIT instead \u2014 the whole function, component or branch these lines sit in \u2014 and where the repetition IS the construct (a run of switch arms, a stack of near-identical declarations) replace it with one table or registry looked up by key rather than a helper each arm calls. The copies still drift apart the first time only one of them is edited, which is why this is reported."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/routes/users.js"},"region":{"startLine":125}}}],"partialFingerprints":{"codehealthFindingId/v1":"f3d5f51f8b7c28f3a936508510b0526243c8115d56156c6eeae23993ad064147"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (11 lines \u00D7 2 locations): frontend/src/components/SiteFooter.tsx:6 \u00B7 frontend/src/pages/Login/index.tsx:171 \u2014 the 2 copies are spread across 2 directories, so the shared home is a decision rather than an obvious spot: check first whether one of them already owns this behaviour, and otherwise put the extracted module somewhere all of the sites already reach rather than making one of them depend on another."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/components/SiteFooter.tsx"},"region":{"startLine":6}}}],"partialFingerprints":{"codehealthFindingId/v1":"dac993e8309ff687c9a3ba600e9436599580bc6971d0c28a8ce1deb4f291b4e6"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (11 lines \u00D7 2 locations): frontend/src/components/ThemeSwitcher.tsx:14 \u00B7 frontend/src/components/ThemeSwitcher.tsx:25 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/components/ThemeSwitcher.tsx"},"region":{"startLine":14}}}],"partialFingerprints":{"codehealthFindingId/v1":"8e9210d756bbfa1980fc5c3837bc4deacdfb20e1f6c71b9280104e1c7716e4c3"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (11 lines \u00D7 2 locations): frontend/src/modals/HTTPCertificateModal.tsx:66 \u00B7 frontend/src/modals/HTTPCertificateModal.tsx:78 \u2014 all 2 copies are in the same file, and the CITED SPAN is not a self-contained block \u2014 it runs from inside one construct into the next (the tail of a branch plus the head of the following one, a run of switch arms, the end of a declaration plus the list that follows it) rather than covering a whole unit. So do not lift these lines literally: no call can be substituted for a half-open construct. Extract the enclosing repeated UNIT instead \u2014 the whole function, component or branch these lines sit in \u2014 and where the repetition IS the construct (a run of switch arms, a stack of near-identical declarations) replace it with one table or registry looked up by key rather than a helper each arm calls. The copies still drift apart the first time only one of them is edited, which is why this is reported."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/modals/HTTPCertificateModal.tsx"},"region":{"startLine":66}}}],"partialFingerprints":{"codehealthFindingId/v1":"5b8ba40c004505be30fa26d6388804f4695a3f17b675f3f7d3c6a0ad5395f1ee"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (11 lines \u00D7 6 locations): frontend/src/pages/Access/TableWrapper.tsx:15 \u00B7 frontend/src/pages/Certificates/TableWrapper.tsx:28 \u00B7 frontend/src/pages/Nginx/DeadHosts/TableWrapper.tsx:17 \u00B7 frontend/src/pages/Nginx/ProxyHosts/TableWrapper.tsx:17 \u00B7 \u002B2 more site(s) not listed \u2014 the 6 copies are spread across 6 files, and the CITED SPAN is not a self-contained block \u2014 it runs from inside one construct into the next (the tail of a branch plus the head of the following one, a run of switch arms, the end of a declaration plus the list that follows it) rather than covering a whole unit. So do not lift these lines literally: no call can be substituted for a half-open construct. Extract the enclosing repeated UNIT instead \u2014 the whole function, component or branch these lines sit in \u2014 and where the repetition IS the construct (a run of switch arms, a stack of near-identical declarations) replace it with one table or registry looked up by key rather than a helper each arm calls. The copies still drift apart the first time only one of them is edited, which is why this is reported."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Access/TableWrapper.tsx"},"region":{"startLine":15}}}],"partialFingerprints":{"codehealthFindingId/v1":"e98e6a0202ad7125eacc2169a5c5430a924fcf703a22ab7bc83b470a73e6489c"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (11 lines \u00D7 3 locations): frontend/src/pages/Certificates/Table.tsx:40 \u00B7 frontend/src/pages/Certificates/Table.tsx:83 \u00B7 frontend/src/pages/Users/Table.tsx:63 \u2014 the 3 copies are spread across 2 files, and the CITED SPAN is not a self-contained block \u2014 it runs from inside one construct into the next (the tail of a branch plus the head of the following one, a run of switch arms, the end of a declaration plus the list that follows it) rather than covering a whole unit. So do not lift these lines literally: no call can be substituted for a half-open construct. Extract the enclosing repeated UNIT instead \u2014 the whole function, component or branch these lines sit in \u2014 and where the repetition IS the construct (a run of switch arms, a stack of near-identical declarations) replace it with one table or registry looked up by key rather than a helper each arm calls. The copies still drift apart the first time only one of them is edited, which is why this is reported."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Certificates/Table.tsx"},"region":{"startLine":40}}}],"partialFingerprints":{"codehealthFindingId/v1":"e67344eadde50aab2b960fa6e71ad21baf6efa509ce888d590b433d3868f7882"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (10 lines \u00D7 2 locations): backend/internal/2fa.js:133 \u00B7 backend/internal/2fa.js:279 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/2fa.js"},"region":{"startLine":133}}}],"partialFingerprints":{"codehealthFindingId/v1":"4d3610d86ac3fdc26b8ba57298618497711c10638107b2d7cfd65a97884ff308"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (10 lines \u00D7 3 locations): backend/models/auth.js:40 \u00B7 backend/models/stream.js:24 \u00B7 backend/models/user.js:26 \u2014 the 3 copies are spread across 3 files, and what repeats is a LIST OF ENTRIES rather than behaviour \u2014 the same entries written out more than once. Extract them into one shared, exported constant and spread that constant into each site, rather than into a function the sites call: a list like this often lives in declarative metadata (a decorator\u0027s options object, a static configuration table) that a build step must be able to read statically, where a function call is not allowed. Adding an entry to one copy and not the other is the failure this prevents."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/models/auth.js"},"region":{"startLine":40}}}],"partialFingerprints":{"codehealthFindingId/v1":"3b443e0e6a9be9333202c1c7f7ae06150bb93b8306c1789f54b831f027bfc726"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (10 lines \u00D7 10 locations): backend/routes/nginx/certificates.js:311 \u00B7 backend/routes/nginx/dead_hosts.js:162 \u00B7 backend/routes/nginx/dead_hosts.js:189 \u00B7 backend/routes/nginx/proxy_hosts.js:163 \u00B7 \u002B6 more site(s) not listed \u2014 the 10 copies are spread across 6 files, and the CITED SPAN is not a self-contained block \u2014 it runs from inside one construct into the next (the tail of a branch plus the head of the following one, a run of switch arms, the end of a declaration plus the list that follows it) rather than covering a whole unit. So do not lift these lines literally: no call can be substituted for a half-open construct. Extract the enclosing repeated UNIT instead \u2014 the whole function, component or branch these lines sit in \u2014 and where the repetition IS the construct (a run of switch arms, a stack of near-identical declarations) replace it with one table or registry looked up by key rather than a helper each arm calls. The copies still drift apart the first time only one of them is edited, which is why this is reported."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/routes/nginx/certificates.js"},"region":{"startLine":311}}}],"partialFingerprints":{"codehealthFindingId/v1":"5e0ad060473422d539c552b72c7862a2d7235bfb2d90410377450588a3687e43"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block with local edits (10 matched lines \u00D7 2 locations): frontend/src/modals/EventDetailsModal.tsx:17 \u00B7 frontend/src/modals/UserModal.tsx:59 \u2014 the two spans are one implementation copied and then locally edited \u2014 57 tokens are still identical, in the same order in both files, with only local edits between them. The copies have already begun to drift, which is this row\u0027s finding: an edit made to one and not the other changes behaviour silently. Diff the two spans first to learn what genuinely differs, then extract the shared core into one module both sites use, passing the differences in as parameters \u2014 or, if one copy exists only because the other could not be imported from its context, make one of them the single source the other is generated or re-exported from. If one copy is no longer reachable, delete it rather than letting it shadow the live one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/modals/EventDetailsModal.tsx"},"region":{"startLine":17}}}],"partialFingerprints":{"codehealthFindingId/v1":"f421f98c5e62f2dbd4205b3f0fb2bc2f6514e11580e094a832a8474c0bbc2689"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block with local edits (10 matched lines \u00D7 2 locations): frontend/src/modals/HostLogsModal.tsx:19 \u00B7 frontend/src/modals/TwoFactorModal.tsx:335 \u2014 the two spans are one implementation copied and then locally edited \u2014 50 tokens are still identical, in the same order in both files, with only local edits between them. The copies have already begun to drift, which is this row\u0027s finding: an edit made to one and not the other changes behaviour silently. Diff the two spans first to learn what genuinely differs, then extract the shared core into one module both sites use, passing the differences in as parameters \u2014 or, if one copy exists only because the other could not be imported from its context, make one of them the single source the other is generated or re-exported from. If one copy is no longer reachable, delete it rather than letting it shadow the live one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/modals/HostLogsModal.tsx"},"region":{"startLine":19}}}],"partialFingerprints":{"codehealthFindingId/v1":"e3c5d00026eaed12443d780bdd1ecbfffb2cf408231a9ad2aa7bfbebb5249e07"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (10 lines \u00D7 2 locations): frontend/src/pages/Login/index.tsx:57 \u00B7 frontend/src/pages/Login/index.tsx:128 \u2014 all 2 copies are in the same file, and the CITED SPAN is not a self-contained block \u2014 it runs from inside one construct into the next (the tail of a branch plus the head of the following one, a run of switch arms, the end of a declaration plus the list that follows it) rather than covering a whole unit. So do not lift these lines literally: no call can be substituted for a half-open construct. Extract the enclosing repeated UNIT instead \u2014 the whole function, component or branch these lines sit in \u2014 and where the repetition IS the construct (a run of switch arms, a stack of near-identical declarations) replace it with one table or registry looked up by key rather than a helper each arm calls. The copies still drift apart the first time only one of them is edited, which is why this is reported."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Login/index.tsx"},"region":{"startLine":57}}}],"partialFingerprints":{"codehealthFindingId/v1":"2d91ec5f06c8bb239e04c66e214bb78b7ed15d0a6e85e12ffd8b9fa463c3c81f"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (9 lines \u00D7 2 locations): backend/internal/2fa.js:231 \u00B7 backend/internal/2fa.js:277 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/2fa.js"},"region":{"startLine":231}}}],"partialFingerprints":{"codehealthFindingId/v1":"6e014ea26817dd6c88e2b53f45ff4017c2c9dcc6d1098140cfc66b73f6f31341"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (9 lines \u00D7 2 locations): backend/internal/access-list.js:257 \u00B7 backend/internal/access-list.js:383 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/access-list.js"},"region":{"startLine":257}}}],"partialFingerprints":{"codehealthFindingId/v1":"2cf27ff9c07c022448554c319bbf9032e078eb6c1e815359b65ee4d16eeedb06"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (9 lines \u00D7 2 locations): backend/internal/certificate.js:875 \u00B7 backend/internal/certificate.js:1053 \u2014 all 2 copies are in the same file, and the CITED SPAN is not a self-contained block \u2014 it runs from inside one construct into the next (the tail of a branch plus the head of the following one, a run of switch arms, the end of a declaration plus the list that follows it) rather than covering a whole unit. So do not lift these lines literally: no call can be substituted for a half-open construct. Extract the enclosing repeated UNIT instead \u2014 the whole function, component or branch these lines sit in \u2014 and where the repetition IS the construct (a run of switch arms, a stack of near-identical declarations) replace it with one table or registry looked up by key rather than a helper each arm calls. The copies still drift apart the first time only one of them is edited, which is why this is reported."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/certificate.js"},"region":{"startLine":875}}}],"partialFingerprints":{"codehealthFindingId/v1":"10c4f2e0bdc4034e7068739c37d7ae54942495f9caf00b761a221b1317799598"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (9 lines \u00D7 3 locations): backend/internal/redirection-host.js:357 \u00B7 backend/internal/stream.js:306 \u00B7 backend/internal/user.js:430 \u2014 the 3 copies are spread across 3 files, and the CITED SPAN is not a self-contained block \u2014 it runs from inside one construct into the next (the tail of a branch plus the head of the following one, a run of switch arms, the end of a declaration plus the list that follows it) rather than covering a whole unit. So do not lift these lines literally: no call can be substituted for a half-open construct. Extract the enclosing repeated UNIT instead \u2014 the whole function, component or branch these lines sit in \u2014 and where the repetition IS the construct (a run of switch arms, a stack of near-identical declarations) replace it with one table or registry looked up by key rather than a helper each arm calls. The copies still drift apart the first time only one of them is edited, which is why this is reported."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/redirection-host.js"},"region":{"startLine":357}}}],"partialFingerprints":{"codehealthFindingId/v1":"7d81a210398a7b65198a9577bc32f4fba78e11a69042130f75883c01a6022985"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (9 lines \u00D7 2 locations): backend/internal/setting.js:17 \u00B7 backend/internal/user.js:444 \u2014 the 2 copies are spread across 2 files, and the CITED SPAN is not a self-contained block \u2014 it runs from inside one construct into the next (the tail of a branch plus the head of the following one, a run of switch arms, the end of a declaration plus the list that follows it) rather than covering a whole unit. So do not lift these lines literally: no call can be substituted for a half-open construct. Extract the enclosing repeated UNIT instead \u2014 the whole function, component or branch these lines sit in \u2014 and where the repetition IS the construct (a run of switch arms, a stack of near-identical declarations) replace it with one table or registry looked up by key rather than a helper each arm calls. The copies still drift apart the first time only one of them is edited, which is why this is reported."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/setting.js"},"region":{"startLine":17}}}],"partialFingerprints":{"codehealthFindingId/v1":"9ab04d4f3a5845b790ba03c668c4a461973342f2e0c1d227a53e1da3f83b16fb"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (9 lines \u00D7 8 locations): backend/migrations/20180618015850_initial.js:39 \u00B7 backend/migrations/20180618015850_initial.js:78 \u00B7 backend/migrations/20180618015850_initial.js:97 \u00B7 backend/migrations/20180618015850_initial.js:113 \u00B7 \u002B4 more site(s) not listed \u2014 all 8 copies are in the same file, and the CITED SPAN is not a self-contained block \u2014 it runs from inside one construct into the next (the tail of a branch plus the head of the following one, a run of switch arms, the end of a declaration plus the list that follows it) rather than covering a whole unit. So do not lift these lines literally: no call can be substituted for a half-open construct. Extract the enclosing repeated UNIT instead \u2014 the whole function, component or branch these lines sit in \u2014 and where the repetition IS the construct (a run of switch arms, a stack of near-identical declarations) replace it with one table or registry looked up by key rather than a helper each arm calls. The copies still drift apart the first time only one of them is edited, which is why this is reported."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/migrations/20180618015850_initial.js"},"region":{"startLine":39}}}],"partialFingerprints":{"codehealthFindingId/v1":"0cecfbd24ee70977260bef120d53fe3f543f8bd7c2b6583b1fb41b8839938aff"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (9 lines \u00D7 8 locations): backend/migrations/20200410143839_access_list_client.js:31 \u00B7 backend/migrations/20201014143841_pass_auth.js:18 \u00B7 backend/migrations/20210210154702_redirection_scheme.js:18 \u00B7 backend/migrations/20210210154703_redirection_status_code.js:18 \u00B7 \u002B4 more site(s) not listed \u2014 the 8 copies are spread across 8 files, and the CITED SPAN is not a self-contained block \u2014 it runs from inside one construct into the next (the tail of a branch plus the head of the following one, a run of switch arms, the end of a declaration plus the list that follows it) rather than covering a whole unit. So do not lift these lines literally: no call can be substituted for a half-open construct. Extract the enclosing repeated UNIT instead \u2014 the whole function, component or branch these lines sit in \u2014 and where the repetition IS the construct (a run of switch arms, a stack of near-identical declarations) replace it with one table or registry looked up by key rather than a helper each arm calls. The copies still drift apart the first time only one of them is edited, which is why this is reported."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/migrations/20200410143839_access_list_client.js"},"region":{"startLine":31}}}],"partialFingerprints":{"codehealthFindingId/v1":"7222c108e130a69842b64f100e6ae66e27a4f4c0a3fc56eaa6d9ee176cd2de17"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (9 lines \u00D7 2 locations): backend/routes/nginx/certificates.js:57 \u00B7 backend/routes/nginx/certificates.js:120 \u2014 all 2 copies are in the same file, and the CITED SPAN is not a self-contained block \u2014 it runs from inside one construct into the next (the tail of a branch plus the head of the following one, a run of switch arms, the end of a declaration plus the list that follows it) rather than covering a whole unit. So do not lift these lines literally: no call can be substituted for a half-open construct. Extract the enclosing repeated UNIT instead \u2014 the whole function, component or branch these lines sit in \u2014 and where the repetition IS the construct (a run of switch arms, a stack of near-identical declarations) replace it with one table or registry looked up by key rather than a helper each arm calls. The copies still drift apart the first time only one of them is edited, which is why this is reported."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/routes/nginx/certificates.js"},"region":{"startLine":57}}}],"partialFingerprints":{"codehealthFindingId/v1":"afbc60e8f89e6fad97eff3c8fc7efe93302ae568aad8b5bcc6313f4adef7d47a"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (9 lines \u00D7 7 locations): frontend/src/api/backend/getAccessList.ts:5 \u00B7 frontend/src/api/backend/getAuditLog.ts:5 \u00B7 frontend/src/api/backend/getCertificate.ts:5 \u00B7 frontend/src/api/backend/getDeadHost.ts:5 \u00B7 \u002B3 more site(s) not listed \u2014 the 7 copies sit in sibling files in one directory, so check first whether one of them (or an existing module there) already owns this behaviour and the others should call it; otherwise extract it into one module in that directory and have each site call it. There is one copy in each of 7 separate files rather than several in one place, so check first whether these are sibling modules that each declare their own version of one shape \u2014 one per entity, per provider, per language. Where they are, no single extracted module collapses them: each module still has to be written, and what recurs is the TEMPLATE. The moves that do collapse a template are to generate these modules from the set they enumerate, or to replace the repeated construction with one factory each site calls with its own values \u2014 and where the set is the point, each module pinning one distinct thing, the repetition IS the enumeration and there is nothing to delete."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/api/backend/getAccessList.ts"},"region":{"startLine":5}}}],"partialFingerprints":{"codehealthFindingId/v1":"4d108a6df720fcfc681d66c5e4929eed7d7bcfe5060b1893d3da513b48750c13"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (9 lines \u00D7 8 locations): frontend/src/api/backend/getAccessList.ts:5 \u00B7 frontend/src/api/backend/getAuditLog.ts:5 \u00B7 frontend/src/api/backend/getCertificate.ts:5 \u00B7 frontend/src/api/backend/getDeadHost.ts:5 \u00B7 \u002B4 more site(s) not listed \u2014 the 8 copies sit in sibling files in one directory, so check first whether one of them (or an existing module there) already owns this behaviour and the others should call it; otherwise extract it into one module in that directory and have each site call it. There is one copy in each of 8 separate files rather than several in one place, so check first whether these are sibling modules that each declare their own version of one shape \u2014 one per entity, per provider, per language. Where they are, no single extracted module collapses them: each module still has to be written, and what recurs is the TEMPLATE. The moves that do collapse a template are to generate these modules from the set they enumerate, or to replace the repeated construction with one factory each site calls with its own values \u2014 and where the set is the point, each module pinning one distinct thing, the repetition IS the enumeration and there is nothing to delete."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/api/backend/getAccessList.ts"},"region":{"startLine":5}}}],"partialFingerprints":{"codehealthFindingId/v1":"84abb212e7f3fc0571c5804d270410054a7c056f4f595e323907deef41c1b097"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (9 lines \u00D7 8 locations): frontend/src/api/backend/getAccessLists.ts:5 \u00B7 frontend/src/api/backend/getAuditLogs.ts:5 \u00B7 frontend/src/api/backend/getCertificates.ts:5 \u00B7 frontend/src/api/backend/getDeadHosts.ts:5 \u00B7 \u002B4 more site(s) not listed \u2014 the 8 copies sit in sibling files in one directory, so check first whether one of them (or an existing module there) already owns this behaviour and the others should call it; otherwise extract it into one module in that directory and have each site call it. There is one copy in each of 8 separate files rather than several in one place, so check first whether these are sibling modules that each declare their own version of one shape \u2014 one per entity, per provider, per language. Where they are, no single extracted module collapses them: each module still has to be written, and what recurs is the TEMPLATE. The moves that do collapse a template are to generate these modules from the set they enumerate, or to replace the repeated construction with one factory each site calls with its own values \u2014 and where the set is the point, each module pinning one distinct thing, the repetition IS the enumeration and there is nothing to delete."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/api/backend/getAccessLists.ts"},"region":{"startLine":5}}}],"partialFingerprints":{"codehealthFindingId/v1":"6ad486c04aa457d91e7a00908f1702658b887c0e1567f2c9be3360fefb3e1ce8"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (9 lines \u00D7 9 locations): frontend/src/api/backend/getAccessLists.ts:5 \u00B7 frontend/src/api/backend/getAuditLogs.ts:5 \u00B7 frontend/src/api/backend/getCertificates.ts:5 \u00B7 frontend/src/api/backend/getDeadHosts.ts:5 \u00B7 \u002B5 more site(s) not listed \u2014 the 9 copies sit in sibling files in one directory, so check first whether one of them (or an existing module there) already owns this behaviour and the others should call it; otherwise extract it into one module in that directory and have each site call it. There is one copy in each of 9 separate files rather than several in one place, so check first whether these are sibling modules that each declare their own version of one shape \u2014 one per entity, per provider, per language. Where they are, no single extracted module collapses them: each module still has to be written, and what recurs is the TEMPLATE. The moves that do collapse a template are to generate these modules from the set they enumerate, or to replace the repeated construction with one factory each site calls with its own values \u2014 and where the set is the point, each module pinning one distinct thing, the repetition IS the enumeration and there is nothing to delete."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/api/backend/getAccessLists.ts"},"region":{"startLine":5}}}],"partialFingerprints":{"codehealthFindingId/v1":"c7b13b59b9e7bb7ded28fd000223ad42065ed826cc1095d388b2943557b3aaf9"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (9 lines \u00D7 2 locations): frontend/src/components/Table/Formatter/EventFormatter.tsx:41 \u00B7 frontend/src/components/Table/Formatter/EventFormatter.tsx:50 \u2014 all 2 copies are in the same file, and the CITED SPAN is not a self-contained block \u2014 it runs from inside one construct into the next (the tail of a branch plus the head of the following one, a run of switch arms, the end of a declaration plus the list that follows it) rather than covering a whole unit. So do not lift these lines literally: no call can be substituted for a half-open construct. Extract the enclosing repeated UNIT instead \u2014 the whole function, component or branch these lines sit in \u2014 and where the repetition IS the construct (a run of switch arms, a stack of near-identical declarations) replace it with one table or registry looked up by key rather than a helper each arm calls. The copies still drift apart the first time only one of them is edited, which is why this is reported."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/components/Table/Formatter/EventFormatter.tsx"},"region":{"startLine":41}}}],"partialFingerprints":{"codehealthFindingId/v1":"f1ae05e01aba5e771a4ba8b4319f9d51ab416b6dcb3366ed514cc86765383743"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (8 lines \u00D7 6 locations): backend/internal/access-list.js:268 \u00B7 backend/internal/certificate.js:296 \u00B7 backend/internal/dead-host.js:194 \u00B7 backend/internal/proxy-host.js:242 \u00B7 \u002B2 more site(s) not listed \u2014 the 6 copies sit in sibling files in one directory, so check first whether one of them (or an existing module there) already owns this behaviour and the others should call it; otherwise extract it into one module in that directory and have each site call it. There is one copy in each of 6 separate files rather than several in one place, so check first whether these are sibling modules that each declare their own version of one shape \u2014 one per entity, per provider, per language. Where they are, no single extracted module collapses them: each module still has to be written, and what recurs is the TEMPLATE. The moves that do collapse a template are to generate these modules from the set they enumerate, or to replace the repeated construction with one factory each site calls with its own values \u2014 and where the set is the point, each module pinning one distinct thing, the repetition IS the enumeration and there is nothing to delete."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/access-list.js"},"region":{"startLine":268}}}],"partialFingerprints":{"codehealthFindingId/v1":"f0003b54ac5af4c07f66f28faed96eea6096a07055bca62beb2befb6453b8a2a"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (8 lines \u00D7 5 locations): backend/internal/audit-log.js:25 \u00B7 backend/internal/dead-host.js:346 \u00B7 backend/internal/proxy-host.js:434 \u00B7 backend/internal/redirection-host.js:436 \u00B7 \u002B1 more site(s) not listed \u2014 the 5 copies sit in sibling files in one directory, so check first whether one of them (or an existing module there) already owns this behaviour and the others should call it; otherwise extract it into one module in that directory and have each site call it. There is one copy in each of 5 separate files rather than several in one place, so check first whether these are sibling modules that each declare their own version of one shape \u2014 one per entity, per provider, per language. Where they are, no single extracted module collapses them: each module still has to be written, and what recurs is the TEMPLATE. The moves that do collapse a template are to generate these modules from the set they enumerate, or to replace the repeated construction with one factory each site calls with its own values \u2014 and where the set is the point, each module pinning one distinct thing, the repetition IS the enumeration and there is nothing to delete."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/audit-log.js"},"region":{"startLine":25}}}],"partialFingerprints":{"codehealthFindingId/v1":"974943506cdb0d713cedc433371dcd013731b65f00efe3f4b7c5215fa3376eab"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (8 lines \u00D7 2 locations): backend/internal/certificate.js:811 \u00B7 backend/internal/certificate.js:972 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/certificate.js"},"region":{"startLine":811}}}],"partialFingerprints":{"codehealthFindingId/v1":"a2e3478869aa8042422af8b5c55098a6d418baf24c6db7a0f95b5334d3404832"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (8 lines \u00D7 2 locations): backend/internal/nginx.js:437 \u00B7 backend/internal/nginx.js:458 \u2014 all 2 copies are in the same file, and the CITED SPAN is not a self-contained block \u2014 it runs from inside one construct into the next (the tail of a branch plus the head of the following one, a run of switch arms, the end of a declaration plus the list that follows it) rather than covering a whole unit. So do not lift these lines literally: no call can be substituted for a half-open construct. Extract the enclosing repeated UNIT instead \u2014 the whole function, component or branch these lines sit in \u2014 and where the repetition IS the construct (a run of switch arms, a stack of near-identical declarations) replace it with one table or registry looked up by key rather than a helper each arm calls. The copies still drift apart the first time only one of them is edited, which is why this is reported."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/nginx.js"},"region":{"startLine":437}}}],"partialFingerprints":{"codehealthFindingId/v1":"ae7bc7a39612853e1c5d38bb5d6651d9dab0e8749e4b191335a923358d710223"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (8 lines \u00D7 4 locations): backend/lib/error.js:9 \u00B7 backend/lib/error.js:21 \u00B7 backend/lib/error.js:40 \u00B7 backend/lib/error.js:85 \u2014 all 4 copies are in the same file, and the CITED SPAN is not a self-contained block \u2014 it runs from inside one construct into the next (the tail of a branch plus the head of the following one, a run of switch arms, the end of a declaration plus the list that follows it) rather than covering a whole unit. So do not lift these lines literally: no call can be substituted for a half-open construct. Extract the enclosing repeated UNIT instead \u2014 the whole function, component or branch these lines sit in \u2014 and where the repetition IS the construct (a run of switch arms, a stack of near-identical declarations) replace it with one table or registry looked up by key rather than a helper each arm calls. The copies still drift apart the first time only one of them is edited, which is why this is reported."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/lib/error.js"},"region":{"startLine":9}}}],"partialFingerprints":{"codehealthFindingId/v1":"116b3defafaaede98b1ba6f9f61b697dca3f3d0f402bbbd8524ff6b16433f2bd"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (8 lines \u00D7 2 locations): backend/lib/error.js:25 \u00B7 backend/lib/error.js:80 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/lib/error.js"},"region":{"startLine":25}}}],"partialFingerprints":{"codehealthFindingId/v1":"64bfcf26352dcc5e83c34b157899852c113f074666936d1303b915c0fd904bec"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (8 lines \u00D7 2 locations): backend/migrations/20180618015850_initial.js:3 \u00B7 backend/migrations/20200410143839_access_list_client.js:3 \u2014 the 2 copies sit in sibling files in one directory, so check first whether one of them (or an existing module there) already owns this behaviour and the others should call it; otherwise extract it into one module in that directory and have each site call it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/migrations/20180618015850_initial.js"},"region":{"startLine":3}}}],"partialFingerprints":{"codehealthFindingId/v1":"be1e7f1f43b0e40db69c235bc44bc0a2483b61776d764ce447580b1a20bcc7bb"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (8 lines \u00D7 29 locations): backend/routes/audit-log.js:95 \u00B7 backend/routes/nginx/access_lists.js:112 \u00B7 backend/routes/nginx/access_lists.js:146 \u00B7 backend/routes/nginx/certificates.js:165 \u00B7 \u002B25 more site(s) not listed \u2014 the 29 copies are spread across 10 files, and the CITED SPAN is not a self-contained block \u2014 it runs from inside one construct into the next (the tail of a branch plus the head of the following one, a run of switch arms, the end of a declaration plus the list that follows it) rather than covering a whole unit. So do not lift these lines literally: no call can be substituted for a half-open construct. Extract the enclosing repeated UNIT instead \u2014 the whole function, component or branch these lines sit in \u2014 and where the repetition IS the construct (a run of switch arms, a stack of near-identical declarations) replace it with one table or registry looked up by key rather than a helper each arm calls. The copies still drift apart the first time only one of them is edited, which is why this is reported."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/routes/audit-log.js"},"region":{"startLine":95}}}],"partialFingerprints":{"codehealthFindingId/v1":"b1970feb546f6e3d13763fa8e7b34c6ba24ff9d81f05edd5d374e0a29b386a87"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (8 lines \u00D7 2 locations): backend/routes/ci.js:50 \u00B7 backend/routes/users.js:115 \u2014 the 2 copies are spread across 2 files, and the CITED SPAN is not a self-contained block \u2014 it runs from inside one construct into the next (the tail of a branch plus the head of the following one, a run of switch arms, the end of a declaration plus the list that follows it) rather than covering a whole unit. So do not lift these lines literally: no call can be substituted for a half-open construct. Extract the enclosing repeated UNIT instead \u2014 the whole function, component or branch these lines sit in \u2014 and where the repetition IS the construct (a run of switch arms, a stack of near-identical declarations) replace it with one table or registry looked up by key rather than a helper each arm calls. The copies still drift apart the first time only one of them is edited, which is why this is reported."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/routes/ci.js"},"region":{"startLine":50}}}],"partialFingerprints":{"codehealthFindingId/v1":"442072ca8d9604ded59855cc36130911cf26d04b624a946cd446f01ef9bc7290"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (8 lines \u00D7 2 locations): backend/routes/users.js:312 \u00B7 backend/routes/users.js:327 \u2014 all 2 copies are in the same file, and the CITED SPAN is not a self-contained block \u2014 it runs from inside one construct into the next (the tail of a branch plus the head of the following one, a run of switch arms, the end of a declaration plus the list that follows it) rather than covering a whole unit. So do not lift these lines literally: no call can be substituted for a half-open construct. Extract the enclosing repeated UNIT instead \u2014 the whole function, component or branch these lines sit in \u2014 and where the repetition IS the construct (a run of switch arms, a stack of near-identical declarations) replace it with one table or registry looked up by key rather than a helper each arm calls. The copies still drift apart the first time only one of them is edited, which is why this is reported."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/routes/users.js"},"region":{"startLine":312}}}],"partialFingerprints":{"codehealthFindingId/v1":"9d91630a67952159b71a67ff1ca23bc6e5bd89dd3c4338dfb56ada4020ed5531"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (8 lines \u00D7 8 locations): frontend/src/hooks/useAccessLists.ts:8 \u00B7 frontend/src/hooks/useAuditLogs.ts:8 \u00B7 frontend/src/hooks/useCertificates.ts:8 \u00B7 frontend/src/hooks/useDeadHosts.ts:8 \u00B7 \u002B4 more site(s) not listed \u2014 the 8 copies sit in sibling files in one directory, so check first whether one of them (or an existing module there) already owns this behaviour and the others should call it; otherwise extract it into one module in that directory and have each site call it. There is one copy in each of 8 separate files rather than several in one place, so check first whether these are sibling modules that each declare their own version of one shape \u2014 one per entity, per provider, per language. Where they are, no single extracted module collapses them: each module still has to be written, and what recurs is the TEMPLATE. The moves that do collapse a template are to generate these modules from the set they enumerate, or to replace the repeated construction with one factory each site calls with its own values \u2014 and where the set is the point, each module pinning one distinct thing, the repetition IS the enumeration and there is nothing to delete."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/hooks/useAccessLists.ts"},"region":{"startLine":8}}}],"partialFingerprints":{"codehealthFindingId/v1":"5071d132978d9f19b65d32b9cd5d6e71b42288cdd78df7a696d3556a6fd32385"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (8 lines \u00D7 2 locations): frontend/src/hooks/useCertificate.ts:8 \u00B7 frontend/src/hooks/useSetting.ts:8 \u2014 the 2 copies sit in sibling files in one directory, so check first whether one of them (or an existing module there) already owns this behaviour and the others should call it; otherwise extract it into one module in that directory and have each site call it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/hooks/useCertificate.ts"},"region":{"startLine":8}}}],"partialFingerprints":{"codehealthFindingId/v1":"aa7b341bf8f9c0a87ec73ee049e10ab8e9a173e400f2d0b1c92fdb0bdfb836da"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (8 lines \u00D7 3 locations): frontend/src/hooks/useCheckVersion.ts:1 \u00B7 frontend/src/hooks/useHealth.ts:1 \u00B7 frontend/src/hooks/useLogSources.ts:1 \u2014 the 3 copies are spread across 3 files, and the SHAPE of this repetition could not be determined. It is not a run of declarations, a listing, a declaration header, a type body or a slice through a construct \u2014 and it was not measured as a run of executable statements either, so this row cannot tell you whether a function can stand where these lines are. Read the two spans before acting, because the move is opposite in the two cases. Where they are statements, the ordinary answer holds: give the shared part one home and call it from each site. Where they turn out to be declarations, a literal\u0027s entries, or the cases of an enumeration, there is no call site to call anything from, and collapsing them would delete what each copy pins \u2014 a shared base type, a generated set, or one exported constant each site refers to is the move instead, and sometimes the honest answer is that there is nothing to extract at all. Reported because the copies drift apart the first time only one of them is edited, which is true whichever of those they are."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/hooks/useCheckVersion.ts"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"abdf2addadd88067a79f685776a840078575dd5863ef5539403a1e0d783523f3"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (8 lines \u00D7 2 locations): frontend/src/modals/AccessListModal.tsx:14 \u00B7 frontend/src/modals/DeadHostModal.tsx:19 \u2014 the 2 copies are spread across 2 files, and the SHAPE of this repetition could not be determined. It is not a run of declarations, a listing, a declaration header, a type body or a slice through a construct \u2014 and it was not measured as a run of executable statements either, so this row cannot tell you whether a function can stand where these lines are. Read the two spans before acting, because the move is opposite in the two cases. Where they are statements, the ordinary answer holds: give the shared part one home and call it from each site. Where they turn out to be declarations, a literal\u0027s entries, or the cases of an enumeration, there is no call site to call anything from, and collapsing them would delete what each copy pins \u2014 a shared base type, a generated set, or one exported constant each site refers to is the move instead, and sometimes the honest answer is that there is nothing to extract at all. Reported because the copies drift apart the first time only one of them is edited, which is true whichever of those they are."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/modals/AccessListModal.tsx"},"region":{"startLine":14}}}],"partialFingerprints":{"codehealthFindingId/v1":"d07a1f535301980b87a0b3aa393d18991a32dfab6b84f4b83051b24f018bf00d"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (8 lines \u00D7 3 locations): frontend/src/modals/ChangePasswordModal.tsx:11 \u00B7 frontend/src/modals/ProxyHostModal.tsx:25 \u00B7 frontend/src/modals/StreamModal.tsx:12 \u2014 the 3 copies are spread across 3 files, and the SHAPE of this repetition could not be determined. It is not a run of declarations, a listing, a declaration header, a type body or a slice through a construct \u2014 and it was not measured as a run of executable statements either, so this row cannot tell you whether a function can stand where these lines are. Read the two spans before acting, because the move is opposite in the two cases. Where they are statements, the ordinary answer holds: give the shared part one home and call it from each site. Where they turn out to be declarations, a literal\u0027s entries, or the cases of an enumeration, there is no call site to call anything from, and collapsing them would delete what each copy pins \u2014 a shared base type, a generated set, or one exported constant each site refers to is the move instead, and sometimes the honest answer is that there is nothing to extract at all. Reported because the copies drift apart the first time only one of them is edited, which is true whichever of those they are."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/modals/ChangePasswordModal.tsx"},"region":{"startLine":11}}}],"partialFingerprints":{"codehealthFindingId/v1":"568642e8109f3166fd8807d693061ad4f659e3001337221087007f149426a7a0"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (8 lines \u00D7 6 locations): frontend/src/modals/PermissionsModal.tsx:214 \u00B7 frontend/src/modals/PermissionsModal.tsx:222 \u00B7 frontend/src/modals/PermissionsModal.tsx:230 \u00B7 frontend/src/modals/PermissionsModal.tsx:238 \u00B7 \u002B2 more site(s) not listed \u2014 all 6 copies are in the same file, and the CITED SPAN is a run of DECLARATIONS inside a construct \u2014 the members of a type, or the entries of an object or array literal \u2014 with no statement anywhere in it. Do not read this as an extract-a-helper row: nothing here executes, so there is no call site, and a call expression cannot stand where a member declaration or a literal\u0027s entry was. What repeats is a SHAPE, and which shape decides the move. Where the copies declare the same members, the repetition is a missing common ancestor: give it a base type, an interface both extend, a generic instantiated twice, or \u2014 where the copies are a literal\u0027s entries rather than a type\u0027s members \u2014 one shared constant each site spreads or refers to, so the set is written once. Where they declare DIFFERENT members and only the form is shared \u2014 a decorator and its options, an annotation, a registration table\u0027s keys \u2014 the form is prescribed by a framework or a schema rather than copied, and the only collapse available is to generate the declarations from that schema; where you do not own the generator, this is the cost of the framework and there is nothing to extract. Check which of the two it is before acting: these copies still drift apart the first time only one of them is edited, which is why the repetition is reported, but the sentence to act on is not the same in both cases."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/modals/PermissionsModal.tsx"},"region":{"startLine":214}}}],"partialFingerprints":{"codehealthFindingId/v1":"09ecb2e9e8b36f3fbd6b2b5316b6026a5f57350925b19bde8a5de0312362cb64"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (8 lines \u00D7 2 locations): frontend/src/pages/Certificates/Table.tsx:53 \u00B7 frontend/src/pages/Certificates/Table.tsx:81 \u2014 all 2 copies are in the same file, and the CITED SPAN is not a self-contained block \u2014 it runs from inside one construct into the next (the tail of a branch plus the head of the following one, a run of switch arms, the end of a declaration plus the list that follows it) rather than covering a whole unit. So do not lift these lines literally: no call can be substituted for a half-open construct. Extract the enclosing repeated UNIT instead \u2014 the whole function, component or branch these lines sit in \u2014 and where the repetition IS the construct (a run of switch arms, a stack of near-identical declarations) replace it with one table or registry looked up by key rather than a helper each arm calls. The copies still drift apart the first time only one of them is edited, which is why this is reported."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Certificates/Table.tsx"},"region":{"startLine":53}}}],"partialFingerprints":{"codehealthFindingId/v1":"0b8519f675da00b5e04d9421bfdac45eb66c92f99a0d325bf4675f0fe81301c9"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (8 lines \u00D7 7 locations): frontend/src/pages/Certificates/Table.tsx:74 \u00B7 frontend/src/pages/Nginx/DeadHosts/Table.tsx:60 \u00B7 frontend/src/pages/Nginx/ProxyHosts/Table.tsx:92 \u00B7 frontend/src/pages/Nginx/RedirectionHosts/Table.tsx:52 \u00B7 \u002B3 more site(s) not listed \u2014 the 7 copies are spread across 6 files, and the CITED SPAN is not a self-contained block \u2014 it runs from inside one construct into the next (the tail of a branch plus the head of the following one, a run of switch arms, the end of a declaration plus the list that follows it) rather than covering a whole unit. So do not lift these lines literally: no call can be substituted for a half-open construct. Extract the enclosing repeated UNIT instead \u2014 the whole function, component or branch these lines sit in \u2014 and where the repetition IS the construct (a run of switch arms, a stack of near-identical declarations) replace it with one table or registry looked up by key rather than a helper each arm calls. The copies still drift apart the first time only one of them is edited, which is why this is reported."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Certificates/Table.tsx"},"region":{"startLine":74}}}],"partialFingerprints":{"codehealthFindingId/v1":"37351b7ffa45a183340ffc9c32986e0c6a2e1dcf33dc45818ac163468a606ee7"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (7 lines \u00D7 3 locations): backend/internal/2fa.js:98 \u00B7 backend/internal/2fa.js:142 \u00B7 backend/internal/2fa.js:243 \u2014 all 3 copies are in the same file, and the CITED SPAN is not a self-contained block \u2014 it runs from inside one construct into the next (the tail of a branch plus the head of the following one, a run of switch arms, the end of a declaration plus the list that follows it) rather than covering a whole unit. So do not lift these lines literally: no call can be substituted for a half-open construct. Extract the enclosing repeated UNIT instead \u2014 the whole function, component or branch these lines sit in \u2014 and where the repetition IS the construct (a run of switch arms, a stack of near-identical declarations) replace it with one table or registry looked up by key rather than a helper each arm calls. The copies still drift apart the first time only one of them is edited, which is why this is reported."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/2fa.js"},"region":{"startLine":98}}}],"partialFingerprints":{"codehealthFindingId/v1":"152659fb3e326c699447a998ba007c1ea5c11e33e8bce5f86e009a7e53963a9a"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (7 lines \u00D7 2 locations): backend/internal/access-list.js:289 \u00B7 backend/internal/dead-host.js:211 \u2014 the 2 copies are spread across 2 files, and the CITED SPAN is not a self-contained block \u2014 it runs from inside one construct into the next (the tail of a branch plus the head of the following one, a run of switch arms, the end of a declaration plus the list that follows it) rather than covering a whole unit. So do not lift these lines literally: no call can be substituted for a half-open construct. Extract the enclosing repeated UNIT instead \u2014 the whole function, component or branch these lines sit in \u2014 and where the repetition IS the construct (a run of switch arms, a stack of near-identical declarations) replace it with one table or registry looked up by key rather than a helper each arm calls. The copies still drift apart the first time only one of them is edited, which is why this is reported."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/access-list.js"},"region":{"startLine":289}}}],"partialFingerprints":{"codehealthFindingId/v1":"abb38349d93091e9901914fadc1ee5a8a62239df8372bdbac101ee9ad1106a57"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (7 lines \u00D7 2 locations): backend/internal/ip_ranges.js:86 \u00B7 backend/internal/ip_ranges.js:93 \u2014 all 2 copies are in the same file, and the CITED SPAN is not a self-contained block \u2014 it runs from inside one construct into the next (the tail of a branch plus the head of the following one, a run of switch arms, the end of a declaration plus the list that follows it) rather than covering a whole unit. So do not lift these lines literally: no call can be substituted for a half-open construct. Extract the enclosing repeated UNIT instead \u2014 the whole function, component or branch these lines sit in \u2014 and where the repetition IS the construct (a run of switch arms, a stack of near-identical declarations) replace it with one table or registry looked up by key rather than a helper each arm calls. The copies still drift apart the first time only one of them is edited, which is why this is reported."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/ip_ranges.js"},"region":{"startLine":86}}}],"partialFingerprints":{"codehealthFindingId/v1":"b51d7f5f13ed0b9bb2e7d57c126d4f9014f090c179f40b61b23b5cee9f88d16c"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (7 lines \u00D7 3 locations): backend/migrations/20180618015850_initial.js:47 \u00B7 backend/migrations/20180618015850_initial.js:167 \u00B7 backend/migrations/20200410143839_access_list_client.js:18 \u2014 the 2 copies sit in sibling files in one directory, so check first whether one of them (or an existing module there) already owns this behaviour and the others should call it; otherwise extract it into one module in that directory and have each site call it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/migrations/20180618015850_initial.js"},"region":{"startLine":47}}}],"partialFingerprints":{"codehealthFindingId/v1":"ddebbfa280c7f7191f0d5c1f7d08a746fbd88d0cbe988dd0be02169c2ab0b796"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (7 lines \u00D7 2 locations): backend/migrations/20190218060101_hsts.js:21 \u00B7 backend/migrations/20190218060101_hsts.js:29 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/migrations/20190218060101_hsts.js"},"region":{"startLine":21}}}],"partialFingerprints":{"codehealthFindingId/v1":"8f5fe974f11a840ec109b58dee325fb2f947a3287b680ba262510c684b9816d2"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (7 lines \u00D7 20 locations): backend/routes/logs.js:98 \u00B7 backend/routes/nginx/access_lists.js:65 \u00B7 backend/routes/nginx/access_lists.js:130 \u00B7 backend/routes/nginx/certificates.js:68 \u00B7 \u002B16 more site(s) not listed \u2014 the 20 copies are spread across 10 files, and the CITED SPAN is not a self-contained block \u2014 it runs from inside one construct into the next (the tail of a branch plus the head of the following one, a run of switch arms, the end of a declaration plus the list that follows it) rather than covering a whole unit. So do not lift these lines literally: no call can be substituted for a half-open construct. Extract the enclosing repeated UNIT instead \u2014 the whole function, component or branch these lines sit in \u2014 and where the repetition IS the construct (a run of switch arms, a stack of near-identical declarations) replace it with one table or registry looked up by key rather than a helper each arm calls. The copies still drift apart the first time only one of them is edited, which is why this is reported."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/routes/logs.js"},"region":{"startLine":98}}}],"partialFingerprints":{"codehealthFindingId/v1":"5d92f04a038506d8b44cdeb0d3de8f42bd43b10bf1b418d4ef7de7bcc2ea8639"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (7 lines \u00D7 10 locations): backend/routes/nginx/certificates.js:293 \u00B7 backend/routes/nginx/dead_hosts.js:171 \u00B7 backend/routes/nginx/dead_hosts.js:198 \u00B7 backend/routes/nginx/proxy_hosts.js:172 \u00B7 \u002B6 more site(s) not listed \u2014 the 6 copies are spread across 2 directories, so the shared home is a decision rather than an obvious spot: check first whether one of them already owns this behaviour, and otherwise put the extracted module somewhere all of the sites already reach rather than making one of them depend on another."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/routes/nginx/certificates.js"},"region":{"startLine":293}}}],"partialFingerprints":{"codehealthFindingId/v1":"dbb108b7486e852656e72149baea7e530d11dc7bf06aba737c5598cf330a0cbd"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (7 lines \u00D7 3 locations): frontend/src/hooks/useAuditLog.ts:5 \u00B7 frontend/src/hooks/useCertificate.ts:5 \u00B7 frontend/src/hooks/useSetting.ts:5 \u2014 the 3 copies are spread across 3 files, and the CITED SPAN is not a self-contained block \u2014 it runs from inside one construct into the next (the tail of a branch plus the head of the following one, a run of switch arms, the end of a declaration plus the list that follows it) rather than covering a whole unit. So do not lift these lines literally: no call can be substituted for a half-open construct. Extract the enclosing repeated UNIT instead \u2014 the whole function, component or branch these lines sit in \u2014 and where the repetition IS the construct (a run of switch arms, a stack of near-identical declarations) replace it with one table or registry looked up by key rather than a helper each arm calls. The copies still drift apart the first time only one of them is edited, which is why this is reported."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/hooks/useAuditLog.ts"},"region":{"startLine":5}}}],"partialFingerprints":{"codehealthFindingId/v1":"9eb5def46dc0f2b5119626201a14973aa6123129a3d09bfb9944347327e3ad22"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (6 lines \u00D7 2 locations): backend/internal/certificate.js:192 \u00B7 backend/internal/certificate.js:919 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/certificate.js"},"region":{"startLine":192}}}],"partialFingerprints":{"codehealthFindingId/v1":"1331cd1098b2df394c04d0798d27fd2ba97e971f84004289c5118207f422e6de"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (6 lines \u00D7 2 locations): backend/internal/certificate.js:320 \u00B7 backend/internal/certificate.js:326 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/certificate.js"},"region":{"startLine":320}}}],"partialFingerprints":{"codehealthFindingId/v1":"e2e650f4e38d21a5ffc428dba31bb1ac698714ebc12a1049e11a4b14af4ada2c"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (6 lines \u00D7 2 locations): frontend/src/pages/Access/Table.tsx:38 \u00B7 frontend/src/pages/Access/Table.tsx:53 \u2014 all 2 copies are in the same file, and the CITED SPAN is not a self-contained block \u2014 it runs from inside one construct into the next (the tail of a branch plus the head of the following one, a run of switch arms, the end of a declaration plus the list that follows it) rather than covering a whole unit. So do not lift these lines literally: no call can be substituted for a half-open construct. Extract the enclosing repeated UNIT instead \u2014 the whole function, component or branch these lines sit in \u2014 and where the repetition IS the construct (a run of switch arms, a stack of near-identical declarations) replace it with one table or registry looked up by key rather than a helper each arm calls. The copies still drift apart the first time only one of them is edited, which is why this is reported."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Access/Table.tsx"},"region":{"startLine":38}}}],"partialFingerprints":{"codehealthFindingId/v1":"7e36b0f2b781effa35710ece2313b3ab6ac2dfef109fb1c12dd48feae0162f19"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (5 lines \u00D7 3 locations): backend/internal/2fa.js:46 \u00B7 backend/internal/2fa.js:153 \u00B7 backend/internal/2fa.js:254 \u2014 all 3 copies are in the same file, and the CITED SPAN is not a self-contained block \u2014 it runs from inside one construct into the next (the tail of a branch plus the head of the following one, a run of switch arms, the end of a declaration plus the list that follows it) rather than covering a whole unit. So do not lift these lines literally: no call can be substituted for a half-open construct. Extract the enclosing repeated UNIT instead \u2014 the whole function, component or branch these lines sit in \u2014 and where the repetition IS the construct (a run of switch arms, a stack of near-identical declarations) replace it with one table or registry looked up by key rather than a helper each arm calls. The copies still drift apart the first time only one of them is edited, which is why this is reported."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/2fa.js"},"region":{"startLine":46}}}],"partialFingerprints":{"codehealthFindingId/v1":"369ccb42f2ec6a345bfa2fe63804643c6d0be4af182f449cda6a2fc22d80cb80"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (5 lines \u00D7 2 locations): backend/internal/certificate.js:687 \u00B7 backend/internal/certificate.js:699 \u2014 both copies are in the same file, so extract the block into one function there and call it from each site \u2014 the copies drift apart the first time only one of them is edited."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/certificate.js"},"region":{"startLine":687}}}],"partialFingerprints":{"codehealthFindingId/v1":"33a0855546ed6619e62f6364b774b5d35ca29eb3a8615bf69de8b6ea41e0e4e9"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (5 lines \u00D7 7 locations): backend/migrations/20180618015850_initial.js:65 \u00B7 backend/migrations/20180618015850_initial.js:86 \u00B7 backend/migrations/20180618015850_initial.js:105 \u00B7 backend/migrations/20180618015850_initial.js:121 \u00B7 \u002B3 more site(s) not listed \u2014 all 7 copies are in the same file, so extract the block into one function there and call it from every one of those sites \u2014 resolving only two of them leaves the rest to drift apart the first time one is edited."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/migrations/20180618015850_initial.js"},"region":{"startLine":65}}}],"partialFingerprints":{"codehealthFindingId/v1":"76b3e778d04bf2f9306ca22a1404162bca920760ea95c7baa9f9991f43b0effa"}},{"ruleId":"R10","level":"warning","message":{"text":"Duplicated block (5 lines \u00D7 3 locations): frontend/src/modals/CustomCertificateModal.tsx:18 \u00B7 frontend/src/modals/DNSCertificateModal.tsx:16 \u00B7 frontend/src/modals/DeleteConfirmModal.tsx:24 \u2014 the 3 copies are spread across 3 files, and the CITED SPAN is not a self-contained block \u2014 it runs from inside one construct into the next (the tail of a branch plus the head of the following one, a run of switch arms, the end of a declaration plus the list that follows it) rather than covering a whole unit. So do not lift these lines literally: no call can be substituted for a half-open construct. Extract the enclosing repeated UNIT instead \u2014 the whole function, component or branch these lines sit in \u2014 and where the repetition IS the construct (a run of switch arms, a stack of near-identical declarations) replace it with one table or registry looked up by key rather than a helper each arm calls. The copies still drift apart the first time only one of them is edited, which is why this is reported."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/modals/CustomCertificateModal.tsx"},"region":{"startLine":18}}}],"partialFingerprints":{"codehealthFindingId/v1":"83d43a0d59fcf6907f8047b2e0dc9a88430e5d7cc3850917278f96b36e9ce2c6"}},{"ruleId":"R11","level":"warning","message":{"text":"Boundary violation [package:third-party-deep-import]: backend/lib/access.js:12 imports ajv/dist/2020.js, reaching past a declared dependency\u0027s public entry into its build output \u2014 that path is the package\u0027s toolchain layout, not its API, and a minor version bump can relocate it with no semver signal. Import from the package\u0027s documented entry point instead."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/lib/access.js"},"region":{"startLine":12}}}],"partialFingerprints":{"codehealthFindingId/v1":"b44c78085c108df62c0025321fbf313d8a5adb8ea0cba01291dabe730d032e36"}},{"ruleId":"R11","level":"warning","message":{"text":"Boundary violation [package:third-party-deep-import]: backend/lib/validator/api.js:2 imports ajv/dist/2020.js, reaching past a declared dependency\u0027s public entry into its build output \u2014 that path is the package\u0027s toolchain layout, not its API, and a minor version bump can relocate it with no semver signal. Import from the package\u0027s documented entry point instead."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/lib/validator/api.js"},"region":{"startLine":2}}}],"partialFingerprints":{"codehealthFindingId/v1":"9b19599cc9a34b82c52a9ad6ee5bb2ac12b89f80fa738a6f179a928a55b09be7"}},{"ruleId":"R11","level":"warning","message":{"text":"Boundary violation [package:third-party-deep-import]: backend/lib/validator/index.js:2 imports ajv/dist/2020.js, reaching past a declared dependency\u0027s public entry into its build output \u2014 that path is the package\u0027s toolchain layout, not its API, and a minor version bump can relocate it with no semver signal. Import from the package\u0027s documented entry point instead."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/lib/validator/index.js"},"region":{"startLine":2}}}],"partialFingerprints":{"codehealthFindingId/v1":"5fed02fd483a4b771091b3b7a45acd894d5673db10e7fc444b378f96973a4abe"}},{"ruleId":"R11","level":"warning","message":{"text":"Boundary violation [package:third-party-deep-import]: frontend/src/main.tsx:6 imports @tabler/core/dist/js/tabler.min.js, reaching past a declared dependency\u0027s public entry into its build output \u2014 that path is the package\u0027s toolchain layout, not its API, and a minor version bump can relocate it with no semver signal. Import from the package\u0027s documented entry point instead."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/main.tsx"},"region":{"startLine":6}}}],"partialFingerprints":{"codehealthFindingId/v1":"5210d745c51b725d3a18be90bf7640784d2942c02333d9bbf860374f143c7ebf"}},{"ruleId":"R2","level":"warning","message":{"text":"Complex function (anonymous) (cyclomatic 29, cognitive 24): (anonymous) has cyclomatic complexity 29 and cognitive complexity 24; this row is raised above a cyclomatic bar of 10. The two numbers answer different questions and the gap between them is what decides whether to act: cyclomatic counts the independent arms through the body, cognitive counts what it costs to hold them in your head, so nesting and mixed boolean chains raise it while a flat run of independent arms does not. Cognitive sits below cyclomatic here, so much of the count is breadth \u2014 arms side by side rather than stacked \u2014 and splitting per arm would leave a function per arm; group the work between the checks into named steps instead. Measured by this repository\u0027s own parse of the file, so a body assembled at runtime, or generated, is counted as written rather than as it executes."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/modals/ProxyHostModal.tsx"},"region":{"startLine":32}}}],"partialFingerprints":{"codehealthFindingId/v1":"c83166606b629aab1a53edbd78821a4320f4cf6b6011973c00c2852ed53a1ff7"}},{"ruleId":"R2","level":"warning","message":{"text":"Complex function configure (cyclomatic 25, cognitive 26): configure has cyclomatic complexity 25 and cognitive complexity 26; this row is raised above a cyclomatic bar of 10. The two numbers answer different questions and the gap between them is what decides whether to act: cyclomatic counts the independent arms through the body, cognitive counts what it costs to hold them in your head, so nesting and mixed boolean chains raise it while a flat run of independent arms does not. Cognitive is at or above cyclomatic here, so the branching is nested or entangled rather than laid out side by side \u2014 extracting each decision into its own named function is the change that pays. Measured by this repository\u0027s own parse of the file, so a body assembled at runtime, or generated, is counted as written rather than as it executes."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/lib/config.js"},"region":{"startLine":17}}}],"partialFingerprints":{"codehealthFindingId/v1":"3cb6e0b56b4ad25b7d89a93f4f435dce1e000aedb605dce7baadfbb688d7a1c3"}},{"ruleId":"R2","level":"warning","message":{"text":"Complex function (anonymous) (cyclomatic 20, cognitive 17): (anonymous) has cyclomatic complexity 20 and cognitive complexity 17; this row is raised above a cyclomatic bar of 10. The two numbers answer different questions and the gap between them is what decides whether to act: cyclomatic counts the independent arms through the body, cognitive counts what it costs to hold them in your head, so nesting and mixed boolean chains raise it while a flat run of independent arms does not. Cognitive sits below cyclomatic here, so much of the count is breadth \u2014 arms side by side rather than stacked \u2014 and splitting per arm would leave a function per arm; group the work between the checks into named steps instead. Measured by this repository\u0027s own parse of the file, so a body assembled at runtime, or generated, is counted as written rather than as it executes."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/modals/RedirectionHostModal.tsx"},"region":{"startLine":28}}}],"partialFingerprints":{"codehealthFindingId/v1":"b795a629868d1c667da3bf7cd9f43578e74c8dfebca5cff28b319500f314998a"}},{"ruleId":"R2","level":"warning","message":{"text":"Complex function LogViewer (cyclomatic 19, cognitive 18): LogViewer has cyclomatic complexity 19 and cognitive complexity 18; this row is raised above a cyclomatic bar of 10. The two numbers answer different questions and the gap between them is what decides whether to act: cyclomatic counts the independent arms through the body, cognitive counts what it costs to hold them in your head, so nesting and mixed boolean chains raise it while a flat run of independent arms does not. Cognitive sits below cyclomatic here, so much of the count is breadth \u2014 arms side by side rather than stacked \u2014 and splitting per arm would leave a function per arm; group the work between the checks into named steps instead. Measured by this repository\u0027s own parse of the file, so a body assembled at runtime, or generated, is counted as written rather than as it executes."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Logs/LogViewer.tsx"},"region":{"startLine":55}}}],"partialFingerprints":{"codehealthFindingId/v1":"7d0c50beadbe15d59ffe6fdd1d75baa63e570ff37d020d11d5c9439edd4cfd6e"}},{"ruleId":"R2","level":"warning","message":{"text":"Complex function update (cyclomatic 15, cognitive 20): update has cyclomatic complexity 15 and cognitive complexity 20; this row is raised above a cyclomatic bar of 10. The two numbers answer different questions and the gap between them is what decides whether to act: cyclomatic counts the independent arms through the body, cognitive counts what it costs to hold them in your head, so nesting and mixed boolean chains raise it while a flat run of independent arms does not. Cognitive is at or above cyclomatic here, so the branching is nested or entangled rather than laid out side by side \u2014 extracting each decision into its own named function is the change that pays. Measured by this repository\u0027s own parse of the file, so a body assembled at runtime, or generated, is counted as written rather than as it executes."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/access-list.js"},"region":{"startLine":133}}}],"partialFingerprints":{"codehealthFindingId/v1":"07ce5675aaea336ea613998d5537edde7eecb9a89e159346ba72d5437278637a"}},{"ruleId":"R2","level":"warning","message":{"text":"Complex function readLastLines (cyclomatic 14, cognitive 15): readLastLines has cyclomatic complexity 14 and cognitive complexity 15; this row is raised above a cyclomatic bar of 10. The two numbers answer different questions and the gap between them is what decides whether to act: cyclomatic counts the independent arms through the body, cognitive counts what it costs to hold them in your head, so nesting and mixed boolean chains raise it while a flat run of independent arms does not. Cognitive is at or above cyclomatic here, so the branching is nested or entangled rather than laid out side by side \u2014 extracting each decision into its own named function is the change that pays. Measured by this repository\u0027s own parse of the file, so a body assembled at runtime, or generated, is counted as written rather than as it executes."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/log-viewer.js"},"region":{"startLine":40}}}],"partialFingerprints":{"codehealthFindingId/v1":"507ee17bb2e47d27c7ff360b4d6197f896166f8d5c69f28de5f6bafac85987c2"}},{"ruleId":"R2","level":"warning","message":{"text":"Complex function SSLOptionsFields (cyclomatic 14, cognitive 12): SSLOptionsFields has cyclomatic complexity 14 and cognitive complexity 12; this row is raised above a cyclomatic bar of 10. The two numbers answer different questions and the gap between them is what decides whether to act: cyclomatic counts the independent arms through the body, cognitive counts what it costs to hold them in your head, so nesting and mixed boolean chains raise it while a flat run of independent arms does not. Cognitive sits below cyclomatic here, so much of the count is breadth \u2014 arms side by side rather than stacked \u2014 and splitting per arm would leave a function per arm; group the work between the checks into named steps instead. Measured by this repository\u0027s own parse of the file, so a body assembled at runtime, or generated, is counted as written rather than as it executes."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/components/Form/SSLOptionsFields.tsx"},"region":{"startLine":13}}}],"partialFingerprints":{"codehealthFindingId/v1":"7f30aad87259d3adde8c79a4931b4a6f82bddf0a847cf47eb2d902ebd9c4ae5c"}},{"ruleId":"R2","level":"warning","message":{"text":"Complex function (anonymous) (cyclomatic 13, cognitive 21): (anonymous) has cyclomatic complexity 13 and cognitive complexity 21; this row is raised above a cyclomatic bar of 10. The two numbers answer different questions and the gap between them is what decides whether to act: cyclomatic counts the independent arms through the body, cognitive counts what it costs to hold them in your head, so nesting and mixed boolean chains raise it while a flat run of independent arms does not. Cognitive is at or above cyclomatic here, so the branching is nested or entangled rather than laid out side by side \u2014 extracting each decision into its own named function is the change that pays. Measured by this repository\u0027s own parse of the file, so a body assembled at runtime, or generated, is counted as written rather than as it executes."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/host.js"},"region":{"startLine":124}}}],"partialFingerprints":{"codehealthFindingId/v1":"3e978419f811286173ba9c8d386ea74ec902e62ba813adede56f5f5b1d2c56c0"}},{"ruleId":"R2","level":"warning","message":{"text":"Complex function loadRenderRelations (cyclomatic 13, cognitive 16): loadRenderRelations has cyclomatic complexity 13 and cognitive complexity 16; this row is raised above a cyclomatic bar of 10. The two numbers answer different questions and the gap between them is what decides whether to act: cyclomatic counts the independent arms through the body, cognitive counts what it costs to hold them in your head, so nesting and mixed boolean chains raise it while a flat run of independent arms does not. Cognitive is at or above cyclomatic here, so the branching is nested or entangled rather than laid out side by side \u2014 extracting each decision into its own named function is the change that pays. Measured by this repository\u0027s own parse of the file, so a body assembled at runtime, or generated, is counted as written rather than as it executes."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/nginx.js"},"region":{"startLine":315}}}],"partialFingerprints":{"codehealthFindingId/v1":"ab34afe08e6222a1d1646593688cced7b30dab575f326e6fed1c56e3bda6eb5c"}},{"ruleId":"R2","level":"warning","message":{"text":"Complex function (anonymous) (cyclomatic 13, cognitive 14): (anonymous) has cyclomatic complexity 13 and cognitive complexity 14; this row is raised above a cyclomatic bar of 10. The two numbers answer different questions and the gap between them is what decides whether to act: cyclomatic counts the independent arms through the body, cognitive counts what it costs to hold them in your head, so nesting and mixed boolean chains raise it while a flat run of independent arms does not. Cognitive is at or above cyclomatic here, so the branching is nested or entangled rather than laid out side by side \u2014 extracting each decision into its own named function is the change that pays. Measured by this repository\u0027s own parse of the file, so a body assembled at runtime, or generated, is counted as written rather than as it executes."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/app.js"},"region":{"startLine":62}}}],"partialFingerprints":{"codehealthFindingId/v1":"fb5c1aa8c6517358001bb27ee3c3715f4735ec9864c4835968f1988e8155409a"}},{"ruleId":"R2","level":"warning","message":{"text":"Complex function renderContent (cyclomatic 12, cognitive 14): renderContent has cyclomatic complexity 12 and cognitive complexity 14; this row is raised above a cyclomatic bar of 10. The two numbers answer different questions and the gap between them is what decides whether to act: cyclomatic counts the independent arms through the body, cognitive counts what it costs to hold them in your head, so nesting and mixed boolean chains raise it while a flat run of independent arms does not. Cognitive is at or above cyclomatic here, so the branching is nested or entangled rather than laid out side by side \u2014 extracting each decision into its own named function is the change that pays. Measured by this repository\u0027s own parse of the file, so a body assembled at runtime, or generated, is counted as written rather than as it executes."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/modals/TwoFactorModal.tsx"},"region":{"startLine":106}}}],"partialFingerprints":{"codehealthFindingId/v1":"7fdcdf53d769bb2d563ae0034a3f2c3c843d37187c44ca528fff61817fbce768"}},{"ruleId":"R2","level":"warning","message":{"text":"Complex function getTokenFromEmail (cyclomatic 12, cognitive 11): getTokenFromEmail has cyclomatic complexity 12 and cognitive complexity 11; this row is raised above a cyclomatic bar of 10. The two numbers answer different questions and the gap between them is what decides whether to act: cyclomatic counts the independent arms through the body, cognitive counts what it costs to hold them in your head, so nesting and mixed boolean chains raise it while a flat run of independent arms does not. Cognitive sits below cyclomatic here, so much of the count is breadth \u2014 arms side by side rather than stacked \u2014 and splitting per arm would leave a function per arm; group the work between the checks into named steps instead. Measured by this repository\u0027s own parse of the file, so a body assembled at runtime, or generated, is counted as written rather than as it executes."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/token.js"},"region":{"startLine":24}}}],"partialFingerprints":{"codehealthFindingId/v1":"db5a205a3f1bb24e78ab8d12064ac3050de281769cfd63981930a5443e135334"}},{"ruleId":"R2","level":"warning","message":{"text":"Complex function handleChange (cyclomatic 12, cognitive 11): handleChange has cyclomatic complexity 12 and cognitive complexity 11; this row is raised above a cyclomatic bar of 10. The two numbers answer different questions and the gap between them is what decides whether to act: cyclomatic counts the independent arms through the body, cognitive counts what it costs to hold them in your head, so nesting and mixed boolean chains raise it while a flat run of independent arms does not. Cognitive sits below cyclomatic here, so much of the count is breadth \u2014 arms side by side rather than stacked \u2014 and splitting per arm would leave a function per arm; group the work between the checks into named steps instead. Measured by this repository\u0027s own parse of the file, so a body assembled at runtime, or generated, is counted as written rather than as it executes."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/components/Form/SSLCertificateField.tsx"},"region":{"startLine":50}}}],"partialFingerprints":{"codehealthFindingId/v1":"01364f060bfd163a7d93c030ee5502b337a834e4d8a579a7d6798f4f58a0cd2e"}},{"ruleId":"R2","level":"warning","message":{"text":"Complex function loadObjects (cyclomatic 11, cognitive 24): loadObjects has cyclomatic complexity 11 and cognitive complexity 24; this row is raised above a cyclomatic bar of 10. The two numbers answer different questions and the gap between them is what decides whether to act: cyclomatic counts the independent arms through the body, cognitive counts what it costs to hold them in your head, so nesting and mixed boolean chains raise it while a flat run of independent arms does not. Cognitive is at or above cyclomatic here, so the branching is nested or entangled rather than laid out side by side \u2014 extracting each decision into its own named function is the change that pays. Measured by this repository\u0027s own parse of the file, so a body assembled at runtime, or generated, is counted as written rather than as it executes."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/lib/access.js"},"region":{"startLine":118}}}],"partialFingerprints":{"codehealthFindingId/v1":"9d6e49b1cf729b0916f57264ac7e8b5f4dbc0534195b14d1917f7c509a03918e"}},{"ruleId":"R2","level":"warning","message":{"text":"Complex function init (cyclomatic 11, cognitive 16): init has cyclomatic complexity 11 and cognitive complexity 16; this row is raised above a cyclomatic bar of 10. The two numbers answer different questions and the gap between them is what decides whether to act: cyclomatic counts the independent arms through the body, cognitive counts what it costs to hold them in your head, so nesting and mixed boolean chains raise it while a flat run of independent arms does not. Cognitive is at or above cyclomatic here, so the branching is nested or entangled rather than laid out side by side \u2014 extracting each decision into its own named function is the change that pays. Measured by this repository\u0027s own parse of the file, so a body assembled at runtime, or generated, is counted as written rather than as it executes."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/lib/access.js"},"region":{"startLine":40}}}],"partialFingerprints":{"codehealthFindingId/v1":"c16c0023508b24a82f430c84a3a0a032145a3224465d0c69b7ff372b9667453d"}},{"ruleId":"R2","level":"warning","message":{"text":"Complex function (anonymous) (cyclomatic 11, cognitive 12): (anonymous) has cyclomatic complexity 11 and cognitive complexity 12; this row is raised above a cyclomatic bar of 10. The two numbers answer different questions and the gap between them is what decides whether to act: cyclomatic counts the independent arms through the body, cognitive counts what it costs to hold them in your head, so nesting and mixed boolean chains raise it while a flat run of independent arms does not. Cognitive is at or above cyclomatic here, so the branching is nested or entangled rather than laid out side by side \u2014 extracting each decision into its own named function is the change that pays. Measured by this repository\u0027s own parse of the file, so a body assembled at runtime, or generated, is counted as written rather than as it executes."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/nginx.js"},"region":{"startLine":224}}}],"partialFingerprints":{"codehealthFindingId/v1":"9ba0c3d9d6b472d3e6ea5badc41ae33e002b54738639e779556ef3fdfef61182"}},{"ruleId":"R2","level":"warning","message":{"text":"Complex function get (cyclomatic 11, cognitive 10): get has cyclomatic complexity 11 and cognitive complexity 10; this row is raised above a cyclomatic bar of 10. The two numbers answer different questions and the gap between them is what decides whether to act: cyclomatic counts the independent arms through the body, cognitive counts what it costs to hold them in your head, so nesting and mixed boolean chains raise it while a flat run of independent arms does not. Cognitive sits below cyclomatic here, so much of the count is breadth \u2014 arms side by side rather than stacked \u2014 and splitting per arm would leave a function per arm; group the work between the checks into named steps instead. Measured by this repository\u0027s own parse of the file, so a body assembled at runtime, or generated, is counted as written rather than as it executes."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/access-list.js"},"region":{"startLine":255}}}],"partialFingerprints":{"codehealthFindingId/v1":"e3e98b7c9620326ad151c572b5962f1f0d728d3927729d7c4b7e687cb8999c5e"}},{"ruleId":"R2","level":"warning","message":{"text":"Complex function TableWrapper (cyclomatic 11, cognitive 9): TableWrapper has cyclomatic complexity 11 and cognitive complexity 9; this row is raised above a cyclomatic bar of 10. The two numbers answer different questions and the gap between them is what decides whether to act: cyclomatic counts the independent arms through the body, cognitive counts what it costs to hold them in your head, so nesting and mixed boolean chains raise it while a flat run of independent arms does not. Cognitive sits below cyclomatic here, so much of the count is breadth \u2014 arms side by side rather than stacked \u2014 and splitting per arm would leave a function per arm; group the work between the checks into named steps instead. Measured by this repository\u0027s own parse of the file, so a body assembled at runtime, or generated, is counted as written rather than as it executes."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Access/TableWrapper.tsx"},"region":{"startLine":13}}}],"partialFingerprints":{"codehealthFindingId/v1":"ccf16034176a896411a87a3fc350c83c0a01fa6c6c078db1eb9eba480756ceb5"}},{"ruleId":"R2","level":"warning","message":{"text":"Complex function TableWrapper (cyclomatic 11, cognitive 9): TableWrapper has cyclomatic complexity 11 and cognitive complexity 9; this row is raised above a cyclomatic bar of 10. The two numbers answer different questions and the gap between them is what decides whether to act: cyclomatic counts the independent arms through the body, cognitive counts what it costs to hold them in your head, so nesting and mixed boolean chains raise it while a flat run of independent arms does not. Cognitive sits below cyclomatic here, so much of the count is breadth \u2014 arms side by side rather than stacked \u2014 and splitting per arm would leave a function per arm; group the work between the checks into named steps instead. Measured by this repository\u0027s own parse of the file, so a body assembled at runtime, or generated, is counted as written rather than as it executes."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/pages/Certificates/TableWrapper.tsx"},"region":{"startLine":20}}}],"partialFingerprints":{"codehealthFindingId/v1":"3685d01a83a2a4426777d0140d96de8c9ffe971c49c351a51e7abbdaa81643bf"}},{"ruleId":"R3","level":"warning","message":{"text":"backend/internal/certificate.js: 1168 lines of code: backend/internal/certificate.js has 1168 significant lines (blank lines excluded), over the 400-line bar, and contains logic \u2014 a file this long is usually several responsibilities in one module."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/certificate.js"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"454421891738351bfa1af9bbcac4053801ebb2a1a9b4302c45b1b4a04328e31b"}},{"ruleId":"R3","level":"warning","message":{"text":"backend/internal/access-list.js: 473 lines of code: backend/internal/access-list.js has 473 significant lines (blank lines excluded), over the 400-line bar, and contains logic \u2014 a file this long is usually several responsibilities in one module."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/access-list.js"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"41c8541d2c73a301e13c1870ce42db2ad38d71475076781a4589160894caf9d7"}},{"ruleId":"R3","level":"warning","message":{"text":"backend/internal/nginx.js: 466 lines of code: backend/internal/nginx.js has 466 significant lines (blank lines excluded), over the 400-line bar, and contains logic \u2014 a file this long is usually several responsibilities in one module."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/nginx.js"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"6708c5ccfac40d06e0d8899bae0be6effb5a032c52d9ba3c4fb3a51b9ed6fc3f"}},{"ruleId":"R3","level":"warning","message":{"text":"backend/internal/user.js: 457 lines of code: backend/internal/user.js has 457 significant lines (blank lines excluded), over the 400-line bar, and contains logic \u2014 a file this long is usually several responsibilities in one module."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/user.js"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"9e03dc2e1ce35134509aa33cf3f3e404b5fed83bcb28ef22ad22f42cadf795c2"}},{"ruleId":"R3","level":"warning","message":{"text":"backend/internal/redirection-host.js: 438 lines of code: backend/internal/redirection-host.js has 438 significant lines (blank lines excluded), over the 400-line bar, and contains logic \u2014 a file this long is usually several responsibilities in one module."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/redirection-host.js"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"0d2b7a036c3228feac9812f655c4914a11df62e41e2b7c541346b11f2358332e"}},{"ruleId":"R3","level":"warning","message":{"text":"backend/internal/proxy-host.js: 429 lines of code: backend/internal/proxy-host.js has 429 significant lines (blank lines excluded), over the 400-line bar, and contains logic \u2014 a file this long is usually several responsibilities in one module."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/proxy-host.js"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"49e0b9b7c9f9cf72e2772088766ffe61a6d1e13f76d6eee5321e40b81a8a6b14"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/certificate.js"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"8f2a80935b1f3471ceca19d1d6160f625a2d31173142e6840f98ee54e0227ad2"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/access-list.js"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"f83af56c5426766320634531a6081ac9d5eb1ad97c89cf3461dfa6043e501454"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/nginx.js"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"6b91bc73e1e0a715c1d3cb5e96808e8a36802c19f8d20d90f205932ece1a6ff0"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/user.js"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"f83af58686c8b2e19ebf824b00c93fd372c414e84246b910dca7bd45401668a5"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/redirection-host.js"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"095874ee92cd96ae3d5ff7c744bed377b94bbf746ec95e7b6b51024564666f68"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/proxy-host.js"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"3754bbbb35a87c874d3e89a001e60844a364a873299ccd2caa1584f5f0d8e2d3"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/stream.js"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"5e3e284ab176894a5df2fcec2d13d91718d3f6964c8264af50129335a0101981"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/routes/users.js"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"a23ccb9d60ae5155b73d14c219c62cd968f1157012bb519b91d63193e6099848"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/dead-host.js"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"f150e33b35408278a739f873cf61d8f3275bf77bfcb3b06f93d0a4bc3d1d8071"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/routes/nginx/certificates.js"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"434dee2b2d28370f68104729e054fcd96f4fa3dd35a48bfa86f3d5e82417ad99"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/2fa.js"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"a362e0673f68d33c3dc7dc39ed1e5c4392598a078f143e085822f250a53ddce9"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/lib/access.js"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"4fb5b7090fcf5233149ba779cc5b5ddd41b6479dc8126b3121543213c8ace4c1"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/lib/config.js"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"867c06aefc3b9930b21a9bda172f85ee2b457e9922c48033da90587fb6ac2449"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/routes/nginx/proxy_hosts.js"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"bcaa74d3f3482e5db23b1c74a27902144e5f2f86fcceb7599b7cb9f6867120bd"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/host.js"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"017487b4ecc3fde28860c1e1ed789a9dba86792056ee1072aa3a9afef12bf205"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/log-viewer.js"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"4ad3199d0250672b598fc22abff2a70ecb6b88058bd877ea4cbd9b608a038140"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/token.js"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"bcf511f030d06d191b79da8e9bdced3f3d2c9f4b35c53b8edbd942673b1b5367"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/routes/nginx/redirection_hosts.js"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"fb546dbee485421d9f73ce578cc3da73b794317bf4f12d518f4b48081adf98d7"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/routes/nginx/dead_hosts.js"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"ffa05cd85dfe9fad57ab0e1b2822056b1eabb4c82719202fbdc2f1a0569a4fd4"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/routes/nginx/streams.js"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"f7a3b99bb00e5a636e79c326bacac3ee47baae081499c81e36df3e8295ecb7c4"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/check-locales.cjs"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"f718242ecd96643adef8d7cce258536a6dbd3907e93e08c743fc2db011f86c13"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/ip_ranges.js"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"760217320242f13160e227ac3e9dbfe194db0a838dc792d56912d6591b6e0f0f"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/routes/nginx/access_lists.js"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"85d1ff6933e53e4fd9e529e774fed2cf34c662b52cc74f98a7e52c3c3befea4e"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/setup.js"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"6a4ce9de04c2153e864b520070b8a34dd1df2ffcae024e3c45e4ddb22f38c9ac"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/models/certificate.js"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"b6bd0f9aebbf591c94b9bbebe02dafa36c815015d6b5af106050ac7fe745141b"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/models/token.js"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"3b561328ba3c94d3be675dd86a339165b8ee8ba83b43a024c6463b913079456b"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/models/proxy_host.js"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"e100e6294ca2647c5539c12d031c1a008e0526a681f6260320a3bc9858f58bf0"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/logger.js"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"eea8be9a0e0a6b8cb82ce97d349f6f3df039cf47c62d1c880a47e6b845fa7cd0"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/setting.js"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"ad62521a3ae2ac2f0ebb1e373a21353ef4e569366f844e8882a9607845a705c4"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/models/redirection_host.js"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"3f6c1b7fabe40879b4417064a40f69622b261060064a94604b1cfef9391153ef"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/lib/error.js"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"079f8d09451fd8e8c1cbf44a793dd451deaa4b110b1616de9714bd5cfb3dc454"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/lib/utils.js"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"adec0e5dfbde335b596a9611ef60cdd456d3a5ecac957f636605895025124c9a"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/routes/logs.js"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"5bc6b205784687cc6cf87aff22c1c2c35c315fabccee758a03bd8dc8b7b423ee"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/models/dead_host.js"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"a04ea49a31adf8002e9b27c9d7f9e7705c9d5e014e25e4dfc8d044fc90a9abf5"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/routes/audit-log.js"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"ac0b744b0473421cc8db2a9b4c9cdb7f3b06c0b6d24776610d82ff984151afc3"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/models/access_list.js"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"e7dd48b44b2a897523d261b42a67174a6c1294f454631ae65311590f47f3b73a"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/routes/settings.js"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"4d3b8392797c571956b03619776a672babefcf2e69490a298112f7386e501882"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/audit-log.js"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"0b1d8609979877f798577f6d2b3cb410bff999a1afe230977bd4db3488b83f22"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/app.js"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"33f17e793726d8ff69ae05203496c76111a9b9dddb43c768e4f6fe32263799c9"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/models/auth.js"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"0ade7142901c8214c0a17789aa408edde7b9cb9859680ce12dfcba8877258727"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/lib/certbot.js"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"839497b7d294502adf74b050ce2cb113a4e2686002b9e7ab9bd62f653533f627"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/models/stream.js"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"1d4eec6d664179621237f3bd90209dc08d8d6426cd5cd6643be6e8d2307fa0b3"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/remote-version.js"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"7e767132fc0ee725c9b223c1f0c93f02aee83826b7e24596ab6e3863a7d927c8"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/routes/main.js"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"d2bacb25052e79f0d89851bffa3d72a4f34c2ec9af58dbae54d9ff4ad38ac91c"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/routes/tokens.js"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"80099da0e9dc8631bac54ab446f379ae95af9edaf9c58de10018d9a1adcbc1b2"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/locale/scripts/locale-sort.cjs"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"2eef2a909a2025255ef587297a0972c845992df850cfee5d45cfd7666001d63a"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/models/user.js"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"2a2967faaa1b554cfc56fd0c0dad602f53b6e468dd0bed1d988a13a93a835d31"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/lib/migrate_template.js"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"134d1d4e9ec83789b1d07d0525ee952710902e4b5acf14c4a79d8a4ea6b624ea"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/routes/ci.js"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"b56cb5c67e6a27e2bbf2bbb2302bae32b97b6b834272ebfa5ab130ad6ef08fd4"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/lib/helpers.js"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"d1aa3ac7d120528ce6e5216ed749fa42f9aa1dc65be917e310a92c08337abf07"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/index.js"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"66d6ebeb22628737ffe35cbfd4163ee9011620d835ca2b9a07091ab9ad2d62e9"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/lib/express/pagination.js"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"3dd096e2c48ff1ca326ebb17442c351af4d3df7c3c7a7043b68e2256a9f4b520"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/models/access_list_auth.js"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"fb5b3e6d7d3235546699a5c514c48a47dc7cf0edd53793298edbadee52872280"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/models/access_list_client.js"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"acc29f7562781ae7abd06a08628be703998884e7d04c2c7e632fe56d19ce59c0"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/models/audit-log.js"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"31e63a3fa5e31923a994d633eb8262488ed934e2b694397d2ab3f710c0d37fe0"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/lib/validator/index.js"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"afaf358a993c3fcbcc7d9e9aaeb0951dbb263ae9e78ecd00467e31b03db4fb65"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/lib/validator/api.js"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"1e2eebc7427977a09eb09a323a5f455a08b81668a27c11266931b164496790a3"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/routes/schema.js"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"147e447b316533368d0becfad91cea1af53dea5ec352b9e374584fc28bd3410a"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/db.js"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"aabeaa9cbb1f4a49173a6cadecab37657524ebdf606ecd12ee3c708f8705350e"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/App.tsx"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"2928f896312d144d12bbc5f366c02921611c7de1f2a94806feaf7d7be9800032"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/routes/version.js"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"999baec16121cf5f601d207cba9909e3651c632b14a325b8a0b1d27b8f64a47a"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/report.js"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"d645174f6a2e84ef1569f3a8d2c96c4ef4e69b5da7122dfeba44ffb9de5c4f59"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/routes/reports.js"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"be6338de58c6a84c087613cd555cfcf7402757e2c9ab8ae00744271be244f649"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/models/setting.js"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"b83e3657c6577e51f812a95c683d120beb236bb72bde9f50de53d45dd1bb9fc1"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/models/user_permission.js"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"78c88dcad72a103697bd10deddeeb12ec203345b367a53a15eec05f38967f6a2"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/main.tsx"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"607d579fa60dcd8658f05471f5d913ea8f65a79cf231f2a66b2f02a839810aa4"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/lib/express/cors.js"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"c693429361c537066249c72847d6e05c51d61d5713d5791be4e9a946138391f4"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/lib/express/jwt-decode.js"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"f4c8f85e74782b0bbf4a43d7e9a622c7c0e44ac215884b730a6ab2fb0cfcdceb"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/lib/express/jwt.js"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"4a72fbd6f7c6242cf2f0e462136316a26a5f9a5c49f5e0507616bd4c64b8985e"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/migrate.js"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"68a6517ac490686a226322a261bd41ad6298e4b0b29da174e73a296d47c14f2e"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/models/now_helper.js"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"fb78afb13ed45c050f647510b2e587ebd48a5757952b0c7cba450c05166fd385"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/lib/express/user-id-from-me.js"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"5fe255be06ea41174336d3d7190a8eadcccca728b3cb47da643c0ac15e9d5122"}},{"ruleId":"R4","level":"warning","message":{"text":"No test reaches this file: No test imports this module directly or transitively. Import reachability cannot see a test that executes a file by path instead of importing it, nor one that drives it through a running browser by navigating to a URL \u2014 if neither does, no test reaches this one."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/lib/express/log-request.js"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"1649721ef177c52fcb6fdde50f4de701823d8a9fa43aa50c5a6dbd6f06d30046"}},{"ruleId":"R7","level":"warning","message":{"text":"Dead file (~55 LoC): no import path from any entry point (19 application, 27 tooling, 25 test roots considered), and no other file in the scanned tree imports it \u2014 nothing in-repo names this module at all, which is the strongest form of this claim the import graph can make"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/lib/express/pagination.js"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"7442b2359f226caf71ee6acd6f460c7147321d0318583f543903bfc8461f5850"}},{"ruleId":"R7","level":"warning","message":{"text":"Dead file (~19 LoC): no import path from any entry point (19 application, 27 tooling, 25 test roots considered), and no other file in the scanned tree imports it \u2014 nothing in-repo names this module at all, which is the strongest form of this claim the import graph can make"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/knexfile.js"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"1d20fb575df1218982fd73db0d4f08bc4d7357c7f93fd65187deb3718225a7a8"}},{"ruleId":"R7","level":"note","message":{"text":"Unused export \u0027getSettings\u0027: Nothing ultimately consumes this binding: its only referrer is the re-export in frontend/src/api/backend/index.ts, whose re-exported name has no consumer either. Removing it is therefore not a one-file change \u2014 drop the re-export line in frontend/src/api/backend/index.ts in the same commit, or the barrel will import a name that no longer exists."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/api/backend/getSettings.ts"},"region":{"startLine":4}}}],"partialFingerprints":{"codehealthFindingId/v1":"246f2c88e5188555a73233d2a69e94dc7ad5454fe166cbf6e00c08c61f6b5b73"}},{"ruleId":"R7","level":"note","message":{"text":"Unused export \u0027tableSortToAPI\u0027: Nothing ultimately consumes this binding: its only referrer is the re-export in frontend/src/api/backend/index.ts, whose re-exported name has no consumer either. Removing it is therefore not a one-file change \u2014 drop the re-export line in frontend/src/api/backend/index.ts in the same commit, or the barrel will import a name that no longer exists."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/api/backend/helpers.ts"},"region":{"startLine":8}}}],"partialFingerprints":{"codehealthFindingId/v1":"04e4c05e706a5664e21ea4ea89dda92a96e1626b44c2c181507c80bd0565ddaf"}},{"ruleId":"R7","level":"note","message":{"text":"Unused export \u0027tableFiltersToAPI\u0027: Nothing ultimately consumes this binding: its only referrer is the re-export in frontend/src/api/backend/index.ts, whose re-exported name has no consumer either. Removing it is therefore not a one-file change \u2014 drop the re-export line in frontend/src/api/backend/index.ts in the same commit, or the barrel will import a name that no longer exists."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/api/backend/helpers.ts"},"region":{"startLine":25}}}],"partialFingerprints":{"codehealthFindingId/v1":"5a49a6d94b469b7362be6d26587fa22f0f50a5ede1245792d31da0214c4f6a32"}},{"ruleId":"R7","level":"note","message":{"text":"Unused export \u0027buildFilters\u0027: Nothing ultimately consumes this binding: its only referrer is the re-export in frontend/src/api/backend/index.ts, whose re-exported name has no consumer either. Removing it is therefore not a one-file change \u2014 drop the re-export line in frontend/src/api/backend/index.ts in the same commit, or the barrel will import a name that no longer exists."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/api/backend/helpers.ts"},"region":{"startLine":40}}}],"partialFingerprints":{"codehealthFindingId/v1":"e73ff43ec8f2047b508f7b134b21a5d6667e4809bc9d6ce0bc938ed3ccfd8719"}},{"ruleId":"R7","level":"note","message":{"text":"Unused export \u0027TablePagination\u0027: Nothing ultimately consumes this binding: its only referrer is the re-export in frontend/src/components/Table/index.ts, whose re-exported name has no consumer either. Removing it is therefore not a one-file change \u2014 drop the re-export line in frontend/src/components/Table/index.ts in the same commit, or the barrel will import a name that no longer exists."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/components/Table/TableHelpers.ts"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"a36b52be2a803f1386d74852722eed77487ffe67f53085434f859627e256e167"}},{"ruleId":"R7","level":"note","message":{"text":"Unused export \u0027TableSortBy\u0027: Nothing ultimately consumes this binding: its only referrer is the re-export in frontend/src/components/Table/index.ts, whose re-exported name has no consumer either. Removing it is therefore not a one-file change \u2014 drop the re-export line in frontend/src/components/Table/index.ts in the same commit, or the barrel will import a name that no longer exists."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/components/Table/TableHelpers.ts"},"region":{"startLine":7}}}],"partialFingerprints":{"codehealthFindingId/v1":"8950e48310a530e2a754b69f5d3ff73ef239faaa191d03e142d6de6d1d370ff5"}},{"ruleId":"R7","level":"note","message":{"text":"Unused export \u0027TableFilter\u0027: Nothing ultimately consumes this binding: its only referrer is the re-export in frontend/src/components/Table/index.ts, whose re-exported name has no consumer either. Removing it is therefore not a one-file change \u2014 drop the re-export line in frontend/src/components/Table/index.ts in the same commit, or the barrel will import a name that no longer exists."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/components/Table/TableHelpers.ts"},"region":{"startLine":12}}}],"partialFingerprints":{"codehealthFindingId/v1":"47f64fc188c013a39994684e5866f1eaaf96b1ffc0001c2843c24cd418371013"}},{"ruleId":"R7","level":"note","message":{"text":"Unused export \u0027default\u0027: Nothing ultimately consumes this binding: its only referrer is the re-export in frontend/src/context/index.ts, whose re-exported name has no consumer either. Removing it is therefore not a one-file change \u2014 drop the re-export line in frontend/src/context/index.ts in the same commit, or the barrel will import a name that no longer exists."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/context/AuthContext.tsx"},"region":{"startLine":127}}}],"partialFingerprints":{"codehealthFindingId/v1":"f112fd0da0dc60a5a4e2b2f3d527d4ccc3e194d16c14d605934682ca5ed9125d"}},{"ruleId":"R7","level":"note","message":{"text":"Unused export \u0027default\u0027: Nothing ultimately consumes this binding: its only referrer is the re-export in frontend/src/context/index.ts, whose re-exported name has no consumer either. Removing it is therefore not a one-file change \u2014 drop the re-export line in frontend/src/context/index.ts in the same commit, or the barrel will import a name that no longer exists."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/context/LocaleContext.tsx"},"region":{"startLine":38}}}],"partialFingerprints":{"codehealthFindingId/v1":"54d8b5182f161df116ae08d633b2076db91f16a3986707005ed9b9cd923db886"}},{"ruleId":"R7","level":"note","message":{"text":"Unused export \u0027default\u0027: Nothing imports this binding \u2014 it is safe to review for removal."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/locale/src/HelpDoc/index.ts"},"region":{"startLine":41}}}],"partialFingerprints":{"codehealthFindingId/v1":"6c8a3f2d60af4ad21524b9c60537d65e81014b4a9aea3269caeeffafc08f459f"}},{"ruleId":"R7","level":"note","message":{"text":"Unused export \u0027ALL\u0027: Nothing imports this binding \u2014 it is safe to review for removal."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/modules/Permissions.ts"},"region":{"startLine":16}}}],"partialFingerprints":{"codehealthFindingId/v1":"a56e8436b5b71c3520c90c682bf74f9e56e61ec823edc08d02b81d239357c4d2"}},{"ruleId":"R7","level":"note","message":{"text":"Unused export \u0027USER\u0027: Nothing imports this binding \u2014 it is safe to review for removal."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/modules/Permissions.ts"},"region":{"startLine":17}}}],"partialFingerprints":{"codehealthFindingId/v1":"e66a868cf23e32e580148b2435e5986f6f95966fa5679da7e7988b07c333af52"}},{"ruleId":"R7","level":"note","message":{"text":"Unused module-local declaration \u0027BACKEND_ERRORS_FILE\u0027: This top-level declaration is not exported and its name occurs nowhere else in its module \u2014 not called, read, typed against, re-exported or named by a string. Nothing outside the module can reach a non-exported binding, so this is the whole search: remove it, or use it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/check-locales.cjs"},"region":{"startLine":45}}}],"partialFingerprints":{"codehealthFindingId/v1":"e9d488425c78ad3c861cdf0d53287c0f7b62aa2bc2b63f0e8a1639858d595a29"}},{"ruleId":"R8","level":"warning","message":{"text":"Unused dependency \u0027better-sqlite3\u0027: Declared in backend/package.json but never imported anywhere in that package or its workspace members \u2014 no static import reaches it. Usually that is dead weight and attack surface, but two shapes are indistinguishable from source and are NOT dead: an optional or native peer that another dependency loads dynamically at runtime, and a package a build, docs or test step installs and invokes separately. Confirm which of the three this is before removing it."},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"f348568f090a6f3087bec0e2b204bee957ecab2b1f6d0e9f93cbd82151205270"}},{"ruleId":"R8","level":"warning","message":{"text":"Unused dependency \u0027mysql2\u0027: Declared in backend/package.json but never imported anywhere in that package or its workspace members \u2014 no static import reaches it. Usually that is dead weight and attack surface, but two shapes are indistinguishable from source and are NOT dead: an optional or native peer that another dependency loads dynamically at runtime, and a package a build, docs or test step installs and invokes separately. Confirm which of the three this is before removing it."},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"5d262f82f386cb054154ac8ed0527f3f75ba1e4409acc553d9579eac80d0bab2"}},{"ruleId":"R8","level":"warning","message":{"text":"Unused dependency \u0027pg\u0027: Declared in backend/package.json but never imported anywhere in that package or its workspace members \u2014 no static import reaches it. Usually that is dead weight and attack surface, but two shapes are indistinguishable from source and are NOT dead: an optional or native peer that another dependency loads dynamically at runtime, and a package a build, docs or test step installs and invokes separately. Confirm which of the three this is before removing it."},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"8a0ee88272b0024561ae18f9ddfaaf059127c89cb4f895a5181fccd57abebce1"}},{"ruleId":"R9","level":"error","message":{"text":"Import cycle (3 files): backend/internal/2fa.js \u2192 backend/internal/user.js \u2192 backend/internal/token.js \u2192 backend/internal/2fa.js"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/2fa.js"},"region":{"startLine":6}}}],"partialFingerprints":{"codehealthFindingId/v1":"b4d1ee258de8e1b9e8460d875d6e54749fe454271535969899b8bae22abf9f8c"}},{"ruleId":"R9","level":"error","message":{"text":"Import cycle (2 files): backend/lib/config.js \u2192 backend/logger.js \u2192 backend/lib/config.js"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/lib/config.js"},"region":{"startLine":3}}}],"partialFingerprints":{"codehealthFindingId/v1":"2394e6a4e0e579a1927a07fe81709a7201c4153456452cb8af1a07f876c95c06"}},{"ruleId":"R9","level":"error","message":{"text":"Import cycle (2 files): backend/models/access_list.js \u2192 backend/models/access_list_auth.js \u2192 backend/models/access_list.js (one verified cycle inside a mutually-dependent group of 8 files)"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/models/access_list.js"},"region":{"startLine":7}}}],"partialFingerprints":{"codehealthFindingId/v1":"c790fcb7bc2d33ef7f813aa39b6e64bd3e0ee97f173cde85a819b9b2c6af5209"}},{"ruleId":"R9","level":"error","message":{"text":"Import cycle (2 files): frontend/src/components/EmptyData.tsx \u2192 frontend/src/components/index.ts \u2192 frontend/src/components/EmptyData.tsx (one verified cycle inside a mutually-dependent group of 35 files)"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/components/EmptyData.tsx"},"region":{"startLine":4}}}],"partialFingerprints":{"codehealthFindingId/v1":"77f1552ff682ee856330f94691efd0ccd9b7f324728782966b5a5c1dc4bcea7a"}},{"ruleId":"X10","level":"note","message":{"text":"Duplicated predicate: \u0060form.errors.forwardScheme \u0026\u0026 form.touched.forwardScheme\u0060 appears character-identically in 2 files \u2014 frontend/src/modals/ProxyHostModal.tsx, frontend/src/modals/RedirectionHostModal.tsx. It is one line, so the duplication detector\u0027s token window never sees it; the copies drift when only one is corrected. Give the condition a name and one home."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/modals/ProxyHostModal.tsx"},"region":{"startLine":189}}}],"partialFingerprints":{"codehealthFindingId/v1":"228547d5f28fbc642fd7d4fa066d2ac129577f0531fff9a2670e82985ca2fb62"}},{"ruleId":"X10","level":"note","message":{"text":"Duplicated predicate: \u0060form.errors[field.name] \u0026\u0026 form.touched[field.name]\u0060 appears character-identically in 3 files \u2014 frontend/src/components/Form/AccessField.tsx, frontend/src/components/Form/DomainNamesField.tsx, frontend/src/components/Form/SSLCertificateField.tsx. It is one line, so the duplication detector\u0027s token window never sees it; the copies drift when only one is corrected. Give the condition a name and one home."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/components/Form/AccessField.tsx"},"region":{"startLine":115}}}],"partialFingerprints":{"codehealthFindingId/v1":"4d6b687cc71e715a22f7cf77d50eff1384578b4b6e8a054b0ac7e2c6dc1a8736"}},{"ruleId":"X10","level":"note","message":{"text":"Duplicated predicate: \u0060thisData.domain_names || row.domain_names\u0060 appears character-identically in 3 files \u2014 backend/internal/proxy-host.js, backend/internal/redirection-host.js, backend/internal/stream.js. It is one line, so the duplication detector\u0027s token window never sees it; the copies drift when only one is corrected. Give the condition a name and one home."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/proxy-host.js"},"region":{"startLine":161}}}],"partialFingerprints":{"codehealthFindingId/v1":"5e405a8b52f993f25d0dfbec21025c1bef94babc23135abf31beed8e73743772"}},{"ruleId":"X10","level":"note","message":{"text":"Duplicated predicate: \u0060typeof data.expand !== \u0022undefined\u0022 \u0026\u0026 data.expand !== null\u0060 appears character-identically in 3 files \u2014 backend/internal/audit-log.js, backend/internal/certificate.js, backend/internal/dead-host.js. It is one line, so the duplication detector\u0027s token window never sees it; the copies drift when only one is corrected. Give the condition a name and one home."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/audit-log.js"},"region":{"startLine":50}}}],"partialFingerprints":{"codehealthFindingId/v1":"c556a73a000c2c904addb0818fac6cd446c5489222d72ff506402b9838a78dc0"}},{"ruleId":"X10","level":"note","message":{"text":"Duplicated predicate: \u0060typeof data.omit !== \u0022undefined\u0022 \u0026\u0026 data.omit !== null\u0060 appears character-identically in 3 files \u2014 backend/internal/access-list.js, backend/internal/certificate.js, backend/internal/dead-host.js. It is one line, so the duplication detector\u0027s token window never sees it; the copies drift when only one is corrected. Give the condition a name and one home."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/access-list.js"},"region":{"startLine":288}}}],"partialFingerprints":{"codehealthFindingId/v1":"6d394adecd9c10767423a44ca65dfb49de297609210bb6105c28e27efb0aecad"}},{"ruleId":"X10","level":"note","message":{"text":"Duplicated predicate: \u0060typeof expand !== \u0022undefined\u0022 \u0026\u0026 expand !== null\u0060 appears character-identically in 8 files \u2014 backend/internal/access-list.js, backend/internal/audit-log.js, backend/internal/certificate.js, backend/internal/dead-host.js. It is one line, so the duplication detector\u0027s token window never sees it; the copies drift when only one is corrected. Give the condition a name and one home."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/access-list.js"},"region":{"startLine":407}}}],"partialFingerprints":{"codehealthFindingId/v1":"b0c6699792869ed6c5ea3ed618dfc7bd49d61982ef3d943b1eba2d846c4db0fe"}},{"ruleId":"X10","level":"note","message":{"text":"Duplicated predicate: \u0060typeof expand !== \u0022undefined\u0022 \u0026\u0026 expand !== null \u0026\u0026 expand.indexOf(\u0022certificate\u0022) !== -1\u0060 appears character-identically in 4 files \u2014 backend/internal/dead-host.js, backend/internal/proxy-host.js, backend/internal/redirection-host.js, backend/internal/stream.js. It is one line, so the duplication detector\u0027s token window never sees it; the copies drift when only one is corrected. Give the condition a name and one home."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/dead-host.js"},"region":{"startLine":357}}}],"partialFingerprints":{"codehealthFindingId/v1":"81f3fd0e96d699e69101d46e0ffb8d7723c3ebcbaeb6d2475bb1b5f2ac229a8c"}},{"ruleId":"X10","level":"note","message":{"text":"Duplicated predicate: \u0060typeof searchQuery === \u0022string\u0022 \u0026\u0026 searchQuery.length \u003E 0\u0060 appears character-identically in 3 files \u2014 backend/internal/audit-log.js, backend/internal/dead-host.js, backend/internal/proxy-host.js. It is one line, so the duplication detector\u0027s token window never sees it; the copies drift when only one is corrected. Give the condition a name and one home."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/audit-log.js"},"region":{"startLine":25}}}],"partialFingerprints":{"codehealthFindingId/v1":"dfb3a4e4c4e5608c4158d5a65293acd8bbc36336757b71174d1f5e090eda5455"}},{"ruleId":"X10","level":"note","message":{"text":"Duplicated predicate: \u0060typeof search_query === \u0022string\u0022 \u0026\u0026 search_query.length \u003E 0\u0060 appears character-identically in 2 files \u2014 backend/internal/redirection-host.js, backend/internal/stream.js. It is one line, so the duplication detector\u0027s token window never sees it; the copies drift when only one is corrected. Give the condition a name and one home."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/redirection-host.js"},"region":{"startLine":436}}}],"partialFingerprints":{"codehealthFindingId/v1":"55e99aca6773bb33eccf3a567b03998eabe06c630247e3a120e16af0e782e0b7"}},{"ruleId":"X10","level":"note","message":{"text":"Duplicated predicate: \u0060typeof thisData.expand !== \u0022undefined\u0022 \u0026\u0026 thisData.expand !== null\u0060 appears character-identically in 5 files \u2014 backend/internal/access-list.js, backend/internal/proxy-host.js, backend/internal/redirection-host.js, backend/internal/stream.js. It is one line, so the duplication detector\u0027s token window never sees it; the copies drift when only one is corrected. Give the condition a name and one home."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/access-list.js"},"region":{"startLine":275}}}],"partialFingerprints":{"codehealthFindingId/v1":"d01a5d5be67f9a92e3dc6caa7ed8173385aeb034cea6a9799cb0789522c98191"}},{"ruleId":"X10","level":"note","message":{"text":"Duplicated predicate: \u0060typeof thisData.omit !== \u0022undefined\u0022 \u0026\u0026 thisData.omit !== null\u0060 appears character-identically in 4 files \u2014 backend/internal/proxy-host.js, backend/internal/redirection-host.js, backend/internal/stream.js, backend/internal/user.js. It is one line, so the duplication detector\u0027s token window never sees it; the copies drift when only one is corrected. Give the condition a name and one home."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/proxy-host.js"},"region":{"startLine":261}}}],"partialFingerprints":{"codehealthFindingId/v1":"f7c3e71ef5b7710188e7f330ceefad1307e17fba7c57061aed703e537d64110c"}},{"ruleId":"X2","level":"note","message":{"text":"Not all async functions that make a request accept an AbortSignal: Only 4/5 async functions that make a cancellable request (fetch, axios, ky, ofetch) accept an AbortSignal or pass one on, so a request keeps running after whatever wanted it has given up \u2014 a page navigated away from, an unmounted component, a timed-out job. Take a \u0060signal\u0060 (or an options object that carries one) and hand it to the request; where nothing could ever cancel the call, omitting it is a deliberate choice \u2014 judge against how the function is used."},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"bd89d014f84408f7063269aa5892ba3df7c9af3e981ecfb0752c5731bc62d406"}},{"ruleId":"X2","level":"warning","message":{"text":"Async function without AbortSignal: download: \u0060download\u0060 awaits \u0060fetch(\u2026)\u0060 but neither accepts an AbortSignal nor passes one on, so its caller cannot stop the request once it has started. Accept \u0060{ signal }\u0060 and pass it through: \u0060fetch(url, { signal })\u0060."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"frontend/src/api/backend/base.ts"},"region":{"startLine":83}}}],"partialFingerprints":{"codehealthFindingId/v1":"f3e91ca0838c8e171efa6dfc6110c46ad67f30f5cd5d6456050742d04c3eda1c"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (empty catch): An empty catch block silently discards the error \u2014 failures vanish with no log and no rethrow. Log it, handle it, or don\u0027t catch it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/access-list.js"},"region":{"startLine":360}}}],"partialFingerprints":{"codehealthFindingId/v1":"6f15e7ddab2256d2e54708b6ae82b06c24c8922f2906c5ecb6e1d4e246f677ee"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (empty catch): An empty catch block silently discards the error \u2014 failures vanish with no log and no rethrow. Log it, handle it, or don\u0027t catch it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/internal/access-list.js"},"region":{"startLine":488}}}],"partialFingerprints":{"codehealthFindingId/v1":"d2e89c9627d1ca18bfe10dd5401ae3942be0e50fe34ccad08e12dd728abe2652"}},{"ruleId":"X3","level":"warning","message":{"text":"Swallowed exception (empty catch): An empty catch block silently discards the error \u2014 failures vanish with no log and no rethrow. Log it, handle it, or don\u0027t catch it."},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"backend/lib/config.js"},"region":{"startLine":25}}}],"partialFingerprints":{"codehealthFindingId/v1":"e8528af1e6536e5f6cd06c48c490f5327db441b5aa92b8d89b024cfaacb0c7af"}},{"ruleId":"X5","level":"note","message":{"text":"Strict null checking is not enabled everywhere the repository type-checks: 1/2 of this repository\u0027s type-checking configuration(s) turn on strict null checking (\u0060\u0022strict\u0022: true\u0060, or \u0060\u0022strictNullChecks\u0022: true\u0060). A configuration that states neither is counted as OFF, because off is tsc\u0027s own default; a solution-style one whose \u0060\u0022files\u0022\u0060 is empty and whose \u0060\u0022references\u0022\u0060 point at other projects is in neither number, because it checks no source itself. Where it is off, \u0060string\u0060 admits \u0060null\u0060 and \u0060undefined\u0060: passing a value that is null compiles silently and throws on the first property access."},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"8870f9ff7b17c2e14c5ba3bc13137b94673aad0b9498438c572dabb049852943"}}],"taxonomies":[{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d","organization":"MITRE","informationUri":"https://cwe.mitre.org/","isComprehensive":false,"shortDescription":{"text":"The MITRE Common Weakness Enumeration (CWE)."},"taxa":[{"id":"CWE-1032","guid":"5f21e517-68aa-a650-9a25-5771ef024637","name":"OWASP Top Ten \u2014 Security Misconfiguration category","shortDescription":{"text":"OWASP Top Ten \u2014 Security Misconfiguration category"},"helpUri":"https://cwe.mitre.org/data/definitions/1032.html"},{"id":"CWE-1059","guid":"a2381a08-60f6-9554-a8b8-f3018cfaaca5","name":"Insufficient Technical Documentation","shortDescription":{"text":"Insufficient Technical Documentation"},"helpUri":"https://cwe.mitre.org/data/definitions/1059.html"},{"id":"CWE-117","guid":"1cfadbc2-a979-485e-b768-c70fc922201e","name":"Improper Output Neutralization for Logs","shortDescription":{"text":"Improper Output Neutralization for Logs"},"helpUri":"https://cwe.mitre.org/data/definitions/117.html"},{"id":"CWE-125","guid":"98717707-96bf-ca5b-9568-8d1d257574c1","name":"CWE-125","shortDescription":{"text":"CWE-125"},"helpUri":"https://cwe.mitre.org/data/definitions/125.html"},{"id":"CWE-1321","guid":"0367a99b-2a5d-7b52-a83b-6f4196022556","name":"CWE-1321","shortDescription":{"text":"CWE-1321"},"helpUri":"https://cwe.mitre.org/data/definitions/1321.html"},{"id":"CWE-1357","guid":"e4d2e772-757e-0a5c-bd7d-77052949d866","name":"Reliance on Insufficiently Trustworthy Component","shortDescription":{"text":"Reliance on Insufficiently Trustworthy Component"},"helpUri":"https://cwe.mitre.org/data/definitions/1357.html"},{"id":"CWE-1395","guid":"800e09e7-c11a-8654-9fa6-86f398995fed","name":"Dependency on Vulnerable Third-Party Component","shortDescription":{"text":"Dependency on Vulnerable Third-Party Component"},"helpUri":"https://cwe.mitre.org/data/definitions/1395.html"},{"id":"CWE-16","guid":"659db3ea-affc-8453-8add-c1218fbfcb92","name":"Configuration","shortDescription":{"text":"Configuration"},"helpUri":"https://cwe.mitre.org/data/definitions/16.html"},{"id":"CWE-259","guid":"ae9ad959-fbb6-9d5e-892d-3dca66da0b69","name":"Use of Hard-coded Password","shortDescription":{"text":"Use of Hard-coded Password"},"helpUri":"https://cwe.mitre.org/data/definitions/259.html"},{"id":"CWE-290","guid":"379b1e66-a292-7b59-aa1e-a5bb4a6a99e9","name":"Authentication Bypass by Spoofing","shortDescription":{"text":"Authentication Bypass by Spoofing"},"helpUri":"https://cwe.mitre.org/data/definitions/290.html"},{"id":"CWE-319","guid":"7af97476-9f0d-4458-9163-3d2043918a1a","name":"Cleartext Transmission of Sensitive Information","shortDescription":{"text":"Cleartext Transmission of Sensitive Information"},"helpUri":"https://cwe.mitre.org/data/definitions/319.html"},{"id":"CWE-346","guid":"07c355cb-45b6-d05e-8a2c-9f686bc45618","name":"Origin Validation Error","shortDescription":{"text":"Origin Validation Error"},"helpUri":"https://cwe.mitre.org/data/definitions/346.html"},{"id":"CWE-353","guid":"09d7e902-d4ee-f05d-ae6c-0a1554d0c18f","name":"Missing Support for Integrity Check","shortDescription":{"text":"Missing Support for Integrity Check"},"helpUri":"https://cwe.mitre.org/data/definitions/353.html"},{"id":"CWE-441","guid":"e178bd69-b08f-835e-9f41-1c44fd667a98","name":"Unintended Proxy or Intermediary (\u0027Confused Deputy\u0027)","shortDescription":{"text":"Unintended Proxy or Intermediary (\u0027Confused Deputy\u0027)"},"helpUri":"https://cwe.mitre.org/data/definitions/441.html"},{"id":"CWE-444","guid":"8989da48-caaf-a955-b9ef-53767db527d8","name":"Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request Smuggling\u0027)","shortDescription":{"text":"Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request Smuggling\u0027)"},"helpUri":"https://cwe.mitre.org/data/definitions/444.html"},{"id":"CWE-494","guid":"b8a65e0d-e459-4a55-a931-fc1136482375","name":"Download of Code Without Integrity Check","shortDescription":{"text":"Download of Code Without Integrity Check"},"helpUri":"https://cwe.mitre.org/data/definitions/494.html"},{"id":"CWE-506","guid":"401d6455-56e3-0552-9a39-f77461673e3f","name":"Embedded Malicious Code","shortDescription":{"text":"Embedded Malicious Code"},"helpUri":"https://cwe.mitre.org/data/definitions/506.html"},{"id":"CWE-532","guid":"1cd8877a-76e8-ce54-b40b-779af23364a0","name":"Insertion of Sensitive Information into Log File","shortDescription":{"text":"Insertion of Sensitive Information into Log File"},"helpUri":"https://cwe.mitre.org/data/definitions/532.html"},{"id":"CWE-540","guid":"1a9db5db-e5bb-ae5d-935a-d1b4e9ee080b","name":"Inclusion of Sensitive Information in Source Code","shortDescription":{"text":"Inclusion of Sensitive Information in Source Code"},"helpUri":"https://cwe.mitre.org/data/definitions/540.html"},{"id":"CWE-732","guid":"1da27e8f-b330-7650-ab63-bd61953eae5d","name":"Incorrect Permission Assignment for Critical Resource","shortDescription":{"text":"Incorrect Permission Assignment for Critical Resource"},"helpUri":"https://cwe.mitre.org/data/definitions/732.html"},{"id":"CWE-77","guid":"332c8ade-6612-9f56-a06b-d8d90b1a8750","name":"Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)","shortDescription":{"text":"Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)"},"helpUri":"https://cwe.mitre.org/data/definitions/77.html"},{"id":"CWE-78","guid":"2e31ceaf-c7ae-2e5e-9661-cfb1362789cf","name":"Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)","shortDescription":{"text":"Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"},"helpUri":"https://cwe.mitre.org/data/definitions/78.html"},{"id":"CWE-79","guid":"fd45580b-e8c4-fc5e-8c2f-aa8fab0b4dbf","name":"Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)","shortDescription":{"text":"Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"},"helpUri":"https://cwe.mitre.org/data/definitions/79.html"},{"id":"CWE-798","guid":"5e8f057d-fee3-995a-a0cb-9fc5b0d174d1","name":"Use of Hard-coded Credentials","shortDescription":{"text":"Use of Hard-coded Credentials"},"helpUri":"https://cwe.mitre.org/data/definitions/798.html"},{"id":"CWE-829","guid":"13c33925-97fb-5a5e-b40c-56d328b8a4d7","name":"Inclusion of Functionality from Untrusted Control Sphere","shortDescription":{"text":"Inclusion of Functionality from Untrusted Control Sphere"},"helpUri":"https://cwe.mitre.org/data/definitions/829.html"},{"id":"CWE-89","guid":"6d08fdad-37eb-c150-bbf0-d7d946863407","name":"Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)","shortDescription":{"text":"Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)"},"helpUri":"https://cwe.mitre.org/data/definitions/89.html"},{"id":"CWE-937","guid":"16f316ae-415c-b354-a59b-1f7905f756e9","name":"Using Components with Known Vulnerabilities","shortDescription":{"text":"Using Components with Known Vulnerabilities"},"helpUri":"https://cwe.mitre.org/data/definitions/937.html"},{"id":"CWE-94","guid":"75e7f50c-6c2f-dd52-bf40-bf6c52b861fd","name":"Improper Control of Generation of Code (\u0027Code Injection\u0027)","shortDescription":{"text":"Improper Control of Generation of Code (\u0027Code Injection\u0027)"},"helpUri":"https://cwe.mitre.org/data/definitions/94.html"}]},{"name":"OWASP Top 10","guid":"7d1f0c2e-4b6a-4e39-9a51-0b2e8c3d5f61","version":"2025","organization":"OWASP Foundation","informationUri":"https://top10.owasp.org/2025/","isComprehensive":false,"shortDescription":{"text":"The OWASP Top 10:2025 web application security risks."},"taxa":[{"id":"A01:2025","guid":"df693558-c822-0452-8f7b-4d53cb6bcc59","name":"Broken Access Control","shortDescription":{"text":"Broken Access Control"},"helpUri":"https://top10.owasp.org/2025/A01_2025-Broken_Access_Control/"},{"id":"A02:2025","guid":"668dee9e-41bc-6354-97d0-fdf8f40c50c1","name":"Security Misconfiguration","shortDescription":{"text":"Security Misconfiguration"},"helpUri":"https://top10.owasp.org/2025/A02_2025-Security_Misconfiguration/"},{"id":"A03:2025","guid":"168e227c-7735-2e57-bc6e-997affe644c5","name":"Software Supply Chain Failures","shortDescription":{"text":"Software Supply Chain Failures"},"helpUri":"https://top10.owasp.org/2025/A03_2025-Software_Supply_Chain_Failures/"},{"id":"A04:2025","guid":"6a9f5bfd-1a56-6453-beec-a7eff0ba3007","name":"Cryptographic Failures","shortDescription":{"text":"Cryptographic Failures"},"helpUri":"https://top10.owasp.org/2025/A04_2025-Cryptographic_Failures/"},{"id":"A05:2025","guid":"87e86033-3231-8458-8e4a-5cb82743553a","name":"Injection","shortDescription":{"text":"Injection"},"helpUri":"https://top10.owasp.org/2025/A05_2025-Injection/"},{"id":"A06:2025","guid":"491554d7-b8e4-9652-91a9-53700dc92ece","name":"Insecure Design","shortDescription":{"text":"Insecure Design"},"helpUri":"https://top10.owasp.org/2025/A06_2025-Insecure_Design/"},{"id":"A07:2025","guid":"334ddd78-539d-d35c-83dd-253647eb7eaf","name":"Authentication Failures","shortDescription":{"text":"Authentication Failures"},"helpUri":"https://top10.owasp.org/2025/A07_2025-Authentication_Failures/"},{"id":"A08:2025","guid":"84b0c297-710e-9a5f-9335-936ecb260c36","name":"Software or Data Integrity Failures","shortDescription":{"text":"Software or Data Integrity Failures"},"helpUri":"https://top10.owasp.org/2025/A08_2025-Software_or_Data_Integrity_Failures/"},{"id":"A09:2025","guid":"78892bc9-3c98-495d-881c-8af1390d643c","name":"Security Logging \u0026 Alerting Failures","shortDescription":{"text":"Security Logging \u0026 Alerting Failures"},"helpUri":"https://top10.owasp.org/2025/A09_2025-Security_Logging_and_Alerting_Failures/"}]},{"name":"OWASP Top 10 CI/CD Security Risks","guid":"3c9b2a6e-5d14-4f7b-8e02-6a1d9c4b7f35","organization":"OWASP Foundation","informationUri":"https://owasp.org/www-project-top-10-ci-cd-security-risks/","isComprehensive":false,"shortDescription":{"text":"The OWASP Top 10 CI/CD Security Risks."},"taxa":[{"id":"CICD-SEC-3","guid":"458c83a6-ebf7-cf55-8cc3-b4d949bbf271","name":"Dependency Chain Abuse","shortDescription":{"text":"Dependency Chain Abuse"},"helpUri":"https://owasp.github.io/www-project-top-10-ci-cd-security-risks/CICD-SEC-03-Dependency-Chain-Abuse"},{"id":"CICD-SEC-5","guid":"cc7f4610-8859-e654-9029-d5f97d992220","name":"Insufficient PBAC (Pipeline-Based Access Controls)","shortDescription":{"text":"Insufficient PBAC (Pipeline-Based Access Controls)"},"helpUri":"https://owasp.github.io/www-project-top-10-ci-cd-security-risks/CICD-SEC-05-Insufficient-PBAC"}]}],"properties":{"codehealthPublication":{"public":true,"notice":"This is the PUBLIC form of this artifact. Findings are listed in full, but the details of SECURITY findings \u2014 which rule fired, in which file, on which line, and how to fix it \u2014 are deliberately withheld, and any secret-scanner results are excluded entirely. Where detail is absent here it was REMOVED FOR PUBLICATION; it is not missing from the analysis. The complete artifact is available from the repository owner.","securityFindingsRedacted":117,"secretScannerRunsExcluded":0}},"redactionTokens":["A security finding was recorded here. Its details are withheld on the public artifact \u2014 ask the repository owner for the full report."]}]}