{"$schema":"https://json.schemastore.org/sarif-2.1.0.json","version":"2.1.0","runs":[{"tool":{"driver":{"name":"codehealth","informationUri":"https://codehealth.canine.dev","rules":[{"id":"D1","name":"Cyclomatic Complexity","shortDescription":{"text":"Cyclomatic Complexity"},"helpUri":"https://codehealth.canine.dev/dimensions/D1"},{"id":"D2","name":"Cognitive Complexity","shortDescription":{"text":"Cognitive Complexity"},"helpUri":"https://codehealth.canine.dev/dimensions/D2"},{"id":"D3","name":"God Classes","shortDescription":{"text":"God Classes"},"helpUri":"https://codehealth.canine.dev/dimensions/D3"},{"id":"D4","name":"Code Duplication","shortDescription":{"text":"Code Duplication"},"helpUri":"https://codehealth.canine.dev/dimensions/D4"},{"id":"D5","name":"Coupling","shortDescription":{"text":"Coupling"},"helpUri":"https://codehealth.canine.dev/dimensions/D5"},{"id":"D6","name":"Cohesion (LCOM4)","shortDescription":{"text":"Cohesion (LCOM4)"},"helpUri":"https://codehealth.canine.dev/dimensions/D6"},{"id":"D8","name":"Code Coverage","shortDescription":{"text":"Code Coverage"},"helpUri":"https://codehealth.canine.dev/dimensions/D8"},{"id":"D9","name":"Test Distribution","shortDescription":{"text":"Test Distribution"},"helpUri":"https://codehealth.canine.dev/dimensions/D9"},{"id":"D10","name":"Test Quality","shortDescription":{"text":"Test Quality"},"helpUri":"https://codehealth.canine.dev/dimensions/D10"},{"id":"D11","name":"Test Reliability","shortDescription":{"text":"Test Reliability"},"helpUri":"https://codehealth.canine.dev/dimensions/D11"},{"id":"D12","name":"Dependency Hygiene","shortDescription":{"text":"Dependency Hygiene"},"helpUri":"https://codehealth.canine.dev/dimensions/D12"},{"id":"D13","name":"Secret Scanning","shortDescription":{"text":"Secret Scanning"},"helpUri":"https://codehealth.canine.dev/dimensions/D13","relationships":[{"target":{"id":"CWE-798","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},"kinds":["relevant"]}]},{"id":"D14","name":"License Compliance","shortDescription":{"text":"License Compliance"},"helpUri":"https://codehealth.canine.dev/dimensions/D14"},{"id":"D15","name":"Churn \u00D7 Complexity Hotspots","shortDescription":{"text":"Churn \u00D7 Complexity Hotspots"},"helpUri":"https://codehealth.canine.dev/dimensions/D15"},{"id":"D17","name":"Explicit Debt","shortDescription":{"text":"Explicit Debt"},"helpUri":"https://codehealth.canine.dev/dimensions/D17"},{"id":"D18","name":"Solution Shape","shortDescription":{"text":"Solution Shape"},"helpUri":"https://codehealth.canine.dev/dimensions/D18"},{"id":"D19","name":"Documentation Quality","shortDescription":{"text":"Documentation Quality"},"helpUri":"https://codehealth.canine.dev/dimensions/D19"},{"id":"D21","name":"Naming Consistency","shortDescription":{"text":"Naming Consistency"},"helpUri":"https://codehealth.canine.dev/dimensions/D21"},{"id":"D24","name":"Comment Value","shortDescription":{"text":"Comment Value"},"helpUri":"https://codehealth.canine.dev/dimensions/D24"},{"id":"D26","name":"Project Cohesion","shortDescription":{"text":"Project Cohesion"},"helpUri":"https://codehealth.canine.dev/dimensions/D26"},{"id":"D28","name":"Secrets (history)","shortDescription":{"text":"Secrets (history)"},"helpUri":"https://codehealth.canine.dev/dimensions/D28","relationships":[{"target":{"id":"CWE-798","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},"kinds":["relevant"]}]},{"id":"D29","name":"Static Analysis (SAST)","shortDescription":{"text":"Static Analysis (SAST)"},"helpUri":"https://codehealth.canine.dev/dimensions/D29"},{"id":"D33","name":"JS/npm Dependency Vulnerabilities","shortDescription":{"text":"JS/npm Dependency Vulnerabilities"},"helpUri":"https://codehealth.canine.dev/dimensions/D33","relationships":[{"target":{"id":"CWE-1395","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},"kinds":["relevant"]}]},{"id":"D35","name":"Change Coupling","shortDescription":{"text":"Change Coupling"},"helpUri":"https://codehealth.canine.dev/dimensions/D35"},{"id":"D38","name":"OSV Dependency Vulnerabilities","shortDescription":{"text":"OSV Dependency Vulnerabilities"},"helpUri":"https://codehealth.canine.dev/dimensions/D38","relationships":[{"target":{"id":"CWE-1395","toolComponent":{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d"}},"kinds":["relevant"]}]}]}},"results":[{"ruleId":"D8","level":"warning","message":{"text":"Coverage not measured: The test suite couldn\u0027t be built/run in-image and no coverage report is committed, so line coverage was not measured \u2014 and it is EXCLUDED from the score rather than scored on a LoC-ratio proxy. Commit the Cobertura/OpenCover/lcov report your CI already produces (anywhere in the repo), or make the suite runnable in-image, and real coverage will be measured."},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"62e63e619c28f057e129f2997c965d32a457366a9ce18ca019ffb6bdfba85c99"}},{"ruleId":"D12","level":"error","message":{"text":"Vulnerable: Microsoft.AspNetCore.App: Microsoft.AspNetCore.App [2.1.1, \u2014 ) severity. 2.1.1"},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"c72bbe4321fb127d6cc9b85658249b6ee2b3899889a565f12b3f98219478a284"}},{"ruleId":"D12","level":"error","message":{"text":"Vulnerable: Microsoft.NETCore.App: Microsoft.NETCore.App [2.1.0, \u2014 ) severity. 2.1.0"},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"3da898dbcce723c8ee1dc50d4d7951e2d5a14124438106622ae3d27bb04f52d0"}},{"ruleId":"D12","level":"warning","message":{"text":"Deprecated: Microsoft.NETCore.App: Microsoft.NETCore.App [2.1.0, \u2014 ) 2.1.0 Other,Legacy"},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"ce6d813d57adca232bc4212fbef3bebcacfb7b5c70c31743e424855fae79830b"}},{"ruleId":"D12","level":"warning","message":{"text":"Deprecated: xunit: xunit 2.3.1 \u2014 Legacy xunit.v3 \u003E= 0.0.0"},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"d37c8c0e8046c9e8358e976373216abfb78e9fdef63ed53d3edcaa7d2238edcd"}},{"ruleId":"D17","level":"warning","message":{"text":"BareSuppressMessage: SuppressMessage"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"Marketplace.Framework/Value.cs"},"region":{"startLine":12}}}],"partialFingerprints":{"codehealthFindingId/v1":"268a57e38db3b8759cd909f431b5c75e30e7ab85b267cefe313357fc7c518f36"}},{"ruleId":"D17","level":"error","message":{"text":"NoWarnInCsproj repeated across 13 files: The identical NoWarnInCsproj (\u00601591\u0060) appears in 13 files (13 occurrences) \u2014 a single repo-wide policy (e.g. a Directory.Build.props decision or an idiomatic suppression), not 13 independent debts. Decide it once centrally rather than file-by-file. (Every occurrence still counts toward the score and metrics.)"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"Marketplace/Marketplace.csproj"},"region":{"startLine":16}}}],"partialFingerprints":{"codehealthFindingId/v1":"8f34d0b62ca5db28114cb66a6d85b12067b2fe480fb77e2345276c883efcb108"}},{"ruleId":"D18","level":"warning","message":{"text":"Monorepo: only 1 of 13 solutions was scored: This repository contains 13 .NET solutions, but a scan analyzes ONE. Every score, lens, and finding here reflects only \u0060Chapter13/Marketplace.sln\u0060 \u2014 the other 12 (\u0060Chapter05/Marketplace.sln\u0060, \u0060Chapter06/Marketplace.sln\u0060, \u0060Chapter07/Marketplace.sln\u0060, \u0060Chapter08/before/Marketplace.sln\u0060, \u0060Chapter08/ef-core/Marketplace.sln\u0060, \u0060Chapter08/ravendb/Marketplace.sln\u0060, \u002B6 more) were not analyzed and are not represented in the headline. To cover them, scan each solution as its own target and group them in a Solution or Product for a portfolio roll-up. If a secondary solution is an archived or vendored tree, declare it \u2014 \u0060.gitattributes\u0060 (\u0060path/** linguist-vendored\u0060) or \u0060.editorconfig\u0060 (\u0060[path/**] generated_code = true\u0060) \u2014 to exclude it from discovery the same way generated code is."},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"2f573a231a4e53441c560ee904b1bbff8c611538fb4f470e901eed49f49f4cac"}},{"ruleId":"D18","level":"warning","message":{"text":"Analyzed solution does not cover the bulk of the repository: The scored solution \u0060Chapter13/Marketplace.sln\u0060 is not representative of this repository \u2014 it references only 116 of 684 discovered C# files (17 %). Lenses that need the product\u0027s source (domain modelling, event-driven, event sourcing) abstain because the aggregates, EF configs, and domain events under the product tree were not loaded. Point the scan at the product solution (or scan its directory directly) so the whole codebase is analyzed, not a build-tooling sub-solution."},"locations":[],"partialFingerprints":{"codehealthFindingId/v1":"076656354786513e81286bffc1f9f1d3fa9aa953b7db1b16e5bd8aeada3c8175"}},{"ruleId":"D24","level":"note","message":{"text":"redundant comment: \u0022we need to create a new Classified Ad here\u0022 \u2014 delete - the call is self-evident; the comment adds nothing"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"Marketplace/Api/ClassifiedAdsApplicationService.cs"},"region":{"startLine":7}}}],"partialFingerprints":{"codehealthFindingId/v1":"afc1e0c214fea04a33c2558734473ce70ec3ed890e824f7fe99b103d9b6ff69f"}},{"ruleId":"D24","level":"note","message":{"text":"redundant comment: \u0022ReSharper disable UnusedMember.Global\u0022 \u2014 ignore - it\u0027s an IDE/analyzers marker, not WHY"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"Marketplace/Startup.cs"},"region":{"startLine":8}}}],"partialFingerprints":{"codehealthFindingId/v1":"7e300ca1ef3a8b2bf29a241846efde8d58cc22e146c2371a9e0a5f0d6794b904"}},{"ruleId":"D38","level":"error","message":{"text":"Critical CVE: [GHSA redacted]: @babel/traverse: [GHSA redacted]"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"Chapter13/src/Marketplace/ClientApp/package-lock.json"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"670102189f16a18fa696401f3807da9efbe8864cf811c6ac517aac7d5a78b4a8"}},{"ruleId":"D38","level":"error","message":{"text":"Critical CVE: [GHSA redacted]: cipher-base: [GHSA redacted]"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"Chapter13/src/Marketplace/ClientApp/package-lock.json"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"6712f3900c69dd5b86bcbd59524198d91a9c8998fb533d7215a6f01e0d5606d3"}},{"ruleId":"D38","level":"error","message":{"text":"Critical CVE: [GHSA redacted]: ejs: [GHSA redacted]"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"Chapter13/src/Marketplace/ClientApp/package-lock.json"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"096b4012107a5730e24ea51e8f8563ca9d016b74c7ac8c85d25d27630aa1ef84"}},{"ruleId":"D38","level":"error","message":{"text":"Critical CVE: [GHSA redacted]: elliptic: [GHSA redacted]"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"Chapter13/src/Marketplace/ClientApp/package-lock.json"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"24e46e51b0db83944231f3ce339ccd7e1617575a08add2e94302ba231d685465"}},{"ruleId":"D38","level":"error","message":{"text":"Critical CVE: [GHSA redacted]: eslint-utils: [GHSA redacted]"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"Chapter13/src/Marketplace/ClientApp/package-lock.json"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"637cb4d8f3f7d27e0c356922ac0609f4708801edb9ab6cd8328b0148e00583d9"}},{"ruleId":"D38","level":"error","message":{"text":"Critical CVE: [GHSA redacted]: eventsource: [GHSA redacted]"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"Chapter13/src/Marketplace/ClientApp/package-lock.json"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"09efda595a1885f4f076a6f53c85a71f17fee98e461626bf4f3f5138e3c0c86f"}},{"ruleId":"D38","level":"error","message":{"text":"Critical CVE: [GHSA redacted]: form-data: [GHSA redacted]"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"Chapter13/src/Marketplace/ClientApp/package-lock.json"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"89f57629e8f627d3ceb4ea302c8900dc00a5cd6591aae34247280bee730f1d33"}},{"ruleId":"D38","level":"error","message":{"text":"Critical CVE: [GHSA redacted]: fsevents: [GHSA redacted]"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"Chapter13/src/Marketplace/ClientApp/package-lock.json"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"d262de4dfc468426c42120a93b3ce8c231e20a6f353aa6897776987da9906362"}},{"ruleId":"D38","level":"error","message":{"text":"Critical CVE: [GHSA redacted]: json-schema: [GHSA redacted]"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"Chapter13/src/Marketplace/ClientApp/package-lock.json"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"9e6ec7476c6752809092a4ee78285e2acf58d68b0699e32b6713bbfc675b7ed4"}},{"ruleId":"D38","level":"error","message":{"text":"Critical CVE: [GHSA redacted]: loader-utils: [GHSA redacted]"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"Chapter13/src/Marketplace/ClientApp/package-lock.json"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"3baebfbc11d883d3f4afd6a9add61a3b7fb4ac43dd0619a068058d493a1dcbb1"}},{"ruleId":"D38","level":"error","message":{"text":"Critical CVE: [GHSA redacted]: lodash: [GHSA redacted]"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"Chapter13/src/Marketplace/ClientApp/package-lock.json"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"d72c25c3f013b032596ba9ecb2f6c47ed9a8885c8604581e232d75e5aa8098d3"}},{"ruleId":"D38","level":"error","message":{"text":"Critical CVE: [GHSA redacted]: minimist: [GHSA redacted]"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"Chapter13/src/Marketplace/ClientApp/package-lock.json"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"ff61c05573210bfaa5d2c2dd10ca5b9eca4968c5e245b2a466edf407c5d24469"}},{"ruleId":"D38","level":"error","message":{"text":"Critical CVE: [GHSA redacted]: mixin-deep: [GHSA redacted]"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"Chapter13/src/Marketplace/ClientApp/package-lock.json"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"4c8e6958cc98467f0ca594b664cce78ded98702af1465dd8faa70e1a6e134688"}},{"ruleId":"D38","level":"error","message":{"text":"Critical CVE: [GHSA redacted]: pbkdf2: [GHSA redacted]"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"Chapter13/src/Marketplace/ClientApp/package-lock.json"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"3391cbf3d5c8052bd56d2bbebe35b8af74b371c0ec1aa920b52cea7cbbc93df5"}},{"ruleId":"D38","level":"error","message":{"text":"Critical CVE: [GHSA redacted]: pbkdf2: [GHSA redacted]"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"Chapter13/src/Marketplace/ClientApp/package-lock.json"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"08499014e01d5ec791e7994269bb1578093aa9f45916e4f6c2621bf8c3b5d40d"}},{"ruleId":"D38","level":"error","message":{"text":"Critical CVE: [GHSA redacted]: set-value: [GHSA redacted]"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"Chapter13/src/Marketplace/ClientApp/package-lock.json"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"ee66c4320a6b99573973b3026c68614b44faa5066aaf28531ad910beaaaf5f7e"}},{"ruleId":"D38","level":"error","message":{"text":"Critical CVE: [GHSA redacted]: sha.js: [GHSA redacted]"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"Chapter13/src/Marketplace/ClientApp/package-lock.json"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"d738f890c77926e9b6b9fecb02c409d5a9205ae3eeb7425ffb24d768b8a8479d"}},{"ruleId":"D38","level":"error","message":{"text":"Critical CVE: [GHSA redacted]: shell-quote: [GHSA redacted]"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"Chapter13/src/Marketplace/ClientApp/package-lock.json"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"19d24ba360c3a73ed16b8c361a8fec0f2e8dec54698c17f456c391035de892d5"}},{"ruleId":"D38","level":"error","message":{"text":"Critical CVE: [GHSA redacted]: socket.io-parser: [GHSA redacted]"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"Chapter13/src/Marketplace/ClientApp/package-lock.json"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"622f0426e3f256e6cf27101769af8d3aa9eb0d2f3eefef686d332747d738633d"}},{"ruleId":"D38","level":"error","message":{"text":"Critical CVE: [GHSA redacted]: url-parse: [GHSA redacted]"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"Chapter13/src/Marketplace/ClientApp/package-lock.json"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"9be50e6d5f586cd8bf385ddc0d77c1445e48b4ff8fa4054cc56fabe9dbc36529"}},{"ruleId":"D38","level":"error","message":{"text":"Critical CVE: [GHSA redacted]: xmlhttprequest-ssl: [GHSA redacted]"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"Chapter13/src/Marketplace/ClientApp/package-lock.json"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"ac6e6f00ff644f6dc156c4d56d4f8fb271659981c8197c01a11e9a19439d264a"}},{"ruleId":"D38","level":"error","message":{"text":"Critical CVE: [GHSA redacted]: xmlhttprequest-ssl: [GHSA redacted]"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"Chapter13/src/Marketplace/ClientApp/package-lock.json"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"49a33b5ccc0df2b4bf3fe94e90ef520173098f05702706f3b1ff35630995c6c4"}},{"ruleId":"D38","level":"error","message":{"text":"High CVE: [GHSA redacted]: acorn: [GHSA redacted]"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"Chapter13/src/Marketplace/ClientApp/package-lock.json"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"13e763a96abea0b5f43fd66e237650108fff97c2acdd5a7302ab7c7d739cf7ed"}},{"ruleId":"D38","level":"error","message":{"text":"High CVE: [GHSA redacted]: ansi-html: [GHSA redacted]"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"Chapter13/src/Marketplace/ClientApp/package-lock.json"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"24b2a4ca51d3c308e9aa1108a79801f1cb43953415d2850132a1a69825a504e5"}},{"ruleId":"D38","level":"error","message":{"text":"High CVE: [GHSA redacted]: ansi-regex: [GHSA redacted]"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"Chapter13/src/Marketplace/ClientApp/package-lock.json"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"c7889812e0fc74cc7e065924851245249580b0ded0b1efaf17fe30d9e4b05424"}},{"ruleId":"D38","level":"error","message":{"text":"High CVE: [GHSA redacted]: axios: [GHSA redacted]"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"Chapter13/src/Marketplace/ClientApp/package-lock.json"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"4e409a5e97d871163c2126084cde2401d1089c2359ebcc2816cfd35f7405dfd6"}},{"ruleId":"D38","level":"error","message":{"text":"High CVE: [GHSA redacted]: axios: [GHSA redacted]"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"Chapter13/src/Marketplace/ClientApp/package-lock.json"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"9ebe80614f121f51cf00864eaffe5c74c52f4108dae4a01bcfcbb98dbb0667e8"}},{"ruleId":"D38","level":"error","message":{"text":"High CVE: [GHSA redacted]: axios: [GHSA redacted]"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"Chapter13/src/Marketplace/ClientApp/package-lock.json"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"2d5e3c845db873cf63299ddf5f12ed7c87f0a4bdf9248d4f4f1b321200dea566"}},{"ruleId":"D38","level":"error","message":{"text":"High CVE: [GHSA redacted]: axios: [GHSA redacted]"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"Chapter13/src/Marketplace/ClientApp/package-lock.json"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"d4c63f573c4dfdffe0d2aa09f3e62c417a48fd2d866fcef95fbf4b7a36a107ac"}},{"ruleId":"D38","level":"error","message":{"text":"High CVE: [GHSA redacted]: axios: [GHSA redacted]"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"Chapter13/src/Marketplace/ClientApp/package-lock.json"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"3ccd345b08791aa3e61951c4f6889b7f5a98fd21cf1a68c76881c38edf8d69d2"}},{"ruleId":"D38","level":"error","message":{"text":"High CVE: [GHSA redacted]: axios: [GHSA redacted]"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"Chapter13/src/Marketplace/ClientApp/package-lock.json"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"3972ad747a3c513a1f067d0ef31ded655b4c8a7414185177c4a0c8d4283e7178"}},{"ruleId":"D38","level":"error","message":{"text":"High CVE: [GHSA redacted]: axios: [GHSA redacted]"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"Chapter13/src/Marketplace/ClientApp/package-lock.json"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"ed9cf44191f0f7fc91124ec5bd0839ecf9f604b34999fefb66b5db2258bc0ce0"}},{"ruleId":"D38","level":"error","message":{"text":"High CVE: [GHSA redacted]: axios: [GHSA redacted]"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"Chapter13/src/Marketplace/ClientApp/package-lock.json"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"367d3d5086df2ebc11cd410d62d5dfe31e4103247e484de1aa7146a9cb56cc5f"}},{"ruleId":"D38","level":"error","message":{"text":"High CVE: [GHSA redacted]: axios: [GHSA redacted]"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"Chapter13/src/Marketplace/ClientApp/package-lock.json"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"4deab3d26dd03986a7a50e14ef4a98c39d8b1db324241f6928324d7548cd774c"}},{"ruleId":"D38","level":"error","message":{"text":"High CVE: [GHSA redacted]: axios: [GHSA redacted]"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"Chapter13/src/Marketplace/ClientApp/package-lock.json"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"b46c6943cf48c12494958fc620a3e2fb2203099bed386bc209b0790139360368"}},{"ruleId":"D38","level":"error","message":{"text":"High CVE: [GHSA redacted]: axios: [GHSA redacted]"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"Chapter13/src/Marketplace/ClientApp/package-lock.json"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"714511bd1ff9ce0bb1d22674371d05689a1ce02a61ce23da92037a0dd01f217a"}},{"ruleId":"D38","level":"error","message":{"text":"High CVE: [GHSA redacted]: body-parser: [GHSA redacted]"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"Chapter13/src/Marketplace/ClientApp/package-lock.json"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"db68c9805aa588aba768bf40aa37ebe885d45a830d9f1c69f43b7db3b31ff6b2"}},{"ruleId":"D38","level":"error","message":{"text":"High CVE: [GHSA redacted]: braces: [GHSA redacted]"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"Chapter13/src/Marketplace/ClientApp/package-lock.json"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"3a0a00f80e479d263aed154ed281b624e8f4366cf6f4ebd209d23d8548d4cad4"}},{"ruleId":"D38","level":"error","message":{"text":"High CVE: [GHSA redacted]: browserify-sign: [GHSA redacted]"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"Chapter13/src/Marketplace/ClientApp/package-lock.json"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"b85b97b1c098ca05de7d55ba732b3190cb3c30d607a18ffccd1601d2591e2412"}},{"ruleId":"D38","level":"error","message":{"text":"High CVE: [GHSA redacted]: cross-spawn: [GHSA redacted]"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"Chapter13/src/Marketplace/ClientApp/package-lock.json"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"33e667a9c687a9f6cf22cb529b6f981ccef73a8467c1f67b6ace1743062c8946"}},{"ruleId":"D38","level":"error","message":{"text":"High CVE: [GHSA redacted]: decode-uri-component: [GHSA redacted]"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"Chapter13/src/Marketplace/ClientApp/package-lock.json"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"8f6d1b4b700fcf1ac8e8abe96a724c75ff96b703cb9923622d09550fa73c6ce6"}},{"ruleId":"D38","level":"error","message":{"text":"High CVE: [GHSA redacted]: dns-packet: [GHSA redacted]"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"Chapter13/src/Marketplace/ClientApp/package-lock.json"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"c2a97c3a646b80aab95c3405ad0d82c0f450d70f5c66160ecdb8689e84173b25"}},{"ruleId":"D38","level":"error","message":{"text":"High CVE: [GHSA redacted]: dot-prop: [GHSA redacted]"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"Chapter13/src/Marketplace/ClientApp/package-lock.json"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"af5b5ebd9affa9639768baad93e1728f33a3d3321e5aef8ce311bd99a4d5c588"}},{"ruleId":"D38","level":"error","message":{"text":"High CVE: [GHSA redacted]: eazy-logger: [GHSA redacted]"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"Chapter13/src/Marketplace/ClientApp/package-lock.json"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"ddf5a481d4832d1688fcab7e7d7e020eba8b1f62c610dea92310afad5821c8c5"}},{"ruleId":"D38","level":"error","message":{"text":"High CVE: [GHSA redacted]: elliptic: [GHSA redacted]"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"Chapter13/src/Marketplace/ClientApp/package-lock.json"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"1108da88224458a6fb72de41b2e035c32ad7a739ea60054dd36c70a0d5c0ecc0"}},{"ruleId":"D38","level":"error","message":{"text":"High CVE: [GHSA redacted]: engine.io: [GHSA redacted]"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"Chapter13/src/Marketplace/ClientApp/package-lock.json"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"d83a441e61178916b1324538636b8e5a7ef5260187d5f9b600e42a414bcdc67b"}},{"ruleId":"D38","level":"error","message":{"text":"High CVE: [GHSA redacted]: flatted: [GHSA redacted]"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"Chapter13/src/Marketplace/ClientApp/package-lock.json"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"9e27135ea7a00ab78082882c468b385e3b0c5de727385921ee619764bd1108d6"}},{"ruleId":"D38","level":"error","message":{"text":"High CVE: [GHSA redacted]: flatted: [GHSA redacted]"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"Chapter13/src/Marketplace/ClientApp/package-lock.json"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"08972fa5d7dbac69723be5dff2c91a1e4ca29ee81ab743c2b519edf76d10d52d"}},{"ruleId":"D38","level":"error","message":{"text":"High CVE: [GHSA redacted]: follow-redirects: [GHSA redacted]"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"Chapter13/src/Marketplace/ClientApp/package-lock.json"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"97bb6fc69d4c827713e136ce6699902e639c02c5e202e411539b0b8858e8a142"}},{"ruleId":"D38","level":"error","message":{"text":"High CVE: [GHSA redacted]: form-data: [GHSA redacted]"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"Chapter13/src/Marketplace/ClientApp/package-lock.json"},"region":{"startLine":1}}}],"partialFingerprints":{"codehealthFindingId/v1":"c26da0bb44e0675a91d342b36e02dcec83412d2247d24eb4650aa273eb83e11c"}}],"taxonomies":[{"name":"CWE","guid":"c3a2b1d0-7f3e-4b2a-9c1d-5e6f7a8b9c0d","organization":"MITRE","shortDescription":{"text":"The MITRE Common Weakness Enumeration (CWE)."},"taxa":[{"id":"CWE-1395","name":"Dependency on Vulnerable Third-Party Component"},{"id":"CWE-798","name":"Use of Hard-coded Credentials"}]}],"properties":{"codehealthPublication":{"public":true,"notice":"This is the PUBLIC form of this artifact. Findings are listed in full, but the details of SECURITY findings \u2014 which rule fired, in which file, on which line, and how to fix it \u2014 are deliberately withheld, and any secret-scanner results are excluded entirely. Where detail is absent here it was REMOVED FOR PUBLICATION; it is not missing from the analysis. The complete artifact is available from the repository owner.","securityFindingsRedacted":0,"secretScannerRunsExcluded":0}}}]}