{"schema_version":"2","scorer_version":"0.1.0","scoring_version":"prov-4+qual-2+sec-2","generated_at":"2026-11-13T23:49:15.011831Z","repo":{"ref":{"host":"github.com","owner":"cardpay","name":"unlimeety"},"default_branch":"main","clone_url":"https://github.com/cardpay/unlimeety.git","html_url":"https://github.com/cardpay/unlimeety","description":"Privacy-first AI-powered tool to work with your meeting notes. Allows for recording, annotated live transcription and deep googl-meet integration. Creates custom AI summaries and AI search, audio-to-text syncronization, transcript enhancements and more.","stars":8,"forks":0,"is_fork":false,"is_archived":false,"is_private":false,"size_kb":6582,"primary_language":"JavaScript","license_spdx":"MIT","created_at":"2026-07-02T14:54:23Z","pushed_at":"2026-10-23T10:10:19Z","security_policy_url":null,"distribution":{"owner_created_at":"2014-05-02T08:34:52Z","owner_type":"Organization","release_assets":[{"name":"latest-mac.yml","size":497,"download_count":32,"release_tag":"v1.8.1","url":"https://github.com/cardpay/unlimeety/releases/download/v1.8.1/latest-mac.yml"},{"name":"Unlimeety-1.8.1-arm64.zip","size":151306009,"download_count":1,"release_tag":"v1.8.1","url":"https://github.com/cardpay/unlimeety/releases/download/v1.8.1/Unlimeety-1.8.1-arm64.zip"},{"name":"Unlimeety-arm64.dmg","size":151777876,"download_count":5,"release_tag":"v1.8.1","url":"https://github.com/cardpay/unlimeety/releases/download/v1.8.1/Unlimeety-arm64.dmg"},{"name":"beta-mac.yml","size":546,"download_count":4,"release_tag":"v1.8.1-beta.4","url":"https://github.com/cardpay/unlimeety/releases/download/v1.8.1-beta.4/beta-mac.yml"},{"name":"Unlimeety-1.8.1-beta.4-arm64.zip","size":151306207,"download_count":2,"release_tag":"v1.8.1-beta.4","url":"https://github.com/cardpay/unlimeety/releases/download/v1.8.1-beta.4/Unlimeety-1.8.1-beta.4-arm64.zip"},{"name":"Unlimeety-arm64-beta.dmg","size":151779227,"download_count":1,"release_tag":"v1.8.1-beta.4","url":"https://github.com/cardpay/unlimeety/releases/download/v1.8.1-beta.4/Unlimeety-arm64-beta.dmg"},{"name":"unlimeety-extension-beta.zip","size":200433,"download_count":2,"release_tag":"v1.8.1-beta.4","url":"https://github.com/cardpay/unlimeety/releases/download/v1.8.1-beta.4/unlimeety-extension-beta.zip"},{"name":"beta-mac.yml","size":518,"download_count":3,"release_tag":"v1.8.1-beta.3","url":"https://github.com/cardpay/unlimeety/releases/download/v1.8.1-beta.3/beta-mac.yml"},{"name":"Unlimeety-1.8.1-beta.3-arm64.zip","size":150856435,"download_count":1,"release_tag":"v1.8.1-beta.3","url":"https://github.com/cardpay/unlimeety/releases/download/v1.8.1-beta.3/Unlimeety-1.8.1-beta.3-arm64.zip"},{"name":"Unlimeety-arm64-beta.dmg","size":151359380,"download_count":3,"release_tag":"v1.8.1-beta.3","url":"https://github.com/cardpay/unlimeety/releases/download/v1.8.1-beta.3/Unlimeety-arm64-beta.dmg"},{"name":"unlimeety-extension-beta.zip","size":200433,"download_count":1,"release_tag":"v1.8.1-beta.3","url":"https://github.com/cardpay/unlimeety/releases/download/v1.8.1-beta.3/unlimeety-extension-beta.zip"},{"name":"beta-mac.yml","size":518,"download_count":1,"release_tag":"v1.8.1-beta.2","url":"https://github.com/cardpay/unlimeety/releases/download/v1.8.1-beta.2/beta-mac.yml"},{"name":"Unlimeety-1.8.1-beta.2-arm64.zip","size":150855615,"download_count":1,"release_tag":"v1.8.1-beta.2","url":"https://github.com/cardpay/unlimeety/releases/download/v1.8.1-beta.2/Unlimeety-1.8.1-beta.2-arm64.zip"},{"name":"Unlimeety-arm64-beta.dmg","size":151360916,"download_count":2,"release_tag":"v1.8.1-beta.2","url":"https://github.com/cardpay/unlimeety/releases/download/v1.8.1-beta.2/Unlimeety-arm64-beta.dmg"},{"name":"unlimeety-extension-beta.zip","size":200676,"download_count":1,"release_tag":"v1.8.1-beta.2","url":"https://github.com/cardpay/unlimeety/releases/download/v1.8.1-beta.2/unlimeety-extension-beta.zip"},{"name":"beta-mac.yml","size":518,"download_count":3,"release_tag":"v1.8.1-beta.1","url":"https://github.com/cardpay/unlimeety/releases/download/v1.8.1-beta.1/beta-mac.yml"},{"name":"Unlimeety-1.8.1-beta.1-arm64.zip","size":150849819,"download_count":1,"release_tag":"v1.8.1-beta.1","url":"https://github.com/cardpay/unlimeety/releases/download/v1.8.1-beta.1/Unlimeety-1.8.1-beta.1-arm64.zip"},{"name":"Unlimeety-arm64-beta.dmg","size":151337539,"download_count":1,"release_tag":"v1.8.1-beta.1","url":"https://github.com/cardpay/unlimeety/releases/download/v1.8.1-beta.1/Unlimeety-arm64-beta.dmg"},{"name":"unlimeety-extension-beta.zip","size":200581,"download_count":1,"release_tag":"v1.8.1-beta.1","url":"https://github.com/cardpay/unlimeety/releases/download/v1.8.1-beta.1/unlimeety-extension-beta.zip"},{"name":"latest-mac.yml","size":497,"download_count":3,"release_tag":"v1.8.0","url":"https://github.com/cardpay/unlimeety/releases/download/v1.8.0/latest-mac.yml"},{"name":"Unlimeety-1.8.0-arm64.zip","size":150848925,"download_count":1,"release_tag":"v1.8.0","url":"https://github.com/cardpay/unlimeety/releases/download/v1.8.0/Unlimeety-1.8.0-arm64.zip"},{"name":"Unlimeety-arm64.dmg","size":151337694,"download_count":4,"release_tag":"v1.8.0","url":"https://github.com/cardpay/unlimeety/releases/download/v1.8.0/Unlimeety-arm64.dmg"},{"name":"beta-mac.yml","size":518,"download_count":8,"release_tag":"v1.8.0-beta.3","url":"https://github.com/cardpay/unlimeety/releases/download/v1.8.0-beta.3/beta-mac.yml"},{"name":"Unlimeety-1.8.0-beta.3-arm64.zip","size":150848950,"download_count":2,"release_tag":"v1.8.0-beta.3","url":"https://github.com/cardpay/unlimeety/releases/download/v1.8.0-beta.3/Unlimeety-1.8.0-beta.3-arm64.zip"},{"name":"Unlimeety-arm64-beta.dmg","size":151337130,"download_count":2,"release_tag":"v1.8.0-beta.3","url":"https://github.com/cardpay/unlimeety/releases/download/v1.8.0-beta.3/Unlimeety-arm64-beta.dmg"},{"name":"unlimeety-extension-beta.zip","size":200581,"download_count":1,"release_tag":"v1.8.0-beta.3","url":"https://github.com/cardpay/unlimeety/releases/download/v1.8.0-beta.3/unlimeety-extension-beta.zip"},{"name":"beta-mac.yml","size":518,"download_count":2,"release_tag":"v1.8.0-beta.2","url":"https://github.com/cardpay/unlimeety/releases/download/v1.8.0-beta.2/beta-mac.yml"},{"name":"Unlimeety-1.8.0-beta.2-arm64.zip","size":150849002,"download_count":2,"release_tag":"v1.8.0-beta.2","url":"https://github.com/cardpay/unlimeety/releases/download/v1.8.0-beta.2/Unlimeety-1.8.0-beta.2-arm64.zip"},{"name":"Unlimeety-arm64-beta.dmg","size":151339874,"download_count":2,"release_tag":"v1.8.0-beta.2","url":"https://github.com/cardpay/unlimeety/releases/download/v1.8.0-beta.2/Unlimeety-arm64-beta.dmg"},{"name":"unlimeety-extension-beta.zip","size":200581,"download_count":1,"release_tag":"v1.8.0-beta.2","url":"https://github.com/cardpay/unlimeety/releases/download/v1.8.0-beta.2/unlimeety-extension-beta.zip"},{"name":"beta-mac.yml","size":523,"download_count":3,"release_tag":"v1.8.0-beta.1","url":"https://github.com/cardpay/unlimeety/releases/download/v1.8.0-beta.1/beta-mac.yml"},{"name":"Unlimeety-1.8.0-beta.1-arm64.zip","size":150848694,"download_count":1,"release_tag":"v1.8.0-beta.1","url":"https://github.com/cardpay/unlimeety/releases/download/v1.8.0-beta.1/Unlimeety-1.8.0-beta.1-arm64.zip"},{"name":"Unlimeety-arm64-beta.dmg","size":151340928,"download_count":2,"release_tag":"v1.8.0-beta.1","url":"https://github.com/cardpay/unlimeety/releases/download/v1.8.0-beta.1/Unlimeety-arm64-beta.dmg"},{"name":"unlimeety-extension-beta.zip","size":200337,"download_count":1,"release_tag":"v1.8.0-beta.1","url":"https://github.com/cardpay/unlimeety/releases/download/v1.8.0-beta.1/unlimeety-extension-beta.zip"},{"name":"Unlimeety-arm64-beta.dmg","size":150952636,"download_count":1,"release_tag":"v1.7.2-beta","url":"https://github.com/cardpay/unlimeety/releases/download/v1.7.2-beta/Unlimeety-arm64-beta.dmg"},{"name":"unlimeety-extension-beta.zip","size":200581,"download_count":0,"release_tag":"v1.7.2-beta","url":"https://github.com/cardpay/unlimeety/releases/download/v1.7.2-beta/unlimeety-extension-beta.zip"}]}},"commit_sha":"c0e6a5c30fbe2808ee683f629022e9aac122b644","profile":{"lines_by_language":{"JavaScript":34105,"Swift":3861,"Shell":21},"files_by_category":{"docs":62,"test":58,"source":56,"binary":26,"other":18,"config":4,"generated":1},"source_lines":25877,"test_lines":12110},"pillars":{"ai_provenance":{"score":47.2,"confidence":0.95,"coverage":1.0,"label":"explicit","breakdown":{"attributed_share":0.4719,"suspected_share":0.0552,"estimated_share":0.4719,"ai_artifacts":2.0,"flagged_work_units":2.0,"flagged_releases":0.0},"summary":"Explicit AI attribution on 47% of first-party code added; an estimated 47% including velocity signals."},"quality":{"score":63.5,"confidence":0.9,"coverage":1.0,"label":"weak","breakdown":{"complexity":60.2,"duplication":82.4,"lint":64.6,"testing":53.4,"docs":65.0,"type_safety":null,"process":null},"summary":"Code quality is weak: test-to-source ratio 0.47, no CI test run detected; 17% of function code in complex or long functions; 3% duplicated lines. Weakest area: testing."},"security":{"score":49.3,"confidence":0.85,"coverage":1.0,"label":"poor","breakdown":{"secrets":96.7,"sast":28.4,"dependencies":35.6,"ci_actions":null,"posture":0.0,"scorecard":null},"summary":"Security posture is poor: 57 known vulnerabilities in 9 dependencies; 34 high-severity SAST findings. Weakest area: posture."}},"analyzer_results":[{"analyzer":"sec-scorecard","pillar":"security","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":"no published OpenSSF Scorecard result for this repo"},{"analyzer":"sec-registry","pillar":"security","status":"ok","tool_version":null,"metrics":{"declared":8.0,"checked":8.0,"missing":0.0,"recent":0.0,"lookup_errors":0.0},"findings":[],"evidence":[],"data":{"phantom":false},"error":null},{"analyzer":"ai-attribution","pillar":"ai_provenance","status":"ok","tool_version":"signatures-v1","metrics":{"commits":194.0,"attributed_commits":118.0,"attributed_commit_share":0.6082474226804123,"effective_loc":42572.0,"attributed_loc":20089.0,"attributed_loc_share":0.4718829277459363,"tools_detected":1.0},"findings":[],"evidence":[{"kind":"attribution-summary","description":"Claude Code: 118 attributed commits, 20,089 lines added","ref":null,"url":null,"weight":1.0},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"5502da1a2c9b79cfe787f62468ae056decbe5e74","url":"https://github.com/cardpay/unlimeety/commit/5502da1a2c9b79cfe787f62468ae056decbe5e74","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"383ba76d5c4ff4886f7b5021ae4dd59fd8dc0b80","url":"https://github.com/cardpay/unlimeety/commit/383ba76d5c4ff4886f7b5021ae4dd59fd8dc0b80","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"40faca3e1fff2b7fb5ad61ba242d3c1648d4aada","url":"https://github.com/cardpay/unlimeety/commit/40faca3e1fff2b7fb5ad61ba242d3c1648d4aada","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"db23dc337501f8591515ab5fb21bbb6a43f23819","url":"https://github.com/cardpay/unlimeety/commit/db23dc337501f8591515ab5fb21bbb6a43f23819","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"ed0fd9a64d17188d91deda678dfbe299d09824c0","url":"https://github.com/cardpay/unlimeety/commit/ed0fd9a64d17188d91deda678dfbe299d09824c0","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: on merged branch (106ac9be57)","ref":"3b90fcda2f104769127007f092f925ce0bf277c3","url":"https://github.com/cardpay/unlimeety/commit/3b90fcda2f104769127007f092f925ce0bf277c3","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: on merged branch (e9abde2620)","ref":"8461e210bb0d3feb9fe4388140c4a40282795fb0","url":"https://github.com/cardpay/unlimeety/commit/8461e210bb0d3feb9fe4388140c4a40282795fb0","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: on merged branch (e9abde2620)","ref":"bcdf5ac73b7cf5d0df09f91355d6ec9a019d049f","url":"https://github.com/cardpay/unlimeety/commit/bcdf5ac73b7cf5d0df09f91355d6ec9a019d049f","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: on merged branch (e9abde2620)","ref":"eaef9ae4ff9b586445a7566b1725f945c5cbec18","url":"https://github.com/cardpay/unlimeety/commit/eaef9ae4ff9b586445a7566b1725f945c5cbec18","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: on merged branch (e9abde2620)","ref":"a0d0bedbd22ce6b04de48d1020881c38cb1e6b62","url":"https://github.com/cardpay/unlimeety/commit/a0d0bedbd22ce6b04de48d1020881c38cb1e6b62","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: on merged branch (e9abde2620)","ref":"75a41d43245ae634c18940b8ff351536c3179265","url":"https://github.com/cardpay/unlimeety/commit/75a41d43245ae634c18940b8ff351536c3179265","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: on merged branch (e9abde2620)","ref":"3d3b27abe2d4b4bb7cd2f4eca33a10fb7fd5427e","url":"https://github.com/cardpay/unlimeety/commit/3d3b27abe2d4b4bb7cd2f4eca33a10fb7fd5427e","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: on merged branch (e9abde2620)","ref":"ec80eac3c967a0bf1328f6e20ed2a8109b2b806a","url":"https://github.com/cardpay/unlimeety/commit/ec80eac3c967a0bf1328f6e20ed2a8109b2b806a","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: on merged branch (e9abde2620)","ref":"c4a46f5b926545e0c26906c32b6556a7d3c2be1f","url":"https://github.com/cardpay/unlimeety/commit/c4a46f5b926545e0c26906c32b6556a7d3c2be1f","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: on merged branch (e9abde2620)","ref":"09f24906e460b61950d3aaa28e6d1ba8eb55296d","url":"https://github.com/cardpay/unlimeety/commit/09f24906e460b61950d3aaa28e6d1ba8eb55296d","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"0e9fbee81dd745259e2c488b55462af629a7ce00","url":"https://github.com/cardpay/unlimeety/commit/0e9fbee81dd745259e2c488b55462af629a7ce00","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"28070dcd6da66168c5a6d09dba8aebd3abd798eb","url":"https://github.com/cardpay/unlimeety/commit/28070dcd6da66168c5a6d09dba8aebd3abd798eb","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: on merged branch (4844b1a216)","ref":"4cd390463a7d8f1686698c379964740feefada01","url":"https://github.com/cardpay/unlimeety/commit/4cd390463a7d8f1686698c379964740feefada01","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: on merged branch (ebc5a2349a)","ref":"ce51649de0f525a9a2e8b25517bd96bb038c0256","url":"https://github.com/cardpay/unlimeety/commit/ce51649de0f525a9a2e8b25517bd96bb038c0256","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: on merged branch (4844b1a216)","ref":"a13b54f0a1eb9724de71bbc5ec776b496b87aed9","url":"https://github.com/cardpay/unlimeety/commit/a13b54f0a1eb9724de71bbc5ec776b496b87aed9","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"0b2f7c4a9449ad20eaacf55e10532750c92e567f","url":"https://github.com/cardpay/unlimeety/commit/0b2f7c4a9449ad20eaacf55e10532750c92e567f","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: on merged branch (4844b1a216)","ref":"1018a246333d3f3bdc885156b6dab0ccd698bd0c","url":"https://github.com/cardpay/unlimeety/commit/1018a246333d3f3bdc885156b6dab0ccd698bd0c","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: on merged branch (4844b1a216)","ref":"556864b451ca5a018804df4beac133b8796ab73d","url":"https://github.com/cardpay/unlimeety/commit/556864b451ca5a018804df4beac133b8796ab73d","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: on merged branch (4844b1a216)","ref":"0ba0c509281de8f5425953559ff766e080ba7675","url":"https://github.com/cardpay/unlimeety/commit/0ba0c509281de8f5425953559ff766e080ba7675","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: on merged branch (4844b1a216)","ref":"5b8f445a701c2eefee7223a9a0244f30d2489fc8","url":"https://github.com/cardpay/unlimeety/commit/5b8f445a701c2eefee7223a9a0244f30d2489fc8","weight":0.9}],"data":{"attributed_loc_by_commit":{"e5e4b1361c4653042db3a05c4c0e905418f180f8":0,"28924c6b542d511f71ccd90e6f0e2409aa118b69":0,"3c16a7402fca673dac354fa25a36cd5843c67104":359,"672582e1899e46cd0f7ea2a2a2ddb7421b8108ce":210,"cf484d2de51e54586003f326d9f6843e70c655af":26,"5851682ab49ac618529ec5e626c37f921a332043":76,"4bba32d6c3441159f4f9b216dea7d39697705512":44,"f1817387149e90e5432005d891730d6329741761":34,"148859d877f470f0cf402bb59748c614e05f5c81":22,"4be6ef5a1655db27c242199025ad49264033206b":66,"5231b7e77915100b7bef56af5f1c8a5230f47a7c":97,"2940ac105d590046c1dca21b39062926ce65d09a":44,"6d8efe68c5e80775985d039e0dd512a628d69357":65,"5d34bd4a8f53c0d91f5bd0360adc1435c7ada437":62,"307383757f04848c247551a5ba69d28ae8743018":16,"49a27ef8462c5937818fae6d462d60119fe09586":26,"52f2d4aa366cbecc6c3ffa2f563aadb67de195e8":179,"9e352b96b5834243a72c6ee95941281f2b913ce7":42,"3c516a0452616dfeb8c13e9c3205555c2a8514a0":37,"1c65d76be913a7da5fadb074d69cf49756c826e9":16,"8d2e03fde82eb8d4657d0d5a863edbb9ae535af9":11,"80014502bda706e7c0cb1375374bf36b0963bbb8":15,"880e55be5e9731896405367bd3b45637a2c332f2":338,"c92ba9852d1a4e7046638039794bce337830f3ad":259,"84863be59ba9b2943082872b2a9fedc87f830e19":189,"a9ad8104e13d982f7aa65d882257a9343e2ef8d2":0,"046838fd0203040670103f8a62010f2b25216cf9":0,"ede580221377c15b4ebb565ea0318aa9177744c2":83,"a5061b80f64ad778e7059d492d8c077f4af87b32":345,"f39cbd7fb1615fdde0e3abe3542366e7b14c4a14":88,"b5eff8063e6a247db6f1c24b2b6c3ca07ff8eecc":271,"5a34104ad37962b3014be7f175c24e226feebe27":249,"4addf2ec6944739b099877199edf4d644a42cc8e":332,"8461c19d8fb09c6305ee14057bf244b16864581c":210,"203c89f4f4e571e5931d81fe0eef6731734bf8ac":253,"0f4de8c6c133e813a6872be6d1a6817d24cd9e38":406,"e47a273718a3eee59b5ad7ed1edb00930569eb65":0,"f16851199de84860d626e37e46a9562278e7cc12":0,"7a550c68f70fd576895c037ab75af9f71ad79eb1":128,"59f13e74682c69fdcc5aab738631633244cac157":1185,"af65897571374548ed1b5d73e68cbfe9c53067a4":73,"6cf3182a9e40ae16a522804a2ed87d0a1b3ce8f1":446,"c3f404c4aae946e4d68d0d26e20e47083780c5ca":180,"a321890987a5f7857a395d357fdaa745fc51b220":55,"672608826c7dab4c2dadafafbfe7d9fafb7c0f22":304,"c564ed30e7c5d4f84f8b3678165eac861d8bd293":317,"ae30b86816079c4953fe08d06ae250b472e02fc6":382,"a6ade512cac11c7792c69fe773e5757b31d4057b":2,"2db5b8382a47b7c0de6502a409a62181651daefb":767,"4c9ca81868689d4c88cf82ff699108a6aed80f2e":0,"4f733b2f0f3b1feaaafecc45cd89e75fe578a114":0,"f8ccb971835780b3382fa551957cc46446e4963c":0,"422918bffde0f7d0d180be4fcd1d10177d1a96b0":466,"b0f154dbfb2c048558436496eb3b7ad876bf2aa0":777,"3ec5064142f37e681ddbc04c5c9b8e147ff95517":3,"b3625490a6963e3692f699e7669d77490833b20a":681,"d387838ee387f06becbf6289edb77b6cf4c1c79f":0,"4545b2db97a0dc14f589fab97ca0682832143e37":15,"d76de9e619999f282b3326bfb981b160142d8c1a":603,"02d0378914a3af0645b96f073bfecff02ecdc4d6":0,"817052a67931c26c51a11af87c7a9bfc938c74e8":44,"61c487388f54239a7e6b6eeb3c68644d1e0357d8":813,"d84e15144e2a7f15f3c9c83c2ea47b4096a54786":61,"0a75c692f8a0e3ebdf733af4bd9dffa53231a8f1":6,"d8a4d9718c65a24cb4f350f43d9f12f63d63bd0a":150,"ffd82a7b9c36c1f71feebca9ab6f54bb97cf4e4b":97,"831988ede9da3a87d0f30d75c3b41047d41762ed":134,"e15a9f51902ed9df4752c2e1ffcd35b0d323a416":317,"52744b0d0a217472c2ad03012c0790d4e9a81175":541,"d19a416c53cbc9645fc5073b2a6b69ecf306befd":739,"c88406a103cea006e4a1dab819cc87fd4aae5fa2":2,"7398f8f080257d8053d57bff42b1f960372ee610":0,"382c583357612fc33456656839149dd80023658a":18,"b639c27cc74097adb1ed0b9333a6d6e102eb2433":8,"723681bffc28152b9f90d1043fadbd3e56722a6b":0,"a30d51db3f304ec2b03a6206566fa136d0b71b1d":0,"9170007df2d43695a0f006c163ba3d12fac580ed":16,"023ba67e163bcd401bd41a3b05b6229e0f745f47":10,"d7cb714f87c1f511a3632d72d37c76946370cd41":34,"1cf230b6b414eb8127ed8c36a6729ceb44595c52":87,"73190c2662208d39b372f93d4b932a6e7f401169":119,"33ca52868a145b2aba5a5e7b1349848fe79250a0":252,"1ba9192d4470c9c72e932887da4093a6fd1ef24f":200,"c4f147217438a77bfdafe0c9c7216d0eca155ab4":175,"e2cb0998a8337f592e2488815662d0b6748b43c1":130,"858418f8a3bafd48143cc8d56fd3ae04cb739831":283,"779761969feea63a936ce392d2d4314fa2e6b4ab":0,"c4f03fdf1c60c1bc54531cbdd8d9887129e21426":656,"f030d6f0a0d78f2cacc3d2f8e0d179583e8dea90":0,"3f109044f376f26c20a1a702570fcae500ffd24e":564,"a83990f69f2146e046f9a61b66dcd2f4383b038b":0,"05f6b535b73b9d2ef34568fc2eaa1903fb24fad2":537,"1552b5bb32c839d51953be06ddabaad9a0697a41":1247,"5b8f445a701c2eefee7223a9a0244f30d2489fc8":52,"0ba0c509281de8f5425953559ff766e080ba7675":0,"556864b451ca5a018804df4beac133b8796ab73d":114,"1018a246333d3f3bdc885156b6dab0ccd698bd0c":427,"0b2f7c4a9449ad20eaacf55e10532750c92e567f":795,"a13b54f0a1eb9724de71bbc5ec776b496b87aed9":0,"ce51649de0f525a9a2e8b25517bd96bb038c0256":0,"4cd390463a7d8f1686698c379964740feefada01":0,"28070dcd6da66168c5a6d09dba8aebd3abd798eb":43,"0e9fbee81dd745259e2c488b55462af629a7ce00":168,"09f24906e460b61950d3aaa28e6d1ba8eb55296d":83,"c4a46f5b926545e0c26906c32b6556a7d3c2be1f":10,"ec80eac3c967a0bf1328f6e20ed2a8109b2b806a":11,"3d3b27abe2d4b4bb7cd2f4eca33a10fb7fd5427e":9,"75a41d43245ae634c18940b8ff351536c3179265":20,"a0d0bedbd22ce6b04de48d1020881c38cb1e6b62":0,"eaef9ae4ff9b586445a7566b1725f945c5cbec18":22,"bcdf5ac73b7cf5d0df09f91355d6ec9a019d049f":0,"8461e210bb0d3feb9fe4388140c4a40282795fb0":0,"3b90fcda2f104769127007f092f925ce0bf277c3":147,"ed0fd9a64d17188d91deda678dfbe299d09824c0":0,"db23dc337501f8591515ab5fb21bbb6a43f23819":6,"40faca3e1fff2b7fb5ad61ba242d3c1648d4aada":0,"383ba76d5c4ff4886f7b5021ae4dd59fd8dc0b80":60,"5502da1a2c9b79cfe787f62468ae056decbe5e74":28},"tools":{"claude-code":{"name":"Claude Code","commits":118,"loc":20089,"first_seen":1785750908,"last_seen":1791994042}},"monthly":{"2026-08":{"loc":27636,"attributed_loc":12159},"2026-09":{"loc":11160,"attributed_loc":7902},"2026-10":{"loc":3776,"attributed_loc":28}}},"error":null},{"analyzer":"ai-artifacts","pillar":"ai_provenance","status":"ok","tool_version":"signatures-v1","metrics":{"artifacts":2.0,"workflow_agents":0.0,"tools_configured":2.0,"earliest_adoption":1788348076.0},"findings":[],"evidence":[{"kind":"ai-artifact","description":"CLAUDE.md (claude-code configuration)","ref":"CLAUDE.md","url":"https://github.com/cardpay/unlimeety/blob/c0e6a5c30fbe2808ee683f629022e9aac122b644/CLAUDE.md","weight":0.5},{"kind":"ai-artifact","description":"AGENTS.md (generic-agent configuration)","ref":"AGENTS.md","url":"https://github.com/cardpay/unlimeety/blob/c0e6a5c30fbe2808ee683f629022e9aac122b644/AGENTS.md","weight":0.5}],"data":{"artifacts":[{"tool":"claude-code","path":"CLAUDE.md","added_at":1788348076},{"tool":"generic-agent","path":"AGENTS.md","added_at":1788348076}],"workflows":[],"tools":["claude-code","generic-agent"]},"error":null},{"analyzer":"ai-velocity","pillar":"ai_provenance","status":"ok","tool_version":"prov-4","metrics":{"work_units":71.0,"flagged_units":2.0,"pre_ai_era_bursts":0.0,"pre_ai_era_measured_loc":0.0,"pre_ai_era_burst_loc":0.0,"measured_loc":27404.0,"flagged_loc":3596.0,"flagged_loc_share":0.13122171945701358,"max_loc_per_hour":772.5797425853385,"median_loc_per_hour":145.47162568015182,"pr_timed_units":0.0,"excluded_import_loc":15168.0},"findings":[],"evidence":[{"kind":"velocity-burst","description":"1,247 lines of first-party code in ~1.6h (761 lines/hour, 1 commit session)","ref":"1552b5bb32c839d51953be06ddabaad9a0697a41","url":"https://github.com/cardpay/unlimeety/commit/1552b5bb32c839d51953be06ddabaad9a0697a41","weight":0.22838053247413936},{"kind":"velocity-burst","description":"2,349 lines of first-party code in ~4.0h (587 lines/hour, 1 commit session)","ref":"f6a2c7973d40ab15ccfaf25407b9720dedf1e255","url":"https://github.com/cardpay/unlimeety/commit/f6a2c7973d40ab15ccfaf25407b9720dedf1e255","weight":0.176175}],"data":{"flagged_loc_by_commit":{"1552b5bb32c839d51953be06ddabaad9a0697a41":1247,"f6a2c7973d40ab15ccfaf25407b9720dedf1e255":2349},"excluded_import_commits":["cdb416f08a752d8edd9b594c3d0c1ea35d600147"]},"error":null},{"analyzer":"ai-release-velocity","pillar":"ai_provenance","status":"ok","tool_version":"prov-4","metrics":{"releases":26.0,"flagged_releases":0.0,"max_loc_per_day":41075.4},"findings":[],"evidence":[],"data":{"releases":[{"from":"v1.2.5","to":"v1.3.0","loc":2316,"days":4.32,"loc_per_day":535.7,"flagged":false},{"from":"v1.3.0","to":"v1.3.1","loc":704,"days":11.09,"loc_per_day":63.5,"flagged":false},{"from":"v1.3.1","to":"v1.4.0","loc":1450,"days":0.85,"loc_per_day":1707.1,"flagged":false},{"from":"v1.4.0","to":"v1.5.0-beta","loc":4032,"days":5.9,"loc_per_day":683.3,"flagged":false},{"from":"v1.5.0-beta","to":"v1.5.1-beta","loc":3585,"days":1.88,"loc_per_day":1908.7,"flagged":false},{"from":"v1.5.1-beta","to":"v1.5.2-beta","loc":2081,"days":6.91,"loc_per_day":301.0,"flagged":false},{"from":"v1.5.2-beta","to":"v1.5.3-beta","loc":67,"days":0.18,"loc_per_day":372.0,"flagged":false},{"from":"v1.5.3-beta","to":"v1.5.5-beta","loc":1306,"days":1.8,"loc_per_day":725.5,"flagged":false},{"from":"v1.5.5-beta","to":"v1.5.5","loc":656,"days":0.35,"loc_per_day":1896.4,"flagged":false},{"from":"v1.5.5","to":"v1.6.0","loc":3736,"days":0.95,"loc_per_day":3943.5,"flagged":false},{"from":"v1.6.0","to":"v1.6.1","loc":366,"days":0.28,"loc_per_day":1292.4,"flagged":false},{"from":"v1.6.1","to":"v1.6.4-beta","loc":2588,"days":7.39,"loc_per_day":350.1,"flagged":false},{"from":"v1.6.4-beta","to":"v1.6.4","loc":5,"days":0.04,"loc_per_day":120.0,"flagged":false},{"from":"v1.6.4","to":"v1.6.5","loc":214,"days":0.48,"loc_per_day":445.5,"flagged":false},{"from":"v1.6.5","to":"v1.7.0","loc":147,"days":1.93,"loc_per_day":76.1,"flagged":false},{"from":"v1.7.0","to":"v1.7.1","loc":6,"days":0.04,"loc_per_day":144.0,"flagged":false},{"from":"v1.7.1","to":"v1.7.2-beta","loc":397,"days":30.67,"loc_per_day":12.9,"flagged":false},{"from":"v1.7.2-beta","to":"v1.8.0-beta.1","loc":2349,"days":0.06,"loc_per_day":41075.4,"flagged":false},{"from":"v1.8.0-beta.1","to":"v1.8.0-beta.2","loc":0,"days":0.95,"loc_per_day":0.0,"flagged":false},{"from":"v1.8.0-beta.2","to":"v1.8.0-beta.3","loc":0,"days":0.06,"loc_per_day":0.0,"flagged":false},{"from":"v1.8.0-beta.3","to":"v1.8.0","loc":0,"days":0.04,"loc_per_day":0.0,"flagged":false},{"from":"v1.8.0","to":"v1.8.1-beta.1","loc":217,"days":2.86,"loc_per_day":75.8,"flagged":false},{"from":"v1.8.1-beta.1","to":"v1.8.1-beta.2","loc":846,"days":0.07,"loc_per_day":11609.7,"flagged":false},{"from":"v1.8.1-beta.2","to":"v1.8.1-beta.3","loc":157,"days":0.04,"loc_per_day":3768.0,"flagged":false},{"from":"v1.8.1-beta.3","to":"v1.8.1-beta.4","loc":179,"days":1.03,"loc_per_day":173.3,"flagged":false},{"from":"v1.8.1-beta.4","to":"v1.8.1","loc":0,"days":0.91,"loc_per_day":0.0,"flagged":false}]},"error":null},{"analyzer":"ai-stylometry","pillar":"ai_provenance","status":"ok","tool_version":null,"metrics":{"lines_scanned":25877.0,"index":0.097,"count:narrated_steps":0.0,"per_kloc:narrated_steps":0.0,"files:narrated_steps":0.0,"count:placeholder":0.0,"per_kloc:placeholder":0.0,"files:placeholder":0.0,"count:emoji_in_code":5.0,"per_kloc:emoji_in_code":0.193,"files:emoji_in_code":3.0,"count:assistant_voice":0.0,"per_kloc:assistant_voice":0.0,"files:assistant_voice":0.0},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-secrets","pillar":"security","status":"ok","tool_version":"gitleaks 8.30.1","metrics":{"secrets_current":0.0,"secrets_history":0.0,"secrets_nonprod":1.0,"secrets_low_confidence":0.0},"findings":[{"rule_id":"gitleaks/private-key","severity":"low","message":"Possible private-key secret in the current tree (test/docs/example file)","path":"desktop/test/local-models.test.js","line":27,"fingerprint":"desktop/test/local-models.test.js:private-key:27"}],"evidence":[],"data":{},"error":null},{"analyzer":"sec-sast","pillar":"security","status":"ok","tool_version":"opengrep 1.33.1; rules f1d2b562b414","metrics":{"findings":306.0,"findings_high":34.0,"findings_medium":270.0,"findings_low":2.0,"weighted_findings":93.125,"scanned_lines":25877.0,"parse_errors":0.0},"findings":[{"rule_id":"opengrep/javascript.lang.security.audit.spawn-shell-true","severity":"high","message":"Found '$SPAWN' with '{shell: process.platform === 'win32'}'. This is dangerous because this call will spawn the command using a shell process. Doing so propagates current shell settings and variables, which makes it much easier for a malicious actor to execute commands. Use '{shell: false}' instead. [confidence low]","path":"desktop/main.js","line":1877,"fingerprint":"javascript.lang.security.audit.spawn-shell-true:desktop/main.js:1877"},{"rule_id":"opengrep/javascript.lang.security.detect-child-process","severity":"high","message":"Detected calls to child_process from a function argument `claudePath`. This could lead to a command injection if the input is user controllable. Try to avoid calls to child_process, and if it is needed ensure user input is correctly sanitized or sandboxed. [confidence low]","path":"desktop/main.js","line":1882,"fingerprint":"javascript.lang.security.detect-child-process:desktop/main.js:1882"},{"rule_id":"opengrep/javascript.lang.security.audit.spawn-shell-true","severity":"high","message":"Found '$SPAWN' with '{shell: process.platform === 'win32'}'. This is dangerous because this call will spawn the command using a shell process. Doing so propagates current shell settings and variables, which makes it much easier for a malicious actor to execute commands. Use '{shell: false}' instead. [confidence low]","path":"desktop/main.js","line":1982,"fingerprint":"javascript.lang.security.audit.spawn-shell-true:desktop/main.js:1982"},{"rule_id":"opengrep/javascript.lang.security.detect-child-process","severity":"high","message":"Detected calls to child_process from a function argument `codexPath`. This could lead to a command injection if the input is user controllable. Try to avoid calls to child_process, and if it is needed ensure user input is correctly sanitized or sandboxed. [confidence low]","path":"desktop/main.js","line":1983,"fingerprint":"javascript.lang.security.detect-child-process:desktop/main.js:1983"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"desktop/renderer/app.js","line":1230,"fingerprint":"javascript.browser.security.insecure-document-method:desktop/renderer/app.js:1230"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `transcriptView.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"desktop/renderer/app.js","line":1230,"fingerprint":"javascript.browser.security.insecure-innerhtml:desktop/renderer/app.js:1230"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"desktop/renderer/app.js","line":1974,"fingerprint":"javascript.browser.security.insecure-document-method:desktop/renderer/app.js:1974"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `card.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"desktop/renderer/app.js","line":1974,"fingerprint":"javascript.browser.security.insecure-innerhtml:desktop/renderer/app.js:1974"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"desktop/renderer/app.js","line":2073,"fingerprint":"javascript.browser.security.insecure-document-method:desktop/renderer/app.js:2073"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `root.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"desktop/renderer/app.js","line":2073,"fingerprint":"javascript.browser.security.insecure-innerhtml:desktop/renderer/app.js:2073"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"desktop/renderer/app.js","line":2170,"fingerprint":"javascript.browser.security.insecure-document-method:desktop/renderer/app.js:2170"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `root.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"desktop/renderer/app.js","line":2170,"fingerprint":"javascript.browser.security.insecure-innerhtml:desktop/renderer/app.js:2170"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"desktop/renderer/app.js","line":3291,"fingerprint":"javascript.browser.security.insecure-document-method:desktop/renderer/app.js:3291"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `summaryRailBody.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"desktop/renderer/app.js","line":3291,"fingerprint":"javascript.browser.security.insecure-innerhtml:desktop/renderer/app.js:3291"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"desktop/renderer/app.js","line":3313,"fingerprint":"javascript.browser.security.insecure-document-method:desktop/renderer/app.js:3313"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `summaryRailBody.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"desktop/renderer/app.js","line":3313,"fingerprint":"javascript.browser.security.insecure-innerhtml:desktop/renderer/app.js:3313"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"desktop/renderer/app.js","line":3331,"fingerprint":"javascript.browser.security.insecure-document-method:desktop/renderer/app.js:3331"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `summaryRailBody.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"desktop/renderer/app.js","line":3331,"fingerprint":"javascript.browser.security.insecure-innerhtml:desktop/renderer/app.js:3331"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"desktop/renderer/app.js","line":3340,"fingerprint":"javascript.browser.security.insecure-document-method:desktop/renderer/app.js:3340"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `summaryRailBody.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"desktop/renderer/app.js","line":3340,"fingerprint":"javascript.browser.security.insecure-innerhtml:desktop/renderer/app.js:3340"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"desktop/renderer/app.js","line":3401,"fingerprint":"javascript.browser.security.insecure-document-method:desktop/renderer/app.js:3401"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `summaryRailBody.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"desktop/renderer/app.js","line":3401,"fingerprint":"javascript.browser.security.insecure-innerhtml:desktop/renderer/app.js:3401"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"desktop/renderer/app.js","line":3598,"fingerprint":"javascript.browser.security.insecure-document-method:desktop/renderer/app.js:3598"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `btn.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"desktop/renderer/app.js","line":3598,"fingerprint":"javascript.browser.security.insecure-innerhtml:desktop/renderer/app.js:3598"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"desktop/renderer/app.js","line":4225,"fingerprint":"javascript.browser.security.insecure-document-method:desktop/renderer/app.js:4225"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `modalResultText.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"desktop/renderer/app.js","line":4225,"fingerprint":"javascript.browser.security.insecure-innerhtml:desktop/renderer/app.js:4225"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"desktop/renderer/app.js","line":4239,"fingerprint":"javascript.browser.security.insecure-document-method:desktop/renderer/app.js:4239"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `modalResultText.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"desktop/renderer/app.js","line":4239,"fingerprint":"javascript.browser.security.insecure-innerhtml:desktop/renderer/app.js:4239"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"desktop/renderer/app.js","line":4460,"fingerprint":"javascript.browser.security.insecure-document-method:desktop/renderer/app.js:4460"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `bodyEl.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"desktop/renderer/app.js","line":4460,"fingerprint":"javascript.browser.security.insecure-innerhtml:desktop/renderer/app.js:4460"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"desktop/renderer/app.js","line":4573,"fingerprint":"javascript.browser.security.insecure-document-method:desktop/renderer/app.js:4573"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `queuePanelList.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"desktop/renderer/app.js","line":4573,"fingerprint":"javascript.browser.security.insecure-innerhtml:desktop/renderer/app.js:4573"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"desktop/renderer/calendar-picker.js","line":226,"fingerprint":"javascript.browser.security.insecure-document-method:desktop/renderer/calendar-picker.js:226"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `item.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"desktop/renderer/calendar-picker.js","line":226,"fingerprint":"javascript.browser.security.insecure-innerhtml:desktop/renderer/calendar-picker.js:226"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `filePath` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/audio-waveform.js","line":11,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/audio-waveform.js:11"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-regexp","severity":"medium","message":"RegExp() called with a `phrase` function argument, this might allow an attacker to cause a Regular Expression Denial-of-Service (ReDoS) within your application as RegExP blocks the main thread. For this reason, it is recommended to use hardcoded regexes instead. If your regex is run on user-controll [confidence low]","path":"desktop/glossary.js","line":84,"fingerprint":"javascript.lang.security.audit.detect-non-literal-regexp:desktop/glossary.js:84"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `destination` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/local-model-download.js","line":11,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/local-model-download.js:11"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"desktop/local-model-download.js","line":13,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:desktop/local-model-download.js:13"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"desktop/local-model-download.js","line":13,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:desktop/local-model-download.js:13"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `destination` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/local-model-download.js","line":15,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/local-model-download.js:15"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `destination` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/local-model-download.js","line":16,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/local-model-download.js:16"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"desktop/local-model-download.js","line":56,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:desktop/local-model-download.js:56"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"desktop/local-model-download.js","line":56,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:desktop/local-model-download.js:56"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `{\n    url, destination, expectedBytes, expectedSha256, approvedHosts,\n    isCancelled = () => false, onProgress = () => {}, onRequest = () => {},\n    request = https.get, writeSync = fs.writeSync, maxRedirects = 3,\n}` has entered the fs module. An attacker could pote [confidence low]","path":"desktop/local-model-download.js","line":57,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/local-model-download.js:57"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `{\n    url, destination, expectedBytes, expectedSha256, approvedHosts,\n    isCancelled = () => false, onProgress = () => {}, onRequest = () => {},\n    request = https.get, writeSync = fs.writeSync, maxRedirects = 3,\n}` has entered the fs module. An attacker could pote [confidence low]","path":"desktop/local-model-download.js","line":67,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/local-model-download.js:67"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `{\n    url, destination, expectedBytes, expectedSha256, approvedHosts,\n    isCancelled = () => false, onProgress = () => {}, onRequest = () => {},\n    request = https.get, writeSync = fs.writeSync, maxRedirects = 3,\n}` has entered the fs module. An attacker could pote [confidence low]","path":"desktop/local-model-download.js","line":81,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/local-model-download.js:81"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `{\n    url, destination, expectedBytes, expectedSha256, approvedHosts,\n    isCancelled = () => false, onProgress = () => {}, onRequest = () => {},\n    request = https.get, writeSync = fs.writeSync, maxRedirects = 3,\n}` has entered the fs module. An attacker could pote [confidence low]","path":"desktop/local-model-download.js","line":82,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/local-model-download.js:82"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `{\n    url, destination, expectedBytes, expectedSha256, approvedHosts,\n    isCancelled = () => false, onProgress = () => {}, onRequest = () => {},\n    request = https.get, writeSync = fs.writeSync, maxRedirects = 3,\n}` has entered the fs module. An attacker could pote [confidence low]","path":"desktop/local-model-download.js","line":86,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/local-model-download.js:86"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `{\n    url, destination, expectedBytes, expectedSha256, approvedHosts,\n    isCancelled = () => false, onProgress = () => {}, onRequest = () => {},\n    request = https.get, writeSync = fs.writeSync, maxRedirects = 3,\n}` has entered the fs module. An attacker could pote [confidence low]","path":"desktop/local-model-download.js","line":86,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/local-model-download.js:86"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `filePath` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":72,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:72"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `p` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":316,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:316"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"desktop/main.js","line":319,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:desktop/main.js:319"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"desktop/main.js","line":319,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:desktop/main.js:319"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `a` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":336,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:336"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `filePath` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":553,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:553"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `target` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":665,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:665"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `target` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":674,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:674"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `target` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":675,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:675"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `target` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":676,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:676"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `target` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":678,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:678"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `target` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":679,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:679"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `target` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":682,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:682"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `target` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":684,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:684"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `target` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":684,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:684"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `target` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":686,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:686"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `defaultName` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":811,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:811"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `defaultName` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":828,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:828"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `payload` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":914,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:914"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `transcriptPath` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":1022,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:1022"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `transcriptPath` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":1024,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:1024"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"desktop/main.js","line":1035,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:desktop/main.js:1035"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"desktop/main.js","line":1037,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:desktop/main.js:1037"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"desktop/main.js","line":1037,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:desktop/main.js:1037"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `summaryPath` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":1065,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:1065"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"desktop/main.js","line":1075,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:desktop/main.js:1075"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"desktop/main.js","line":1077,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:desktop/main.js:1077"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"desktop/main.js","line":1077,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:desktop/main.js:1077"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"desktop/main.js","line":1078,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:desktop/main.js:1078"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"desktop/main.js","line":1078,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:desktop/main.js:1078"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"desktop/main.js","line":1079,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:desktop/main.js:1079"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"desktop/main.js","line":1079,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:desktop/main.js:1079"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"desktop/main.js","line":1080,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:desktop/main.js:1080"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"desktop/main.js","line":1080,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:desktop/main.js:1080"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `folder` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":1241,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:1241"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `transcriptPath` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":1241,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:1241"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `dir` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":1365,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:1365"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `dir` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":1366,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:1366"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"desktop/main.js","line":1377,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:desktop/main.js:1377"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `entry` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":1386,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:1386"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `filePath` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":1437,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:1437"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `entry` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":1463,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:1463"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `modelId` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":1607,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:1607"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `candidate` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":1749,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:1749"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `candidate` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":1750,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:1750"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `cwd` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":1980,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:1980"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `filePath` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":2253,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:2253"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `filePath` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":2304,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:2304"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `filePath` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":2346,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:2346"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `filePath` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":2353,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:2353"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `filePath` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":2354,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:2354"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `target` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":2563,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:2563"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-regexp","severity":"medium","message":"RegExp() called with a `key` function argument, this might allow an attacker to cause a Regular Expression Denial-of-Service (ReDoS) within your application as RegExP blocks the main thread. For this reason, it is recommended to use hardcoded regexes instead. If your regex is run on user-controlled  [confidence low]","path":"desktop/main.js","line":2649,"fingerprint":"javascript.lang.security.audit.detect-non-literal-regexp:desktop/main.js:2649"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `f` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":2756,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:2756"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"desktop/main.js","line":2756,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:desktop/main.js:2756"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"desktop/main.js","line":2759,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:desktop/main.js:2759"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `f` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":2760,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:2760"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `f` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":2781,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:2781"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `transcriptPath` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":2954,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:2954"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"desktop/main.js","line":2981,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:desktop/main.js:2981"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `transcriptPath` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":2982,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:2982"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-regexp","severity":"medium","message":"RegExp() called with a `transcriptPath` function argument, this might allow an attacker to cause a Regular Expression Denial-of-Service (ReDoS) within your application as RegExP blocks the main thread. For this reason, it is recommended to use hardcoded regexes instead. If your regex is run on user- [confidence low]","path":"desktop/main.js","line":2986,"fingerprint":"javascript.lang.security.audit.detect-non-literal-regexp:desktop/main.js:2986"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"desktop/main.js","line":2989,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:desktop/main.js:2989"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `p` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":3042,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:3042"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `filePath` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":3090,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:3090"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `filePath` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":3103,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:3103"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `filePath` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":3130,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:3130"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `filePath` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":3162,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:3162"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"desktop/main.js","line":3178,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:desktop/main.js:3178"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"desktop/main.js","line":3178,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:desktop/main.js:3178"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `base` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":3180,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:3180"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `dir` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":3180,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:3180"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `ext` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":3180,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:3180"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"desktop/main.js","line":3181,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:desktop/main.js:3181"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"desktop/main.js","line":3181,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:desktop/main.js:3181"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `filePath` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":3295,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:3295"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `filePath` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":3468,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:3468"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `filePath` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":3569,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:3569"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `filePath` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":3574,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:3574"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `filePath` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":3594,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:3594"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `filePath` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":3601,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:3601"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `filePath` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":3603,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:3603"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `filePath` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":3607,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:3607"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `newTitle` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":3607,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:3607"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"desktop/main.js","line":3619,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:desktop/main.js:3619"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `filePath` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":3620,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:3620"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `newTitle` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":3625,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:3625"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `filePath` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":3629,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:3629"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `newTitle` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":3629,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:3629"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `filePath` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":3637,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:3637"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"desktop/main.js","line":3641,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:desktop/main.js:3641"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"desktop/main.js","line":3641,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:desktop/main.js:3641"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `filePath` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":3642,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:3642"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `newTitle` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":3642,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:3642"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `filePath` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":3646,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:3646"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `filePath` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":3646,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:3646"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `newTitle` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":3646,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:3646"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"desktop/main.js","line":3942,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:desktop/main.js:3942"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"desktop/main.js","line":3945,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:desktop/main.js:3945"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"desktop/main.js","line":4437,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:desktop/main.js:4437"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `p` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":4447,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:4447"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"desktop/main.js","line":4502,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:desktop/main.js:4502"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"desktop/main.js","line":4505,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:desktop/main.js:4505"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"desktop/main.js","line":4616,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:desktop/main.js:4616"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `f` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":4622,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:4622"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `f` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":4625,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:4625"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"desktop/main.js","line":4649,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:desktop/main.js:4649"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"desktop/main.js","line":4654,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:desktop/main.js:4654"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `oldWavPath` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":4665,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:4665"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `oldWavPath` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":4666,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:4666"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `newWavPath` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":4666,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:4666"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `wavPath` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":4671,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:4671"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `wavPath` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":4694,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:4694"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `filePath` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":4727,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:4727"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `paths` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":4760,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:4760"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `wavPath` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":4778,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:4778"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"desktop/main.js","line":4790,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:desktop/main.js:4790"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `newTitle` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":4791,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:4791"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `wavPath` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":4791,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:4791"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `wavPath` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":4796,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:4796"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `wavPath` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":4800,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:4800"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `newTitle` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":4800,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:4800"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `wavPath` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":4800,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:4800"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `wavPath` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":4810,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:4810"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `wavPath` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":4812,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:4812"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"desktop/main.js","line":4821,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:desktop/main.js:4821"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `newTitle` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":4822,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:4822"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `wavPath` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":4822,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:4822"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `wavPath` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":4825,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:4825"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `newTitle` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":4825,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:4825"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `wavPath` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":4825,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:4825"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"desktop/main.js","line":4831,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:desktop/main.js:4831"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `wavPath` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":4833,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:4833"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `newTitle` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":4842,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:4842"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `wavPath` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":4842,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:4842"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `wavPath` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":4846,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:4846"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `newTitle` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":4846,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:4846"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `wavPath` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":4846,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:4846"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `wavPath` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":4856,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:4856"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `newTitle` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":4857,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:4857"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `wavPath` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":4857,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:4857"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"desktop/main.js","line":4861,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:desktop/main.js:4861"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"desktop/main.js","line":4861,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:desktop/main.js:4861"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `newTitle` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":4862,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:4862"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `wavPath` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":4862,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:4862"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `wavPath` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":4866,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:4866"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `newTitle` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":4866,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:4866"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `wavPath` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":4866,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:4866"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `opts` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":4949,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:4949"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `opts` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":4986,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:4986"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `opts` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":5153,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:5153"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `opts` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":5188,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:5188"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-regexp","severity":"medium","message":"RegExp() called with a `opts` function argument, this might allow an attacker to cause a Regular Expression Denial-of-Service (ReDoS) within your application as RegExP blocks the main thread. For this reason, it is recommended to use hardcoded regexes instead. If your regex is run on user-controlled [confidence low]","path":"desktop/main.js","line":5217,"fingerprint":"javascript.lang.security.audit.detect-non-literal-regexp:desktop/main.js:5217"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `m` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":5300,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:5300"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"desktop/main.js","line":5300,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:desktop/main.js:5300"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `dir` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":5302,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:5302"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `m` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":5302,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:5302"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"desktop/main.js","line":5302,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:desktop/main.js:5302"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"desktop/main.js","line":5302,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:desktop/main.js:5302"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `file` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":5304,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:5304"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `m` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":5304,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:5304"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"desktop/main.js","line":5304,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:desktop/main.js:5304"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"desktop/main.js","line":5304,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:desktop/main.js:5304"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"desktop/main.js","line":5324,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:desktop/main.js:5324"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `modelName` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":5326,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:5326"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `modelName` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"desktop/main.js","line":5327,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:desktop/main.js:5327"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"desktop/renderer/app.js","line":1134,"fingerprint":"javascript.lang.security.html-in-template-string:desktop/renderer/app.js:1134"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"desktop/renderer/app.js","line":1135,"fingerprint":"javascript.lang.security.html-in-template-string:desktop/renderer/app.js:1135"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"desktop/renderer/app.js","line":1177,"fingerprint":"javascript.lang.security.html-in-template-string:desktop/renderer/app.js:1177"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"desktop/renderer/app.js","line":1178,"fingerprint":"javascript.lang.security.html-in-template-string:desktop/renderer/app.js:1178"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"desktop/renderer/app.js","line":1193,"fingerprint":"javascript.lang.security.html-in-template-string:desktop/renderer/app.js:1193"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"desktop/renderer/app.js","line":1208,"fingerprint":"javascript.lang.security.html-in-template-string:desktop/renderer/app.js:1208"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"desktop/renderer/app.js","line":1209,"fingerprint":"javascript.lang.security.html-in-template-string:desktop/renderer/app.js:1209"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"desktop/renderer/app.js","line":1218,"fingerprint":"javascript.lang.security.html-in-template-string:desktop/renderer/app.js:1218"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"desktop/renderer/app.js","line":1219,"fingerprint":"javascript.lang.security.html-in-template-string:desktop/renderer/app.js:1219"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"desktop/renderer/app.js","line":1220,"fingerprint":"javascript.lang.security.html-in-template-string:desktop/renderer/app.js:1220"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"desktop/renderer/app.js","line":1721,"fingerprint":"javascript.lang.security.html-in-template-string:desktop/renderer/app.js:1721"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"desktop/renderer/app.js","line":1977,"fingerprint":"javascript.lang.security.html-in-template-string:desktop/renderer/app.js:1977"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"desktop/renderer/app.js","line":1979,"fingerprint":"javascript.lang.security.html-in-template-string:desktop/renderer/app.js:1979"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"desktop/renderer/app.js","line":1982,"fingerprint":"javascript.lang.security.html-in-template-string:desktop/renderer/app.js:1982"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"desktop/renderer/app.js","line":1985,"fingerprint":"javascript.lang.security.html-in-template-string:desktop/renderer/app.js:1985"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"desktop/renderer/app.js","line":1986,"fingerprint":"javascript.lang.security.html-in-template-string:desktop/renderer/app.js:1986"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"desktop/renderer/app.js","line":1989,"fingerprint":"javascript.lang.security.html-in-template-string:desktop/renderer/app.js:1989"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"desktop/renderer/app.js","line":1999,"fingerprint":"javascript.lang.security.html-in-template-string:desktop/renderer/app.js:1999"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"desktop/renderer/app.js","line":2000,"fingerprint":"javascript.lang.security.html-in-template-string:desktop/renderer/app.js:2000"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"desktop/renderer/app.js","line":2170,"fingerprint":"javascript.lang.security.html-in-template-string:desktop/renderer/app.js:2170"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"desktop/renderer/app.js","line":2189,"fingerprint":"javascript.lang.security.html-in-template-string:desktop/renderer/app.js:2189"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"desktop/renderer/app.js","line":2608,"fingerprint":"javascript.lang.security.html-in-template-string:desktop/renderer/app.js:2608"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"desktop/renderer/app.js","line":2616,"fingerprint":"javascript.lang.security.html-in-template-string:desktop/renderer/app.js:2616"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"desktop/renderer/app.js","line":2618,"fingerprint":"javascript.lang.security.html-in-template-string:desktop/renderer/app.js:2618"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"desktop/renderer/app.js","line":2634,"fingerprint":"javascript.lang.security.html-in-template-string:desktop/renderer/app.js:2634"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"desktop/renderer/app.js","line":2655,"fingerprint":"javascript.lang.security.html-in-template-string:desktop/renderer/app.js:2655"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"desktop/renderer/app.js","line":2656,"fingerprint":"javascript.lang.security.html-in-template-string:desktop/renderer/app.js:2656"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"desktop/renderer/app.js","line":2683,"fingerprint":"javascript.lang.security.html-in-template-string:desktop/renderer/app.js:2683"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"desktop/renderer/app.js","line":2760,"fingerprint":"javascript.lang.security.html-in-template-string:desktop/renderer/app.js:2760"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"desktop/renderer/app.js","line":2762,"fingerprint":"javascript.lang.security.html-in-template-string:desktop/renderer/app.js:2762"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"desktop/renderer/app.js","line":2764,"fingerprint":"javascript.lang.security.html-in-template-string:desktop/renderer/app.js:2764"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"desktop/renderer/app.js","line":2826,"fingerprint":"javascript.lang.security.html-in-template-string:desktop/renderer/app.js:2826"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"desktop/renderer/app.js","line":2832,"fingerprint":"javascript.lang.security.html-in-template-string:desktop/renderer/app.js:2832"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"desktop/renderer/app.js","line":2842,"fingerprint":"javascript.lang.security.html-in-template-string:desktop/renderer/app.js:2842"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"desktop/renderer/app.js","line":2855,"fingerprint":"javascript.lang.security.html-in-template-string:desktop/renderer/app.js:2855"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"desktop/renderer/app.js","line":2858,"fingerprint":"javascript.lang.security.html-in-template-string:desktop/renderer/app.js:2858"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"desktop/renderer/app.js","line":2861,"fingerprint":"javascript.lang.security.html-in-template-string:desktop/renderer/app.js:2861"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"desktop/renderer/app.js","line":2864,"fingerprint":"javascript.lang.security.html-in-template-string:desktop/renderer/app.js:2864"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"desktop/renderer/app.js","line":2880,"fingerprint":"javascript.lang.security.html-in-template-string:desktop/renderer/app.js:2880"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"desktop/renderer/app.js","line":2886,"fingerprint":"javascript.lang.security.html-in-template-string:desktop/renderer/app.js:2886"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"desktop/renderer/app.js","line":2896,"fingerprint":"javascript.lang.security.html-in-template-string:desktop/renderer/app.js:2896"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"desktop/renderer/app.js","line":2899,"fingerprint":"javascript.lang.security.html-in-template-string:desktop/renderer/app.js:2899"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"desktop/renderer/app.js","line":2975,"fingerprint":"javascript.lang.security.html-in-template-string:desktop/renderer/app.js:2975"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"desktop/renderer/app.js","line":2985,"fingerprint":"javascript.lang.security.html-in-template-string:desktop/renderer/app.js:2985"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"desktop/renderer/app.js","line":2986,"fingerprint":"javascript.lang.security.html-in-template-string:desktop/renderer/app.js:2986"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"desktop/renderer/app.js","line":2992,"fingerprint":"javascript.lang.security.html-in-template-string:desktop/renderer/app.js:2992"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"desktop/renderer/app.js","line":3002,"fingerprint":"javascript.lang.security.html-in-template-string:desktop/renderer/app.js:3002"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"desktop/renderer/app.js","line":3003,"fingerprint":"javascript.lang.security.html-in-template-string:desktop/renderer/app.js:3003"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"desktop/renderer/app.js","line":3032,"fingerprint":"javascript.lang.security.html-in-template-string:desktop/renderer/app.js:3032"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"desktop/renderer/app.js","line":3034,"fingerprint":"javascript.lang.security.html-in-template-string:desktop/renderer/app.js:3034"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"desktop/renderer/app.js","line":3036,"fingerprint":"javascript.lang.security.html-in-template-string:desktop/renderer/app.js:3036"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"desktop/renderer/app.js","line":3037,"fingerprint":"javascript.lang.security.html-in-template-string:desktop/renderer/app.js:3037"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"desktop/renderer/app.js","line":3080,"fingerprint":"javascript.lang.security.html-in-template-string:desktop/renderer/app.js:3080"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"desktop/renderer/app.js","line":3081,"fingerprint":"javascript.lang.security.html-in-template-string:desktop/renderer/app.js:3081"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"desktop/renderer/app.js","line":3105,"fingerprint":"javascript.lang.security.html-in-template-string:desktop/renderer/app.js:3105"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"desktop/renderer/app.js","line":3106,"fingerprint":"javascript.lang.security.html-in-template-string:desktop/renderer/app.js:3106"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"desktop/renderer/app.js","line":3109,"fingerprint":"javascript.lang.security.html-in-template-string:desktop/renderer/app.js:3109"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"desktop/renderer/app.js","line":3135,"fingerprint":"javascript.lang.security.html-in-template-string:desktop/renderer/app.js:3135"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"desktop/renderer/app.js","line":3136,"fingerprint":"javascript.lang.security.html-in-template-string:desktop/renderer/app.js:3136"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"desktop/renderer/app.js","line":3137,"fingerprint":"javascript.lang.security.html-in-template-string:desktop/renderer/app.js:3137"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"desktop/renderer/app.js","line":3138,"fingerprint":"javascript.lang.security.html-in-template-string:desktop/renderer/app.js:3138"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"desktop/renderer/app.js","line":3141,"fingerprint":"javascript.lang.security.html-in-template-string:desktop/renderer/app.js:3141"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"desktop/renderer/app.js","line":3154,"fingerprint":"javascript.lang.security.html-in-template-string:desktop/renderer/app.js:3154"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"desktop/renderer/app.js","line":3155,"fingerprint":"javascript.lang.security.html-in-template-string:desktop/renderer/app.js:3155"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"desktop/renderer/app.js","line":3168,"fingerprint":"javascript.lang.security.html-in-template-string:desktop/renderer/app.js:3168"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"desktop/renderer/app.js","line":3191,"fingerprint":"javascript.lang.security.html-in-template-string:desktop/renderer/app.js:3191"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"desktop/renderer/app.js","line":3192,"fingerprint":"javascript.lang.security.html-in-template-string:desktop/renderer/app.js:3192"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"desktop/renderer/app.js","line":3203,"fingerprint":"javascript.lang.security.html-in-template-string:desktop/renderer/app.js:3203"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"desktop/renderer/app.js","line":3270,"fingerprint":"javascript.lang.security.html-in-template-string:desktop/renderer/app.js:3270"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"desktop/renderer/app.js","line":3274,"fingerprint":"javascript.lang.security.html-in-template-string:desktop/renderer/app.js:3274"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"desktop/renderer/app.js","line":3638,"fingerprint":"javascript.lang.security.html-in-template-string:desktop/renderer/app.js:3638"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"desktop/renderer/app.js","line":3639,"fingerprint":"javascript.lang.security.html-in-template-string:desktop/renderer/app.js:3639"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"desktop/renderer/app.js","line":3640,"fingerprint":"javascript.lang.security.html-in-template-string:desktop/renderer/app.js:3640"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"desktop/renderer/app.js","line":4360,"fingerprint":"javascript.lang.security.html-in-template-string:desktop/renderer/app.js:4360"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"desktop/renderer/app.js","line":4422,"fingerprint":"javascript.lang.security.html-in-template-string:desktop/renderer/app.js:4422"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"desktop/renderer/app.js","line":4426,"fingerprint":"javascript.lang.security.html-in-template-string:desktop/renderer/app.js:4426"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"desktop/renderer/app.js","line":4431,"fingerprint":"javascript.lang.security.html-in-template-string:desktop/renderer/app.js:4431"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"desktop/renderer/app.js","line":4434,"fingerprint":"javascript.lang.security.html-in-template-string:desktop/renderer/app.js:4434"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"desktop/renderer/app.js","line":4458,"fingerprint":"javascript.lang.security.html-in-template-string:desktop/renderer/app.js:4458"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"desktop/renderer/app.js","line":4585,"fingerprint":"javascript.lang.security.html-in-template-string:desktop/renderer/app.js:4585"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"desktop/renderer/calendar-picker.js","line":227,"fingerprint":"javascript.lang.security.html-in-template-string:desktop/renderer/calendar-picker.js:227"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-regexp","severity":"medium","message":"RegExp() called with a `q` function argument, this might allow an attacker to cause a Regular Expression Denial-of-Service (ReDoS) within your application as RegExP blocks the main thread. For this reason, it is recommended to use hardcoded regexes instead. If your regex is run on user-controlled in [confidence low]","path":"desktop/renderer/find-in-note.js","line":155,"fingerprint":"javascript.lang.security.audit.detect-non-literal-regexp:desktop/renderer/find-in-note.js:155"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"desktop/renderer/updates.js","line":62,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:desktop/renderer/updates.js:62"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-regexp","severity":"medium","message":"RegExp() called with a `key` function argument, this might allow an attacker to cause a Regular Expression Denial-of-Service (ReDoS) within your application as RegExP blocks the main thread. For this reason, it is recommended to use hardcoded regexes instead. If your regex is run on user-controlled  [confidence low]","path":"desktop/scripts/verify-update-release.mjs","line":55,"fingerprint":"javascript.lang.security.audit.detect-non-literal-regexp:desktop/scripts/verify-update-release.mjs:55"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"desktop/scripts/verify-update-release.mjs","line":55,"fingerprint":"javascript.lang.security.html-in-template-string:desktop/scripts/verify-update-release.mjs:55"}],"evidence":[],"data":{"rulesets":["javascript","swift","bash"]},"error":null},{"analyzer":"sec-deps","pillar":"security","status":"ok","tool_version":"osv-scanner version: 2.7.1","metrics":{"vulnerable_packages":9.0,"vulnerabilities":57.0,"vulns_critical":0.0,"vulns_high":29.0,"vulns_medium":22.0,"vulns_low":6.0,"vulns_unknown":0.0,"penalty":62.0},"findings":[{"rule_id":"osv/GHSA-27p8-2357-5qqv","severity":"high","message":"@xmldom/xmldom@0.8.13 (npm) is affected by GHSA-27p8-2357-5qqv","path":"desktop/package-lock.json","line":null,"fingerprint":"@xmldom/xmldom@0.8.13 (npm):GHSA-27p8-2357-5qqv"},{"rule_id":"osv/GHSA-4w3w-2rp5-g8jm","severity":"high","message":"@xmldom/xmldom@0.8.13 (npm) is affected by GHSA-4w3w-2rp5-g8jm","path":"desktop/package-lock.json","line":null,"fingerprint":"@xmldom/xmldom@0.8.13 (npm):GHSA-4w3w-2rp5-g8jm"},{"rule_id":"osv/GHSA-8344-3jmq-59r6","severity":"high","message":"@xmldom/xmldom@0.8.13 (npm) is affected by GHSA-8344-3jmq-59r6","path":"desktop/package-lock.json","line":null,"fingerprint":"@xmldom/xmldom@0.8.13 (npm):GHSA-8344-3jmq-59r6"},{"rule_id":"osv/GHSA-93r5-fhx6-vmg9","severity":"high","message":"@xmldom/xmldom@0.8.13 (npm) is affected by GHSA-93r5-fhx6-vmg9","path":"desktop/package-lock.json","line":null,"fingerprint":"@xmldom/xmldom@0.8.13 (npm):GHSA-93r5-fhx6-vmg9"},{"rule_id":"osv/GHSA-965w-775f-mr7g","severity":"high","message":"@xmldom/xmldom@0.8.13 (npm) is affected by GHSA-965w-775f-mr7g","path":"desktop/package-lock.json","line":null,"fingerprint":"@xmldom/xmldom@0.8.13 (npm):GHSA-965w-775f-mr7g"},{"rule_id":"osv/GHSA-c7q8-3ch8-vqpv","severity":"high","message":"@xmldom/xmldom@0.8.13 (npm) is affected by GHSA-c7q8-3ch8-vqpv","path":"desktop/package-lock.json","line":null,"fingerprint":"@xmldom/xmldom@0.8.13 (npm):GHSA-c7q8-3ch8-vqpv"},{"rule_id":"osv/GHSA-w2rr-34g9-rvrj","severity":"high","message":"@xmldom/xmldom@0.8.13 (npm) is affected by GHSA-w2rr-34g9-rvrj","path":"desktop/package-lock.json","line":null,"fingerprint":"@xmldom/xmldom@0.8.13 (npm):GHSA-w2rr-34g9-rvrj"},{"rule_id":"osv/GHSA-x4fp-j954-r2f4","severity":"high","message":"@xmldom/xmldom@0.8.13 (npm) is affected by GHSA-x4fp-j954-r2f4","path":"desktop/package-lock.json","line":null,"fingerprint":"@xmldom/xmldom@0.8.13 (npm):GHSA-x4fp-j954-r2f4"},{"rule_id":"osv/GHSA-6j4f-fj2g-mc7p","severity":"high","message":"brace-expansion@1.1.18 (npm) is affected by GHSA-6j4f-fj2g-mc7p","path":"desktop/package-lock.json","line":null,"fingerprint":"brace-expansion@1.1.18 (npm):GHSA-6j4f-fj2g-mc7p"},{"rule_id":"osv/GHSA-qhr7-859c-m2p7","severity":"high","message":"brace-expansion@1.1.18 (npm) is affected by GHSA-qhr7-859c-m2p7","path":"desktop/package-lock.json","line":null,"fingerprint":"brace-expansion@1.1.18 (npm):GHSA-qhr7-859c-m2p7"},{"rule_id":"osv/GHSA-6j4f-fj2g-mc7p","severity":"high","message":"brace-expansion@2.1.4 (npm) is affected by GHSA-6j4f-fj2g-mc7p","path":"desktop/package-lock.json","line":null,"fingerprint":"brace-expansion@2.1.4 (npm):GHSA-6j4f-fj2g-mc7p"},{"rule_id":"osv/GHSA-qhr7-859c-m2p7","severity":"high","message":"brace-expansion@2.1.4 (npm) is affected by GHSA-qhr7-859c-m2p7","path":"desktop/package-lock.json","line":null,"fingerprint":"brace-expansion@2.1.4 (npm):GHSA-qhr7-859c-m2p7"},{"rule_id":"osv/GHSA-6j4f-fj2g-mc7p","severity":"high","message":"brace-expansion@5.0.9 (npm) is affected by GHSA-6j4f-fj2g-mc7p","path":"desktop/package-lock.json","line":null,"fingerprint":"brace-expansion@5.0.9 (npm):GHSA-6j4f-fj2g-mc7p"},{"rule_id":"osv/GHSA-qhr7-859c-m2p7","severity":"high","message":"brace-expansion@5.0.9 (npm) is affected by GHSA-qhr7-859c-m2p7","path":"desktop/package-lock.json","line":null,"fingerprint":"brace-expansion@5.0.9 (npm):GHSA-qhr7-859c-m2p7"},{"rule_id":"osv/GHSA-5jgf-p345-68v8","severity":"high","message":"fast-uri@3.1.5 (npm) is affected by GHSA-5jgf-p345-68v8","path":"desktop/package-lock.json","line":null,"fingerprint":"fast-uri@3.1.5 (npm):GHSA-5jgf-p345-68v8"},{"rule_id":"osv/GHSA-f65p-4m7j-42xc","severity":"high","message":"fast-uri@3.1.5 (npm) is affected by GHSA-f65p-4m7j-42xc","path":"desktop/package-lock.json","line":null,"fingerprint":"fast-uri@3.1.5 (npm):GHSA-f65p-4m7j-42xc"},{"rule_id":"osv/GHSA-fph4-wmhf-6fwf","severity":"high","message":"fast-uri@3.1.5 (npm) is affected by GHSA-fph4-wmhf-6fwf","path":"desktop/package-lock.json","line":null,"fingerprint":"fast-uri@3.1.5 (npm):GHSA-fph4-wmhf-6fwf"},{"rule_id":"osv/GHSA-jqff-g426-hqxp","severity":"high","message":"fast-uri@3.1.5 (npm) is affected by GHSA-jqff-g426-hqxp","path":"desktop/package-lock.json","line":null,"fingerprint":"fast-uri@3.1.5 (npm):GHSA-jqff-g426-hqxp"},{"rule_id":"osv/GHSA-qw65-cvwx-89v3","severity":"high","message":"fast-uri@3.1.5 (npm) is affected by GHSA-qw65-cvwx-89v3","path":"desktop/package-lock.json","line":null,"fingerprint":"fast-uri@3.1.5 (npm):GHSA-qw65-cvwx-89v3"},{"rule_id":"osv/GHSA-2m5v-pch6-74hx","severity":"high","message":"undici@6.28.0 (npm) is affected by GHSA-2m5v-pch6-74hx","path":"desktop/package-lock.json","line":null,"fingerprint":"undici@6.28.0 (npm):GHSA-2m5v-pch6-74hx"},{"rule_id":"osv/GHSA-qrxm-fqhp-jwvm","severity":"high","message":"undici@6.28.0 (npm) is affected by GHSA-qrxm-fqhp-jwvm","path":"desktop/package-lock.json","line":null,"fingerprint":"undici@6.28.0 (npm):GHSA-qrxm-fqhp-jwvm"},{"rule_id":"osv/GHSA-rfgv-xxqx-mfg5","severity":"high","message":"undici@6.28.0 (npm) is affected by GHSA-rfgv-xxqx-mfg5","path":"desktop/package-lock.json","line":null,"fingerprint":"undici@6.28.0 (npm):GHSA-rfgv-xxqx-mfg5"},{"rule_id":"osv/GHSA-xjj6-f33q-929c","severity":"high","message":"undici@6.28.0 (npm) is affected by GHSA-xjj6-f33q-929c","path":"desktop/package-lock.json","line":null,"fingerprint":"undici@6.28.0 (npm):GHSA-xjj6-f33q-929c"},{"rule_id":"osv/GHSA-2m5v-pch6-74hx","severity":"high","message":"undici@7.29.0 (npm) is affected by GHSA-2m5v-pch6-74hx","path":"desktop/package-lock.json","line":null,"fingerprint":"undici@7.29.0 (npm):GHSA-2m5v-pch6-74hx"},{"rule_id":"osv/GHSA-4w7w-5xrc-9h26","severity":"high","message":"undici@7.29.0 (npm) is affected by GHSA-4w7w-5xrc-9h26","path":"desktop/package-lock.json","line":null,"fingerprint":"undici@7.29.0 (npm):GHSA-4w7w-5xrc-9h26"},{"rule_id":"osv/GHSA-qrxm-fqhp-jwvm","severity":"high","message":"undici@7.29.0 (npm) is affected by GHSA-qrxm-fqhp-jwvm","path":"desktop/package-lock.json","line":null,"fingerprint":"undici@7.29.0 (npm):GHSA-qrxm-fqhp-jwvm"},{"rule_id":"osv/GHSA-rfgv-xxqx-mfg5","severity":"high","message":"undici@7.29.0 (npm) is affected by GHSA-rfgv-xxqx-mfg5","path":"desktop/package-lock.json","line":null,"fingerprint":"undici@7.29.0 (npm):GHSA-rfgv-xxqx-mfg5"},{"rule_id":"osv/GHSA-w293-vg96-wgc3","severity":"high","message":"undici@7.29.0 (npm) is affected by GHSA-w293-vg96-wgc3","path":"desktop/package-lock.json","line":null,"fingerprint":"undici@7.29.0 (npm):GHSA-w293-vg96-wgc3"},{"rule_id":"osv/GHSA-xjj6-f33q-929c","severity":"high","message":"undici@7.29.0 (npm) is affected by GHSA-xjj6-f33q-929c","path":"desktop/package-lock.json","line":null,"fingerprint":"undici@7.29.0 (npm):GHSA-xjj6-f33q-929c"},{"rule_id":"osv/GHSA-6gmq-8vp8-gcm6","severity":"medium","message":"@xmldom/xmldom@0.8.13 (npm) is affected by GHSA-6gmq-8vp8-gcm6","path":"desktop/package-lock.json","line":null,"fingerprint":"@xmldom/xmldom@0.8.13 (npm):GHSA-6gmq-8vp8-gcm6"},{"rule_id":"osv/GHSA-6h8r-xr42-gp59","severity":"medium","message":"@xmldom/xmldom@0.8.13 (npm) is affected by GHSA-6h8r-xr42-gp59","path":"desktop/package-lock.json","line":null,"fingerprint":"@xmldom/xmldom@0.8.13 (npm):GHSA-6h8r-xr42-gp59"},{"rule_id":"osv/GHSA-q2hr-2g5m-vwhr","severity":"medium","message":"brace-expansion@1.1.18 (npm) is affected by GHSA-q2hr-2g5m-vwhr","path":"desktop/package-lock.json","line":null,"fingerprint":"brace-expansion@1.1.18 (npm):GHSA-q2hr-2g5m-vwhr"},{"rule_id":"osv/GHSA-q2hr-2g5m-vwhr","severity":"medium","message":"brace-expansion@2.1.4 (npm) is affected by GHSA-q2hr-2g5m-vwhr","path":"desktop/package-lock.json","line":null,"fingerprint":"brace-expansion@2.1.4 (npm):GHSA-q2hr-2g5m-vwhr"},{"rule_id":"osv/GHSA-q2hr-2g5m-vwhr","severity":"medium","message":"brace-expansion@5.0.9 (npm) is affected by GHSA-q2hr-2g5m-vwhr","path":"desktop/package-lock.json","line":null,"fingerprint":"brace-expansion@5.0.9 (npm):GHSA-q2hr-2g5m-vwhr"},{"rule_id":"osv/GHSA-hrr3-gc8f-f4qj","severity":"medium","message":"fast-uri@3.1.5 (npm) is affected by GHSA-hrr3-gc8f-f4qj","path":"desktop/package-lock.json","line":null,"fingerprint":"fast-uri@3.1.5 (npm):GHSA-hrr3-gc8f-f4qj"},{"rule_id":"osv/GHSA-w74x-v6f9-j3xg","severity":"medium","message":"fast-uri@3.1.5 (npm) is affected by GHSA-w74x-v6f9-j3xg","path":"desktop/package-lock.json","line":null,"fingerprint":"fast-uri@3.1.5 (npm):GHSA-w74x-v6f9-j3xg"},{"rule_id":"osv/GHSA-wjr9-j795-jxcr","severity":"medium","message":"fast-uri@3.1.5 (npm) is affected by GHSA-wjr9-j795-jxcr","path":"desktop/package-lock.json","line":null,"fingerprint":"fast-uri@3.1.5 (npm):GHSA-wjr9-j795-jxcr"},{"rule_id":"osv/GHSA-g3hv-75wg-m249","severity":"medium","message":"minimatch@10.2.6 (npm) is affected by GHSA-g3hv-75wg-m249","path":"desktop/package-lock.json","line":null,"fingerprint":"minimatch@10.2.6 (npm):GHSA-g3hv-75wg-m249"},{"rule_id":"osv/GHSA-g3hv-75wg-m249","severity":"medium","message":"minimatch@9.0.9 (npm) is affected by GHSA-g3hv-75wg-m249","path":"desktop/package-lock.json","line":null,"fingerprint":"minimatch@9.0.9 (npm):GHSA-g3hv-75wg-m249"},{"rule_id":"osv/GHSA-3wwx-pv8p-q78v","severity":"medium","message":"undici@6.28.0 (npm) is affected by GHSA-3wwx-pv8p-q78v","path":"desktop/package-lock.json","line":null,"fingerprint":"undici@6.28.0 (npm):GHSA-3wwx-pv8p-q78v"},{"rule_id":"osv/GHSA-4qv8-2p9j-2685","severity":"medium","message":"undici@6.28.0 (npm) is affected by GHSA-4qv8-2p9j-2685","path":"desktop/package-lock.json","line":null,"fingerprint":"undici@6.28.0 (npm):GHSA-4qv8-2p9j-2685"},{"rule_id":"osv/GHSA-9fm3-97px-rjf6","severity":"medium","message":"undici@6.28.0 (npm) is affected by GHSA-9fm3-97px-rjf6","path":"desktop/package-lock.json","line":null,"fingerprint":"undici@6.28.0 (npm):GHSA-9fm3-97px-rjf6"},{"rule_id":"osv/GHSA-2jfj-6hjv-fm6j","severity":"medium","message":"undici@7.29.0 (npm) is affected by GHSA-2jfj-6hjv-fm6j","path":"desktop/package-lock.json","line":null,"fingerprint":"undici@7.29.0 (npm):GHSA-2jfj-6hjv-fm6j"},{"rule_id":"osv/GHSA-3wwx-pv8p-q78v","severity":"medium","message":"undici@7.29.0 (npm) is affected by GHSA-3wwx-pv8p-q78v","path":"desktop/package-lock.json","line":null,"fingerprint":"undici@7.29.0 (npm):GHSA-3wwx-pv8p-q78v"},{"rule_id":"osv/GHSA-3xpg-4rpp-hhhm","severity":"medium","message":"undici@7.29.0 (npm) is affected by GHSA-3xpg-4rpp-hhhm","path":"desktop/package-lock.json","line":null,"fingerprint":"undici@7.29.0 (npm):GHSA-3xpg-4rpp-hhhm"},{"rule_id":"osv/GHSA-4qv8-2p9j-2685","severity":"medium","message":"undici@7.29.0 (npm) is affected by GHSA-4qv8-2p9j-2685","path":"desktop/package-lock.json","line":null,"fingerprint":"undici@7.29.0 (npm):GHSA-4qv8-2p9j-2685"},{"rule_id":"osv/GHSA-55wc-3pg8-jfw6","severity":"medium","message":"undici@7.29.0 (npm) is affected by GHSA-55wc-3pg8-jfw6","path":"desktop/package-lock.json","line":null,"fingerprint":"undici@7.29.0 (npm):GHSA-55wc-3pg8-jfw6"},{"rule_id":"osv/GHSA-9fm3-97px-rjf6","severity":"medium","message":"undici@7.29.0 (npm) is affected by GHSA-9fm3-97px-rjf6","path":"desktop/package-lock.json","line":null,"fingerprint":"undici@7.29.0 (npm):GHSA-9fm3-97px-rjf6"},{"rule_id":"osv/GHSA-f72v-6w45-q472","severity":"medium","message":"undici@7.29.0 (npm) is affected by GHSA-f72v-6w45-q472","path":"desktop/package-lock.json","line":null,"fingerprint":"undici@7.29.0 (npm):GHSA-f72v-6w45-q472"},{"rule_id":"osv/GHSA-pmjh-fq2x-6v4x","severity":"medium","message":"undici@7.29.0 (npm) is affected by GHSA-pmjh-fq2x-6v4x","path":"desktop/package-lock.json","line":null,"fingerprint":"undici@7.29.0 (npm):GHSA-pmjh-fq2x-6v4x"},{"rule_id":"osv/GHSA-rx4f-c7p8-82vq","severity":"medium","message":"undici@7.29.0 (npm) is affected by GHSA-rx4f-c7p8-82vq","path":"desktop/package-lock.json","line":null,"fingerprint":"undici@7.29.0 (npm):GHSA-rx4f-c7p8-82vq"},{"rule_id":"osv/GHSA-333x-w4r6-6crp","severity":"low","message":"fast-uri@3.1.5 (npm) is affected by GHSA-333x-w4r6-6crp","path":"desktop/package-lock.json","line":null,"fingerprint":"fast-uri@3.1.5 (npm):GHSA-333x-w4r6-6crp"},{"rule_id":"osv/GHSA-xhq7-xmqj-769h","severity":"low","message":"fast-uri@3.1.5 (npm) is affected by GHSA-xhq7-xmqj-769h","path":"desktop/package-lock.json","line":null,"fingerprint":"fast-uri@3.1.5 (npm):GHSA-xhq7-xmqj-769h"},{"rule_id":"osv/GHSA-r53p-7pc4-xj5r","severity":"low","message":"undici@6.28.0 (npm) is affected by GHSA-r53p-7pc4-xj5r","path":"desktop/package-lock.json","line":null,"fingerprint":"undici@6.28.0 (npm):GHSA-r53p-7pc4-xj5r"},{"rule_id":"osv/GHSA-2gqq-gqf2-x968","severity":"low","message":"undici@7.29.0 (npm) is affected by GHSA-2gqq-gqf2-x968","path":"desktop/package-lock.json","line":null,"fingerprint":"undici@7.29.0 (npm):GHSA-2gqq-gqf2-x968"},{"rule_id":"osv/GHSA-8436-99hf-9mmv","severity":"low","message":"undici@7.29.0 (npm) is affected by GHSA-8436-99hf-9mmv","path":"desktop/package-lock.json","line":null,"fingerprint":"undici@7.29.0 (npm):GHSA-8436-99hf-9mmv"},{"rule_id":"osv/GHSA-r53p-7pc4-xj5r","severity":"low","message":"undici@7.29.0 (npm) is affected by GHSA-r53p-7pc4-xj5r","path":"desktop/package-lock.json","line":null,"fingerprint":"undici@7.29.0 (npm):GHSA-r53p-7pc4-xj5r"}],"evidence":[],"data":{"ecosystems":["npm"]},"error":null},{"analyzer":"sec-actions","pillar":"security","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-posture","pillar":"security","status":"ok","tool_version":null,"metrics":{"check:security_policy":0.0,"check:dependency_updates":0.0,"check:signed_commits":0.0,"check:lockfiles":1.0,"signed_commit_share":0.3505,"unpinned_manifests":0.0},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-distribution","pillar":"security","status":"ok","tool_version":null,"metrics":{"signals":2.0,"binary_assets":27.0,"suspicious":0.0},"findings":[],"evidence":[{"kind":"binary-release-asset","description":"release v1.8.1 ships Unlimeety-1.8.1-arm64.zip (1 downloads)","ref":"Unlimeety-1.8.1-arm64.zip","url":"https://github.com/cardpay/unlimeety/releases/download/v1.8.1/Unlimeety-1.8.1-arm64.zip","weight":0.0},{"kind":"binary-release-asset","description":"release v1.8.1 ships Unlimeety-arm64.dmg (5 downloads)","ref":"Unlimeety-arm64.dmg","url":"https://github.com/cardpay/unlimeety/releases/download/v1.8.1/Unlimeety-arm64.dmg","weight":0.0},{"kind":"binary-release-asset","description":"release v1.8.1-beta.4 ships Unlimeety-1.8.1-beta.4-arm64.zip (2 downloads)","ref":"Unlimeety-1.8.1-beta.4-arm64.zip","url":"https://github.com/cardpay/unlimeety/releases/download/v1.8.1-beta.4/Unlimeety-1.8.1-beta.4-arm64.zip","weight":0.0},{"kind":"binary-release-asset","description":"release v1.8.1-beta.4 ships Unlimeety-arm64-beta.dmg (1 downloads)","ref":"Unlimeety-arm64-beta.dmg","url":"https://github.com/cardpay/unlimeety/releases/download/v1.8.1-beta.4/Unlimeety-arm64-beta.dmg","weight":0.0},{"kind":"binary-release-asset","description":"release v1.8.1-beta.4 ships unlimeety-extension-beta.zip (2 downloads)","ref":"unlimeety-extension-beta.zip","url":"https://github.com/cardpay/unlimeety/releases/download/v1.8.1-beta.4/unlimeety-extension-beta.zip","weight":0.0},{"kind":"readme-download-lure","description":"links directly to a downloadable archive or installer","ref":"README.md","url":null,"weight":0.0}],"data":{"signals":["binary-release-assets","readme-download-lure"],"suspicious":false,"unusual_traction":false,"metadata":true},"error":null},{"analyzer":"qual-complexity","pillar":"quality","status":"ok","tool_version":"lizard 1.25.1","metrics":{"functions":2046.0,"function_nloc":17498.0,"mean_ccn":3.39,"p90_ccn":7.0,"complex_functions":44.0,"long_functions":7.0,"many_param_functions":0.0,"risky_nloc_share":0.1691},"findings":[],"evidence":[{"kind":"complex-function","description":"extractSubtitleFromNode in extenstion/content.js: complexity 74, 142 lines","ref":"extenstion/content.js","url":"https://github.com/cardpay/unlimeety/blob/c0e6a5c30fbe2808ee683f629022e9aac122b644/extenstion/content.js#L738","weight":1.0},{"kind":"complex-function","description":"runRecordTranscribeJob in desktop/main.js: complexity 64, 172 lines","ref":"desktop/main.js","url":"https://github.com/cardpay/unlimeety/blob/c0e6a5c30fbe2808ee683f629022e9aac122b644/desktop/main.js#L4942","weight":1.0},{"kind":"complex-function","description":"runEnhanceJob in desktop/main.js: complexity 37, 162 lines","ref":"desktop/main.js","url":"https://github.com/cardpay/unlimeety/blob/c0e6a5c30fbe2808ee683f629022e9aac122b644/desktop/main.js#L3280","weight":0.6166666666666667},{"kind":"complex-function","description":"(anonymous) in desktop/renderer/live/live.js: complexity 37, 78 lines","ref":"desktop/renderer/live/live.js","url":"https://github.com/cardpay/unlimeety/blob/c0e6a5c30fbe2808ee683f629022e9aac122b644/desktop/renderer/live/live.js#L581","weight":0.6166666666666667},{"kind":"complex-function","description":"readWaveform in desktop/audio-waveform.js: complexity 36, 71 lines","ref":"desktop/audio-waveform.js","url":"https://github.com/cardpay/unlimeety/blob/c0e6a5c30fbe2808ee683f629022e9aac122b644/desktop/audio-waveform.js#L10","weight":0.6},{"kind":"complex-function","description":"(anonymous) in desktop/renderer/record/record.js: complexity 36, 103 lines","ref":"desktop/renderer/record/record.js","url":"https://github.com/cardpay/unlimeety/blob/c0e6a5c30fbe2808ee683f629022e9aac122b644/desktop/renderer/record/record.js#L870","weight":0.6},{"kind":"complex-function","description":"(anonymous) in desktop/renderer/app.js: complexity 34, 46 lines","ref":"desktop/renderer/app.js","url":"https://github.com/cardpay/unlimeety/blob/c0e6a5c30fbe2808ee683f629022e9aac122b644/desktop/renderer/app.js#L3960","weight":0.5666666666666667},{"kind":"complex-function","description":"parseSpeakerNames in desktop/transcript-enhance.js: complexity 32, 36 lines","ref":"desktop/transcript-enhance.js","url":"https://github.com/cardpay/unlimeety/blob/c0e6a5c30fbe2808ee683f629022e9aac122b644/desktop/transcript-enhance.js#L515","weight":0.5333333333333333},{"kind":"complex-function","description":"(anonymous) in desktop/renderer/app.js: complexity 30, 46 lines","ref":"desktop/renderer/app.js","url":"https://github.com/cardpay/unlimeety/blob/c0e6a5c30fbe2808ee683f629022e9aac122b644/desktop/renderer/app.js#L2217","weight":0.5},{"kind":"complex-function","description":"openMeetingMenu in desktop/renderer/app.js: complexity 30, 76 lines","ref":"desktop/renderer/app.js","url":"https://github.com/cardpay/unlimeety/blob/c0e6a5c30fbe2808ee683f629022e9aac122b644/desktop/renderer/app.js#L2118","weight":0.5}],"data":{},"error":null},{"analyzer":"qual-duplication","pillar":"quality","status":"ok","tool_version":"repotrust-dup-w6","metrics":{"compared_lines":20465.0,"duplicated_lines":661.0,"duplicated_share":0.0323,"files":56.0},"findings":[],"evidence":[{"kind":"duplicate-code","description":"6+ duplicated lines: desktop/live-helper/Sources/TranscriberLive/AudioCapture.swift:483 and desktop/live-helper/Sources/TranscriberLive/AudioCapture.swift:648","ref":"desktop/live-helper/Sources/TranscriberLive/AudioCapture.swift","url":"https://github.com/cardpay/unlimeety/blob/c0e6a5c30fbe2808ee683f629022e9aac122b644/desktop/live-helper/Sources/TranscriberLive/AudioCapture.swift#L483","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: desktop/live-helper/Sources/TranscriberLive/FileTranscriber.swift:77 and desktop/live-helper/Sources/TranscriberLive/StreamingTranscriber.swift:112","ref":"desktop/live-helper/Sources/TranscriberLive/FileTranscriber.swift","url":"https://github.com/cardpay/unlimeety/blob/c0e6a5c30fbe2808ee683f629022e9aac122b644/desktop/live-helper/Sources/TranscriberLive/FileTranscriber.swift#L77","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: desktop/live-helper/Sources/TranscriberLive/FileTranscriber.swift:220 and desktop/live-helper/Sources/TranscriberLive/LiveSession.swift:308","ref":"desktop/live-helper/Sources/TranscriberLive/FileTranscriber.swift","url":"https://github.com/cardpay/unlimeety/blob/c0e6a5c30fbe2808ee683f629022e9aac122b644/desktop/live-helper/Sources/TranscriberLive/FileTranscriber.swift#L220","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: desktop/live-helper/Sources/TranscriberLive/LiveSession.swift:202 and desktop/live-helper/Sources/TranscriberLive/LiveSession.swift:262","ref":"desktop/live-helper/Sources/TranscriberLive/LiveSession.swift","url":"https://github.com/cardpay/unlimeety/blob/c0e6a5c30fbe2808ee683f629022e9aac122b644/desktop/live-helper/Sources/TranscriberLive/LiveSession.swift#L202","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: desktop/live-helper/Sources/TranscriberLive/LiveSession.swift:329 and desktop/live-helper/Sources/TranscriberLive/RecordingSession.swift:121","ref":"desktop/live-helper/Sources/TranscriberLive/LiveSession.swift","url":"https://github.com/cardpay/unlimeety/blob/c0e6a5c30fbe2808ee683f629022e9aac122b644/desktop/live-helper/Sources/TranscriberLive/LiveSession.swift#L329","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: desktop/live-helper/Sources/TranscriberLive/MeetingEndWatcher.swift:88 and desktop/live-helper/Sources/TranscriberLive/MicActivityMonitor.swift:108","ref":"desktop/live-helper/Sources/TranscriberLive/MeetingEndWatcher.swift","url":"https://github.com/cardpay/unlimeety/blob/c0e6a5c30fbe2808ee683f629022e9aac122b644/desktop/live-helper/Sources/TranscriberLive/MeetingEndWatcher.swift#L88","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: desktop/main.js:2067 and desktop/main.js:2476","ref":"desktop/main.js","url":"https://github.com/cardpay/unlimeety/blob/c0e6a5c30fbe2808ee683f629022e9aac122b644/desktop/main.js#L2067","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: desktop/main.js:2670 and desktop/renderer/live/live.js:774","ref":"desktop/main.js","url":"https://github.com/cardpay/unlimeety/blob/c0e6a5c30fbe2808ee683f629022e9aac122b644/desktop/main.js#L2670","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: desktop/preload-panel.js:25 and desktop/preload.js:219","ref":"desktop/preload-panel.js","url":"https://github.com/cardpay/unlimeety/blob/c0e6a5c30fbe2808ee683f629022e9aac122b644/desktop/preload-panel.js#L25","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: desktop/renderer/app.js:237 and desktop/renderer/app.js:295","ref":"desktop/renderer/app.js","url":"https://github.com/cardpay/unlimeety/blob/c0e6a5c30fbe2808ee683f629022e9aac122b644/desktop/renderer/app.js#L237","weight":0.3}],"data":{},"error":null},{"analyzer":"qual-lint","pillar":"quality","status":"ok","tool_version":"opengrep 1.33.1; rules f1d2b562b414","metrics":{"findings":121.0,"weighted_findings":45.25,"scanned_lines":25877.0,"category:best-practice":16.0,"category:correctness":105.0},"findings":[{"rule_id":"opengrep/javascript.lang.correctness.no-stringify-keys","severity":"medium","message":"JSON stringify does not produce a stable key ordering, and should not be relied on for producing object keys. Consider using json-stable-stringify instead.","path":"desktop/main.js","line":2090,"fingerprint":"javascript.lang.correctness.no-stringify-keys:desktop/main.js:2090"},{"rule_id":"opengrep/javascript.lang.correctness.no-stringify-keys","severity":"medium","message":"JSON stringify does not produce a stable key ordering, and should not be relied on for producing object keys. Consider using json-stable-stringify instead.","path":"desktop/main.js","line":2133,"fingerprint":"javascript.lang.correctness.no-stringify-keys:desktop/main.js:2133"},{"rule_id":"opengrep/javascript.lang.correctness.no-stringify-keys","severity":"medium","message":"JSON stringify does not produce a stable key ordering, and should not be relied on for producing object keys. Consider using json-stable-stringify instead.","path":"desktop/main.js","line":2492,"fingerprint":"javascript.lang.correctness.no-stringify-keys:desktop/main.js:2492"},{"rule_id":"opengrep/javascript.lang.correctness.no-stringify-keys","severity":"medium","message":"JSON stringify does not produce a stable key ordering, and should not be relied on for producing object keys. Consider using json-stable-stringify instead.","path":"desktop/main.js","line":2518,"fingerprint":"javascript.lang.correctness.no-stringify-keys:desktop/main.js:2518"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"desktop/main.js","line":5932,"fingerprint":"javascript.lang.best-practice.lazy-load-module:desktop/main.js:5932"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"desktop/main.js","line":5933,"fingerprint":"javascript.lang.best-practice.lazy-load-module:desktop/main.js:5933"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"desktop/main.js","line":5934,"fingerprint":"javascript.lang.best-practice.lazy-load-module:desktop/main.js:5934"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"desktop/main.js","line":5935,"fingerprint":"javascript.lang.best-practice.lazy-load-module:desktop/main.js:5935"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-confirm","severity":"medium","message":"found confirm() call; should this be in production code?","path":"desktop/renderer/app.js","line":1483,"fingerprint":"javascript.lang.best-practice.javascript-confirm:desktop/renderer/app.js:1483"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-confirm","severity":"medium","message":"found confirm() call; should this be in production code?","path":"desktop/renderer/app.js","line":2375,"fingerprint":"javascript.lang.best-practice.javascript-confirm:desktop/renderer/app.js:2375"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-confirm","severity":"medium","message":"found confirm() call; should this be in production code?","path":"desktop/renderer/live/live.js","line":207,"fingerprint":"javascript.lang.best-practice.javascript-confirm:desktop/renderer/live/live.js:207"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-alert","severity":"medium","message":"found alert() call; should this be in production code?","path":"desktop/renderer/live/live.js","line":210,"fingerprint":"javascript.lang.best-practice.javascript-alert:desktop/renderer/live/live.js:210"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-alert","severity":"medium","message":"found alert() call; should this be in production code?","path":"desktop/renderer/live/live.js","line":225,"fingerprint":"javascript.lang.best-practice.javascript-alert:desktop/renderer/live/live.js:225"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-confirm","severity":"medium","message":"found confirm() call; should this be in production code?","path":"desktop/renderer/record/record.js","line":1305,"fingerprint":"javascript.lang.best-practice.javascript-confirm:desktop/renderer/record/record.js:1305"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-alert","severity":"medium","message":"found alert() call; should this be in production code?","path":"desktop/renderer/record/record.js","line":1308,"fingerprint":"javascript.lang.best-practice.javascript-alert:desktop/renderer/record/record.js:1308"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-alert","severity":"medium","message":"found alert() call; should this be in production code?","path":"desktop/renderer/record/record.js","line":1325,"fingerprint":"javascript.lang.best-practice.javascript-alert:desktop/renderer/record/record.js:1325"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"desktop/update-mac.js","line":192,"fingerprint":"javascript.lang.best-practice.lazy-load-module:desktop/update-mac.js:192"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"desktop/update-mac.js","line":262,"fingerprint":"javascript.lang.best-practice.lazy-load-module:desktop/update-mac.js:262"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"desktop/update-mac.js","line":288,"fingerprint":"javascript.lang.best-practice.lazy-load-module:desktop/update-mac.js:288"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"desktop/update-mac.js","line":305,"fingerprint":"javascript.lang.best-practice.lazy-load-module:desktop/update-mac.js:305"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"desktop/glossary.js","line":84,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:desktop/glossary.js:84"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"desktop/glossary.js","line":84,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:desktop/glossary.js:84"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`const` is assigned twice; the first assignment is useless","path":"desktop/main.js","line":7,"fingerprint":"javascript.lang.correctness.useless-assignment:desktop/main.js:7"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`const` is assigned twice; the first assignment is useless","path":"desktop/main.js","line":11,"fingerprint":"javascript.lang.correctness.useless-assignment:desktop/main.js:11"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`const` is assigned twice; the first assignment is useless","path":"desktop/main.js","line":12,"fingerprint":"javascript.lang.correctness.useless-assignment:desktop/main.js:12"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`const` is assigned twice; the first assignment is useless","path":"desktop/main.js","line":13,"fingerprint":"javascript.lang.correctness.useless-assignment:desktop/main.js:13"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"desktop/main.js","line":2986,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:desktop/main.js:2986"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"desktop/main.js","line":2986,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:desktop/main.js:2986"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`const` is assigned twice; the first assignment is useless","path":"desktop/main.js","line":5932,"fingerprint":"javascript.lang.correctness.useless-assignment:desktop/main.js:5932"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`const` is assigned twice; the first assignment is useless","path":"desktop/main.js","line":5933,"fingerprint":"javascript.lang.correctness.useless-assignment:desktop/main.js:5933"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`const` is assigned twice; the first assignment is useless","path":"desktop/main.js","line":5934,"fingerprint":"javascript.lang.correctness.useless-assignment:desktop/main.js:5934"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"desktop/renderer/app.js","line":1979,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:desktop/renderer/app.js:1979"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"desktop/renderer/app.js","line":1979,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:desktop/renderer/app.js:1979"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"desktop/renderer/app.js","line":1979,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:desktop/renderer/app.js:1979"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"desktop/renderer/app.js","line":1980,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:desktop/renderer/app.js:1980"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"desktop/renderer/app.js","line":1999,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:desktop/renderer/app.js:1999"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"desktop/renderer/app.js","line":1999,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:desktop/renderer/app.js:1999"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"desktop/renderer/app.js","line":2002,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:desktop/renderer/app.js:2002"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"desktop/renderer/app.js","line":2003,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:desktop/renderer/app.js:2003"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"desktop/renderer/app.js","line":2004,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:desktop/renderer/app.js:2004"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"desktop/renderer/app.js","line":2005,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:desktop/renderer/app.js:2005"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"desktop/renderer/app.js","line":2174,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:desktop/renderer/app.js:2174"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"desktop/renderer/app.js","line":2178,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:desktop/renderer/app.js:2178"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"desktop/renderer/app.js","line":2182,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:desktop/renderer/app.js:2182"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"desktop/renderer/app.js","line":2186,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:desktop/renderer/app.js:2186"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"desktop/renderer/app.js","line":2191,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:desktop/renderer/app.js:2191"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"desktop/renderer/app.js","line":2195,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:desktop/renderer/app.js:2195"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"desktop/renderer/app.js","line":2200,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:desktop/renderer/app.js:2200"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"desktop/renderer/app.js","line":2204,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:desktop/renderer/app.js:2204"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"desktop/renderer/app.js","line":2208,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:desktop/renderer/app.js:2208"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"desktop/renderer/app.js","line":2884,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:desktop/renderer/app.js:2884"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"desktop/renderer/app.js","line":2886,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:desktop/renderer/app.js:2886"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"desktop/renderer/app.js","line":2886,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:desktop/renderer/app.js:2886"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"desktop/renderer/app.js","line":2886,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:desktop/renderer/app.js:2886"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"desktop/renderer/app.js","line":3276,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:desktop/renderer/app.js:3276"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"desktop/renderer/app.js","line":3640,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:desktop/renderer/app.js:3640"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"desktop/renderer/app.js","line":3640,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:desktop/renderer/app.js:3640"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"desktop/renderer/calendar-picker.js","line":19,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:desktop/renderer/calendar-picker.js:19"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"desktop/renderer/calendar-picker.js","line":19,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:desktop/renderer/calendar-picker.js:19"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"desktop/renderer/calendar-smart.js","line":33,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:desktop/renderer/calendar-smart.js:33"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"desktop/renderer/calendar-smart.js","line":33,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:desktop/renderer/calendar-smart.js:33"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"desktop/renderer/find-in-note.js","line":30,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:desktop/renderer/find-in-note.js:30"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"desktop/renderer/find-in-note.js","line":30,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:desktop/renderer/find-in-note.js:30"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"desktop/renderer/speaker-rename.js","line":13,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:desktop/renderer/speaker-rename.js:13"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"desktop/renderer/speaker-rename.js","line":13,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:desktop/renderer/speaker-rename.js:13"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"desktop/scripts/layout-check.mjs","line":56,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:desktop/scripts/layout-check.mjs:56"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"desktop/scripts/layout-check.mjs","line":56,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:desktop/scripts/layout-check.mjs:56"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"desktop/scripts/layout-check.mjs","line":156,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:desktop/scripts/layout-check.mjs:156"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"desktop/scripts/layout-check.mjs","line":156,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:desktop/scripts/layout-check.mjs:156"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"desktop/scripts/layout-check.mjs","line":176,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:desktop/scripts/layout-check.mjs:176"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"desktop/scripts/layout-check.mjs","line":176,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:desktop/scripts/layout-check.mjs:176"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"desktop/scripts/layout-check.mjs","line":190,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:desktop/scripts/layout-check.mjs:190"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"desktop/scripts/layout-check.mjs","line":190,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:desktop/scripts/layout-check.mjs:190"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"desktop/scripts/layout-check.mjs","line":215,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:desktop/scripts/layout-check.mjs:215"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"desktop/scripts/layout-check.mjs","line":238,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:desktop/scripts/layout-check.mjs:238"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"desktop/scripts/layout-check.mjs","line":238,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:desktop/scripts/layout-check.mjs:238"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"desktop/scripts/layout-check.mjs","line":250,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:desktop/scripts/layout-check.mjs:250"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"desktop/scripts/layout-check.mjs","line":250,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:desktop/scripts/layout-check.mjs:250"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"desktop/scripts/layout-check.mjs","line":253,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:desktop/scripts/layout-check.mjs:253"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"desktop/scripts/layout-check.mjs","line":253,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:desktop/scripts/layout-check.mjs:253"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"desktop/scripts/layout-check.mjs","line":279,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:desktop/scripts/layout-check.mjs:279"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"desktop/scripts/layout-check.mjs","line":279,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:desktop/scripts/layout-check.mjs:279"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"desktop/scripts/layout-check.mjs","line":294,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:desktop/scripts/layout-check.mjs:294"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"desktop/scripts/layout-check.mjs","line":294,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:desktop/scripts/layout-check.mjs:294"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"desktop/scripts/layout-check.mjs","line":308,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:desktop/scripts/layout-check.mjs:308"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"desktop/scripts/layout-check.mjs","line":308,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:desktop/scripts/layout-check.mjs:308"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"desktop/scripts/layout-check.mjs","line":318,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:desktop/scripts/layout-check.mjs:318"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"desktop/scripts/layout-check.mjs","line":327,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:desktop/scripts/layout-check.mjs:327"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"desktop/scripts/layout-check.mjs","line":350,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:desktop/scripts/layout-check.mjs:350"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"desktop/scripts/layout-check.mjs","line":350,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:desktop/scripts/layout-check.mjs:350"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"desktop/scripts/layout-check.mjs","line":364,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:desktop/scripts/layout-check.mjs:364"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"desktop/scripts/layout-check.mjs","line":364,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:desktop/scripts/layout-check.mjs:364"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"desktop/scripts/layout-check.mjs","line":384,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:desktop/scripts/layout-check.mjs:384"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"desktop/scripts/layout-check.mjs","line":384,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:desktop/scripts/layout-check.mjs:384"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"desktop/scripts/layout-check.mjs","line":387,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:desktop/scripts/layout-check.mjs:387"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"desktop/scripts/layout-check.mjs","line":387,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:desktop/scripts/layout-check.mjs:387"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"desktop/scripts/layout-check.mjs","line":438,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:desktop/scripts/layout-check.mjs:438"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"desktop/scripts/layout-check.mjs","line":438,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:desktop/scripts/layout-check.mjs:438"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"desktop/scripts/layout-check.mjs","line":441,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:desktop/scripts/layout-check.mjs:441"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"desktop/scripts/layout-check.mjs","line":441,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:desktop/scripts/layout-check.mjs:441"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"desktop/scripts/layout-check.mjs","line":451,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:desktop/scripts/layout-check.mjs:451"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"desktop/scripts/layout-check.mjs","line":451,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:desktop/scripts/layout-check.mjs:451"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"desktop/scripts/layout-check.mjs","line":474,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:desktop/scripts/layout-check.mjs:474"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"desktop/scripts/layout-check.mjs","line":474,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:desktop/scripts/layout-check.mjs:474"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"desktop/scripts/layout-check.mjs","line":475,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:desktop/scripts/layout-check.mjs:475"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"desktop/scripts/layout-check.mjs","line":475,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:desktop/scripts/layout-check.mjs:475"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"desktop/scripts/screenshots.mjs","line":238,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:desktop/scripts/screenshots.mjs:238"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"desktop/scripts/screenshots.mjs","line":238,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:desktop/scripts/screenshots.mjs:238"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"desktop/scripts/screenshots.mjs","line":474,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:desktop/scripts/screenshots.mjs:474"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"desktop/scripts/screenshots.mjs","line":474,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:desktop/scripts/screenshots.mjs:474"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`const` is assigned twice; the first assignment is useless","path":"desktop/scripts/verify-update-release.mjs","line":11,"fingerprint":"javascript.lang.correctness.useless-assignment:desktop/scripts/verify-update-release.mjs:11"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`const` is assigned twice; the first assignment is useless","path":"desktop/transcript-enhance.js","line":16,"fingerprint":"javascript.lang.correctness.useless-assignment:desktop/transcript-enhance.js:16"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"desktop/transcript-enhance.js","line":303,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:desktop/transcript-enhance.js:303"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"desktop/transcript-enhance.js","line":303,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:desktop/transcript-enhance.js:303"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"desktop/transcript-enhance.js","line":304,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:desktop/transcript-enhance.js:304"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"desktop/transcript-enhance.js","line":304,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:desktop/transcript-enhance.js:304"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"desktop/transcript-enhance.js","line":304,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:desktop/transcript-enhance.js:304"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`const` is assigned twice; the first assignment is useless","path":"desktop/update-mac.js","line":10,"fingerprint":"javascript.lang.correctness.useless-assignment:desktop/update-mac.js:10"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`const` is assigned twice; the first assignment is useless","path":"desktop/update-mac.js","line":11,"fingerprint":"javascript.lang.correctness.useless-assignment:desktop/update-mac.js:11"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`const` is assigned twice; the first assignment is useless","path":"desktop/update-mac.js","line":12,"fingerprint":"javascript.lang.correctness.useless-assignment:desktop/update-mac.js:12"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`const` is assigned twice; the first assignment is useless","path":"desktop/update-service.js","line":6,"fingerprint":"javascript.lang.correctness.useless-assignment:desktop/update-service.js:6"}],"evidence":[],"data":{},"error":null},{"analyzer":"qual-testing","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:has_tests":1.0,"check:test_ratio":0.936,"check:ci_present":0.0,"check:ci_runs_tests":0.0,"check:ci_runs_lint":0.0,"check:tests_cochange":1.0,"test_lines":12110.0,"source_lines":25877.0,"test_ratio":0.468,"ci_files":0.0,"cochange_share":0.5354,"cochange_commits":127.0},"findings":[],"evidence":[],"data":{"test_commands":[],"lint_commands":[]},"error":null},{"analyzer":"qual-docs","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:readme":1.0,"check:license":1.0,"check:contributing":0.0,"check:changelog":0.0,"readme_lines":415.0},"findings":[],"evidence":[{"kind":"docs","description":"README.md","ref":"README.md","url":null,"weight":0.0},{"kind":"docs","description":"LICENSE","ref":"LICENSE","url":null,"weight":0.0}],"data":{},"error":null},{"analyzer":"qual-type-safety","pillar":"quality","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"x-blame","pillar":"ai_provenance","status":"ok","tool_version":"git-blame","metrics":{"ai_lines":9141.0,"other_lines":16736.0,"files_blamed":56.0,"blame_failures":0.0,"quality:ai_findings":56.0,"quality:ai_per_kloc":6.126,"quality:other_findings":65.0,"quality:other_per_kloc":3.884,"quality:ratio":1.58,"security:ai_findings":121.0,"security:ai_per_kloc":13.237,"security:other_findings":179.0,"security:other_per_kloc":10.696,"security:ratio":1.24},"findings":[],"evidence":[],"data":{"sampled":false,"comparable":true},"error":null}],"flags":[]}