Evidence Report

{
  "tool": "pnpm audit",
  "output": "{\n  \"actions\": [],\n  \"advisories\": {\n    \"1101438\": {\n      \"findings\": [\n        {\n          \"version\": \"14.2.16\",\n          \"paths\": [\n            \".>next\"\n          ]\n        }\n      ],\n      \"found_by\": null,\n      \"deleted\": null,\n      \"references\": \"- https://github.com/vercel/next.js/security/advisories/GHSA-7m27-7ghc-44w9\\n- https://nvd.nist.gov/vuln/detail/CVE-2024-56332\\n- https://github.com/advisories/GHSA-7m27-7ghc-44w9\",\n      \"created\": \"2025-01-03T20:19:29.000Z\",\n      \"id\": 1101438,\n      \"npm_advisory_id\": null,\n      \"overview\": \"### Impact\\nA Denial of Service (DoS)

{
  "output": "> schedula-project@0.1.0 build C:\\Users\\Sunny\\Downloads\\Engineering-validation-platform\\uploaded-repositories\\github-achieveradarsh-schedula-app-model-main-409f78b6\n> next build\n\n  ▲ Next.js 14.2.16 (turbo)\n\n   Creating an optimized production build ...\n ELIFECYCLE  Command failed with exit code 1.\n\n ⚠ You are using a non-standard \"NODE_ENV\" value in your environment. This creates inconsistencies in the project and is strongly advised against. Read more: https://nextjs.org/docs/messages/non-standard-node-env\n\n> Build error occurred\nError: next build doesn't support turbopack yet\n    at turbopackBuild (C:\\Users\\Sunny\\Downloads\\Engineering-validation-platform\\uploaded-repositories\\github-achieveradarsh-schedula-app-model-main-409f78b6\\node_modules\\.pnpm\\next@14.2.16_react-dom@18.3.1_react@18.3.1__react@18.3.1

{
  "lint": "> schedula-project@0.1.0 lint C:\\Users\\Sunny\\Downloads\\Engineering-validation-platform\\uploaded-repositories\\github-achieveradarsh-schedula-app-model-main-409f78b6\n> next lint\n\n? How would you like to configure ESLint? https://nextjs.org/docs/basic-features/eslint\n\u001b[?25l❯  Strict (recommended)\n   Base\n   Cancel ELIFECYCLE  Command failed with exit code 1.\n\n ⚠ If you set up ESLint yourself, we recommend adding the Next.js ESLint plugin. See https://nextjs.org/docs/basic-features/eslint#migrating-existing-config",
  "staticScan": {
    "scannedFiles": 106,
    "codeSmellCount": 13,
    "unsafeAnyCount": 65,
    "duplicatedSymbolCount": 126
  },
  "typescript": "app/doctor/calendar/page.tsx(7,76): error TS7016: Could not find a declaration file for module 'react-big

{
  "availableScripts": [
    "build",
    "dev",
    "lint",
    "start"
  ]
}

{
  "findings": [
    {
      "name": "Unsafe eval",
      "count": 0,
      "severity": "high"
    },
    {
      "name": "Command execution",
      "count": 0,
      "severity": "high"
    },
    {
      "name": "SQL string construction",
      "count": 22,
      "severity": "high"
    },
    {
      "name": "Weak crypto",
      "count": 0,
      "severity": "medium"
    },
    {
      "name": "Prototype pollution sink",
      "count": 0,
      "severity": "medium"
    },
    {
      "name": "Path traversal risk",
      "count": 0,
      "severity": "medium"
    }
  ],
  "scan

{
  "envFiles": [],
  "findings": [
    {
      "name": "AWS access key",
      "count": 0
    },
    {
      "name": "OpenAI key",
      "count": 0
    },
    {
      "name": "Private key",
      "count": 0
    },
    {
      "name": "JWT",
      "count": 0
    },
    {
      "name": "Generic secret assignment",
      "count": 0
    }
  ],
  "scannedFiles": 110,
  "includeGitHistory": false
}

{
  "hasCsp": false,
  "missing": [
    "hasCsp",
    "hasCorsConfig",
    "hasCsrfToken",
    "hasRateLimit",
    "hasSecureCookie"
  ],
  "hasCsrfToken": false,
  "hasRateLimit": false,
  "scannedFiles": 109,
  "hasCorsConfig": false,
  "hasAuthzChecks": true,
  "hasSecureCookie": false
}

{
  "missing": [
    "hasGraphql"
  ],
  "hasGraphql": false,
  "openApiFiles": [],
  "scannedFiles": 110,
  "hasJwtValidation": true,
  "hasInputValidation": true,
  "hasObjectAuthorization": true
}

{
  "message": "No .git directory found, so historical secret scanning could not run."
}

{
  "dockerfiles": []
}

{
  "helmFiles": [],
  "composeFiles": [],
  "scannedFiles": 1,
  "riskyPatterns": [
    {
      "name": "Privileged containers",
      "count": 0
    },
    {
      "name": "Host networking",
      "count": 0
    },
    {
      "name": "Latest image tags",
      "count": 0
    },
    {
      "name": "Public ingress CIDR",
      "count": 0
    },
    {
      "name": "Plaintext secret resources",
      "count": 0
    }
  ],
  "terraformFiles": [],
  "kubernetesFiles": []
}

{
  "message": "No GitHub Actions, Azure DevOps, Jenkins, or GitLab CI definitions were found."
}

{
  "note": "Runtime Nmap or SSL analysis requires an explicit authorized target.",
  "weakTls": false,
  "openPorts": [],
  "hasDnsConfig": true,
  "scannedFiles": [
    "pnpm-lock.yaml"
  ],
  "publicExposure": false,
  "hasReverseProxy": false,
  "hasCertificateFiles": false
}

{
  "dddSignals": [],
  "scannedFiles": 104,
  "topLevelDirs": [
    "app",
    "components",
    "hooks",
    "lib",
    "public",
    "services",
    "store",
    "styles",
    "types"
  ],
  "layerViolations": [],
  "microserviceSignals": [],
  "cleanArchitectureSignals": [
    "application"
  ]
}

{
  "hasCsp": false,
  "envFiles": [],
  "backendUrls": 0,
  "scannedFiles": 95,
  "debugEndpoints": 0,
  "exposedEnvFiles": [],
  "dangerousDomApis": 1,
  "publicSecretNames": 0,
  "sourceMapsEnabled": false
}

{
  "missing": [
    "hasMiddleware",
    "hasAuthentication",
    "hasAuthorization",
    "hasRateLimiting"
  ],
  "hasLogging": true,
  "scannedFiles": 5,
  "hasMiddleware": false,
  "hasValidation": true,
  "hasRateLimiting": false,
  "hasAuthorization": false,
  "hasAuthentication": false,
  "hasExceptionHandling": true
}

{
  "hasOrm": false,
  "hasPooling": false,
  "scannedFiles": 106,
  "hasEncryption": true,
  "databaseExposure": 0,
  "rawSqlConstruction": 0
}

{
  "message": "No AWS, Azure, or GCP architecture artifacts were found."
}