{
  "repositoryName": "local-upload/Solo_Developer_Arsenal-main",
  "overallScore": 72,
  "scanDate": "2026-07-20T05:24:41.173Z",
  "totalTests": 18,
  "summary": {
    "passed": 5,
    "warnings": 10,
    "failed": 3,
    "errors": 0
  },
  "results": [
    {
      "testSuiteId": "build-verification",
      "status": "WARN",
      "message": "No supported build manifest found for npm, Maven, Gradle, Cargo, dotnet, or Go.",
      "severity": "low",
      "executionTime": 5,
      "testName": "Suite 1 - Build Verification",
      "sectionName": "Quality"
    },
    {
      "testSuiteId": "static-code-quality",
      "status": "WARN",
      "message": "TypeScript compiler reported errors. Fallback static scan found elevated smell, any-type, or duplicate-symbol counts.",
      "severity": "medium",
      "details": {
        "eslint": "",
        "staticScan": {
          "scannedFiles": 25,
          "codeSmellCount": 4,
          "unsafeAnyCount": 4,
          "duplicatedSymbolCount": 102
        },
        "typescript": "app/actions/github.ts(6,20): error TS2307: Cannot find module '@/lib/db' or its corresponding type declarations.\r\napp/actions/github.ts(7,49): error TS2307: Cannot find module '@/lib/db/schema' or its corresponding type declarations.\r\napp/actions/github.ts(12,34): error TS2307: Cannot find module '@/lib/local-user' or its corresponding type declarations.\r\napp/actions/github.ts(658,29): error TS7006: Parameter 'conn' implicitly has an 'any' type.\r\napp/actions/reports.ts(8,20): error TS2307: Cannot find module '@/lib/db' or its corresponding type declarations.\r\napp/actions/reports.ts(9,48): error TS2307: Cannot find module '@/lib/db/schema' or its corresponding type declarations.\r\napp/actions/reports.ts(10,34): error TS2307: Cannot find module '@/lib/local-user' or its corresponding type declarations.\r\napp/actions/reports.ts(205,33): error TS7006: Parameter 'result' implicitly has an 'any' type.\r\napp/actions/reports.ts(206,29): error TS7006: Parameter 'result' implicitly has an 'any' type.\r\napp/actions/reports.ts(207,31): error TS7006: Parameter 'result' implicitly has an 'any' type.\r\napp/actions/reports.ts(226,14): error TS7006: Parameter 'report' implicitly has an 'any' type.\r\napp/actions/reports.ts(227,11): error TS7006: Parameter 'report' implicitly has an 'any' type.\r\napp/actions/reports.ts(254,14): error TS7006: Parameter 'loom' implicitly has an 'any' type.\r\napp/actions/reports.ts(256,22): error TS7006: Parameter 'a' implicitly has an 'any' type.\r\napp/actions/reports.ts(256,25): error TS7006: Parameter 'b' implicitly has an 'any' type.\r\napp/actions/tests.ts(6,20): error TS2307: Cannot find module '@/lib/db' or its corresponding type declarations.\r\napp/actions/tests.ts(7,107): error TS2307: Cannot find module '@/lib/db/schema' or its corresponding type declarations.\r\napp/actions/tests.ts(16,34): error TS2307: Cannot find module '@/lib/local-user' or its corresponding type declarations.\r\napp/actions/tests.ts(414,64): error TS7006: Parameter 'section' implicitly has an 'any' type.\r\napp/actions/tests.ts(431,58): error TS7006: Parameter 'suite' implicitly has an 'any' type.\r\napp/actions/tests.ts(435,32): error TS7006: Parameter 'storedSection' implicitly has an 'any' type.\r\napp/actions/tests.ts(470,25): error TS7006: Parameter 'a' implicitly has an 'any' type.\r\napp/actions/tests.ts(470,28): error TS7006: Parameter 'b' implicitly has an 'any' type.\r\napp/actions/tests.ts(481,27): error TS7006: Parameter 'a' implicitly has an 'any' type.\r\napp/actions/tests.ts(481,30): error TS7006: Parameter 'b' implicitly has an 'any' type.\r\napp/api/reports/[testRunId]/[format]/route.ts(7,20): error TS2307: Cannot find module '@/lib/db' or its corresponding type declarations.\r\napp/api/reports/[testRunId]/[format]/route.ts(8,25): error TS2307: Cannot find module '@/lib/db/schema' or its corresponding type declarations.\r\napp/api/reports/[testRunId]/[format]/route.ts(9,34): error TS2307: Cannot find module '@/lib/local-user' or its corresponding type declarations.\r\napp/api/reports/[testRunId]/[format]/route.ts(61,40): error TS7006: Parameter 'item' implicitly has an 'any' type.\r\napp/api/reports/[testRunId]/[format]/route.ts(77,46): error TS7006: Parameter 'item' implicitly has an 'any' type.\r\napp/dashboard/ai-security/page.tsx(4,28): error TS2307: Cannot find module '@/components/brand-mark' or its corresponding type declarations.\r\napp/dashboard/architecture/page.tsx(5,28): error TS2307: Cannot find module '@/components/brand-mark' or its corresponding type declarations.\r\napp/dashboard/architecture/page.tsx(54,41): error TS7006: Parameter 'loom' implicitly has an 'any' type.\r\napp/dashboard/page.tsx(4,28): error TS2307: Cannot find module '@/components/brand-mark' or its corresponding type declarations.\r\napp/dashboard/reports/page.tsx(4,28): error TS2307: Cannot find module '@/components/brand-mark' or its corresponding type declarations.\r\napp/dashboard/reports/page.tsx(20,10): error TS7006: Parameter 'groups' implicitly has an 'any' type.\r\napp/dash"
      },
      "executionTime": 17213,
      "testName": "Suite 2 - Static Code Quality",
      "sectionName": "Quality"
    },
    {
      "testSuiteId": "testing",
      "status": "WARN",
      "message": "No runnable test script was found for Jest, Vitest, Playwright, Cypress, or coverage.",
      "severity": "medium",
      "details": {
        "availableScripts": []
      },
      "executionTime": 1,
      "testName": "Suite 3 - Testing",
      "sectionName": "Quality"
    },
    {
      "testSuiteId": "sast",
      "status": "FAIL",
      "message": "Fallback SAST scan found high-risk code patterns.",
      "severity": "critical",
      "details": {
        "findings": [
          {
            "name": "Unsafe eval",
            "count": 1,
            "severity": "high"
          },
          {
            "name": "Command execution",
            "count": 0,
            "severity": "high"
          },
          {
            "name": "SQL string construction",
            "count": 8,
            "severity": "high"
          },
          {
            "name": "Weak crypto",
            "count": 3,
            "severity": "medium"
          },
          {
            "name": "Prototype pollution sink",
            "count": 1,
            "severity": "medium"
          },
          {
            "name": "Path traversal risk",
            "count": 1,
            "severity": "medium"
          }
        ],
        "scannedFiles": 24
      },
      "executionTime": 128,
      "testName": "Suite 4 - SAST",
      "sectionName": "Security"
    },
    {
      "testSuiteId": "secret-detection",
      "status": "FAIL",
      "message": "Fallback secret scan found potential secrets or exposed environment files.",
      "severity": "critical",
      "details": {
        "envFiles": [
          ".env.local"
        ],
        "findings": [
          {
            "name": "AWS access key",
            "count": 0
          },
          {
            "name": "OpenAI key",
            "count": 0
          },
          {
            "name": "Private key",
            "count": 0
          },
          {
            "name": "JWT",
            "count": 0
          },
          {
            "name": "Generic secret assignment",
            "count": 1
          }
        ],
        "scannedFiles": 25,
        "includeGitHistory": false
      },
      "executionTime": 117,
      "testName": "Suite 5 - Secret Detection",
      "sectionName": "Security"
    },
    {
      "testSuiteId": "dependency-security",
      "status": "WARN",
      "message": "No dependency security scanner or supported dependency manifest was available.",
      "severity": "medium",
      "executionTime": 146,
      "testName": "Suite 6 - Dependency Security",
      "sectionName": "Security"
    },
    {
      "testSuiteId": "web-application-security",
      "status": "PASS",
      "message": "Custom web security rules found core controls or no obvious gaps.",
      "severity": "medium",
      "details": {
        "hasCsp": true,
        "missing": [],
        "hasCsrfToken": true,
        "hasRateLimit": true,
        "scannedFiles": 25,
        "hasCorsConfig": true,
        "hasAuthzChecks": true,
        "hasSecureCookie": true
      },
      "executionTime": 62,
      "testName": "Suite 7 - Web Application Security",
      "sectionName": "Security"
    },
    {
      "testSuiteId": "api-security",
      "status": "PASS",
      "message": "API security rules found core validation and authorization signals.",
      "severity": "medium",
      "details": {
        "missing": [],
        "hasGraphql": true,
        "openApiFiles": [],
        "scannedFiles": 25,
        "hasJwtValidation": true,
        "hasInputValidation": true,
        "hasObjectAuthorization": true
      },
      "executionTime": 22,
      "testName": "Suite 8 - API Security",
      "sectionName": "Security"
    },
    {
      "testSuiteId": "git-history-secrets",
      "status": "WARN",
      "message": "No .git directory found, so historical secret scanning could not run.",
      "severity": "medium",
      "executionTime": 0,
      "testName": "Suite 9 - Secrets in Git History",
      "sectionName": "Security"
    },
    {
      "testSuiteId": "container-security",
      "status": "WARN",
      "message": "No Dockerfile was found, so container security checks could not run.",
      "severity": "low",
      "details": {
        "dockerfiles": []
      },
      "executionTime": 3,
      "testName": "Suite 10 - Container Security",
      "sectionName": "Infrastructure"
    },
    {
      "testSuiteId": "infrastructure-as-code",
      "status": "WARN",
      "message": "No Terraform, Kubernetes, Helm, or Docker Compose files were found.",
      "severity": "low",
      "executionTime": 3,
      "testName": "Suite 11 - Infrastructure as Code",
      "sectionName": "Infrastructure"
    },
    {
      "testSuiteId": "ci-cd-security",
      "status": "WARN",
      "message": "No GitHub Actions, Azure DevOps, Jenkins, or GitLab CI definitions were found.",
      "severity": "low",
      "executionTime": 3,
      "testName": "Suite 12 - CI/CD Security",
      "sectionName": "Infrastructure"
    },
    {
      "testSuiteId": "network-readiness",
      "status": "WARN",
      "message": "No network configuration files or authorized runtime target were provided.",
      "severity": "low",
      "details": {
        "note": "Runtime Nmap or SSL analysis requires an explicit authorized target.",
        "weakTls": false,
        "openPorts": [],
        "hasDnsConfig": false,
        "scannedFiles": [],
        "publicExposure": false,
        "hasReverseProxy": false,
        "hasCertificateFiles": false
      },
      "executionTime": 3,
      "testName": "Suite 13 - Network Readiness",
      "sectionName": "Infrastructure"
    },
    {
      "testSuiteId": "repository-architecture",
      "status": "PASS",
      "message": "Architecture scan found organized repository structure and no obvious layer violations.",
      "severity": "medium",
      "details": {
        "dddSignals": [
          "aggregate",
          "entity",
          "valueObject",
          "repository",
          "boundedContext"
        ],
        "scannedFiles": 24,
        "topLevelDirs": [
          "app",
          "components",
          "lib",
          "LICENSE"
        ],
        "layerViolations": [],
        "microserviceSignals": [],
        "cleanArchitectureSignals": [
          "domain",
          "application",
          "infrastructure",
          "interfaces",
          "entities",
          "use-cases"
        ]
      },
      "executionTime": 20,
      "testName": "Suite 14 - Repository Architecture",
      "sectionName": "Architecture"
    },
    {
      "testSuiteId": "frontend-security",
      "status": "FAIL",
      "message": "Frontend scan found exposed env, public secret, or dangerous DOM API risks.",
      "severity": "high",
      "details": {
        "hasCsp": false,
        "envFiles": [
          ".env.local"
        ],
        "backendUrls": 3,
        "scannedFiles": 14,
        "debugEndpoints": 0,
        "exposedEnvFiles": [
          ".env.local"
        ],
        "dangerousDomApis": 0,
        "publicSecretNames": 0,
        "sourceMapsEnabled": false
      },
      "executionTime": 19,
      "testName": "Suite 15 - Frontend Security",
      "sectionName": "Architecture"
    },
    {
      "testSuiteId": "backend-security",
      "status": "PASS",
      "message": "Backend scan found core backend security controls or no obvious gaps.",
      "severity": "medium",
      "details": {
        "missing": [],
        "hasLogging": true,
        "scannedFiles": 12,
        "hasMiddleware": true,
        "hasValidation": true,
        "hasRateLimiting": true,
        "hasAuthorization": true,
        "hasAuthentication": true,
        "hasExceptionHandling": true
      },
      "executionTime": 16,
      "testName": "Suite 16 - Backend Security",
      "sectionName": "Architecture"
    },
    {
      "testSuiteId": "data-layer",
      "status": "PASS",
      "message": "Data layer scan found ORM, pooling, encryption, and query safety signals.",
      "severity": "medium",
      "details": {
        "hasOrm": true,
        "hasPooling": true,
        "scannedFiles": 25,
        "hasEncryption": true,
        "databaseExposure": 0,
        "rawSqlConstruction": 0
      },
      "executionTime": 16,
      "testName": "Suite 17 - Data Layer",
      "sectionName": "Architecture"
    },
    {
      "testSuiteId": "cloud-architecture",
      "status": "WARN",
      "message": "No AWS, Azure, or GCP architecture artifacts were found.",
      "severity": "low",
      "executionTime": 3,
      "testName": "Suite 18 - Cloud Architecture",
      "sectionName": "Architecture"
    }
  ]
}