Luxscope Risk Report

File Score Findings

lib/scanners.mjs 146.6 70

Severity	Rule	Line	Message
HIGH	`metrics.symbol.cyclomatic`	150	makeFindingProcessor cyclomatic=30
HIGH	`metrics.symbol.cyclomatic`	318	runOsvScanner cyclomatic=20
HIGH	`metrics.symbol.cyclomatic`	369	runTrivy cyclomatic=23
HIGH	`metrics.symbol.cyclomatic`	432	runTrivyImage cyclomatic=29
MED	`metrics.file.loc`	1	File has 587 lines
MED	`metrics.symbol.cyclomatic`	16	semgrepSeverity cyclomatic=11
MED	`metrics.symbol.cyclomatic`	57	osvSeverity cyclomatic=13
MED	`metrics.symbol.bodyLines`	150	makeFindingProcessor body spans 71 lines
MED	`metrics.symbol.cyclomatic`	238	runGitleaks cyclomatic=11
MED	`metrics.symbol.cyclomatic`	276	runSemgrep cyclomatic=12
MED	`metrics.symbol.nestingDepth`	318	runOsvScanner max nesting=4
MED	`metrics.symbol.bodyLines`	369	runTrivy body spans 62 lines
MED	`metrics.symbol.paramCount`	432	runTrivyImage has 5 params
MED	`metrics.symbol.nestingDepth`	432	runTrivyImage max nesting=4
MED	`metrics.symbol.bodyLines`	432	runTrivyImage body spans 86 lines
MED	`metrics.symbol.cyclomatic`	519	runNpmAudit cyclomatic=17
MED	`metrics.symbol.bodyLines`	519	runNpmAudit body spans 68 lines
MED	`unreachable-module`	1	Module `lib/scanners.mjs` has zero fan-in from any detected entrypoint (Next/NestJS/main/etc.). Verify it's still wired before keeping.
LOW	`metrics.file.symbolCount`	1	File declares 16 complex symbols (20 total)
LOW	`metrics.file.fanOut`	1	File imports 4 modules
LOW	`metrics.symbol.paramCount`	16	semgrepSeverity has 1 params
LOW	`metrics.symbol.nestingDepth`	16	semgrepSeverity max nesting=0
LOW	`metrics.symbol.bodyLines`	16	semgrepSeverity body spans 17 lines
LOW	`metrics.symbol.cyclomatic`	34	severityFromCvss cyclomatic=6
LOW	`metrics.symbol.paramCount`	34	severityFromCvss has 1 params
LOW	`metrics.symbol.nestingDepth`	34	severityFromCvss max nesting=1
LOW	`metrics.symbol.bodyLines`	34	severityFromCvss body spans 7 lines
LOW	`metrics.symbol.cyclomatic`	42	cvssBaseScore cyclomatic=3
LOW	`metrics.symbol.paramCount`	42	cvssBaseScore has 1 params
LOW	`metrics.symbol.nestingDepth`	42	cvssBaseScore max nesting=0
LOW	`metrics.symbol.bodyLines`	42	cvssBaseScore body spans 5 lines
LOW	`metrics.symbol.cyclomatic`	48	ratingFromText cyclomatic=6
LOW	`metrics.symbol.paramCount`	48	ratingFromText has 1 params
LOW	`metrics.symbol.nestingDepth`	48	ratingFromText max nesting=1
LOW	`metrics.symbol.bodyLines`	48	ratingFromText body spans 8 lines
LOW	`metrics.symbol.paramCount`	57	osvSeverity has 1 params
LOW	`metrics.symbol.nestingDepth`	57	osvSeverity max nesting=3
LOW	`metrics.symbol.bodyLines`	57	osvSeverity body spans 27 lines
LOW	`metrics.symbol.cyclomatic`	89	extractBaseImages cyclomatic=8
LOW	`metrics.symbol.paramCount`	89	extractBaseImages has 2 params
LOW	`metrics.symbol.nestingDepth`	89	extractBaseImages max nesting=3
LOW	`metrics.symbol.bodyLines`	89	extractBaseImages body spans 17 lines
LOW	`metrics.symbol.cyclomatic`	107	timeoutResult cyclomatic=3
LOW	`metrics.symbol.paramCount`	107	timeoutResult has 2 params
LOW	`metrics.symbol.nestingDepth`	107	timeoutResult max nesting=0
LOW	`metrics.symbol.bodyLines`	107	timeoutResult body spans 8 lines
LOW	`metrics.symbol.cyclomatic`	119	hasInlineSuppression cyclomatic=8
LOW	`metrics.symbol.paramCount`	119	hasInlineSuppression has 3 params
LOW	`metrics.symbol.nestingDepth`	119	hasInlineSuppression max nesting=3
LOW	`metrics.symbol.bodyLines`	119	hasInlineSuppression body spans 26 lines
LOW	`metrics.symbol.paramCount`	150	makeFindingProcessor has 4 params
LOW	`metrics.symbol.nestingDepth`	150	makeFindingProcessor max nesting=3
LOW	`metrics.symbol.cyclomatic`	222	applyOverrides cyclomatic=6
LOW	`metrics.symbol.paramCount`	222	applyOverrides has 3 params
LOW	`metrics.symbol.nestingDepth`	222	applyOverrides max nesting=3
LOW	`metrics.symbol.bodyLines`	222	applyOverrides body spans 10 lines
LOW	`metrics.symbol.paramCount`	238	runGitleaks has 4 params
LOW	`metrics.symbol.nestingDepth`	238	runGitleaks max nesting=1
LOW	`metrics.symbol.bodyLines`	238	runGitleaks body spans 37 lines
LOW	`metrics.symbol.paramCount`	276	runSemgrep has 4 params
LOW	`metrics.symbol.nestingDepth`	276	runSemgrep max nesting=1
LOW	`metrics.symbol.bodyLines`	276	runSemgrep body spans 41 lines
LOW	`metrics.symbol.paramCount`	318	runOsvScanner has 4 params
LOW	`metrics.symbol.bodyLines`	318	runOsvScanner body spans 50 lines
LOW	`metrics.symbol.paramCount`	369	runTrivy has 4 params
LOW	`metrics.symbol.nestingDepth`	369	runTrivy max nesting=3
LOW	`metrics.symbol.paramCount`	519	runNpmAudit has 4 params
LOW	`metrics.symbol.nestingDepth`	519	runNpmAudit max nesting=3
LOW	`arch-drift-undocumented-module`	1	Module directory "scanners.mjs" is not represented in any architecture diagram — add it or remove unused code
LOW	`metrics.file.fanIn`	1	File is imported by 0 modules

test/engine.mjs 126 30

Severity	Rule	Line	Message
MED	`test-asserts-nothing`	114	Test "config: loadConfig merges config file over defaults" has no assertion — body has 10 statement line(s) but nothing checked
MED	`test-asserts-nothing`	139	Test "utils: normalizeSeverity canonical cases" has no assertion — body has 5 statement line(s) but nothing checked
MED	`test-asserts-nothing`	147	Test "utils: normalizeSeverity alias mapping" has no assertion — body has 8 statement line(s) but nothing checked
MED	`test-asserts-nothing`	189	Test "scanners: makeFindingProcessor normalizes severity" has no assertion — body has 6 statement line(s) but nothing checked
MED	`test-asserts-nothing`	199	Test "scanners: makeFindingProcessor applies severity override" has no assertion — body has 9 statement line(s) but nothing checked
MED	`test-asserts-nothing`	212	Test "scanners: makeFindingProcessor drops ignored signatures" has no assertion — body has 8 statement line(s) but nothing checked
MED	`test-asserts-nothing`	224	Test "scanners: makeFindingProcessor drops findings whose file matches excludePaths" has no assertion — body has 10 statement line(s) but nothing checked
MED	`test-asserts-nothing`	238	Test "scanners: makeFindingProcessor keeps findings when excludePaths is empty" has no assertion — body has 7 statement line(s) but nothing checked
MED	`test-asserts-nothing`	249	Test "scanners: makeFindingProcessor deduplicates identical trivy-image findings" has no assertion — body has 13 statement line(s) but nothing checked
MED	`test-asserts-nothing`	266	Test "scanners: makeFindingProcessor does not deduplicate same CVE across different images" has no assertion — body has 10 statement line(s) but nothing checked
MED	`test-asserts-nothing`	280	Test "scanners: makeFindingProcessor sets fixable=true only for auto" has no assertion — body has 13 statement line(s) but nothing checked
MED	`test-asserts-nothing`	338	Test "scanners: hasInlineSuppression returns false for nonexistent file" has no assertion — body has 2 statement line(s) but nothing checked
MED	`test-asserts-nothing`	343	Test "scanners: missing-tool returns skipped status with reason" has no assertion — body has 8 statement line(s) but nothing checked
MED	`test-asserts-nothing`	355	Test "scanners: disabled scanner returns skipped with config reason" has no assertion — body has 7 statement line(s) but nothing checked
MED	`test-asserts-nothing`	394	Test "scanners/parse: semgrep fixture → correct severity tiers" has no assertion — body has 26 statement line(s) but nothing checked
MED	`test-asserts-nothing`	426	Test "scanners/parse: npm-audit fixture → HIGH + MEDIUM + UNKNOWN" has no assertion — body has 19 statement line(s) but nothing checked
MED	`test-asserts-nothing`	450	Test "scanners/parse: trivy fixture → IAC HIGH + license MEDIUM" has no assertion — body has 31 statement line(s) but nothing checked
MED	`test-asserts-nothing`	509	Test "baseline: loadBaseline returns null when no file" has no assertion — body has 4 statement line(s) but nothing checked
MED	`test-asserts-nothing`	516	Test "baseline: applyBaseline annotates matched and net-new" has no assertion — body has 15 statement line(s) but nothing checked
MED	`test-asserts-nothing`	564	Test "intelligence: analyze skips baseline findings" has no assertion — body has 6 statement line(s) but nothing checked
MED	`test-asserts-nothing`	573	Test "intelligence: patch maps tool to action" has no assertion — body has 6 statement line(s) but nothing checked
MED	`test-asserts-nothing`	603	Test "intelligence: analyze reasoning includes file, line, severity fields" has no assertion — body has 9 statement line(s) but nothing checked
MED	`test-asserts-nothing`	640	Test "intelligence: patch osv returns npm install cmd for npm ecosystem" has no assertion — body has 6 statement line(s) but nothing checked
MED	`test-asserts-nothing`	686	Test "report: summarize counts by severity key" has no assertion — body has 14 statement line(s) but nothing checked
MED	`test-asserts-nothing`	703	Test "report: resolveStatus PASS when no failOn severities" has no assertion — body has 2 statement line(s) but nothing checked
MED	`test-asserts-nothing`	708	Test "report: resolveStatus FAIL when HIGH present and failOn includes high" has no assertion — body has 2 statement line(s) but nothing checked
MED	`test-asserts-nothing`	713	Test "report: resolveStatus PASS in baseline mode when all findings are baseline" has no assertion — body has 2 statement line(s) but nothing checked
MED	`test-asserts-nothing`	718	Test "report: resolveStatus FAIL in baseline mode when net-new HIGH present" has no assertion — body has 5 statement line(s) but nothing checked
MED	`test-asserts-nothing`	726	Test "report: stripAbsolutePaths replaces absolute path with repo name" has no assertion — body has 2 statement line(s) but nothing checked
MED	`test-asserts-nothing`	731	Test "report: stripAbsolutePaths is a no-op for non-strings" has no assertion — body has 2 statement line(s) but nothing checked

lib/report.mjs 109.6 66

Severity	Rule	Line	Message
HIGH	`metrics.symbol.cyclomatic`	59	applyPathStripping cyclomatic=29
HIGH	`metrics.symbol.cyclomatic`	126	renderHtml cyclomatic=67
HIGH	`metrics.symbol.bodyLines`	126	renderHtml body spans 282 lines
HIGH	`metrics.symbol.cyclomatic`	461	buildSarif cyclomatic=27
MED	`metrics.file.loc`	1	File has 543 lines
MED	`metrics.symbol.bodyLines`	461	buildSarif body spans 82 lines
MED	`unreachable-module`	1	Module `lib/report.mjs` has zero fan-in from any detected entrypoint (Next/NestJS/main/etc.). Verify it's still wired before keeping.
LOW	`metrics.file.symbolCount`	1	File declares 15 complex symbols (20 total)
LOW	`metrics.file.fanOut`	1	File imports 4 modules
LOW	`metrics.symbol.cyclomatic`	19	summarize cyclomatic=4
LOW	`metrics.symbol.paramCount`	19	summarize has 1 params
LOW	`metrics.symbol.nestingDepth`	19	summarize max nesting=2
LOW	`metrics.symbol.bodyLines`	19	summarize body spans 12 lines
LOW	`metrics.symbol.cyclomatic`	35	resolveStatus cyclomatic=4
LOW	`metrics.symbol.paramCount`	35	resolveStatus has 3 params
LOW	`metrics.symbol.nestingDepth`	35	resolveStatus max nesting=0
LOW	`metrics.symbol.bodyLines`	35	resolveStatus body spans 7 lines
LOW	`metrics.symbol.cyclomatic`	46	stripAbsolutePaths cyclomatic=5
LOW	`metrics.symbol.paramCount`	46	stripAbsolutePaths has 3 params
LOW	`metrics.symbol.nestingDepth`	46	stripAbsolutePaths max nesting=1
LOW	`metrics.symbol.bodyLines`	46	stripAbsolutePaths body spans 9 lines
LOW	`metrics.symbol.paramCount`	59	applyPathStripping has 3 params
LOW	`metrics.symbol.nestingDepth`	59	applyPathStripping max nesting=3
LOW	`metrics.symbol.bodyLines`	59	applyPathStripping body spans 31 lines
LOW	`metrics.symbol.cyclomatic`	95	escapeHtml cyclomatic=2
LOW	`metrics.symbol.paramCount`	95	escapeHtml has 1 params
LOW	`metrics.symbol.nestingDepth`	95	escapeHtml max nesting=0
LOW	`metrics.symbol.bodyLines`	95	escapeHtml body spans 9 lines
LOW	`metrics.symbol.cyclomatic`	105	formatLocation cyclomatic=7
LOW	`metrics.symbol.paramCount`	105	formatLocation has 1 params
LOW	`metrics.symbol.nestingDepth`	105	formatLocation max nesting=1
LOW	`metrics.symbol.bodyLines`	105	formatLocation body spans 13 lines
LOW	`metrics.symbol.cyclomatic`	119	bandFromScore cyclomatic=4
LOW	`metrics.symbol.paramCount`	119	bandFromScore has 1 params
LOW	`metrics.symbol.nestingDepth`	119	bandFromScore max nesting=1
LOW	`metrics.symbol.bodyLines`	119	bandFromScore body spans 6 lines
LOW	`metrics.symbol.paramCount`	126	renderHtml has 3 params
LOW	`metrics.symbol.nestingDepth`	126	renderHtml max nesting=2
LOW	`metrics.symbol.cyclomatic`	153	sevPill cyclomatic=3
LOW	`metrics.symbol.paramCount`	153	sevPill has 0 params
LOW	`metrics.symbol.nestingDepth`	153	sevPill max nesting=0
LOW	`metrics.symbol.bodyLines`	153	sevPill body spans 4 lines
LOW	`metrics.symbol.cyclomatic`	159	infoRowsFor cyclomatic=2
LOW	`metrics.symbol.paramCount`	159	infoRowsFor has 0 params
LOW	`metrics.symbol.nestingDepth`	159	infoRowsFor max nesting=0
LOW	`metrics.symbol.bodyLines`	159	infoRowsFor body spans 11 lines
LOW	`metrics.symbol.cyclomatic`	247	TOOL_TONE cyclomatic=5
LOW	`metrics.symbol.paramCount`	247	TOOL_TONE has 2 params
LOW	`metrics.symbol.nestingDepth`	247	TOOL_TONE max nesting=1
LOW	`metrics.symbol.bodyLines`	247	TOOL_TONE body spans 6 lines
LOW	`metrics.symbol.cyclomatic`	254	SEV_TONE cyclomatic=2
LOW	`metrics.symbol.paramCount`	254	SEV_TONE has 0 params
LOW	`metrics.symbol.nestingDepth`	254	SEV_TONE max nesting=0
LOW	`metrics.symbol.bodyLines`	254	SEV_TONE body spans 7 lines
LOW	`metrics.symbol.cyclomatic`	438	toolVersion cyclomatic=3
LOW	`metrics.symbol.paramCount`	438	toolVersion has 1 params
LOW	`metrics.symbol.nestingDepth`	438	toolVersion max nesting=1
LOW	`metrics.symbol.bodyLines`	438	toolVersion body spans 13 lines
LOW	`metrics.symbol.cyclomatic`	452	relativizeUri cyclomatic=4
LOW	`metrics.symbol.paramCount`	452	relativizeUri has 2 params
LOW	`metrics.symbol.nestingDepth`	452	relativizeUri max nesting=1
LOW	`metrics.symbol.bodyLines`	452	relativizeUri body spans 8 lines
LOW	`metrics.symbol.paramCount`	461	buildSarif has 3 params
LOW	`metrics.symbol.nestingDepth`	461	buildSarif max nesting=2
LOW	`arch-drift-undocumented-module`	1	Module directory "report.mjs" is not represented in any architecture diagram — add it or remove unused code
LOW	`metrics.file.fanIn`	1	File is imported by 0 modules

No files match your search.

No MED severity findings.

No LOW severity findings.