{
"schema_version": "1.0.0",
"scanner": {
"name": "global-capability-catalog",
"version": "0.1.0"
},
"repo": {
"id": "github-recent__mbarbine__onboard-platphorm-boilerplate-repo",
"name": "mbarbine__onboard-platphorm-boilerplate-repo",
"path": "/Users/bwm.barbinewarnermichael/Documents/github/repositories/github-recent/mbarbine__onboard-platphorm-boilerplate-repo",
"relative_path": "github-recent/mbarbine__onboard-platphorm-boilerplate-repo",
"remote_url": "git@github.com:mbarbine/onboard-platphorm-boilerplate-repo.git",
"default_branch": "main",
"current_commit": "497e4f621238a799e8443406fb6bf4fc3dec6ba2"
},
"languages": [
{
"language": "TypeScript",
"files": 180,
"bytes": 1077218
},
{
"language": "YAML",
"files": 3,
"bytes": 311368
},
{
"language": "Markdown",
"files": 23,
"bytes": 196220
},
{
"language": "CSS",
"files": 2,
"bytes": 11398
},
{
"language": "JSON",
"files": 10,
"bytes": 10927
},
{
"language": "JavaScript",
"files": 5,
"bytes": 8723
},
{
"language": "SQL",
"files": 1,
"bytes": 6499
},
{
"language": "Dockerfile",
"files": 1,
"bytes": 1001
}
],
"frameworks": [
{
"name": "MCP SDK",
"confidence": "high",
"evidence_paths": [
"package.json"
]
},
{
"name": "Next.js",
"confidence": "high",
"evidence_paths": [
"package.json"
]
},
{
"name": "React",
"confidence": "high",
"evidence_paths": [
"package.json"
]
},
{
"name": "Tailwind CSS",
"confidence": "high",
"evidence_paths": [
"package.json"
]
},
{
"name": "Vitest",
"confidence": "high",
"evidence_paths": [
"package.json"
]
}
],
"packages": {
"package_manager": "pnpm",
"manifests": [
{
"path": "package.json",
"name": "onboard",
"version": "0.1.0",
"scripts": {
"dev": "next dev",
"build": "next build",
"start": "next start",
"lint": "eslint .",
"test": "vitest run",
"test:unit": "vitest run __tests__/unit",
"test:integration": "vitest run __tests__/integration",
"test:mcp": "vitest run __tests__/integration/mcp",
"test:coverage": "vitest run --coverage",
"test:watch": "vitest"
},
"dependencies": {
"@hookform/resolvers": "^3.10.0",
"@modelcontextprotocol/sdk": "^1.27.1",
"@neondatabase/serverless": "^1.0.2",
"@radix-ui/react-accordion": "1.2.12",
"@radix-ui/react-alert-dialog": "1.1.15",
"@radix-ui/react-aspect-ratio": "1.1.8",
"@radix-ui/react-avatar": "1.1.11",
"@radix-ui/react-checkbox": "1.3.3",
"@radix-ui/react-collapsible": "1.1.12",
"@radix-ui/react-context-menu": "2.2.16",
"@radix-ui/react-dialog": "1.1.15",
"@radix-ui/react-dropdown-menu": "2.1.16",
"@radix-ui/react-hover-card": "1.1.15",
"@radix-ui/react-label": "2.1.8",
"@radix-ui/react-menubar": "1.1.16",
"@radix-ui/react-navigation-menu": "1.2.14",
"@radix-ui/react-popover": "1.1.15",
"@radix-ui/react-progress": "1.1.8",
"@radix-ui/react-radio-group": "1.3.8",
"@radix-ui/react-scroll-area": "1.2.10",
"@radix-ui/react-select": "2.2.6",
"@radix-ui/react-separator": "1.1.8",
"@radix-ui/react-slider": "1.3.6",
"@radix-ui/react-slot": "1.2.4",
"@radix-ui/react-switch": "1.2.6",
"@radix-ui/react-tabs": "1.1.13",
"@radix-ui/react-toast": "1.2.15",
"@radix-ui/react-toggle": "1.1.10",
"@radix-ui/react-toggle-group": "1.1.11",
"@radix-ui/react-tooltip": "1.2.8",
"@types/dompurify": "^3.2.0",
"@vercel/analytics": "1.6.1",
"@vercel/mcp-adapter": "^0.3.2",
"@vercel/og": "^0.11.1",
"@vercel/speed-insights": "^1.3.1",
"autoprefixer": "^10.4.27",
"botid": "^1.5.11",
"class-variance-authority": "^0.7.1",
"clsx": "^2.1.1",
"cmdk": "1.1.1",
"date-fns": "4.1.0",
"dompurify": "^3.3.3",
"embla-carousel-react": "8.6.0",
"input-otp": "1.4.2",
"isodomp": "npm:isomorphic-dompurify@^3.7.1",
"isomorphic-dompurify": "^3.7.1",
"lucide-react": "^0.577.0",
"next": "16.1.6",
"next-themes": "^0.4.6",
"react": "19.2.4",
"react-day-picker": "^9.14.0",
"react-dom": "19.2.4",
"react-hook-form": "^7.71.2",
"react-resizable-panels": "^2.1.9",
"recharts": "2.15.0",
"sonner": "^2.0.7",
"tailwind-merge": "^3.5.0",
"uuid": "^13.0.0",
"vaul": "^1.1.2",
"zod": "^3.25.76"
},
"dev_dependencies": {
"@tailwindcss/postcss": "^4.2.1",
"@testing-library/jest-dom": "^6.9.1",
"@testing-library/react": "^16.3.2",
"@testing-library/user-event": "^14.6.1",
"@types/node": "^22.19.15",
"@types/react": "19.2.14",
"@types/react-dom": "19.2.3",
"@vitejs/plugin-react": "^5.1.4",
"eslint": "^9.39.4",
"eslint-config-next": "^16.1.6",
"jsdom": "^28.1.0",
"postcss": "^8.5.8",
"tailwindcss": "^4.2.1",
"tsx": "^4.21.0",
"tw-animate-css": "^1.4.0",
"typescript": "5.9.3",
"vitest": "^4.0.18"
}
}
]
},
"routes": {
"api_routes": [
{
"route": "/capabilities",
"source_path": "app/api/capabilities/route.ts",
"kind": "next-app-api-route",
"methods": [
"GET"
]
},
{
"route": "/docs",
"source_path": "app/api/docs/route.ts",
"kind": "next-app-api-route",
"methods": [
"GET"
]
},
{
"route": "/health",
"source_path": "app/api/health/route.ts",
"kind": "next-app-api-route",
"methods": [
"GET"
]
},
{
"route": "/mcp/register",
"source_path": "app/api/mcp/register/route.ts",
"kind": "next-app-api-route",
"methods": [
"GET",
"POST"
]
},
{
"route": "/mcp",
"source_path": "app/api/mcp/route.ts",
"kind": "next-app-api-route",
"methods": [
"GET",
"POST"
]
},
{
"route": "/og",
"source_path": "app/api/og/route.tsx",
"kind": "next-app-api-route",
"methods": [
"GET"
]
},
{
"route": "/session",
"source_path": "app/api/session/route.ts",
"kind": "next-app-api-route",
"methods": [
"GET",
"POST"
]
},
{
"route": "/v1/automation",
"source_path": "app/api/v1/automation/route.ts",
"kind": "next-app-api-route",
"methods": [
"GET",
"POST"
]
},
{
"route": "/v1/categories",
"source_path": "app/api/v1/categories/route.ts",
"kind": "next-app-api-route",
"methods": [
"GET",
"POST"
]
},
{
"route": "/v1/docs/[slug]",
"source_path": "app/api/v1/docs/[slug]/route.ts",
"kind": "next-app-api-route",
"methods": [
"GET"
]
},
{
"route": "/v1/docs",
"source_path": "app/api/v1/docs/route.ts",
"kind": "next-app-api-route",
"methods": [
"GET"
]
},
{
"route": "/v1/documents/[slug]",
"source_path": "app/api/v1/documents/[slug]/route.ts",
"kind": "next-app-api-route",
"methods": [
"DELETE",
"GET",
"PUT"
]
},
{
"route": "/v1/documents",
"source_path": "app/api/v1/documents/route.ts",
"kind": "next-app-api-route",
"methods": [
"GET",
"POST"
]
},
{
"route": "/v1/ingest",
"source_path": "app/api/v1/ingest/route.ts",
"kind": "next-app-api-route",
"methods": [
"GET",
"POST"
]
},
{
"route": "/v1/integrations/[name]/mcp",
"source_path": "app/api/v1/integrations/[name]/mcp/route.ts",
"kind": "next-app-api-route",
"methods": [
"GET",
"POST"
]
},
{
"route": "/v1/integrations",
"source_path": "app/api/v1/integrations/route.ts",
"kind": "next-app-api-route",
"methods": [
"GET",
"POST"
]
},
{
"route": "/v1/keys",
"source_path": "app/api/v1/keys/route.ts",
"kind": "next-app-api-route",
"methods": [
"GET",
"POST",
"PUT"
]
},
{
"route": "/v1/onboarding",
"source_path": "app/api/v1/onboarding/route.ts",
"kind": "next-app-api-route",
"methods": [
"POST"
]
},
{
"route": "/v1/search",
"source_path": "app/api/v1/search/route.ts",
"kind": "next-app-api-route",
"methods": [
"GET"
]
},
{
"route": "/v1/settings",
"source_path": "app/api/v1/settings/route.ts",
"kind": "next-app-api-route",
"methods": [
"GET",
"PUT"
]
},
{
"route": "/v1/submissions/[id]",
"source_path": "app/api/v1/submissions/[id]/route.ts",
"kind": "next-app-api-route",
"methods": [
"GET",
"POST"
]
},
{
"route": "/v1/submissions",
"source_path": "app/api/v1/submissions/route.ts",
"kind": "next-app-api-route",
"methods": [
"GET",
"POST"
]
},
{
"route": "/v1/version",
"source_path": "app/api/v1/version/route.ts",
"kind": "next-app-api-route",
"methods": [
"GET"
]
},
{
"route": "/v1/webhooks",
"source_path": "app/api/v1/webhooks/route.ts",
"kind": "next-app-api-route",
"methods": [
"GET",
"POST"
]
},
{
"route": "/v1/workflow",
"source_path": "app/api/v1/workflow/route.ts",
"kind": "next-app-api-route",
"methods": [
"GET",
"POST"
]
},
{
"route": "/version",
"source_path": "app/api/version/route.ts",
"kind": "next-app-api-route",
"methods": [
"GET"
]
}
],
"app_routes": [
{
"route": "/docs/[slug]",
"source_path": "app/docs/[slug]/page.tsx",
"kind": "next-app-page",
"methods": [
"GET"
]
},
{
"route": "/docs/api",
"source_path": "app/docs/api/page.tsx",
"kind": "next-app-page",
"methods": [
"GET"
]
},
{
"route": "/docs/category/[slug]",
"source_path": "app/docs/category/[slug]/page.tsx",
"kind": "next-app-page",
"methods": [
"GET"
]
},
{
"route": "/docs/mcp",
"source_path": "app/docs/mcp/page.tsx",
"kind": "next-app-page",
"methods": [
"GET"
]
},
{
"route": "/docs",
"source_path": "app/docs/page.tsx",
"kind": "next-app-page",
"methods": [
"GET"
]
},
{
"route": "/search",
"source_path": "app/search/page.tsx",
"kind": "next-app-page",
"methods": [
"GET"
]
},
{
"route": "/settings",
"source_path": "app/settings/page.tsx",
"kind": "next-app-page",
"methods": [
"GET"
]
},
{
"route": "/submit",
"source_path": "app/submit/page.tsx",
"kind": "next-app-page",
"methods": [
"GET"
]
}
]
},
"components": [
{
"name": "accessible-theme-switcher.test",
"kind": "ui-component",
"source_path": "__tests__/unit/components/accessible-theme-switcher.test.tsx"
},
{
"name": "docs-layout.test",
"kind": "ui-component",
"source_path": "__tests__/unit/components/docs-layout.test.tsx"
},
{
"name": "docs-list-client.test",
"kind": "ui-component",
"source_path": "__tests__/unit/components/docs-list-client.test.tsx"
},
{
"name": "locale-switcher.test",
"kind": "ui-component",
"source_path": "__tests__/unit/components/locale-switcher.test.tsx"
},
{
"name": "markdown-renderer.test",
"kind": "ui-component",
"source_path": "__tests__/unit/components/markdown-renderer.test.tsx"
},
{
"name": "share-buttons.test",
"kind": "ui-component",
"source_path": "__tests__/unit/components/share-buttons.test.tsx"
},
{
"name": "theme-provider.test",
"kind": "ui-component",
"source_path": "__tests__/unit/components/theme-provider.test.tsx"
},
{
"name": "accessible-theme-switcher",
"kind": "ui-component",
"source_path": "components/accessible-theme-switcher.tsx"
},
{
"name": "docs-layout",
"kind": "ui-component",
"source_path": "components/docs-layout.tsx"
},
{
"name": "docs-list-client",
"kind": "ui-component",
"source_path": "components/docs-list-client.tsx"
},
{
"name": "locale-switcher",
"kind": "ui-component",
"source_path": "components/locale-switcher.tsx"
},
{
"name": "markdown-renderer",
"kind": "ui-component",
"source_path": "components/markdown-renderer.tsx"
},
{
"name": "share-buttons",
"kind": "ui-component",
"source_path": "components/share-buttons.tsx"
},
{
"name": "theme-provider",
"kind": "ui-component",
"source_path": "components/theme-provider.tsx"
},
{
"name": "accordion",
"kind": "ui-component",
"source_path": "components/ui/accordion.tsx"
},
{
"name": "alert-dialog",
"kind": "ui-component",
"source_path": "components/ui/alert-dialog.tsx"
},
{
"name": "alert",
"kind": "ui-component",
"source_path": "components/ui/alert.tsx"
},
{
"name": "aspect-ratio",
"kind": "ui-component",
"source_path": "components/ui/aspect-ratio.tsx"
},
{
"name": "avatar",
"kind": "ui-component",
"source_path": "components/ui/avatar.tsx"
},
{
"name": "badge",
"kind": "ui-component",
"source_path": "components/ui/badge.tsx"
},
{
"name": "breadcrumb",
"kind": "ui-component",
"source_path": "components/ui/breadcrumb.tsx"
},
{
"name": "button-group",
"kind": "ui-component",
"source_path": "components/ui/button-group.tsx"
},
{
"name": "button",
"kind": "ui-component",
"source_path": "components/ui/button.tsx"
},
{
"name": "calendar",
"kind": "ui-component",
"source_path": "components/ui/calendar.tsx"
},
{
"name": "card",
"kind": "ui-component",
"source_path": "components/ui/card.tsx"
},
{
"name": "carousel",
"kind": "ui-component",
"source_path": "components/ui/carousel.tsx"
},
{
"name": "chart",
"kind": "ui-component",
"source_path": "components/ui/chart.tsx"
},
{
"name": "checkbox",
"kind": "ui-component",
"source_path": "components/ui/checkbox.tsx"
},
{
"name": "collapsible",
"kind": "ui-component",
"source_path": "components/ui/collapsible.tsx"
},
{
"name": "command",
"kind": "ui-component",
"source_path": "components/ui/command.tsx"
},
{
"name": "context-menu",
"kind": "ui-component",
"source_path": "components/ui/context-menu.tsx"
},
{
"name": "dialog",
"kind": "ui-component",
"source_path": "components/ui/dialog.tsx"
},
{
"name": "drawer",
"kind": "ui-component",
"source_path": "components/ui/drawer.tsx"
},
{
"name": "dropdown-menu",
"kind": "ui-component",
"source_path": "components/ui/dropdown-menu.tsx"
},
{
"name": "empty",
"kind": "ui-component",
"source_path": "components/ui/empty.tsx"
},
{
"name": "field",
"kind": "ui-component",
"source_path": "components/ui/field.tsx"
},
{
"name": "form",
"kind": "ui-component",
"source_path": "components/ui/form.tsx"
},
{
"name": "hover-card",
"kind": "ui-component",
"source_path": "components/ui/hover-card.tsx"
},
{
"name": "input-group",
"kind": "ui-component",
"source_path": "components/ui/input-group.tsx"
},
{
"name": "input-otp",
"kind": "ui-component",
"source_path": "components/ui/input-otp.tsx"
},
{
"name": "input",
"kind": "ui-component",
"source_path": "components/ui/input.tsx"
},
{
"name": "item",
"kind": "ui-component",
"source_path": "components/ui/item.tsx"
},
{
"name": "kbd",
"kind": "ui-component",
"source_path": "components/ui/kbd.tsx"
},
{
"name": "label",
"kind": "ui-component",
"source_path": "components/ui/label.tsx"
},
{
"name": "menubar",
"kind": "ui-component",
"source_path": "components/ui/menubar.tsx"
},
{
"name": "navigation-menu",
"kind": "ui-component",
"source_path": "components/ui/navigation-menu.tsx"
},
{
"name": "pagination",
"kind": "ui-component",
"source_path": "components/ui/pagination.tsx"
},
{
"name": "popover",
"kind": "ui-component",
"source_path": "components/ui/popover.tsx"
},
{
"name": "progress",
"kind": "ui-component",
"source_path": "components/ui/progress.tsx"
},
{
"name": "radio-group",
"kind": "ui-component",
"source_path": "components/ui/radio-group.tsx"
},
{
"name": "resizable",
"kind": "ui-component",
"source_path": "components/ui/resizable.tsx"
},
{
"name": "scroll-area",
"kind": "ui-component",
"source_path": "components/ui/scroll-area.tsx"
},
{
"name": "select",
"kind": "ui-component",
"source_path": "components/ui/select.tsx"
},
{
"name": "separator",
"kind": "ui-component",
"source_path": "components/ui/separator.tsx"
},
{
"name": "sheet",
"kind": "ui-component",
"source_path": "components/ui/sheet.tsx"
},
{
"name": "sidebar",
"kind": "ui-component",
"source_path": "components/ui/sidebar.tsx"
},
{
"name": "skeleton",
"kind": "ui-component",
"source_path": "components/ui/skeleton.tsx"
},
{
"name": "slider",
"kind": "ui-component",
"source_path": "components/ui/slider.tsx"
},
{
"name": "sonner",
"kind": "ui-component",
"source_path": "components/ui/sonner.tsx"
},
{
"name": "spinner",
"kind": "ui-component",
"source_path": "components/ui/spinner.tsx"
},
{
"name": "switch",
"kind": "ui-component",
"source_path": "components/ui/switch.tsx"
},
{
"name": "table",
"kind": "ui-component",
"source_path": "components/ui/table.tsx"
},
{
"name": "tabs",
"kind": "ui-component",
"source_path": "components/ui/tabs.tsx"
},
{
"name": "textarea",
"kind": "ui-component",
"source_path": "components/ui/textarea.tsx"
},
{
"name": "toast",
"kind": "ui-component",
"source_path": "components/ui/toast.tsx"
},
{
"name": "toaster",
"kind": "ui-component",
"source_path": "components/ui/toaster.tsx"
},
{
"name": "toggle-group",
"kind": "ui-component",
"source_path": "components/ui/toggle-group.tsx"
},
{
"name": "toggle",
"kind": "ui-component",
"source_path": "components/ui/toggle.tsx"
},
{
"name": "tooltip",
"kind": "ui-component",
"source_path": "components/ui/tooltip.tsx"
},
{
"name": "use-mobile",
"kind": "ui-component",
"source_path": "components/ui/use-mobile.tsx"
}
],
"data_models": [],
"database": {
"databases": [],
"schemas": [
{
"path": "scripts/001-init-schema.sql"
}
],
"migrations": []
},
"tests": [
{
"name": "automation.test.ts",
"kind": "unit-or-integration",
"source_path": "__tests__/integration/api/automation.test.ts"
},
{
"name": "categories.test.ts",
"kind": "unit-or-integration",
"source_path": "__tests__/integration/api/categories.test.ts"
},
{
"name": "discovery-routes.test.ts",
"kind": "unit-or-integration",
"source_path": "__tests__/integration/api/discovery-routes.test.ts"
},
{
"name": "documents-slug.test.ts",
"kind": "unit-or-integration",
"source_path": "__tests__/integration/api/documents-slug.test.ts"
},
{
"name": "documents.test.ts",
"kind": "unit-or-integration",
"source_path": "__tests__/integration/api/documents.test.ts"
},
{
"name": "health.test.ts",
"kind": "unit-or-integration",
"source_path": "__tests__/integration/api/health.test.ts"
},
{
"name": "ingest.test.ts",
"kind": "unit-or-integration",
"source_path": "__tests__/integration/api/ingest.test.ts"
},
{
"name": "keys.test.ts",
"kind": "unit-or-integration",
"source_path": "__tests__/integration/api/keys.test.ts"
},
{
"name": "search.test.ts",
"kind": "unit-or-integration",
"source_path": "__tests__/integration/api/search.test.ts"
},
{
"name": "submissions.test.ts",
"kind": "unit-or-integration",
"source_path": "__tests__/integration/api/submissions.test.ts"
},
{
"name": "version.test.ts",
"kind": "unit-or-integration",
"source_path": "__tests__/integration/api/version.test.ts"
},
{
"name": "webhooks.test.ts",
"kind": "unit-or-integration",
"source_path": "__tests__/integration/api/webhooks.test.ts"
},
{
"name": "bulk-import-benchmark.test.ts",
"kind": "unit-or-integration",
"source_path": "__tests__/integration/mcp/bulk-import-benchmark.test.ts"
},
{
"name": "mcp-server.test.ts",
"kind": "unit-or-integration",
"source_path": "__tests__/integration/mcp/mcp-server.test.ts"
},
{
"name": "settings-benchmark.test.ts",
"kind": "unit-or-integration",
"source_path": "__tests__/integration/settings-benchmark.test.ts"
},
{
"name": "settings-optimization.test.ts",
"kind": "unit-or-integration",
"source_path": "__tests__/performance/settings-optimization.test.ts"
},
{
"name": "password.test.ts",
"kind": "unit-or-integration",
"source_path": "__tests__/unit/app/api/v1/settings/password.test.ts"
},
{
"name": "page.test.tsx",
"kind": "unit-or-integration",
"source_path": "__tests__/unit/app/submit/page.test.tsx"
},
{
"name": "accessible-theme-switcher.test.tsx",
"kind": "unit-or-integration",
"source_path": "__tests__/unit/components/accessible-theme-switcher.test.tsx"
},
{
"name": "docs-layout.test.tsx",
"kind": "unit-or-integration",
"source_path": "__tests__/unit/components/docs-layout.test.tsx"
},
{
"name": "docs-list-client.test.tsx",
"kind": "unit-or-integration",
"source_path": "__tests__/unit/components/docs-list-client.test.tsx"
},
{
"name": "locale-switcher.test.tsx",
"kind": "unit-or-integration",
"source_path": "__tests__/unit/components/locale-switcher.test.tsx"
},
{
"name": "markdown-renderer.test.tsx",
"kind": "unit-or-integration",
"source_path": "__tests__/unit/components/markdown-renderer.test.tsx"
},
{
"name": "share-buttons.test.tsx",
"kind": "unit-or-integration",
"source_path": "__tests__/unit/components/share-buttons.test.tsx"
},
{
"name": "theme-provider.test.tsx",
"kind": "unit-or-integration",
"source_path": "__tests__/unit/components/theme-provider.test.tsx"
},
{
"name": "use-mobile.test.ts",
"kind": "unit-or-integration",
"source_path": "__tests__/unit/hooks/use-mobile.test.ts"
},
{
"name": "use-toast.test.ts",
"kind": "unit-or-integration",
"source_path": "__tests__/unit/hooks/use-toast.test.ts"
},
{
"name": "aeo-geo.test.ts",
"kind": "unit-or-integration",
"source_path": "__tests__/unit/lib/aeo-geo.test.ts"
},
{
"name": "api-helpers.test.ts",
"kind": "unit-or-integration",
"source_path": "__tests__/unit/lib/api-helpers.test.ts"
},
{
"name": "api-types.test.ts",
"kind": "unit-or-integration",
"source_path": "__tests__/unit/lib/api-types.test.ts"
},
{
"name": "auto-name.test.ts",
"kind": "unit-or-integration",
"source_path": "__tests__/unit/lib/auto-name.test.ts"
},
{
"name": "data.test.ts",
"kind": "unit-or-integration",
"source_path": "__tests__/unit/lib/data.test.ts"
},
{
"name": "db.test.ts",
"kind": "unit-or-integration",
"source_path": "__tests__/unit/lib/db.test.ts"
},
{
"name": "emoji.test.ts",
"kind": "unit-or-integration",
"source_path": "__tests__/unit/lib/emoji.test.ts"
},
{
"name": "fingerprint-enhanced.test.ts",
"kind": "unit-or-integration",
"source_path": "__tests__/unit/lib/fingerprint-enhanced.test.ts"
},
{
"name": "fingerprint.test.ts",
"kind": "unit-or-integration",
"source_path": "__tests__/unit/lib/fingerprint.test.ts"
},
{
"name": "i18n.test.ts",
"kind": "unit-or-integration",
"source_path": "__tests__/unit/lib/i18n.test.ts"
},
{
"name": "logger.test.ts",
"kind": "unit-or-integration",
"source_path": "__tests__/unit/lib/logger.test.ts"
},
{
"name": "markdown.test.ts",
"kind": "unit-or-integration",
"source_path": "__tests__/unit/lib/markdown.test.ts"
},
{
"name": "security-salt.test.ts",
"kind": "unit-or-integration",
"source_path": "__tests__/unit/lib/security-salt.test.ts"
},
{
"name": "seo-generator.test.ts",
"kind": "unit-or-integration",
"source_path": "__tests__/unit/lib/seo-generator.test.ts"
},
{
"name": "utils.test.ts",
"kind": "unit-or-integration",
"source_path": "__tests__/unit/lib/utils.test.ts"
},
{
"name": "version.test.ts",
"kind": "unit-or-integration",
"source_path": "__tests__/unit/lib/version.test.ts"
},
{
"name": "test-api.ts",
"kind": "unit-or-integration",
"source_path": "scripts/test-api.ts"
}
],
"ci": {
"workflows": []
},
"containers": {
"dockerfiles": [
{
"path": "Dockerfile"
}
],
"compose_files": [
{
"path": "docker-compose.yml"
}
]
},
"env": {
"example_files": [
{
"path": ".env.example"
},
{
"path": ".env.test"
}
],
"variables": [
{
"name": "API_KEY_PREFIX",
"source_paths": [
"lib/site-config.ts"
],
"likely_secret": true
},
{
"name": "CALENDAR_API_URL",
"source_paths": [
".env.example",
"lib/site-config.ts"
],
"likely_secret": false
},
{
"name": "DATABASE_URL",
"source_paths": [
"__tests__/unit/lib/db.test.ts",
".env.example",
"lib/db.ts",
"PACKAGES.md"
],
"likely_secret": true
},
{
"name": "DEBUG",
"source_paths": [
".env.example"
],
"likely_secret": false
},
{
"name": "EMOJI_API_URL",
"source_paths": [
".env.example",
"lib/site-config.ts"
],
"likely_secret": false
},
{
"name": "JSON_API_URL",
"source_paths": [
".env.example",
"lib/site-config.ts"
],
"likely_secret": false
},
{
"name": "KANBAN_API_URL",
"source_paths": [
".env.example",
"lib/site-config.ts",
"scripts/provision-ops.mjs"
],
"likely_secret": false
},
{
"name": "LOG_LEVEL",
"source_paths": [
".env.example",
"lib/logger.ts"
],
"likely_secret": false
},
{
"name": "MCP_HUB_URL",
"source_paths": [
".env.example",
"lib/site-config.ts"
],
"likely_secret": false
},
{
"name": "MCP_REGISTRY_URL",
"source_paths": [
".env.example",
"lib/site-config.ts",
"scripts/provision-ops.mjs"
],
"likely_secret": false
},
{
"name": "NETWORK_GRAPH_URL",
"source_paths": [
".env.example",
"lib/site-config.ts",
"scripts/provision-ops.mjs"
],
"likely_secret": false
},
{
"name": "NEXT_PUBLIC_BASE_URL",
"source_paths": [
"__tests__/integration/api/discovery-routes.test.ts",
".env.example",
"app/api/docs/route.ts",
"app/api/og/route.tsx",
"lib/site-config.ts",
"scripts/provision-ops.mjs"
],
"likely_secret": false
},
{
"name": "NEXT_PUBLIC_CONDUCT_EMAIL",
"source_paths": [
"lib/site-config.ts"
],
"likely_secret": false
},
{
"name": "NEXT_PUBLIC_CONTACT_EMAIL",
"source_paths": [
"lib/site-config.ts"
],
"likely_secret": false
},
{
"name": "NEXT_PUBLIC_DISCORD_URL",
"source_paths": [
"lib/site-config.ts"
],
"likely_secret": false
},
{
"name": "NEXT_PUBLIC_GITHUB_ORG",
"source_paths": [
"lib/site-config.ts"
],
"likely_secret": false
},
{
"name": "NEXT_PUBLIC_GITHUB_REPO",
"source_paths": [
"lib/site-config.ts"
],
"likely_secret": false
},
{
"name": "NEXT_PUBLIC_ORG_NAME",
"source_paths": [
"lib/site-config.ts"
],
"likely_secret": false
},
{
"name": "NEXT_PUBLIC_ORG_URL",
"source_paths": [
"lib/site-config.ts"
],
"likely_secret": false
},
{
"name": "NEXT_PUBLIC_SECURITY_EMAIL",
"source_paths": [
"lib/site-config.ts"
],
"likely_secret": false
},
{
"name": "NEXT_PUBLIC_SITE_DESCRIPTION",
"source_paths": [
"lib/site-config.ts"
],
"likely_secret": false
},
{
"name": "NEXT_PUBLIC_SITE_NAME",
"source_paths": [
"app/api/og/route.tsx",
"lib/site-config.ts"
],
"likely_secret": false
},
{
"name": "NEXT_PUBLIC_SITE_TAGLINE",
"source_paths": [
"app/api/og/route.tsx",
"lib/site-config.ts"
],
"likely_secret": false
},
{
"name": "NEXT_PUBLIC_SITE_URL",
"source_paths": [
"app/api/mcp/register/route.ts"
],
"likely_secret": false
},
{
"name": "NEXT_PUBLIC_STORAGE_PREFIX",
"source_paths": [
"lib/site-config.ts"
],
"likely_secret": false
},
{
"name": "NEXT_PUBLIC_SUPPORT_EMAIL",
"source_paths": [
"lib/site-config.ts"
],
"likely_secret": false
},
{
"name": "NODE_ENV",
"source_paths": [
"app/api/v1/version/route.ts",
"lib/logger.ts",
"lib/version.ts"
],
"likely_secret": false
},
{
"name": "PLATPHORM_API_KEY",
"source_paths": [
".env.example",
"app/api/mcp/register/route.ts"
],
"likely_secret": true
},
{
"name": "SERVICE_NAME",
"source_paths": [
"lib/site-config.ts"
],
"likely_secret": false
},
{
"name": "SESSION_SALT",
"source_paths": [
"__tests__/unit/lib/fingerprint-enhanced.test.ts",
"__tests__/unit/lib/fingerprint.test.ts",
".env.test",
"lib/site-config.ts",
"vitest.setup.js"
],
"likely_secret": true
},
{
"name": "STRUCTURED_LOGS",
"source_paths": [
".env.example"
],
"likely_secret": false
},
{
"name": "SVG_API_URL",
"source_paths": [
".env.example",
"lib/site-config.ts"
],
"likely_secret": false
},
{
"name": "TRACE_API_URL",
"source_paths": [
".env.example",
"lib/site-config.ts"
],
"likely_secret": false
},
{
"name": "V0_API_KEY",
"source_paths": [
".env.example"
],
"likely_secret": true
},
{
"name": "V0_PROJECT_DESCRIPTION",
"source_paths": [
"scripts/provision-ops.mjs"
],
"likely_secret": false
},
{
"name": "V0_PROJECT_NAME",
"source_paths": [
"scripts/provision-ops.mjs"
],
"likely_secret": false
},
{
"name": "VERCEL_API_TOKEN",
"source_paths": [
"app/api/v1/onboarding/route.ts"
],
"likely_secret": true
},
{
"name": "VERCEL_ENV",
"source_paths": [
"app/api/v1/version/route.ts",
"lib/version.ts",
"PACKAGES.md"
],
"likely_secret": false
},
{
"name": "VERCEL_GIT_COMMIT_DATE",
"source_paths": [
"app/api/v1/version/route.ts",
"lib/version.ts"
],
"likely_secret": false
},
{
"name": "VERCEL_GIT_COMMIT_REF",
"source_paths": [
"lib/version.ts"
],
"likely_secret": false
},
{
"name": "VERCEL_GIT_COMMIT_SHA",
"source_paths": [
"app/api/v1/version/route.ts",
"lib/version.ts"
],
"likely_secret": false
},
{
"name": "VERCEL_PROJECT_ID",
"source_paths": [
"app/api/v1/onboarding/route.ts"
],
"likely_secret": false
},
{
"name": "VERCEL_REGION",
"source_paths": [
"app/api/v1/version/route.ts",
"lib/version.ts"
],
"likely_secret": false
},
{
"name": "VERCEL_TEAM_ID",
"source_paths": [
"app/api/v1/onboarding/route.ts"
],
"likely_secret": false
},
{
"name": "VERCEL_URL",
"source_paths": [
"app/api/mcp/register/route.ts",
"app/api/v1/version/route.ts",
"lib/version.ts"
],
"likely_secret": false
},
{
"name": "WEBHOOK_EVENT_HEADER",
"source_paths": [
"lib/site-config.ts"
],
"likely_secret": false
},
{
"name": "WEBHOOK_SIGNATURE_HEADER",
"source_paths": [
"lib/site-config.ts"
],
"likely_secret": false
},
{
"name": "XML_API_URL",
"source_paths": [
".env.example",
"lib/site-config.ts"
],
"likely_secret": false
}
]
},
"configs": [
{
"path": "docker-compose.yml"
},
{
"path": "eslint.config.mjs"
},
{
"path": "next.config.mjs"
},
{
"path": "package.json"
},
{
"path": "pnpm-workspace.yaml"
},
{
"path": "postcss.config.mjs"
},
{
"path": "tsconfig.json"
},
{
"path": "vercel.json"
}
],
"docs": {
"readme_paths": [
{
"path": "README.md"
}
],
"doc_paths": [
{
"path": "docs/ops/minimum-discoverability-matrix.md"
}
],
"llms_context_paths": []
},
"discovery_files": {
"openapi": [],
"mcp": [
{
"path": "app/api/mcp/register/route.ts"
},
{
"path": "app/api/mcp/route.ts"
}
],
"llms": [],
"sitemaps": [],
"feeds": [],
"well_known": [
{
"path": "app/.well-known/agent.json/route.ts"
},
{
"path": "app/.well-known/security.txt/route.ts"
}
],
"robots": [],
"manifests": []
},
"integrations": [
{
"name": "MCP",
"confidence": "medium",
"evidence_paths": [
"LOCAL_DEV.md",
"package.json",
"PACKAGES.md",
"pnpm-lock.yaml"
]
},
{
"name": "PlatPhorm",
"confidence": "medium",
"evidence_paths": [
".env.example",
"app/api/mcp/register/route.ts",
"package.json",
"scripts/provision-ops.mjs"
]
},
{
"name": "Postgres",
"confidence": "medium",
"evidence_paths": [
"__tests__/unit/lib/aeo-geo.test.ts",
"__tests__/unit/lib/db.test.ts",
"__tests__/unit/lib/fingerprint-enhanced.test.ts",
"__tests__/unit/lib/fingerprint.test.ts",
".env.example",
"CONTRIBUTING.md",
"docker-compose.yml",
"lib/db.ts",
"package.json"
]
},
{
"name": "Vercel",
"confidence": "medium",
"evidence_paths": [
".env.example",
"app/api/mcp/register/route.ts",
"app/api/og/route.tsx",
"app/api/v1/onboarding/route.ts",
"app/api/v1/version/route.ts",
"app/layout.tsx",
"lib/version.ts",
"LOCAL_DEV.md",
"package.json",
"PACKAGES.md",
"pnpm-lock.yaml"
]
}
],
"license": {
"spdx": "MIT",
"paths": [
{
"path": "LICENSE"
},
{
"path": "LICENSE.txt"
}
]
},
"comments": [
{
"kind": "security",
"source_path": "__tests__/integration/api/discovery-routes.test.ts",
"line": 501,
"text": "// ── .well-known/security.txt ────────────────────────────────────────────────"
},
{
"kind": "security",
"source_path": "__tests__/integration/api/discovery-routes.test.ts",
"line": 503,
"text": "describe('GET /.well-known/security.txt', () => {"
},
{
"kind": "security",
"source_path": "__tests__/integration/api/discovery-routes.test.ts",
"line": 511,
"text": "const mod = await import('@/app/.well-known/security.txt/route')"
},
{
"kind": "security",
"source_path": "__tests__/integration/api/discovery-routes.test.ts",
"line": 525,
"text": "it('includes required security.txt fields', async () => {"
},
{
"kind": "security",
"source_path": "__tests__/integration/api/discovery-routes.test.ts",
"line": 532,
"text": "expect(text).toContain('Contact: mailto:security@platphormnews.com')"
},
{
"kind": "unsafe",
"source_path": "__tests__/integration/mcp/bulk-import-benchmark.test.ts",
"line": 24,
"text": "{ unsafe: vi.fn((s: string) => s) },"
},
{
"kind": "unsafe",
"source_path": "__tests__/integration/mcp/mcp-server.test.ts",
"line": 80,
"text": "// sql.unsafe(str) is used for dynamic ORDER BY fragments — always a no-op"
},
{
"kind": "unsafe",
"source_path": "__tests__/integration/mcp/mcp-server.test.ts",
"line": 81,
"text": "{ unsafe: vi.fn((s: string) => s) },"
},
{
"kind": "unsafe",
"source_path": "__tests__/integration/mcp/mcp-server.test.ts",
"line": 214,
"text": "sqlMock.unsafe.mockClear()"
},
{
"kind": "unsafe",
"source_path": "__tests__/performance/settings-optimization.test.ts",
"line": 7,
"text": "{ unsafe: vi.fn() }"
},
{
"kind": "deprecated",
"source_path": "__tests__/unit/components/accessible-theme-switcher.test.tsx",
"line": 19,
"text": "addListener: vi.fn(), // Deprecated"
},
{
"kind": "deprecated",
"source_path": "__tests__/unit/components/accessible-theme-switcher.test.tsx",
"line": 20,
"text": "removeListener: vi.fn(), // Deprecated"
},
{
"kind": "deprecated",
"source_path": "__tests__/unit/components/docs-layout.test.tsx",
"line": 34,
"text": "addListener: vi.fn(), // Deprecated"
},
{
"kind": "deprecated",
"source_path": "__tests__/unit/components/docs-layout.test.tsx",
"line": 35,
"text": "removeListener: vi.fn(), // Deprecated"
},
{
"kind": "security",
"source_path": "__tests__/unit/lib/aeo-geo.test.ts",
"line": 190,
"text": "tags: ['authentication', 'api', 'security'],"
},
{
"kind": "todo",
"source_path": "__tests__/unit/lib/markdown.test.ts",
"line": 144,
"text": "const html = parseMarkdown('- [x] Done\\n- [ ] Todo', { enableGFM: true })"
},
{
"kind": "todo",
"source_path": "__tests__/unit/lib/markdown.test.ts",
"line": 146,
"text": "expect(html).toContain('Todo')"
},
{
"kind": "security",
"source_path": "__tests__/unit/lib/security-salt.test.ts",
"line": 7,
"text": "describe('generateSessionHash security salt', () => {"
},
{
"kind": "security",
"source_path": "__tests__/unit/lib/seo-generator.test.ts",
"line": 62,
"text": "const result = generateEmojiSummary('Security Best Practices')"
},
{
"kind": "security",
"source_path": "__tests__/unit/lib/seo-generator.test.ts",
"line": 73,
"text": "'javascript typescript python rust react database security performance testing deploy',"
},
{
"kind": "security",
"source_path": "__tests__/unit/lib/seo-generator.test.ts",
"line": 75,
"text": "['react', 'nextjs', 'database', 'security', 'performance']"
},
{
"kind": "security",
"source_path": ".Jules/sentinel.md",
"line": 17,
"text": "**Learning:** Developers sometimes implement ad-hoc markdown parsing for quick features (like live previews) to avoid complex integrations, inadvertently circumventing established security components and introducing XSS vulnerabilities."
},
{
"kind": "security",
"source_path": "anoms-do-not-delete.md",
"line": 323,
"text": "category: { type: 'string', description: 'Filter by category (overview, technical, api, features, compliance, ecosystem, integrations, guides, planning, development, community, releases, security, design)' },"
},
{
"kind": "security",
"source_path": "anoms-do-not-delete.md",
"line": 333,
"text": "slug: { type: 'string', description: 'Doc slug: readme | architecture | api | features | standards | ecosystem | integrations | use-cases | roadmap | testing | contributing | changelog | security | support | code-of-conduct | contributors |"
},
{
"kind": "security",
"source_path": "anoms-do-not-delete.md",
"line": 376,
"text": "'security': { file: 'SECURITY.md', description: 'Security policy and reporting', category: 'security' },"
},
{
"kind": "unsafe",
"source_path": "anoms-do-not-delete.md",
"line": 441,
"text": "ORDER BY ${sql.unsafe(orderBy)}"
},
{
"kind": "security",
"source_path": "app/.well-known/agent.json/route.ts",
"line": 31,
"text": "security: SECURITY_EMAIL,"
},
{
"kind": "security",
"source_path": "app/.well-known/agent.json/route.ts",
"line": 74,
"text": "security_txt: `${baseUrl}/.well-known/security.txt`,"
},
{
"kind": "security",
"source_path": "app/.well-known/security.txt/route.ts",
"line": 18,
"text": "const securityTxt = `# ${SITE_NAME} Security Policy"
},
{
"kind": "security",
"source_path": "app/.well-known/security.txt/route.ts",
"line": 24,
"text": "Canonical: ${baseUrl}/.well-known/security.txt"
},
{
"kind": "security",
"source_path": "app/.well-known/security.txt/route.ts",
"line": 25,
"text": "Policy: ${baseUrl}/docs/security"
},
{
"kind": "security",
"source_path": "app/api/docs/route.ts",
"line": 22,
"text": "security: [{ bearerAuth: [] }],"
},
{
"kind": "security",
"source_path": "app/api/docs/route.ts",
"line": 29,
"text": "security: [],"
},
{
"kind": "security",
"source_path": "app/api/docs/route.ts",
"line": 58,
"text": "security: [],"
},
{
"kind": "security",
"source_path": "app/api/docs/route.ts",
"line": 108,
"text": "security: [],"
},
{
"kind": "security",
"source_path": "app/api/docs/route.ts",
"line": 142,
"text": "security: [],"
},
{
"kind": "security",
"source_path": "app/api/docs/route.ts",
"line": 159,
"text": "security: [],"
},
{
"kind": "security",
"source_path": "app/api/docs/route.ts",
"line": 209,
"text": "security: [],"
},
{
"kind": "security",
"source_path": "app/api/docs/route.ts",
"line": 220,
"text": "security: [],"
},
{
"kind": "security",
"source_path": "app/api/docs/route.ts",
"line": 231,
"text": "security: [],"
},
{
"kind": "security",
"source_path": "app/api/docs/route.ts",
"line": 241,
"text": "security: [],"
},
{
"kind": "security",
"source_path": "app/api/mcp/route.ts",
"line": 33,
"text": "'security': { file: 'SECURITY.md', description: 'Security policy and reporting', category: 'security' },"
},
{
"kind": "security",
"source_path": "app/api/mcp/route.ts",
"line": 903,
"text": "category: z.string().optional().describe('Filter by category (overview, technical, api, features, compliance, ecosystem, integrations, guides, planning, development, community, releases, security, design)'),"
},
{
"kind": "security",
"source_path": "app/api/mcp/route.ts",
"line": 922,
"text": "slug: z.string().describe('Doc slug: readme | architecture | api | features | standards | ecosystem | integrations | use-cases | roadmap | testing | contributing | changelog | security | support | code-of-conduct | contributors | logging | "
},
{
"kind": "security",
"source_path": "app/api/v1/docs/[slug]/route.ts",
"line": 14,
"text": "'security': 'SECURITY.md',"
},
{
"kind": "security",
"source_path": "app/api/v1/docs/route.ts",
"line": 15,
"text": "'SECURITY.md',"
},
{
"kind": "security",
"source_path": "app/api/v1/docs/route.ts",
"line": 42,
"text": "'SECURITY.md': { description: 'Security policy and reporting', category: 'security' },"
},
{
"kind": "security",
"source_path": "app/robots.txt/route.ts",
"line": 35,
"text": "# Security Policy"
},
{
"kind": "security",
"source_path": "app/robots.txt/route.ts",
"line": 36,
"text": "# Security: ${baseUrl}/.well-known/security.txt"
},
{
"kind": "security",
"source_path": "app/settings/page.tsx",
"line": 289,
"text": "Security"
},
{
"kind": "security",
"source_path": "app/settings/page.tsx",
"line": 523,
"text": "{ key: 'security', label: 'Security', desc: 'Security policy' },"
},
{
"kind": "security",
"source_path": "app/settings/page.tsx",
"line": 559,
"text": "{/* Security Tab */}"
},
{
"kind": "security",
"source_path": "app/settings/page.tsx",
"line": 560,
"text": ""
},
{
"kind": "security",
"source_path": "ARCHITECTURE.md",
"line": 136,
"text": "## Security Model"
},
{
"kind": "security",
"source_path": "ARCHITECTURE.md",
"line": 149,
"text": "- Content Security Policy headers"
},
{
"kind": "security",
"source_path": "deep-research-report-v2.md",
"line": 10,
"text": "- Whether the schema choices will work reliably in entity[\"organization\",\"PostgreSQL\",\"database project\"], including correctness of partitioning, indexing, generated columns, and row-level security primitives. citeturn2search0turn1sea"
},
{
"kind": "security",
"source_path": "deep-research-report-v2.md",
"line": 17,
"text": "### robots.txt and “discoverability vs security” semantics"
},
{
"kind": "security",
"source_path": "deep-research-report-v2.md",
"line": 21,
"text": "Crucially, RFC 9309 explicitly states that REP rules are **not access authorization** and “not a substitute for valid content security measures,” which matters directly to how findings are categorized and scored: “blocked-by-robots” is **co"
},
{
"kind": "security",
"source_path": "deep-research-report-v2.md",
"line": 23,
"text": "Schema implication (your current plan aligns): keeping `robots` in `evidence.artifacts`, with artifact-level evaluation in `results.artifact_evaluations`, lets you score parse correctness and “intent coherence” without treating it as a secu"
},
{
"kind": "security",
"source_path": "deep-research-report-v2.md",
"line": 25,
"text": "### security.txt and the well-known location rule"
},
{
"kind": "security",
"source_path": "deep-research-report-v2.md",
"line": 27,
"text": "Treating `security.txt` as first-class is correct and standards-aligned:"
},
{
"kind": "security",
"source_path": "deep-research-report-v2.md",
"line": 29,
"text": "- **RFC 9116** defines `security.txt` as a machine-parsable file at a known location, and states it **MUST** follow the ABNF grammar defined in the RFC. citeturn0search1turn0search9"
},
{
"kind": "security",
"source_path": "deep-research-report-v2.md",
"line": 118,
"text": "- PostgreSQL supports enabling row level security with `ALTER TABLE ... ENABLE ROW LEVEL SECURITY`. citeturn1search2turn1search6"
},
{
"kind": "security",
"source_path": "deep-research-report-v2.md",
"line": 119,
"text": "- Policies are created with `CREATE POLICY`, and row security must be enabled for policies to apply. citeturn1search6turn1search2"
},
{
"kind": "security",
"source_path": "deep-research-report-v2.md",
"line": 136,
"text": "- security.txt: ABNF validity + required fields presence, and correct well-known placement citeturn0search1turn0search2"
},
{
"kind": "deprecated",
"source_path": "deep-research-report-v2.md",
"line": 169,
"text": "Hardening recommendation: encode “FID is deprecated” as metadata and ensure UI/reporting labels treat FID as historical only, which your `fid_deprecated boolean` already supports. citeturn1search3turn1search7"
},
{
"kind": "security",
"source_path": "deep-research-report-v2.md",
"line": 196,
"text": "- is grounded in real standards for core surface artifacts (`robots.txt`, `security.txt`, well-known URIs, sitemaps, manifests, OG metadata) citeturn0search0turn0search1turn0search2turn0search3turn3search0turn3search1"
},
{
"kind": "unsafe",
"source_path": "lib/db.ts",
"line": 33,
"text": "unsafe(rawSql: string): unknown"
},
{
"kind": "security",
"source_path": "lib/emoji.ts",
"line": 140,
"text": "'security': '🔒',"
},
{
"kind": "deprecated",
"source_path": "lib/emoji.ts",
"line": 179,
"text": "'deprecated': '⏰',"
},
{
"kind": "todo",
"source_path": "lib/i18n.ts",
"line": 264,
"text": "'home.view_all': 'Ver Todo',"
},
{
"kind": "security",
"source_path": "lib/seo-generator.ts",
"line": 96,
"text": "'security': '🛡️',"
},
{
"kind": "security",
"source_path": "lib/site-config.ts",
"line": 57,
"text": "/** Security reporting email */"
},
{
"kind": "security",
"source_path": "lib/site-config.ts",
"line": 59,
"text": "process.env.NEXT_PUBLIC_SECURITY_EMAIL || 'security@platphormnews.com'"
},
{
"kind": "security",
"source_path": "License FAQ.md",
"line": 23,
"text": "Yes, if your use is non-commercial as defined by the license. Internal evaluation, research, development, testing, security review, accessibility work, and internal experimentation are generally allowed if you are not directly or indirectly"
},
{
"kind": "security",
"source_path": "LICENSE.txt",
"line": 13,
"text": "“Non-commercial purposes” include personal use by an individual, academic research and development, journalism, testing, evaluation, interoperability work, security review, accessibility work, and internal use by your own organization where"
},
{
"kind": "security",
"source_path": "NEW_INTERNET_V1_FULL_SPEC.md",
"line": 133,
"text": "- `/security.txt`"
},
{
"kind": "security",
"source_path": "NEW_INTERNET_V1_FULL_SPEC.md",
"line": 381,
"text": "- SECURITY-TXT-PRESENCE"
},
{
"kind": "security",
"source_path": "NEW_INTERNET_V1_FULL_SPEC.md",
"line": 382,
"text": "- SECURITY-TXT-VALIDITY"
},
{
"kind": "security",
"source_path": "NEW_INTERNET_V1_FULL_SPEC.md",
"line": 383,
"text": "- SECURITY-CONTACT-USEFULNESS"
},
{
"kind": "deprecated",
"source_path": "PACKAGES.md",
"line": 106,
"text": "from `@modelcontextprotocol/sdk`. The hand-rolled JSON-RPC approach is deprecated inside"
},
{
"kind": "deprecated",
"source_path": "pnpm-lock.yaml",
"line": 1910,
"text": "deprecated: This is a stub types definition. dompurify provides its own type definitions, so you do not need this installed."
},
{
"kind": "security",
"source_path": "public/humans.txt",
"line": 27,
"text": "Security: security@platphormnews.com"
},
{
"kind": "security",
"source_path": "public/humans.txt",
"line": 52,
"text": "Security Policy: http://localhost:3000/api/v1/docs/security"
},
{
"kind": "security",
"source_path": "public/humans.txt",
"line": 89,
"text": "Security: http://localhost:3000/.well-known/security.txt"
},
{
"kind": "security",
"source_path": "README.md",
"line": 57,
"text": "- [SECURITY.md](SECURITY.md) — Security policy"
},
{
"kind": "security",
"source_path": "SECURITY.md",
"line": 1,
"text": "# Security Policy"
},
{
"kind": "security",
"source_path": "SECURITY.md",
"line": 12,
"text": "We take security seriously. If you discover a security vulnerability,"
},
{
"kind": "security",
"source_path": "SECURITY.md",
"line": 17,
"text": "**DO NOT** create a public GitHub issue for security vulnerabilities."
},
{
"kind": "security",
"source_path": "SECURITY.md",
"line": 19,
"text": "Instead, please email us at: **security@platphormnews.com**"
},
{
"kind": "security",
"source_path": "SECURITY.md",
"line": 46,
"text": "- Physical security"
},
{
"kind": "security",
"source_path": "SECURITY.md",
"line": 51,
"text": "We recognize security researchers who responsibly disclose vulnerabilities:"
},
{
"kind": "security",
"source_path": "SECURITY.md",
"line": 52,
"text": "- Credit in security advisories"
},
{
"kind": "security",
"source_path": "SECURITY.md",
"line": 53,
"text": "- Listing in SECURITY-THANKS.md"
},
{
"kind": "security",
"source_path": "SECURITY.md",
"line": 56,
"text": "### Security Measures"
},
{
"kind": "security",
"source_path": "SECURITY.md",
"line": 60,
"text": "- Content Security Policy headers"
},
{
"kind": "security",
"source_path": "SECURITY.md",
"line": 65,
"text": "## Security Best Practices for Deployers"
},
{
"kind": "security",
"source_path": "SECURITY.md",
"line": 75,
"text": "- Security issues: security@platphormnews.com"
},
{
"kind": "security",
"source_path": "standards-references.md",
"line": 22,
"text": "### Robots, security contact, and well-known placement"
},
{
"kind": "security",
"source_path": "standards-references.md",
"line": 24,
"text": "- `robots.txt` has been formalized as an IETF RFC (RFC 9309). Importantly, robots/REP rules are **not access authorization** and **not a substitute for real security controls**. This directly impacts scoring language: “blocked by robots” sh"
},
{
"kind": "security",
"source_path": "standards-references.md",
"line": 25,
"text": "- `security.txt` is an IETF RFC (RFC 9116) and is designed to be machine-discoverable at a predictable location, typically under `/.well-known/`. citeturn24search3turn24search4"
},
{
"kind": "security",
"source_path": "standards-references.md",
"line": 68,
"text": "### JA4+ as a cross-domain security/observability reference"
},
{
"kind": "security",
"source_path": "standards-references.md",
"line": 70,
"text": "JA4+ is published as a suite of network fingerprinting methods and is being incorporated into major platforms; for example, AWS WAF exposes JA4 fingerprint matching for requests. This is not a W3C/IETF web standard, but it is relevant as an"
},
{
"kind": "security",
"source_path": "standards-references.md",
"line": 137,
"text": "The standards claims embedded in these documents are grounded in authoritative specifications and documentation: RFC robots/REP guidance, RFC security.txt and well-known placement, sitemap protocol rules, W3C WCAG/ARIA/manifest specs, “INP "
},
{
"kind": "security",
"source_path": "standards-references.md",
"line": 238,
"text": "- artifact_probe (robots, sitemaps, llms, humans, security.txt, etc.)"
},
{
"kind": "security",
"source_path": "standards-references.md",
"line": 251,
"text": "### Trust + security disclosure surfaces"
},
{
"kind": "security",
"source_path": "standards-references.md",
"line": 252,
"text": "- /.well-known/security.txt (IETF RFC security.txt)"
},
{
"kind": "security",
"source_path": "standards-references.md",
"line": 363,
"text": "- RFC 9116 — security.txt"
},
{
"kind": "security",
"source_path": "standards-references.md",
"line": 385,
"text": "- Content Security Policy Level 3 (W3C TR)"
},
{
"kind": "security",
"source_path": "standards-references.md",
"line": 441,
"text": "- Row-level security (RLS)"
},
{
"kind": "security",
"source_path": "vercel.json",
"line": 21,
"text": "{ \"key\": \"Strict-Transport-Security\", \"value\": \"max-age=31536000; includeSubDomains\" },"
}
],
"security": {
"secret_risks": [],
"unsafe_patterns": [
{
"name": "child-process-exec",
"confidence": "medium",
"evidence_paths": [
"components/markdown-renderer.tsx",
"lib/markdown.ts"
]
},
{
"name": "dangerously-set-html",
"confidence": "medium",
"evidence_paths": [
".Jules/sentinel.md",
"app/docs/[slug]/page.tsx",
"app/page.tsx",
"components/markdown-renderer.tsx",
"components/ui/chart.tsx"
]
},
{
"name": "sql-injection-review-needed",
"confidence": "medium",
"evidence_paths": [
"__tests__/performance/settings-optimization.test.ts",
"anoms-do-not-delete.md",
"app/api/mcp/route.ts",
"app/api/v1/automation/route.ts",
"app/api/v1/settings/route.ts",
"app/api/v1/workflow/route.ts",
"app/llms-full.txt/route.ts",
"app/page.tsx",
"components/accessible-theme-switcher.tsx",
"lib/api-helpers.ts",
"scripts/benchmark-seo-refresh.ts",
"scripts/benchmark-seo.ts"
]
},
{
"name": "ssrf-review-needed",
"confidence": "medium",
"evidence_paths": [
"anoms-do-not-delete.md",
"app/api/mcp/route.ts",
"app/api/v1/automation/route.ts",
"app/api/v1/onboarding/route.ts",
"app/api/v1/workflow/route.ts",
"scripts/provision-ops.mjs"
]
}
],
"sensitive_data_indicators": [
{
"name": "api_key",
"confidence": "medium",
"evidence_paths": [
"__tests__/unit/lib/api-helpers.test.ts",
".env.example",
"API.md",
"app/api/mcp/register/route.ts",
"app/api/v1/categories/route.ts",
"app/api/v1/documents/[slug]/route.ts",
"app/api/v1/documents/route.ts",
"app/api/v1/keys/route.ts",
"app/api/v1/submissions/[id]/route.ts",
"app/api/v1/webhooks/route.ts",
"app/docs/api/page.tsx",
"app/llms-full.txt/route.ts",
"app/llms-index.json/route.ts",
"app/llms.txt/route.ts",
"app/page.tsx",
"ARCHITECTURE.md",
"CHANGELOG.md",
"lib/api-helpers.ts",
"lib/site-config.ts",
"scripts/001-init-schema.sql"
]
},
{
"name": "card",
"confidence": "medium",
"evidence_paths": [
"__tests__/integration/mcp/bulk-import-benchmark.test.ts",
"__tests__/integration/mcp/mcp-server.test.ts",
"anoms-do-not-delete.md",
"app/api/mcp/route.ts",
"app/docs/[slug]/not-found.tsx",
"app/docs/[slug]/page.tsx",
"app/docs/api/page.tsx",
"app/docs/category/[slug]/page.tsx",
"app/docs/mcp/page.tsx",
"app/globals.css",
"app/layout.tsx",
"app/llms.txt/route.ts",
"app/not-found.tsx",
"app/page.tsx",
"app/search/page.tsx",
"app/settings/page.tsx",
"app/submit/page.tsx",
"CHANGELOG.md",
"components/docs-layout.tsx",
"components/docs-list-client.tsx"
]
},
{
"name": "email",
"confidence": "medium",
"evidence_paths": [
"__tests__/integration/mcp/mcp-server.test.ts",
"__tests__/unit/components/share-buttons.test.tsx",
"__tests__/unit/lib/seo-generator.test.ts",
"anoms-do-not-delete.md",
"API.md",
"app/.well-known/agent.json/route.ts",
"app/.well-known/security.txt/route.ts",
"app/api/docs/route.ts",
"app/api/mcp/register/route.ts",
"app/api/mcp/route.ts",
"app/api/v1/documents/[slug]/route.ts",
"app/api/v1/documents/route.ts",
"app/api/v1/submissions/[id]/route.ts",
"app/api/v1/submissions/route.ts",
"app/docs/api/page.tsx",
"app/docs/mcp/page.tsx",
"app/page.tsx",
"app/submit/page.tsx",
"components/share-buttons.tsx",
"CONTRIBUTING.md"
]
},
{
"name": "financial",
"confidence": "medium",
"evidence_paths": [
"PRINCIPLES.md"
]
},
{
"name": "fingerprint",
"confidence": "medium",
"evidence_paths": [
"__tests__/unit/lib/fingerprint-enhanced.test.ts",
"__tests__/unit/lib/fingerprint.test.ts",
"app/api/session/route.ts",
"app/llms.txt/route.ts",
"app/submit/page.tsx",
"ARCHITECTURE.md",
"CHANGELOG.md",
"lib/fingerprint.ts",
"lib/logger.ts",
"lib/site-config.ts",
"PACKAGES.md",
"PRINCIPLES.md",
"standards-references.md"
]
},
{
"name": "health",
"confidence": "medium",
"evidence_paths": [
"__tests__/integration/api/discovery-routes.test.ts",
"__tests__/integration/api/health.test.ts",
"API.md",
"app/api/capabilities/route.ts",
"app/api/docs/route.ts",
"app/api/health/route.ts",
"app/api/mcp/register/route.ts",
"app/api/v1/automation/route.ts",
"app/docs/api/page.tsx",
"app/llms-full.txt/route.ts",
"app/llms-index.json/route.ts",
"app/llms.txt/route.ts",
"app/robots.txt/route.ts",
"app/sitemap.xml/route.ts",
"CODE_OF_CONDUCT.md",
"docker-compose.yml",
"docs/ops/discovery-registration.json",
"docs/ops/minimum-discoverability-matrix.md",
"README.md",
"scripts/provision-ops.mjs"
]
},
{
"name": "ip address",
"confidence": "medium",
"evidence_paths": [
"__tests__/integration/api/ingest.test.ts"
]
},
{
"name": "location",
"confidence": "medium",
"evidence_paths": [
".cspell/custom-dictionary-workspace.txt",
"app/submit/page.tsx",
"deep-research-report-v2.md",
"NEW_INTERNET_V1_FULL_SPEC.md",
"next.config.mjs",
"PACKAGES.md",
"standards-references.md"
]
},
{
"name": "password",
"confidence": "medium",
"evidence_paths": [
"__tests__/unit/app/api/v1/settings/password.test.ts",
".env.example",
"app/api/v1/settings/route.ts",
"app/settings/page.tsx",
"docker-compose.yml",
"lib/i18n.ts",
"lib/site-config.ts"
]
},
{
"name": "password_hash",
"confidence": "medium",
"evidence_paths": [
"app/api/v1/settings/route.ts"
]
},
{
"name": "pii",
"confidence": "medium",
"evidence_paths": [
"pnpm-lock.yaml"
]
},
{
"name": "secret-like environment variables",
"confidence": "medium",
"evidence_paths": [
"package.json"
]
},
{
"name": "session_token",
"confidence": "medium",
"evidence_paths": [
"app/docs/mcp/page.tsx",
"lib/db.ts",
"scripts/001-init-schema.sql"
]
},
{
"name": "token",
"confidence": "medium",
"evidence_paths": [
".env.example",
"app/.well-known/agent.json/route.ts",
"app/api/v1/onboarding/route.ts",
"app/docs/api/page.tsx",
"app/docs/mcp/page.tsx",
"app/llms-full.txt/route.ts",
"app/llms.txt/route.ts",
"lib/api-helpers.ts",
"lib/db.ts",
"PACKAGES.md",
"pnpm-lock.yaml",
"PRINCIPLES.md",
"scripts/001-init-schema.sql",
"scripts/provision-ops.mjs"
]
}
]
},
"generated_at": "2026-05-16T16:44:11.675Z"
}