{
  "schemaVersion": 1,
  "generatedAt": "2026-10-20T07:10:16.009Z",
  "mode": "authored_rule_fixtures",
  "llm": false,
  "verify": false,
  "paidModelCalls": 0,
  "modelCostUsd": 0,
  "durationMs": 47.585,
  "exclusions": {
    "rulesWithoutSupportedFixtures": [],
    "unsupportedFixtures": []
  },
  "runtime": {
    "bun": "1.3.11",
    "platform": "darwin",
    "release": "25.6.0",
    "architecture": "arm64"
  },
  "identity": {
    "gitHead": "9d84af9251f07263e774809660501fd9507fd748",
    "sourceSha256": "f1d30ad449ee9c81d1b158b64c5b19a29a30bb18e7790a16744533b3a3a25065",
    "corpusSha256": "4919d3fea2368a44dd587a898b9822b9af4bef98d8119d4642641c27336f0168",
    "sourceManifest": [
      {
        "path": "apps/scan-cli/package.json",
        "sha256": "cc9d0ae3f24a0f1a2858e9ff0663c4804b88c77f8e2b8cf8a8b1082dc0e3d024"
      },
      {
        "path": "apps/scan-cli/src/analysis-cache.ts",
        "sha256": "d0baba6157b77cf5cba8f8f6ac59d7929442ca9f144081b3622af80fac1f147f"
      },
      {
        "path": "apps/scan-cli/src/analysisCoverage.ts",
        "sha256": "e3e0ba94e08f15d16db22214b3169798241d27ace83e9c2b3339ac2fde0f8ae4"
      },
      {
        "path": "apps/scan-cli/src/appmodel.ts",
        "sha256": "11cb10ad4dc07e45360addf350638c231942a34c8a94cb56dffd687d40658f9c"
      },
      {
        "path": "apps/scan-cli/src/batching.ts",
        "sha256": "70bb6ae15948ac1bd35c6534b885783cc14eb5bdc91fa4d99cb055bbe1e9b7b3"
      },
      {
        "path": "apps/scan-cli/src/bench.ts",
        "sha256": "ab27ed544a3cab9d34bad1525bf3667c6604a7bd8ff32f2ab1c81211f2686162"
      },
      {
        "path": "apps/scan-cli/src/benchmark-scorecard.ts",
        "sha256": "025b9f1a2fa845985d9fafbb6e84e6a39557eb73eba6064fcc2486b9a45979ee"
      },
      {
        "path": "apps/scan-cli/src/cassette.ts",
        "sha256": "a811a8a9037156049094648cddb02ea0fd28938e4d5d7f9ba7a5d520d8ddb1c2"
      },
      {
        "path": "apps/scan-cli/src/context.ts",
        "sha256": "26e02925eb5f20405171950bb35d20aaf71aa67eade8482ea70e4c89ced0ac1e"
      },
      {
        "path": "apps/scan-cli/src/coverage.ts",
        "sha256": "10c0366ba24dfeb8792f4e1b817293186c6f1b6471cc4d01b2dc4096abc9e910"
      },
      {
        "path": "apps/scan-cli/src/coverageReport.ts",
        "sha256": "e8eed15e9df0baefcd94ace34fcf0e63119e87ac4bea3595c2a279a060687a19"
      },
      {
        "path": "apps/scan-cli/src/deepdive.ts",
        "sha256": "49c5913019358f87477bc93cab3daaa391beb8ebc307b55637d8f1c9234d8de9"
      },
      {
        "path": "apps/scan-cli/src/deepseek.ts",
        "sha256": "b4b92bde447d24d51bdc45ac5e91372f5501a72c628dbbff6679a1c81f329845"
      },
      {
        "path": "apps/scan-cli/src/defences.ts",
        "sha256": "fb11f03b658d149a5e74bd8a18c74f27dc74aa24152d301703a1126c5723478f"
      },
      {
        "path": "apps/scan-cli/src/depGraph.ts",
        "sha256": "b2e354315743883ed58cdcb22b3e242267e27ad3745ae11903f5d93c278be1f0"
      },
      {
        "path": "apps/scan-cli/src/depth.ts",
        "sha256": "3d3a5bbcfae2360b1b8045c5bf997523ce289835d17cef5752732bb895fb6405"
      },
      {
        "path": "apps/scan-cli/src/envNames.ts",
        "sha256": "97071edd26823ab361d481785c04066eedabe6a5866c425562f089b4c7cc2c69"
      },
      {
        "path": "apps/scan-cli/src/finding-response.ts",
        "sha256": "645faff3e3e6f9bd1d7bb7a7f93dab6bdb3f28787f08a6b97670193b5af1dc4a"
      },
      {
        "path": "apps/scan-cli/src/fingerprint.ts",
        "sha256": "058ef82e52a20e2207d5c356bf8780a4bb8c02e88873be4bc079539c77225306"
      },
      {
        "path": "apps/scan-cli/src/gates.ts",
        "sha256": "cc1f057e50be79d3fd397994dfc1df202812f05cf117b0145716c9c86d02e377"
      },
      {
        "path": "apps/scan-cli/src/gitleaks.ts",
        "sha256": "3b45e13abb74de4f204acb29c82b3c8a3c6628373fe91c590bd4ea377f9bec38"
      },
      {
        "path": "apps/scan-cli/src/helpers.ts",
        "sha256": "ae9c19d7ff10118b3089d4709a04f0cc749083dfe23d3e0c865b692ac32cc4b6"
      },
      {
        "path": "apps/scan-cli/src/iac.ts",
        "sha256": "78011b64b0c4da54861405f19b9e33fe9f5b42f5c2108330c9fe46f17fd033ed"
      },
      {
        "path": "apps/scan-cli/src/image.ts",
        "sha256": "a7aa4b3605587ec02c07116058a720c7b894b34b000598010f67061bbc9e2e22"
      },
      {
        "path": "apps/scan-cli/src/imports.ts",
        "sha256": "37e654e1643d66d1b4b3dd08a71f029c85221f24bc1857a52f4c289e536de42a"
      },
      {
        "path": "apps/scan-cli/src/independent-benchmark.ts",
        "sha256": "879e9770d53240ba9b59bb4928256f2d27bddbcfc5fa9ff048b8372477c137d4"
      },
      {
        "path": "apps/scan-cli/src/index.ts",
        "sha256": "28244b9a65713e5d5f4e5a5581de5302372e1a5436870f1543dc5936805fd632"
      },
      {
        "path": "apps/scan-cli/src/intelligence.ts",
        "sha256": "93bfb294b41bdf1616533ac6445c271430497e0def81e6443ef723c6a35efc90"
      },
      {
        "path": "apps/scan-cli/src/kernel.ts",
        "sha256": "18f2d1eeeeacc4b528e343c91cae0b08bc6e252427e886af5470730d8774d4f0"
      },
      {
        "path": "apps/scan-cli/src/logger.ts",
        "sha256": "3d53733daa48af057f2709b29af2d0e506af3f62764ea64cd1b5758be0ba8582"
      },
      {
        "path": "apps/scan-cli/src/manifests.ts",
        "sha256": "bb1672c1bd3c1d399c16878572874efbe5e648e33b88e61455ba98b574d04af7"
      },
      {
        "path": "apps/scan-cli/src/mapFinding.ts",
        "sha256": "be3ec1f53d70c7f6021ad695ffc37363e46d2dd34b047c14ade59dce2401459a"
      },
      {
        "path": "apps/scan-cli/src/noise.ts",
        "sha256": "5d30d0453a93bd04a4bc10be6692d8a9813677dee35c7c3ba7af12ee7fb16bfa"
      },
      {
        "path": "apps/scan-cli/src/oci.ts",
        "sha256": "c5600f5dbeb7e786ebcf0a75cf1d24c35314af3fcdcdc681feac7ad1154f7277"
      },
      {
        "path": "apps/scan-cli/src/openapi.ts",
        "sha256": "6223b8611795454a8f0f52ec1f7bb577f19b144d41cb19dd226dc6c7168328c9"
      },
      {
        "path": "apps/scan-cli/src/osdb.ts",
        "sha256": "cd464bb11b5953068934c17cde3f10bedaeaaed03fdf6d85cf267a2df0145e6b"
      },
      {
        "path": "apps/scan-cli/src/prefilter.ts",
        "sha256": "53571e87886dbc160b0d64cac8a485c84d539c34e2a67bc07262350c2b83176f"
      },
      {
        "path": "apps/scan-cli/src/prompts.ts",
        "sha256": "779e2bf648450965965cb690bca7cdf64dd584dfc1e2a6b29e56bd1b95e4eb01"
      },
      {
        "path": "apps/scan-cli/src/pullRequest.ts",
        "sha256": "2fbfa5525a0a9e9e0f9f35348429f397cc37bf22a897f779ea83e31a3d7c31bd"
      },
      {
        "path": "apps/scan-cli/src/python-config.ts",
        "sha256": "cbd69945e59780938e88bbd3ba594696ad7c4fcfe00550e4a07102bd685e4065"
      },
      {
        "path": "apps/scan-cli/src/python-flow.ts",
        "sha256": "e706085a42a71f4d4a83f8b5078f197887d35d3679bfa5029187502e79952699"
      },
      {
        "path": "apps/scan-cli/src/quality.ts",
        "sha256": "7b69ff447ff7d673420eb84fc13c19b8b3a779f18bc01feb3c5c44166bcce40e"
      },
      {
        "path": "apps/scan-cli/src/reachGraph.ts",
        "sha256": "099e451f8b1cf41d631d2831dba4629e4bc7ea0c31ce6b1291571e4f602dbd04"
      },
      {
        "path": "apps/scan-cli/src/reachability.ts",
        "sha256": "cac19da717bdc5a526fa5c8e8ae75978f53f815551ba35f0c35cf759504a334d"
      },
      {
        "path": "apps/scan-cli/src/recovery.ts",
        "sha256": "c51f097dc8f7dfa1f0576c9c66fc459acb615122ad9e9d78b7ecad124b6c7e98"
      },
      {
        "path": "apps/scan-cli/src/relatedSpans.ts",
        "sha256": "b455844c8a2dd2c8a91e56a291920ed34c7a3fb003c6cb285a82f2c5a92aaf2e"
      },
      {
        "path": "apps/scan-cli/src/repoSecrets.ts",
        "sha256": "071dd5a1b259aa2cbf7adcd32b5a6010c69a8601711ae5a3f74117df35611d0f"
      },
      {
        "path": "apps/scan-cli/src/reporter.ts",
        "sha256": "2202e8da8573fa90a74a9b03c1e6b6398696a0a900e9c56ef7507a70662c3e29"
      },
      {
        "path": "apps/scan-cli/src/rule-defenses.ts",
        "sha256": "02e15e50eeefe594378f0cf7e9925d651df06561e64fe06365c7bcfdb3dcf1a1"
      },
      {
        "path": "apps/scan-cli/src/rules.ts",
        "sha256": "ff75d156666d75359a1e581a10fa75f51983016e08236f2eb748f8c6c220aee0"
      },
      {
        "path": "apps/scan-cli/src/sbom.ts",
        "sha256": "2f76a139d11e49b67a826603881cbf81ffc4474bc4bd9fde6506e0c558c8f0d9"
      },
      {
        "path": "apps/scan-cli/src/scan.ts",
        "sha256": "0c782a0662da36e9a1c21af6260449f91cf7ef70789b20562f5a638ca534a1fc"
      },
      {
        "path": "apps/scan-cli/src/scanVersions.ts",
        "sha256": "5e3991039c32835b23767c90aafaa33ab15a6e61f7e01a9b0d3ab5683c602653"
      },
      {
        "path": "apps/scan-cli/src/search.ts",
        "sha256": "f9db1c3b5fe9900a6e4f4335d53ada9083e2ae932ebcee853b56f527ba95f219"
      },
      {
        "path": "apps/scan-cli/src/silence.ts",
        "sha256": "8c65ac7f0df90c9c15394ac6de861f86ce3d89a2930a8ebe7445d63eaa5e2787"
      },
      {
        "path": "apps/scan-cli/src/spread.ts",
        "sha256": "2d80502b0d1b0d453aa0e2da7513fefdf75755a37d5af1e3cf6a5cb08b12d9d0"
      },
      {
        "path": "apps/scan-cli/src/stability.ts",
        "sha256": "61012aae5957361f46a8f15413ea429e7350fefabce4e9e0e6fa972278cc34e7"
      },
      {
        "path": "apps/scan-cli/src/stop.ts",
        "sha256": "d35e4491a63e6792342b8b5deea342a2b4bbe22975aeb6f26c51537e2275fd6f"
      },
      {
        "path": "apps/scan-cli/src/sweep.ts",
        "sha256": "356678c7373530b517e05ab46e58d09df0eb7484a8bcca6f2b7b50a5753abc2b"
      },
      {
        "path": "apps/scan-cli/src/tar.ts",
        "sha256": "2c80b52c78e9c75185ed90b3cd4f4a6bca969fe0d1c736f15f8b72e47773e6f6"
      },
      {
        "path": "apps/scan-cli/src/tools.ts",
        "sha256": "cf9de13aa44e1550fdeedfba7e25ac7ccf36b289825a8eaf3f1928cf8b5df3d8"
      },
      {
        "path": "apps/scan-cli/src/trivy.ts",
        "sha256": "150153c1b23996bc0f8a32301c65d0bff0be1fa2fae6cb7eb0f5c581c700c236"
      },
      {
        "path": "apps/scan-cli/src/verdict-contract.ts",
        "sha256": "e24ab43d9f4cc96ebd2e3948286779b2e0b0390f42106f14b3b7eef3bcee9d61"
      },
      {
        "path": "apps/scan-cli/src/verify.ts",
        "sha256": "71d0315264ad5afc61d8c0fef34b366db38477eac30767b9ac0137fc61129e7b"
      },
      {
        "path": "apps/scan-cli/src/walk.ts",
        "sha256": "3d2a350dfe6e25403e50eefa3a0dbaebe275b422950717fc438be3bd5c74d097"
      },
      {
        "path": "bun.lock",
        "sha256": "14b55bb0ae964bab83edb70d146e5e5eac16a7ef7418b4bd94842a5335edbbbd"
      },
      {
        "path": "package.json",
        "sha256": "0c61121892bbd320487234c977f0e12f550a611adcb621d86d138c60cf0f6422"
      },
      {
        "path": "packages/schemas/package.json",
        "sha256": "fdb2b37480c378fff21a16b6eea05c53642558d4e429a8e433a3dec466762a6e"
      },
      {
        "path": "packages/schemas/src/billing.test.ts",
        "sha256": "401e00c36536fc926b648ce59d423c130769c53d7f019b50180233797bff0ce1"
      },
      {
        "path": "packages/schemas/src/billing.ts",
        "sha256": "f068c0f9924af4b8a73e0bcba0779099952b3729fb51798f736ec7faa59682e4"
      },
      {
        "path": "packages/schemas/src/careers.ts",
        "sha256": "c367f27b05dfdc9d57e25fe9987bf21e78f3f65ea9556afccea999cbfc068c46"
      },
      {
        "path": "packages/schemas/src/findings.ts",
        "sha256": "a12c3448f1e41d2eda5313f9b9a8fcf64ed2b77ebc80e5e22a7c682060878a38"
      },
      {
        "path": "packages/schemas/src/fingerprintSymbol.test.ts",
        "sha256": "e82eefb55e0c5bcd6afc5bb45d267e67b75ff01ba156a140e2cf728870455ade"
      },
      {
        "path": "packages/schemas/src/immunity.ts",
        "sha256": "cbe2557cc42d164e9d677f92ab8e26ce12762b4b2f60d5a3f2430b59a793abce"
      },
      {
        "path": "packages/schemas/src/index.ts",
        "sha256": "503b79970ce19aec0daf7668154cd8e236988e24078ab9e51aabb076936a9eb9"
      },
      {
        "path": "packages/schemas/src/investigation.ts",
        "sha256": "0a4a6a4370ff428910b2fb0ef53450fae064392dc58e341f8eb33da2252300b5"
      },
      {
        "path": "packages/schemas/src/ir.ts",
        "sha256": "c1b1d0766b20e4830a9a6ab35d27ba16dc676f9a4c2a9badebd4fdbd17919df8"
      },
      {
        "path": "packages/schemas/src/knowledge.ts",
        "sha256": "74488c0199366e71df6c2a83e71333317392e6b010e88f6beb66b935cec4bc85"
      },
      {
        "path": "packages/schemas/src/notifications.test.ts",
        "sha256": "37e385a265cfe33c545c2a0350415150a8affca5c4e6c5485ec29dc7b9c568cd"
      },
      {
        "path": "packages/schemas/src/notifications.ts",
        "sha256": "a744ef4b442186248750a4887d675b18e67c0428a2db5295dbdc3f4dfabc23f5"
      },
      {
        "path": "packages/schemas/src/packages.test.ts",
        "sha256": "01dfe561cb5d533d21109a17eea0a39f53f6a00b7b8ab897a60648ba4fde0ab3"
      },
      {
        "path": "packages/schemas/src/packages.ts",
        "sha256": "cabe240416e6c35be7baae9e776017e272f03efc5c4bcac3db05b3c11fa75d7e"
      },
      {
        "path": "packages/schemas/src/proof.ts",
        "sha256": "b8e5638303a9cee2cc09e6e6af167770c441326340fcd8f28a59349f030a25db"
      },
      {
        "path": "packages/schemas/src/reachability.test.ts",
        "sha256": "3252919fa6c1d35f1f90af335edc4e8832b7c48578888dac6ad6d0a2042744ed"
      },
      {
        "path": "packages/schemas/src/reachability.ts",
        "sha256": "6f78887ccf9f09df85e9cad8b5c271fd036782846bcdd301de44e85645f86b39"
      },
      {
        "path": "packages/schemas/src/reachabilityLabels.test.ts",
        "sha256": "2e0f8bd28ab72ab7bb09152cc58ca8e54b06bda14e6e2afe0a005bf5a7768b13"
      },
      {
        "path": "packages/schemas/src/reproduction.ts",
        "sha256": "ef08346d379d5f325bd579a7536679fef7d09fab7f4925392c55c55fd3aa7ab5"
      },
      {
        "path": "packages/schemas/src/scanCompletion.ts",
        "sha256": "881dd9263b32be386c364e8595562cadf7e9cbda9efe5aa64abac11b798c7e8f"
      },
      {
        "path": "packages/schemas/src/scanPullRequest.ts",
        "sha256": "09e56c5771b087884f735f69a3f3cb625f99e7aab1a867fd1f469fd1906ba2b6"
      },
      {
        "path": "packages/schemas/src/scanReasons.test.ts",
        "sha256": "01b6dde3a2b3c73993f196dd0feefdbfa38700b6d28a6b4b1d447e80193b7a2f"
      },
      {
        "path": "packages/schemas/src/scanReasons.ts",
        "sha256": "fba539e6d3c2140db2a329a6be9ce53e7ed0f6dc4437f085d2ce014be71d200a"
      },
      {
        "path": "packages/schemas/src/schemas.test.ts",
        "sha256": "76f30c08b7b291b0aaff817f216ab1d6c2abedf96cab319406a3192caab41c03"
      },
      {
        "path": "packages/schemas/src/secrets.test.ts",
        "sha256": "b9ad3a12c0bcf243db65975600bf3c134b6030fee372cf39153832c96bb84368"
      },
      {
        "path": "packages/schemas/src/secrets.ts",
        "sha256": "173c025ddd2fc9d6fc70e6978138737f7132129ee0fb8a11145f5c8cd7b61b33"
      },
      {
        "path": "packages/schemas/src/security.ts",
        "sha256": "311afcee8ce9a869a622a19e2b1db1e57e003ace1f655921760ec21689a46f44"
      },
      {
        "path": "packages/schemas/src/states.ts",
        "sha256": "540c39ae578d9f7cae4ab84e5e183852e6eb84ae49d1d992c2cbf8c2e81a66b6"
      },
      {
        "path": "packages/schemas/src/wire.ts",
        "sha256": "b0c21292deadef07a17133b79eb89e4d3dc3dd6bfd165f61653efb699d9d6c3d"
      },
      {
        "path": "packages/schemas/src/workspace.ts",
        "sha256": "17a5fab2b0f41f698fbe2f1eceb055c035ae04bec35f547c03531d2e0eefbf42"
      }
    ],
    "corpusManifest": [
      {
        "path": "rulepacks/common/ANGULAR-TRUST-001/rule.yaml",
        "sha256": "add1d0987ffcb76cf8286d4da2210674893a8a8c693c9afacb5f4adbbfc7f73d"
      },
      {
        "path": "rulepacks/common/ANGULAR-TRUST-001/tests/safe/sanitized_html.ts",
        "sha256": "0d602cd9ae708c8060652de16f1c361a5522dc81d81624e8bdaaaae2664457d2"
      },
      {
        "path": "rulepacks/common/ANGULAR-TRUST-001/tests/vulnerable/bypass_trust_html.ts",
        "sha256": "dda816ef1b3d98aa23f109516466c901b66bee2cc3c4742f997ddbf75dac2165"
      },
      {
        "path": "rulepacks/common/CLEARTEXT-001/rule.yaml",
        "sha256": "19d83cbe5fabd840248811236a6426d860695cc99d57105d7f67d71b46cfb809"
      },
      {
        "path": "rulepacks/common/CLEARTEXT-001/tests/safe/https_endpoint.ts",
        "sha256": "c497ad77c81fd53d387c2b5b10161388c87628740d0b678891581d330ab1ca03"
      },
      {
        "path": "rulepacks/common/CLEARTEXT-001/tests/vulnerable/ftp_endpoint.ts",
        "sha256": "c3a6c3a828cc4cdca45bbdf486c6c2856066163884baa74f760a91e896f11870"
      },
      {
        "path": "rulepacks/common/CMDI-001/rule.yaml",
        "sha256": "76a524d4596595bec3d2b8550e593f8f73b2c463c594bb7a70f2cb8c3ea9346c"
      },
      {
        "path": "rulepacks/common/CMDI-001/tests/safe/exec_quoted.py",
        "sha256": "55ffe5f84c6711ba04bb88b1c5cf723e0f6c547bd71b17683a4ccae49263114d"
      },
      {
        "path": "rulepacks/common/CMDI-001/tests/vulnerable/exec_concat.py",
        "sha256": "8b98cd6a13e1b2e4970341498162b6222b44ea2fb872f4af940f75062f24f397"
      },
      {
        "path": "rulepacks/common/CODE-001/rule.yaml",
        "sha256": "313aa196ab864dd25536b018605c1c3b36f18956a367376ee0e005bb319f58be"
      },
      {
        "path": "rulepacks/common/CODE-001/tests/safe/comment_mentions_eval.ts",
        "sha256": "a47f8173953238cb60d08856a1b037366fbe536a88da34b23c643e9cad35d572"
      },
      {
        "path": "rulepacks/common/CODE-001/tests/safe/literal_mentions_eval.ts",
        "sha256": "3d09dab28d07ba35d263943091655822f5f5d217b2d6fccbbf3f9cb435bacfc2"
      },
      {
        "path": "rulepacks/common/CODE-001/tests/vulnerable/eval_query.ts",
        "sha256": "e3f4f0d3c518040aa2696ea7f76ff19db67601d38be08b42373615b3ded3dae0"
      },
      {
        "path": "rulepacks/common/DESER-001/rule.yaml",
        "sha256": "20b2f7b0d2b0a0dbf7d8725589a031e8d7cb58d318d151d099bfc1c2e484dd79"
      },
      {
        "path": "rulepacks/common/DESER-001/tests/safe/yaml_safe_load.ts",
        "sha256": "7aaaf0beb687fdadfafbc7d6d1a952647353a222571032ea59242f87bf33dba9"
      },
      {
        "path": "rulepacks/common/DESER-001/tests/vulnerable/yaml_load_body.ts",
        "sha256": "f108c65e1710a394fa1785691e1cb6d621e3e0b778da96403788137e3156453a"
      },
      {
        "path": "rulepacks/common/PATH-001/rule.yaml",
        "sha256": "b45b1cfe6d8c5af96ec1e8a1c837feeb8ddc239424adca3c188a64c161a00d2f"
      },
      {
        "path": "rulepacks/common/PATH-001/tests/safe/read_normalized_path.ts",
        "sha256": "de57b93ba7c7f086a1a9de7d2872628ccb63d84da3fb2fa1ef195bf58b0d2ca6"
      },
      {
        "path": "rulepacks/common/PATH-001/tests/safe/template_allowlisted.ts",
        "sha256": "d1d539bba782f1be978bfc1758690d38426278adaf1a44dbf76705e47ce6618b"
      },
      {
        "path": "rulepacks/common/PATH-001/tests/vulnerable/read_user_path.ts",
        "sha256": "f1b1f2b69e5992f4004d8a30d0e696fb19d21cd1cb02927e61687e5991d7569d"
      },
      {
        "path": "rulepacks/common/REDIR-001/rule.yaml",
        "sha256": "ebaba25880fec0039dad28bd24cbdd36541ab08036ce72527d31363ba37551f7"
      },
      {
        "path": "rulepacks/common/REDIR-001/tests/safe/redirect_allowlist.ts",
        "sha256": "903c9879c7b4b35624849633a17e8a34a86dc25f4526cc3df5342b5bb0e49bde"
      },
      {
        "path": "rulepacks/common/REDIR-001/tests/vulnerable/open_redirect.ts",
        "sha256": "efd4e225c944fb8647054fa952e40f0d6f3b3b905e22a6bf89f4b2c310daf363"
      },
      {
        "path": "rulepacks/common/SQLI-001/rule.yaml",
        "sha256": "3e64945a2e853ae7bbd868a110edbca234966a170a03f3dfe6f49de7077c6fcc"
      },
      {
        "path": "rulepacks/common/SQLI-001/tests/safe/drizzle_where.ts",
        "sha256": "106f09d70c246f993c7098b5d059bea9b836d1d025154d2c21b2b330519e7ceb"
      },
      {
        "path": "rulepacks/common/SQLI-001/tests/safe/identifier_allowlist.ts",
        "sha256": "bca1e858b9fda6aff77dc1334c96e61446966250ab503c5832c0ef2919ce8436"
      },
      {
        "path": "rulepacks/common/SQLI-001/tests/safe/parameterized_query.ts",
        "sha256": "bc711ba097116beaedf72e93c7b3b20b961a2d1258948ecb0dbe6e0ab8831a4c"
      },
      {
        "path": "rulepacks/common/SQLI-001/tests/vulnerable/concat_query.ts",
        "sha256": "a2429d8b1f611d41495a356ac305368dc5b78092e491a43bedf6a0f663b6ecb8"
      },
      {
        "path": "rulepacks/common/SSRF-001/rule.yaml",
        "sha256": "86bbbbd1f8bfe819cb8af8bde8ca5e43e038979c728fa8ad030641777a631f3e"
      },
      {
        "path": "rulepacks/common/SSRF-001/tests/safe/express_proxy_allowlist.ts",
        "sha256": "571f26fc750cdb14b72c7803cd2dd50d62acd806d1677dd5165aa92060ecd21f"
      },
      {
        "path": "rulepacks/common/SSRF-001/tests/vulnerable/express_proxy.ts",
        "sha256": "e4f646374bcb08c30fb8af627a91668f4841512cebe1bf804f79c0c4cc2229ab"
      },
      {
        "path": "rulepacks/common/SSTI-001/rule.yaml",
        "sha256": "1cf2a5878dad69f9adf9cad88ea2000064898a51447e053a47ef05581954edde"
      },
      {
        "path": "rulepacks/common/SSTI-001/tests/safe/precompiled_template.ts",
        "sha256": "0d5febf5ff8f2070115eaeba0870cdfcd392a2dd142487f0a996b04cc491a6e1"
      },
      {
        "path": "rulepacks/common/SSTI-001/tests/vulnerable/handlebars_compile.ts",
        "sha256": "4b04998aa32236b06404c7c9aaf2674d01173576b2401efd4904166a4f30fd5f"
      },
      {
        "path": "rulepacks/common/UPLOAD-001/rule.yaml",
        "sha256": "e5d8812fab296e63bb94fed6486797995e830fd2feedb5e4ac567bb7e904600b"
      },
      {
        "path": "rulepacks/common/UPLOAD-001/tests/safe/mime_checked_upload.ts",
        "sha256": "e020db518e233ac8433f5237c1744d70d6854bd802dbd232f6377d1e03c9aa77"
      },
      {
        "path": "rulepacks/common/UPLOAD-001/tests/vulnerable/unchecked_upload.ts",
        "sha256": "c2c4629e3af2db831f72d99572b49c758174bb224e4a2f4abb88ab82f12a3967"
      },
      {
        "path": "rulepacks/common/XSS-001/rule.yaml",
        "sha256": "4eafa1e0a5329f76ec075e03d6bf756570cd1643ec4b1aaff9f4ae8960073237"
      },
      {
        "path": "rulepacks/common/XSS-001/tests/safe/escaped_html.ts",
        "sha256": "199162c065905fc36a12bae5eedef52093de52b6faea7189b26c94fc4b297fd0"
      },
      {
        "path": "rulepacks/common/XSS-001/tests/safe/jquery_hash_text.js",
        "sha256": "444b7e3c66c70ffedc419ea0e8e00d765964bc62e02b6bc7bdb6810e8e31cfe4"
      },
      {
        "path": "rulepacks/common/XSS-001/tests/vulnerable/inner_html.ts",
        "sha256": "9bc3e7f70495dec60e4fae6e44c6525d1f7eed9eaab34f1b7f0c2f62ee334865"
      },
      {
        "path": "rulepacks/common/XSS-001/tests/vulnerable/jquery_hash_html.js",
        "sha256": "e90787da428b6edc0fee61dfc8bd079fcfff45bdcf54e55b2577f7aa60555a23"
      },
      {
        "path": "rulepacks/javascript/CMDI-002/rule.yaml",
        "sha256": "ec140652bbbf75b9ac7abf0491617a7b2fedafec6b01e061afcc455fd46dfab2"
      },
      {
        "path": "rulepacks/javascript/CMDI-002/tests/safe/execfile_argv_export.js",
        "sha256": "c36f60fc7cb772ae724f024550104463cb7715914ff021a3a1b8f70dcd66d190"
      },
      {
        "path": "rulepacks/javascript/CMDI-002/tests/safe/shell-no-shell-data.js",
        "sha256": "2795e97e1692e600623f2011a4e88f7db6d5be3c31668b7f4c95cc938ac5ebdd"
      },
      {
        "path": "rulepacks/javascript/CMDI-002/tests/safe/spawn_argv_export.js",
        "sha256": "79a4e7b621e9f7c9e73bd2eb2904a4eef151ea45f7fe05dabffc6a8609926ee4"
      },
      {
        "path": "rulepacks/javascript/CMDI-002/tests/safe/spawn_shell_false_export.js",
        "sha256": "9a28aec735bb33aea479da9f8fbcdea3ea340e4fdfb5d1b8ea60d57a00db4b0a"
      },
      {
        "path": "rulepacks/javascript/CMDI-002/tests/vulnerable/exec_concat_comment_claiming_safety.js",
        "sha256": "7ac5b4dfbe1bc3ea61f2b256bd34b310ca2d0690aee8a1f7339d94ad27fec847"
      },
      {
        "path": "rulepacks/javascript/CMDI-002/tests/vulnerable/exec_concat_export.js",
        "sha256": "275d8bc62de5103c813fc75d1d03bb03a637cfcd4ff57e03681b272f50696cf2"
      },
      {
        "path": "rulepacks/javascript/CMDI-002/tests/vulnerable/shell-interpreter-argv.js",
        "sha256": "dba75bb9609c263b03773c8f3ace4dcb1c0702f9d380d754a986ba6e917d8dea"
      },
      {
        "path": "rulepacks/javascript/CMDI-002/tests/vulnerable/spawn_shell_true_export.js",
        "sha256": "2399e875e0801f760ef923db719dd4b2d51ba785e13fba5d7207191a8470f77e"
      },
      {
        "path": "rulepacks/javascript/CODE-002/rule.yaml",
        "sha256": "5fba2995a7c08491b7fce10659cff11e00d9197bf59a5d3a38f93403ca398b63"
      },
      {
        "path": "rulepacks/javascript/CODE-002/tests/safe/allowlist_table_export.js",
        "sha256": "85869a3b0814860009545f5da55fe63518b9c17b8cbf59d819beecea904fa706"
      },
      {
        "path": "rulepacks/javascript/CODE-002/tests/vulnerable/eval_export.js",
        "sha256": "ae60852aa9bc8760e4d3701940685ae52258960802d7f7826562dd28b710e310"
      },
      {
        "path": "rulepacks/javascript/PATH-002/rule.yaml",
        "sha256": "6cd1dcc2bd021b507e56eda1048e2d556a7f2d63e174a387c55654dfd32b2fc1"
      },
      {
        "path": "rulepacks/javascript/PATH-002/tests/safe/contained_read_export.js",
        "sha256": "472c240fcecb888932368d9ac76e6872fa996792833b27603edf78064d6df30b"
      },
      {
        "path": "rulepacks/javascript/PATH-002/tests/vulnerable/join_read_export.js",
        "sha256": "20507cd856657419f07cc9d57385ac0199ec4f9b0e462bb891c10ac96025c754"
      },
      {
        "path": "rulepacks/javascript/PROTO-001/rule.yaml",
        "sha256": "bf376e71fc05a878df13da0e52dad459fb0c3fd64022d8a69733f3714f6c0ee7"
      },
      {
        "path": "rulepacks/javascript/PROTO-001/tests/safe/picked_fields.js",
        "sha256": "8d915a5bcf94d0a9ce002f204cedd8debee71a799ec8b4ab3a0ab413144adf27"
      },
      {
        "path": "rulepacks/javascript/PROTO-001/tests/vulnerable/deep_merge.js",
        "sha256": "97b4a460cc326981a23344127f06023cce4c7195e91e33188fcc416376ab4db4"
      },
      {
        "path": "rulepacks/javascript/PROTO-002/rule.yaml",
        "sha256": "a33eb6189979feb4815736b9b41878181409cb6582bcbc84cf8b570a8ca6fdde"
      },
      {
        "path": "rulepacks/javascript/PROTO-002/tests/safe/unflatten_guarded_export.js",
        "sha256": "a8f82389db43a60343ee060f87e4a22fc806541bb9930b27133798a4f8ea1c1b"
      },
      {
        "path": "rulepacks/javascript/PROTO-002/tests/vulnerable/unflatten_export.js",
        "sha256": "5397ad7af5a07d9101fcaedc754d6fcefd64b14ecfe03e47886b1de7f2d03d2e"
      },
      {
        "path": "rulepacks/javascript/REDOS-001/rule.yaml",
        "sha256": "b20709f91bfe5bc2b834174a53fb2d0aa2772fd21838191273c117a662d7fbbc"
      },
      {
        "path": "rulepacks/javascript/REDOS-001/tests/safe/linear_regex.js",
        "sha256": "a9cff969079a95187fb874a9cd45fd323e27d936e16787a2cd0017b2eaa430fe"
      },
      {
        "path": "rulepacks/javascript/REDOS-001/tests/safe/redos-effective-length.js",
        "sha256": "b89100f7da1bf4dfa4174bf118757b4b16b7606a71a190dc9df4d803726aa9e0"
      },
      {
        "path": "rulepacks/javascript/REDOS-001/tests/vulnerable/nested_quantifier.js",
        "sha256": "7920ee95f0caf7a78d0cd31a99a6ba78e71d67b4f51267b91dbcfa02385ce71d"
      },
      {
        "path": "rulepacks/javascript/REDOS-001/tests/vulnerable/redos-log-only-length.js",
        "sha256": "fcf564ffc5b17680ee66e004e5b1245af26fa730c39738e6837b06a0f9c2003e"
      },
      {
        "path": "rulepacks/javascript/REDOS-001/tests/vulnerable/redos-unrelated-length.js",
        "sha256": "f15da1e79e6647d9637f8f86186eb2957ba0185b85a892c8454a99154a0fd6ef"
      },
      {
        "path": "rulepacks/javascript/REDOS-002/rule.yaml",
        "sha256": "96c5b0ca1b87ccfd62d47a5cdf0333b9aeb8af676e57db2cb1bf51071a01f128"
      },
      {
        "path": "rulepacks/javascript/REDOS-002/tests/safe/anchored_repetition.js",
        "sha256": "8fa107f69e124073c70a243d4ba8cf42e3baf6ff1a85728c4e90aaaca3f9de7c"
      },
      {
        "path": "rulepacks/javascript/REDOS-002/tests/safe/exact_count.js",
        "sha256": "85f3770d53e3c837a9893af66608801071e279a7fd40e524718b3e92f713c009"
      },
      {
        "path": "rulepacks/javascript/REDOS-002/tests/vulnerable/bounded_nesting.js",
        "sha256": "704567ef1e945b22e884a421d91cdebafc56a32057c66d64d5adf6500229fb99"
      },
      {
        "path": "rulepacks/javascript/REDOS-003/rule.yaml",
        "sha256": "1cc53d782185aed8c25f674342c6e25c26bf4fe7d28c11149cd7d4e6c00591b1"
      },
      {
        "path": "rulepacks/javascript/REDOS-003/tests/safe/string_built_linear.js",
        "sha256": "507ffc34c8b0de6fe2836dc76727272b795be938a762a27b9d8e3d5aa230c362"
      },
      {
        "path": "rulepacks/javascript/REDOS-003/tests/vulnerable/string_built_nesting.js",
        "sha256": "57c1f8d65d22e1e73219e296dc6a3261f86faa2e4564bb592e1c0f66471ad01d"
      },
      {
        "path": "rulepacks/javascript/REDOS-004/rule.yaml",
        "sha256": "4fc5fa489991681c7b6c7c8fdab2271f0e482c5bdf65cbdb1a5ed14fcc79fefa"
      },
      {
        "path": "rulepacks/javascript/REDOS-004/tests/safe/header_literal_split.js",
        "sha256": "2d05c9372eae684a32a51fa3608c62f1b3a262d62660bfa40e778a9fe8652d2e"
      },
      {
        "path": "rulepacks/javascript/REDOS-004/tests/vulnerable/header_regex_split.js",
        "sha256": "299f3862184b888dd6db84b50f1b94131b39df2189c0a7897d71fa3a01cd6498"
      },
      {
        "path": "rulepacks/javascript/XSS-002/rule.yaml",
        "sha256": "265b5dddc5503e3cfede82589a20346e7111aee234aae699bd72010284ab4819"
      },
      {
        "path": "rulepacks/javascript/XSS-002/tests/safe/html-whole-escape.js",
        "sha256": "2ba3ca2673b1e9cee7fc2b825cfc350951c5dc400fcd4530da274d47e5b1a91e"
      },
      {
        "path": "rulepacks/javascript/XSS-002/tests/safe/stored_profile_text.js",
        "sha256": "00b74d4ae94fc2c7af691afd78ca4834c85bf7cbb789d6c4bc42d86b0f1a9ee3"
      },
      {
        "path": "rulepacks/javascript/XSS-002/tests/vulnerable/html-discarded-escape.js",
        "sha256": "78e0100d92680afb5c379c10568f32a5513e66a0cf1e23b9f647c1959b41b3bf"
      },
      {
        "path": "rulepacks/javascript/XSS-002/tests/vulnerable/html-overwritten-escape.js",
        "sha256": "06b413b915b10c22e187b39f8c7ffd40ce94538df84eaf26ec0239e801bc4c6b"
      },
      {
        "path": "rulepacks/javascript/XSS-002/tests/vulnerable/html-partial-escape.js",
        "sha256": "d6b1b267de5f4630775d7f2545fea52433910233517c33d05a7748ab8cc174c7"
      },
      {
        "path": "rulepacks/javascript/XSS-002/tests/vulnerable/stored_profile_html.js",
        "sha256": "dd0e8a86c73974539e46b0acc340e7f19bd08778c7fc174de236a4df296e4673"
      },
      {
        "path": "rulepacks/python/COOKIE-001/rule.yaml",
        "sha256": "e96b7b90b587fa6d110a094a04a62e892ea7c3e568dc3348cb91152dc31b28eb"
      },
      {
        "path": "rulepacks/python/COOKIE-001/tests/safe/security_use.py",
        "sha256": "36232350c4ae6a4eabb43698a64e29a6f96681feb114e9634fb8e7f0771324c0"
      },
      {
        "path": "rulepacks/python/COOKIE-001/tests/vulnerable/security_use.py",
        "sha256": "1a2fedf4a92e6084c7f1d2d30c30b505edb987586506c809b295d652f1a7c9ec"
      },
      {
        "path": "rulepacks/python/DESER-002/rule.yaml",
        "sha256": "a77cd0730f50c608ddaa4d8446adb7b728522990b1cd772a96648113e522c731"
      },
      {
        "path": "rulepacks/python/DESER-002/tests/safe/json_body.py",
        "sha256": "b870d59e6a36b5c007f9b8db0f644589f1b35317ebf256ef820421f3f4b87c7d"
      },
      {
        "path": "rulepacks/python/DESER-002/tests/vulnerable/pickle_body.py",
        "sha256": "bc3ffd740c598790f2e1e6cd4d33e7e4fc4194606cca7c04ed9b6329d3fe803f"
      },
      {
        "path": "rulepacks/python/HASH-001/rule.yaml",
        "sha256": "e73bc710813e3432d33ebd5c3009af465ff431828a6f62023f8134284cb2952c"
      },
      {
        "path": "rulepacks/python/HASH-001/tests/safe/security_use.py",
        "sha256": "7dd2d78c7a7005038c32765fc0e57ac5763539fffafda7cdb100abca2706120f"
      },
      {
        "path": "rulepacks/python/HASH-001/tests/vulnerable/security_use.py",
        "sha256": "da09cde958525ff193c071da85ccaf90c210c4248921cdcc45b053dd1ea14ed6"
      },
      {
        "path": "rulepacks/python/LDAP-001/rule.yaml",
        "sha256": "ba5af874b16aced31442688c2696bdce5d653e06777cb8405ba4827fe81299d9"
      },
      {
        "path": "rulepacks/python/LDAP-001/tests/safe/example.py",
        "sha256": "cdeadf5cc35f95087984229e70a93acfb5fd15ff87159d78da56102c32549ef7"
      },
      {
        "path": "rulepacks/python/LDAP-001/tests/vulnerable/example.py",
        "sha256": "81ea19fcefe0229b53692e1a8813e6d6d602b964731857adf7c7827e3d62933b"
      },
      {
        "path": "rulepacks/python/PYEXEC-001/rule.yaml",
        "sha256": "e894bf53024edc28c99465d76e0ba6cf0041a365c3e47d886f8fa2d4bb9d978f"
      },
      {
        "path": "rulepacks/python/PYEXEC-001/tests/safe/example.py",
        "sha256": "b0987f8a75a6ef0f04626162629eb0ea116e4ca88fa060c2aecc34187a5cae6f"
      },
      {
        "path": "rulepacks/python/PYEXEC-001/tests/vulnerable/example.py",
        "sha256": "97db9745b502b8ac176393c11ac84203a5ef47c2250ad9c7f3e95279d91147ba"
      },
      {
        "path": "rulepacks/python/RANDOM-001/rule.yaml",
        "sha256": "cc5ef82221e457cd3735ddf1a2460f0ad1b4c0a42d8d046dc6eb8826c8a4401e"
      },
      {
        "path": "rulepacks/python/RANDOM-001/tests/safe/security_use.py",
        "sha256": "af026cd1cb696c62afd0a09b6d886ae62b7e42876da4692a60c4f115c7911ca1"
      },
      {
        "path": "rulepacks/python/RANDOM-001/tests/vulnerable/security_use.py",
        "sha256": "0a5c3b2dc3063e44f1707c8237116a3c73b6b90bff021a553aa26e239d759d36"
      },
      {
        "path": "rulepacks/python/SQLI-002/rule.yaml",
        "sha256": "8870d9e0c8e50ef1e98bdd0a5d340a993fd08bb79c99b83ab0d5d428532efd3c"
      },
      {
        "path": "rulepacks/python/SQLI-002/tests/safe/bound_parameter.py",
        "sha256": "f59ad09d5622601478728d738f82e771a04ef649bc287a6d98fb6ccbdad3c9a8"
      },
      {
        "path": "rulepacks/python/SQLI-002/tests/vulnerable/model_method.py",
        "sha256": "f5b72f7df4bb62bffccff279f4bd3861b94e3d5fb2a3b235beba67f8bb7323f0"
      },
      {
        "path": "rulepacks/python/SSTI-002/rule.yaml",
        "sha256": "9eaef2a4dd0a2a05427b38d57224363493ae4d6084de444cb972abe363b4a7e5"
      },
      {
        "path": "rulepacks/python/SSTI-002/tests/safe/render_file.py",
        "sha256": "27f43756ac0694b7f32b4a3c8354c7cc26b603a417a5edd353db62d9968203cf"
      },
      {
        "path": "rulepacks/python/SSTI-002/tests/vulnerable/render_string.py",
        "sha256": "4bd606000d080233cc84818ee75c20d451c0618e837364e0e6042334ef20ec94"
      },
      {
        "path": "rulepacks/python/TRUST-001/rule.yaml",
        "sha256": "951696eaf7ece7422b37a1fa86d5985f8d3b128d583ce50df98520a877896372"
      },
      {
        "path": "rulepacks/python/TRUST-001/tests/safe/example.py",
        "sha256": "84b4eadbd97c147afede3c94d45eefee81f6c9a285d099897547252f86601e05"
      },
      {
        "path": "rulepacks/python/TRUST-001/tests/vulnerable/example.py",
        "sha256": "e8746c4d0b1abfa238fb0986594cb89110a52f61c53fdd0bd40786fe650e7393"
      },
      {
        "path": "rulepacks/python/XPATH-001/rule.yaml",
        "sha256": "17604e33d66d6d7e378932a5979beba8bd09166a0c9bb9fe298cd448ba34d43b"
      },
      {
        "path": "rulepacks/python/XPATH-001/tests/safe/example.py",
        "sha256": "fd62cbe7fd076c640544152051bc8cb122a9039158b95a38bfa1bd17ab837f14"
      },
      {
        "path": "rulepacks/python/XPATH-001/tests/vulnerable/example.py",
        "sha256": "9519ae17a6895888d7949e8214de5e7c21ca8ae19aab6f69fffc61e213a0b5ba"
      },
      {
        "path": "rulepacks/python/XXE-001/rule.yaml",
        "sha256": "560eadedab50b15f003f19895559b947ef17958200940ab1099a351b3278bc4d"
      },
      {
        "path": "rulepacks/python/XXE-001/tests/safe/security_use.py",
        "sha256": "a72dfe53e9dc9bcd36404965ad208ec7a48dabf6a0cc0e570bdfc739873cd264"
      },
      {
        "path": "rulepacks/python/XXE-001/tests/vulnerable/security_use.py",
        "sha256": "362c78ea6b0ee92a418bfa22012f584ffc58c6b24396e79e1224db166237b48c"
      }
    ]
  },
  "provenance": {
    "fixtureOrigin": "Maintainer-authored files in this repository rulepacks directory.",
    "fixtureLicense": "No separate fixture license was identified in this checkout. This receipt does not grant rights to source fixtures.",
    "redistribution": "The public receipt contains measurements, relative paths and digests only. It does not redistribute fixture source or third-party suite contents.",
    "independentSuite": null,
    "independentEvaluationExecuted": false
  },
  "methodology": {
    "unit": "One fixture evaluated against its labelled rule only. Multiple findings in one fixture count once. Cross-rule detections are not scored.",
    "source": "Maintainer-authored vulnerable and safe twins stored alongside the rules. These fixtures may have informed rule development and are not a held-out dataset.",
    "timing": "One local run: rule loading, fixture reads and matching. Excludes process startup, dependency installation, source hashing, network, repository setup and model work. Not a hosted scan latency estimate.",
    "cost": "Model cost is zero because model calls and verification are disabled. Hardware, energy, hosting and full-product costs are unmeasured.",
    "scope": "Deterministic rule matching only. No repository pipeline, retrieval, model sweep, patch generation, proof replay, dependency advisory or secret scanner accuracy is measured.",
    "denominator": "Undefined precision, recall or specificity is null, never a perfect score."
  },
  "totals": {
    "rules": 33,
    "vulnerable": 42,
    "safe": 44,
    "tp": 42,
    "fn": 0,
    "fp": 0,
    "tn": 44,
    "precision": 1,
    "recall": 1,
    "specificity": 1
  },
  "families": [
    {
      "family": "algorithmic_complexity",
      "rules": 4,
      "tp": 6,
      "fn": 0,
      "fp": 0,
      "tn": 6,
      "precision": 1,
      "recall": 1,
      "specificity": 1
    },
    {
      "family": "cleartext_transport",
      "rules": 1,
      "tp": 1,
      "fn": 0,
      "fp": 0,
      "tn": 1,
      "precision": 1,
      "recall": 1,
      "specificity": 1
    },
    {
      "family": "crypto",
      "rules": 2,
      "tp": 2,
      "fn": 0,
      "fp": 0,
      "tn": 2,
      "precision": 1,
      "recall": 1,
      "specificity": 1
    },
    {
      "family": "deserialization",
      "rules": 3,
      "tp": 3,
      "fn": 0,
      "fp": 0,
      "tn": 3,
      "precision": 1,
      "recall": 1,
      "specificity": 1
    },
    {
      "family": "file_upload",
      "rules": 1,
      "tp": 1,
      "fn": 0,
      "fp": 0,
      "tn": 1,
      "precision": 1,
      "recall": 1,
      "specificity": 1
    },
    {
      "family": "injection",
      "rules": 10,
      "tp": 13,
      "fn": 0,
      "fp": 0,
      "tn": 16,
      "precision": 1,
      "recall": 1,
      "specificity": 1
    },
    {
      "family": "misconfiguration",
      "rules": 1,
      "tp": 1,
      "fn": 0,
      "fp": 0,
      "tn": 1,
      "precision": 1,
      "recall": 1,
      "specificity": 1
    },
    {
      "family": "open_redirect",
      "rules": 1,
      "tp": 1,
      "fn": 0,
      "fp": 0,
      "tn": 1,
      "precision": 1,
      "recall": 1,
      "specificity": 1
    },
    {
      "family": "prototype_pollution",
      "rules": 2,
      "tp": 2,
      "fn": 0,
      "fp": 0,
      "tn": 2,
      "precision": 1,
      "recall": 1,
      "specificity": 1
    },
    {
      "family": "ssrf",
      "rules": 1,
      "tp": 1,
      "fn": 0,
      "fp": 0,
      "tn": 1,
      "precision": 1,
      "recall": 1,
      "specificity": 1
    },
    {
      "family": "template_injection",
      "rules": 2,
      "tp": 2,
      "fn": 0,
      "fp": 0,
      "tn": 2,
      "precision": 1,
      "recall": 1,
      "specificity": 1
    },
    {
      "family": "traversal",
      "rules": 2,
      "tp": 2,
      "fn": 0,
      "fp": 0,
      "tn": 3,
      "precision": 1,
      "recall": 1,
      "specificity": 1
    },
    {
      "family": "xss",
      "rules": 3,
      "tp": 7,
      "fn": 0,
      "fp": 0,
      "tn": 5,
      "precision": 1,
      "recall": 1,
      "specificity": 1
    }
  ],
  "scores": [
    {
      "rule": "SSTI-002",
      "name": "Jinja2 Template Injection",
      "family": "template_injection",
      "cwes": [
        "CWE-1336"
      ],
      "languages": [
        "python"
      ],
      "vulnerable": 1,
      "safe": 1,
      "tp": 1,
      "fn": 0,
      "fp": 0,
      "tn": 1,
      "precision": 1,
      "recall": 1,
      "specificity": 1
    },
    {
      "rule": "PYEXEC-001",
      "name": "Python Source Code Injection",
      "family": "injection",
      "cwes": [
        "CWE-94"
      ],
      "languages": [
        "python"
      ],
      "vulnerable": 1,
      "safe": 1,
      "tp": 1,
      "fn": 0,
      "fp": 0,
      "tn": 1,
      "precision": 1,
      "recall": 1,
      "specificity": 1
    },
    {
      "rule": "SQLI-002",
      "name": "SQL Injection via Module Surface",
      "family": "injection",
      "cwes": [
        "CWE-89"
      ],
      "languages": [
        "python"
      ],
      "vulnerable": 1,
      "safe": 1,
      "tp": 1,
      "fn": 0,
      "fp": 0,
      "tn": 1,
      "precision": 1,
      "recall": 1,
      "specificity": 1
    },
    {
      "rule": "LDAP-001",
      "name": "LDAP Filter Injection",
      "family": "injection",
      "cwes": [
        "CWE-90"
      ],
      "languages": [
        "python"
      ],
      "vulnerable": 1,
      "safe": 1,
      "tp": 1,
      "fn": 0,
      "fp": 0,
      "tn": 1,
      "precision": 1,
      "recall": 1,
      "specificity": 1
    },
    {
      "rule": "DESER-002",
      "name": "Pickle Deserialization of Request Data",
      "family": "deserialization",
      "cwes": [
        "CWE-502"
      ],
      "languages": [
        "python"
      ],
      "vulnerable": 1,
      "safe": 1,
      "tp": 1,
      "fn": 0,
      "fp": 0,
      "tn": 1,
      "precision": 1,
      "recall": 1,
      "specificity": 1
    },
    {
      "rule": "RANDOM-001",
      "name": "Predictable Randomness Used for Security",
      "family": "crypto",
      "cwes": [
        "CWE-330"
      ],
      "languages": [
        "python"
      ],
      "vulnerable": 1,
      "safe": 1,
      "tp": 1,
      "fn": 0,
      "fp": 0,
      "tn": 1,
      "precision": 1,
      "recall": 1,
      "specificity": 1
    },
    {
      "rule": "XXE-001",
      "name": "Untrusted XML Reaches Entity Enabled Parser",
      "family": "deserialization",
      "cwes": [
        "CWE-611"
      ],
      "languages": [
        "python"
      ],
      "vulnerable": 1,
      "safe": 1,
      "tp": 1,
      "fn": 0,
      "fp": 0,
      "tn": 1,
      "precision": 1,
      "recall": 1,
      "specificity": 1
    },
    {
      "rule": "TRUST-001",
      "name": "Request Data Stored Across a Session Trust Boundary",
      "family": "injection",
      "cwes": [
        "CWE-501"
      ],
      "languages": [
        "python"
      ],
      "vulnerable": 1,
      "safe": 1,
      "tp": 1,
      "fn": 0,
      "fp": 0,
      "tn": 1,
      "precision": 1,
      "recall": 1,
      "specificity": 1
    },
    {
      "rule": "COOKIE-001",
      "name": "Response Cookie Allows Insecure Transport",
      "family": "misconfiguration",
      "cwes": [
        "CWE-614"
      ],
      "languages": [
        "python"
      ],
      "vulnerable": 1,
      "safe": 1,
      "tp": 1,
      "fn": 0,
      "fp": 0,
      "tn": 1,
      "precision": 1,
      "recall": 1,
      "specificity": 1
    },
    {
      "rule": "XPATH-001",
      "name": "XPath Injection",
      "family": "injection",
      "cwes": [
        "CWE-643"
      ],
      "languages": [
        "python"
      ],
      "vulnerable": 1,
      "safe": 1,
      "tp": 1,
      "fn": 0,
      "fp": 0,
      "tn": 1,
      "precision": 1,
      "recall": 1,
      "specificity": 1
    },
    {
      "rule": "HASH-001",
      "name": "Weak Hash Used for Security",
      "family": "crypto",
      "cwes": [
        "CWE-328"
      ],
      "languages": [
        "python"
      ],
      "vulnerable": 1,
      "safe": 1,
      "tp": 1,
      "fn": 0,
      "fp": 0,
      "tn": 1,
      "precision": 1,
      "recall": 1,
      "specificity": 1
    },
    {
      "rule": "XSS-001",
      "name": "Cross-Site Scripting",
      "family": "xss",
      "cwes": [
        "CWE-79"
      ],
      "languages": [
        "typescript",
        "javascript",
        "python"
      ],
      "vulnerable": 2,
      "safe": 2,
      "tp": 2,
      "fn": 0,
      "fp": 0,
      "tn": 2,
      "precision": 1,
      "recall": 1,
      "specificity": 1
    },
    {
      "rule": "SSRF-001",
      "name": "Server-Side Request Forgery",
      "family": "ssrf",
      "cwes": [
        "CWE-918"
      ],
      "languages": [
        "typescript",
        "javascript",
        "python"
      ],
      "vulnerable": 1,
      "safe": 1,
      "tp": 1,
      "fn": 0,
      "fp": 0,
      "tn": 1,
      "precision": 1,
      "recall": 1,
      "specificity": 1
    },
    {
      "rule": "CMDI-001",
      "name": "OS Command Injection",
      "family": "injection",
      "cwes": [
        "CWE-78"
      ],
      "languages": [
        "typescript",
        "javascript",
        "python"
      ],
      "vulnerable": 1,
      "safe": 1,
      "tp": 1,
      "fn": 0,
      "fp": 0,
      "tn": 1,
      "precision": 1,
      "recall": 1,
      "specificity": 1
    },
    {
      "rule": "CLEARTEXT-001",
      "name": "Cleartext Transport Protocol",
      "family": "cleartext_transport",
      "cwes": [
        "CWE-319"
      ],
      "languages": [
        "typescript",
        "javascript",
        "python"
      ],
      "vulnerable": 1,
      "safe": 1,
      "tp": 1,
      "fn": 0,
      "fp": 0,
      "tn": 1,
      "precision": 1,
      "recall": 1,
      "specificity": 1
    },
    {
      "rule": "UPLOAD-001",
      "name": "Unrestricted File Upload",
      "family": "file_upload",
      "cwes": [
        "CWE-434"
      ],
      "languages": [
        "typescript",
        "javascript",
        "python"
      ],
      "vulnerable": 1,
      "safe": 1,
      "tp": 1,
      "fn": 0,
      "fp": 0,
      "tn": 1,
      "precision": 1,
      "recall": 1,
      "specificity": 1
    },
    {
      "rule": "REDIR-001",
      "name": "Open Redirect",
      "family": "open_redirect",
      "cwes": [
        "CWE-601"
      ],
      "languages": [
        "typescript",
        "javascript",
        "python"
      ],
      "vulnerable": 1,
      "safe": 1,
      "tp": 1,
      "fn": 0,
      "fp": 0,
      "tn": 1,
      "precision": 1,
      "recall": 1,
      "specificity": 1
    },
    {
      "rule": "SSTI-001",
      "name": "Server-Side Template Injection",
      "family": "template_injection",
      "cwes": [
        "CWE-1336"
      ],
      "languages": [
        "typescript",
        "javascript",
        "python"
      ],
      "vulnerable": 1,
      "safe": 1,
      "tp": 1,
      "fn": 0,
      "fp": 0,
      "tn": 1,
      "precision": 1,
      "recall": 1,
      "specificity": 1
    },
    {
      "rule": "SQLI-001",
      "name": "SQL Injection",
      "family": "injection",
      "cwes": [
        "CWE-89"
      ],
      "languages": [
        "typescript",
        "javascript",
        "python"
      ],
      "vulnerable": 1,
      "safe": 3,
      "tp": 1,
      "fn": 0,
      "fp": 0,
      "tn": 3,
      "precision": 1,
      "recall": 1,
      "specificity": 1
    },
    {
      "rule": "PATH-001",
      "name": "Path Traversal",
      "family": "traversal",
      "cwes": [
        "CWE-22"
      ],
      "languages": [
        "typescript",
        "javascript",
        "python"
      ],
      "vulnerable": 1,
      "safe": 2,
      "tp": 1,
      "fn": 0,
      "fp": 0,
      "tn": 2,
      "precision": 1,
      "recall": 1,
      "specificity": 1
    },
    {
      "rule": "ANGULAR-TRUST-001",
      "name": "Angular DomSanitizer Bypass",
      "family": "xss",
      "cwes": [
        "CWE-79"
      ],
      "languages": [
        "typescript",
        "javascript"
      ],
      "vulnerable": 1,
      "safe": 1,
      "tp": 1,
      "fn": 0,
      "fp": 0,
      "tn": 1,
      "precision": 1,
      "recall": 1,
      "specificity": 1
    },
    {
      "rule": "CODE-001",
      "name": "Dynamic Code Execution from Untrusted Input",
      "family": "injection",
      "cwes": [
        "CWE-95"
      ],
      "languages": [
        "typescript",
        "javascript",
        "python"
      ],
      "vulnerable": 1,
      "safe": 2,
      "tp": 1,
      "fn": 0,
      "fp": 0,
      "tn": 2,
      "precision": 1,
      "recall": 1,
      "specificity": 1
    },
    {
      "rule": "DESER-001",
      "name": "Insecure Deserialization",
      "family": "deserialization",
      "cwes": [
        "CWE-502"
      ],
      "languages": [
        "typescript",
        "javascript",
        "python"
      ],
      "vulnerable": 1,
      "safe": 1,
      "tp": 1,
      "fn": 0,
      "fp": 0,
      "tn": 1,
      "precision": 1,
      "recall": 1,
      "specificity": 1
    },
    {
      "rule": "PATH-002",
      "name": "Path Traversal via Exported API",
      "family": "traversal",
      "cwes": [
        "CWE-22",
        "CWE-23"
      ],
      "languages": [
        "typescript",
        "javascript"
      ],
      "vulnerable": 1,
      "safe": 1,
      "tp": 1,
      "fn": 0,
      "fp": 0,
      "tn": 1,
      "precision": 1,
      "recall": 1,
      "specificity": 1
    },
    {
      "rule": "REDOS-001",
      "name": "Catastrophic Regex Backtracking",
      "family": "algorithmic_complexity",
      "cwes": [
        "CWE-1333"
      ],
      "languages": [
        "typescript",
        "javascript"
      ],
      "vulnerable": 3,
      "safe": 2,
      "tp": 3,
      "fn": 0,
      "fp": 0,
      "tn": 2,
      "precision": 1,
      "recall": 1,
      "specificity": 1
    },
    {
      "rule": "CODE-002",
      "name": "Dynamic Code Execution via Exported API",
      "family": "injection",
      "cwes": [
        "CWE-94",
        "CWE-95"
      ],
      "languages": [
        "typescript",
        "javascript"
      ],
      "vulnerable": 1,
      "safe": 1,
      "tp": 1,
      "fn": 0,
      "fp": 0,
      "tn": 1,
      "precision": 1,
      "recall": 1,
      "specificity": 1
    },
    {
      "rule": "PROTO-001",
      "name": "Prototype Pollution",
      "family": "prototype_pollution",
      "cwes": [
        "CWE-1321"
      ],
      "languages": [
        "typescript",
        "javascript"
      ],
      "vulnerable": 1,
      "safe": 1,
      "tp": 1,
      "fn": 0,
      "fp": 0,
      "tn": 1,
      "precision": 1,
      "recall": 1,
      "specificity": 1
    },
    {
      "rule": "XSS-002",
      "name": "Stored Cross-Site Scripting",
      "family": "xss",
      "cwes": [
        "CWE-79"
      ],
      "languages": [
        "typescript",
        "javascript"
      ],
      "vulnerable": 4,
      "safe": 2,
      "tp": 4,
      "fn": 0,
      "fp": 0,
      "tn": 2,
      "precision": 1,
      "recall": 1,
      "specificity": 1
    },
    {
      "rule": "REDOS-003",
      "name": "Catastrophic Regex Assembled from String Fragments",
      "family": "algorithmic_complexity",
      "cwes": [
        "CWE-1333"
      ],
      "languages": [
        "typescript",
        "javascript"
      ],
      "vulnerable": 1,
      "safe": 1,
      "tp": 1,
      "fn": 0,
      "fp": 0,
      "tn": 1,
      "precision": 1,
      "recall": 1,
      "specificity": 1
    },
    {
      "rule": "REDOS-004",
      "name": "Quadratic Regex Split on Request Input",
      "family": "algorithmic_complexity",
      "cwes": [
        "CWE-1333"
      ],
      "languages": [
        "typescript",
        "javascript"
      ],
      "vulnerable": 1,
      "safe": 1,
      "tp": 1,
      "fn": 0,
      "fp": 0,
      "tn": 1,
      "precision": 1,
      "recall": 1,
      "specificity": 1
    },
    {
      "rule": "CMDI-002",
      "name": "OS Command Injection via Exported API",
      "family": "injection",
      "cwes": [
        "CWE-78",
        "CWE-77",
        "CWE-88"
      ],
      "languages": [
        "typescript",
        "javascript"
      ],
      "vulnerable": 4,
      "safe": 4,
      "tp": 4,
      "fn": 0,
      "fp": 0,
      "tn": 4,
      "precision": 1,
      "recall": 1,
      "specificity": 1
    },
    {
      "rule": "REDOS-002",
      "name": "Catastrophic Regex Backtracking (Bounded Quantifier Nesting)",
      "family": "algorithmic_complexity",
      "cwes": [
        "CWE-1333"
      ],
      "languages": [
        "typescript",
        "javascript"
      ],
      "vulnerable": 1,
      "safe": 2,
      "tp": 1,
      "fn": 0,
      "fp": 0,
      "tn": 2,
      "precision": 1,
      "recall": 1,
      "specificity": 1
    },
    {
      "rule": "PROTO-002",
      "name": "Prototype Pollution via Exported API",
      "family": "prototype_pollution",
      "cwes": [
        "CWE-1321"
      ],
      "languages": [
        "typescript",
        "javascript"
      ],
      "vulnerable": 1,
      "safe": 1,
      "tp": 1,
      "fn": 0,
      "fp": 0,
      "tn": 1,
      "precision": 1,
      "recall": 1,
      "specificity": 1
    }
  ],
  "cases": [
    {
      "rule": "SSTI-002",
      "path": "rulepacks/python/SSTI-002/tests/vulnerable/render_string.py",
      "label": "vulnerable",
      "detected": true,
      "sha256": "4bd606000d080233cc84818ee75c20d451c0618e837364e0e6042334ef20ec94"
    },
    {
      "rule": "SSTI-002",
      "path": "rulepacks/python/SSTI-002/tests/safe/render_file.py",
      "label": "safe",
      "detected": false,
      "sha256": "27f43756ac0694b7f32b4a3c8354c7cc26b603a417a5edd353db62d9968203cf"
    },
    {
      "rule": "PYEXEC-001",
      "path": "rulepacks/python/PYEXEC-001/tests/vulnerable/example.py",
      "label": "vulnerable",
      "detected": true,
      "sha256": "97db9745b502b8ac176393c11ac84203a5ef47c2250ad9c7f3e95279d91147ba"
    },
    {
      "rule": "PYEXEC-001",
      "path": "rulepacks/python/PYEXEC-001/tests/safe/example.py",
      "label": "safe",
      "detected": false,
      "sha256": "b0987f8a75a6ef0f04626162629eb0ea116e4ca88fa060c2aecc34187a5cae6f"
    },
    {
      "rule": "SQLI-002",
      "path": "rulepacks/python/SQLI-002/tests/vulnerable/model_method.py",
      "label": "vulnerable",
      "detected": true,
      "sha256": "f5b72f7df4bb62bffccff279f4bd3861b94e3d5fb2a3b235beba67f8bb7323f0"
    },
    {
      "rule": "SQLI-002",
      "path": "rulepacks/python/SQLI-002/tests/safe/bound_parameter.py",
      "label": "safe",
      "detected": false,
      "sha256": "f59ad09d5622601478728d738f82e771a04ef649bc287a6d98fb6ccbdad3c9a8"
    },
    {
      "rule": "LDAP-001",
      "path": "rulepacks/python/LDAP-001/tests/vulnerable/example.py",
      "label": "vulnerable",
      "detected": true,
      "sha256": "81ea19fcefe0229b53692e1a8813e6d6d602b964731857adf7c7827e3d62933b"
    },
    {
      "rule": "LDAP-001",
      "path": "rulepacks/python/LDAP-001/tests/safe/example.py",
      "label": "safe",
      "detected": false,
      "sha256": "cdeadf5cc35f95087984229e70a93acfb5fd15ff87159d78da56102c32549ef7"
    },
    {
      "rule": "DESER-002",
      "path": "rulepacks/python/DESER-002/tests/vulnerable/pickle_body.py",
      "label": "vulnerable",
      "detected": true,
      "sha256": "bc3ffd740c598790f2e1e6cd4d33e7e4fc4194606cca7c04ed9b6329d3fe803f"
    },
    {
      "rule": "DESER-002",
      "path": "rulepacks/python/DESER-002/tests/safe/json_body.py",
      "label": "safe",
      "detected": false,
      "sha256": "b870d59e6a36b5c007f9b8db0f644589f1b35317ebf256ef820421f3f4b87c7d"
    },
    {
      "rule": "RANDOM-001",
      "path": "rulepacks/python/RANDOM-001/tests/vulnerable/security_use.py",
      "label": "vulnerable",
      "detected": true,
      "sha256": "0a5c3b2dc3063e44f1707c8237116a3c73b6b90bff021a553aa26e239d759d36"
    },
    {
      "rule": "RANDOM-001",
      "path": "rulepacks/python/RANDOM-001/tests/safe/security_use.py",
      "label": "safe",
      "detected": false,
      "sha256": "af026cd1cb696c62afd0a09b6d886ae62b7e42876da4692a60c4f115c7911ca1"
    },
    {
      "rule": "XXE-001",
      "path": "rulepacks/python/XXE-001/tests/vulnerable/security_use.py",
      "label": "vulnerable",
      "detected": true,
      "sha256": "362c78ea6b0ee92a418bfa22012f584ffc58c6b24396e79e1224db166237b48c"
    },
    {
      "rule": "XXE-001",
      "path": "rulepacks/python/XXE-001/tests/safe/security_use.py",
      "label": "safe",
      "detected": false,
      "sha256": "a72dfe53e9dc9bcd36404965ad208ec7a48dabf6a0cc0e570bdfc739873cd264"
    },
    {
      "rule": "TRUST-001",
      "path": "rulepacks/python/TRUST-001/tests/vulnerable/example.py",
      "label": "vulnerable",
      "detected": true,
      "sha256": "e8746c4d0b1abfa238fb0986594cb89110a52f61c53fdd0bd40786fe650e7393"
    },
    {
      "rule": "TRUST-001",
      "path": "rulepacks/python/TRUST-001/tests/safe/example.py",
      "label": "safe",
      "detected": false,
      "sha256": "84b4eadbd97c147afede3c94d45eefee81f6c9a285d099897547252f86601e05"
    },
    {
      "rule": "COOKIE-001",
      "path": "rulepacks/python/COOKIE-001/tests/vulnerable/security_use.py",
      "label": "vulnerable",
      "detected": true,
      "sha256": "1a2fedf4a92e6084c7f1d2d30c30b505edb987586506c809b295d652f1a7c9ec"
    },
    {
      "rule": "COOKIE-001",
      "path": "rulepacks/python/COOKIE-001/tests/safe/security_use.py",
      "label": "safe",
      "detected": false,
      "sha256": "36232350c4ae6a4eabb43698a64e29a6f96681feb114e9634fb8e7f0771324c0"
    },
    {
      "rule": "XPATH-001",
      "path": "rulepacks/python/XPATH-001/tests/vulnerable/example.py",
      "label": "vulnerable",
      "detected": true,
      "sha256": "9519ae17a6895888d7949e8214de5e7c21ca8ae19aab6f69fffc61e213a0b5ba"
    },
    {
      "rule": "XPATH-001",
      "path": "rulepacks/python/XPATH-001/tests/safe/example.py",
      "label": "safe",
      "detected": false,
      "sha256": "fd62cbe7fd076c640544152051bc8cb122a9039158b95a38bfa1bd17ab837f14"
    },
    {
      "rule": "HASH-001",
      "path": "rulepacks/python/HASH-001/tests/vulnerable/security_use.py",
      "label": "vulnerable",
      "detected": true,
      "sha256": "da09cde958525ff193c071da85ccaf90c210c4248921cdcc45b053dd1ea14ed6"
    },
    {
      "rule": "HASH-001",
      "path": "rulepacks/python/HASH-001/tests/safe/security_use.py",
      "label": "safe",
      "detected": false,
      "sha256": "7dd2d78c7a7005038c32765fc0e57ac5763539fffafda7cdb100abca2706120f"
    },
    {
      "rule": "XSS-001",
      "path": "rulepacks/common/XSS-001/tests/vulnerable/inner_html.ts",
      "label": "vulnerable",
      "detected": true,
      "sha256": "9bc3e7f70495dec60e4fae6e44c6525d1f7eed9eaab34f1b7f0c2f62ee334865"
    },
    {
      "rule": "XSS-001",
      "path": "rulepacks/common/XSS-001/tests/vulnerable/jquery_hash_html.js",
      "label": "vulnerable",
      "detected": true,
      "sha256": "e90787da428b6edc0fee61dfc8bd079fcfff45bdcf54e55b2577f7aa60555a23"
    },
    {
      "rule": "XSS-001",
      "path": "rulepacks/common/XSS-001/tests/safe/escaped_html.ts",
      "label": "safe",
      "detected": false,
      "sha256": "199162c065905fc36a12bae5eedef52093de52b6faea7189b26c94fc4b297fd0"
    },
    {
      "rule": "XSS-001",
      "path": "rulepacks/common/XSS-001/tests/safe/jquery_hash_text.js",
      "label": "safe",
      "detected": false,
      "sha256": "444b7e3c66c70ffedc419ea0e8e00d765964bc62e02b6bc7bdb6810e8e31cfe4"
    },
    {
      "rule": "SSRF-001",
      "path": "rulepacks/common/SSRF-001/tests/vulnerable/express_proxy.ts",
      "label": "vulnerable",
      "detected": true,
      "sha256": "e4f646374bcb08c30fb8af627a91668f4841512cebe1bf804f79c0c4cc2229ab"
    },
    {
      "rule": "SSRF-001",
      "path": "rulepacks/common/SSRF-001/tests/safe/express_proxy_allowlist.ts",
      "label": "safe",
      "detected": false,
      "sha256": "571f26fc750cdb14b72c7803cd2dd50d62acd806d1677dd5165aa92060ecd21f"
    },
    {
      "rule": "CMDI-001",
      "path": "rulepacks/common/CMDI-001/tests/vulnerable/exec_concat.py",
      "label": "vulnerable",
      "detected": true,
      "sha256": "8b98cd6a13e1b2e4970341498162b6222b44ea2fb872f4af940f75062f24f397"
    },
    {
      "rule": "CMDI-001",
      "path": "rulepacks/common/CMDI-001/tests/safe/exec_quoted.py",
      "label": "safe",
      "detected": false,
      "sha256": "55ffe5f84c6711ba04bb88b1c5cf723e0f6c547bd71b17683a4ccae49263114d"
    },
    {
      "rule": "CLEARTEXT-001",
      "path": "rulepacks/common/CLEARTEXT-001/tests/vulnerable/ftp_endpoint.ts",
      "label": "vulnerable",
      "detected": true,
      "sha256": "c3a6c3a828cc4cdca45bbdf486c6c2856066163884baa74f760a91e896f11870"
    },
    {
      "rule": "CLEARTEXT-001",
      "path": "rulepacks/common/CLEARTEXT-001/tests/safe/https_endpoint.ts",
      "label": "safe",
      "detected": false,
      "sha256": "c497ad77c81fd53d387c2b5b10161388c87628740d0b678891581d330ab1ca03"
    },
    {
      "rule": "UPLOAD-001",
      "path": "rulepacks/common/UPLOAD-001/tests/vulnerable/unchecked_upload.ts",
      "label": "vulnerable",
      "detected": true,
      "sha256": "c2c4629e3af2db831f72d99572b49c758174bb224e4a2f4abb88ab82f12a3967"
    },
    {
      "rule": "UPLOAD-001",
      "path": "rulepacks/common/UPLOAD-001/tests/safe/mime_checked_upload.ts",
      "label": "safe",
      "detected": false,
      "sha256": "e020db518e233ac8433f5237c1744d70d6854bd802dbd232f6377d1e03c9aa77"
    },
    {
      "rule": "REDIR-001",
      "path": "rulepacks/common/REDIR-001/tests/vulnerable/open_redirect.ts",
      "label": "vulnerable",
      "detected": true,
      "sha256": "efd4e225c944fb8647054fa952e40f0d6f3b3b905e22a6bf89f4b2c310daf363"
    },
    {
      "rule": "REDIR-001",
      "path": "rulepacks/common/REDIR-001/tests/safe/redirect_allowlist.ts",
      "label": "safe",
      "detected": false,
      "sha256": "903c9879c7b4b35624849633a17e8a34a86dc25f4526cc3df5342b5bb0e49bde"
    },
    {
      "rule": "SSTI-001",
      "path": "rulepacks/common/SSTI-001/tests/vulnerable/handlebars_compile.ts",
      "label": "vulnerable",
      "detected": true,
      "sha256": "4b04998aa32236b06404c7c9aaf2674d01173576b2401efd4904166a4f30fd5f"
    },
    {
      "rule": "SSTI-001",
      "path": "rulepacks/common/SSTI-001/tests/safe/precompiled_template.ts",
      "label": "safe",
      "detected": false,
      "sha256": "0d5febf5ff8f2070115eaeba0870cdfcd392a2dd142487f0a996b04cc491a6e1"
    },
    {
      "rule": "SQLI-001",
      "path": "rulepacks/common/SQLI-001/tests/vulnerable/concat_query.ts",
      "label": "vulnerable",
      "detected": true,
      "sha256": "a2429d8b1f611d41495a356ac305368dc5b78092e491a43bedf6a0f663b6ecb8"
    },
    {
      "rule": "SQLI-001",
      "path": "rulepacks/common/SQLI-001/tests/safe/drizzle_where.ts",
      "label": "safe",
      "detected": false,
      "sha256": "106f09d70c246f993c7098b5d059bea9b836d1d025154d2c21b2b330519e7ceb"
    },
    {
      "rule": "SQLI-001",
      "path": "rulepacks/common/SQLI-001/tests/safe/identifier_allowlist.ts",
      "label": "safe",
      "detected": false,
      "sha256": "bca1e858b9fda6aff77dc1334c96e61446966250ab503c5832c0ef2919ce8436"
    },
    {
      "rule": "SQLI-001",
      "path": "rulepacks/common/SQLI-001/tests/safe/parameterized_query.ts",
      "label": "safe",
      "detected": false,
      "sha256": "bc711ba097116beaedf72e93c7b3b20b961a2d1258948ecb0dbe6e0ab8831a4c"
    },
    {
      "rule": "PATH-001",
      "path": "rulepacks/common/PATH-001/tests/vulnerable/read_user_path.ts",
      "label": "vulnerable",
      "detected": true,
      "sha256": "f1b1f2b69e5992f4004d8a30d0e696fb19d21cd1cb02927e61687e5991d7569d"
    },
    {
      "rule": "PATH-001",
      "path": "rulepacks/common/PATH-001/tests/safe/read_normalized_path.ts",
      "label": "safe",
      "detected": false,
      "sha256": "de57b93ba7c7f086a1a9de7d2872628ccb63d84da3fb2fa1ef195bf58b0d2ca6"
    },
    {
      "rule": "PATH-001",
      "path": "rulepacks/common/PATH-001/tests/safe/template_allowlisted.ts",
      "label": "safe",
      "detected": false,
      "sha256": "d1d539bba782f1be978bfc1758690d38426278adaf1a44dbf76705e47ce6618b"
    },
    {
      "rule": "ANGULAR-TRUST-001",
      "path": "rulepacks/common/ANGULAR-TRUST-001/tests/vulnerable/bypass_trust_html.ts",
      "label": "vulnerable",
      "detected": true,
      "sha256": "dda816ef1b3d98aa23f109516466c901b66bee2cc3c4742f997ddbf75dac2165"
    },
    {
      "rule": "ANGULAR-TRUST-001",
      "path": "rulepacks/common/ANGULAR-TRUST-001/tests/safe/sanitized_html.ts",
      "label": "safe",
      "detected": false,
      "sha256": "0d602cd9ae708c8060652de16f1c361a5522dc81d81624e8bdaaaae2664457d2"
    },
    {
      "rule": "CODE-001",
      "path": "rulepacks/common/CODE-001/tests/vulnerable/eval_query.ts",
      "label": "vulnerable",
      "detected": true,
      "sha256": "e3f4f0d3c518040aa2696ea7f76ff19db67601d38be08b42373615b3ded3dae0"
    },
    {
      "rule": "CODE-001",
      "path": "rulepacks/common/CODE-001/tests/safe/comment_mentions_eval.ts",
      "label": "safe",
      "detected": false,
      "sha256": "a47f8173953238cb60d08856a1b037366fbe536a88da34b23c643e9cad35d572"
    },
    {
      "rule": "CODE-001",
      "path": "rulepacks/common/CODE-001/tests/safe/literal_mentions_eval.ts",
      "label": "safe",
      "detected": false,
      "sha256": "3d09dab28d07ba35d263943091655822f5f5d217b2d6fccbbf3f9cb435bacfc2"
    },
    {
      "rule": "DESER-001",
      "path": "rulepacks/common/DESER-001/tests/vulnerable/yaml_load_body.ts",
      "label": "vulnerable",
      "detected": true,
      "sha256": "f108c65e1710a394fa1785691e1cb6d621e3e0b778da96403788137e3156453a"
    },
    {
      "rule": "DESER-001",
      "path": "rulepacks/common/DESER-001/tests/safe/yaml_safe_load.ts",
      "label": "safe",
      "detected": false,
      "sha256": "7aaaf0beb687fdadfafbc7d6d1a952647353a222571032ea59242f87bf33dba9"
    },
    {
      "rule": "PATH-002",
      "path": "rulepacks/javascript/PATH-002/tests/vulnerable/join_read_export.js",
      "label": "vulnerable",
      "detected": true,
      "sha256": "20507cd856657419f07cc9d57385ac0199ec4f9b0e462bb891c10ac96025c754"
    },
    {
      "rule": "PATH-002",
      "path": "rulepacks/javascript/PATH-002/tests/safe/contained_read_export.js",
      "label": "safe",
      "detected": false,
      "sha256": "472c240fcecb888932368d9ac76e6872fa996792833b27603edf78064d6df30b"
    },
    {
      "rule": "REDOS-001",
      "path": "rulepacks/javascript/REDOS-001/tests/vulnerable/nested_quantifier.js",
      "label": "vulnerable",
      "detected": true,
      "sha256": "7920ee95f0caf7a78d0cd31a99a6ba78e71d67b4f51267b91dbcfa02385ce71d"
    },
    {
      "rule": "REDOS-001",
      "path": "rulepacks/javascript/REDOS-001/tests/vulnerable/redos-log-only-length.js",
      "label": "vulnerable",
      "detected": true,
      "sha256": "fcf564ffc5b17680ee66e004e5b1245af26fa730c39738e6837b06a0f9c2003e"
    },
    {
      "rule": "REDOS-001",
      "path": "rulepacks/javascript/REDOS-001/tests/vulnerable/redos-unrelated-length.js",
      "label": "vulnerable",
      "detected": true,
      "sha256": "f15da1e79e6647d9637f8f86186eb2957ba0185b85a892c8454a99154a0fd6ef"
    },
    {
      "rule": "REDOS-001",
      "path": "rulepacks/javascript/REDOS-001/tests/safe/linear_regex.js",
      "label": "safe",
      "detected": false,
      "sha256": "a9cff969079a95187fb874a9cd45fd323e27d936e16787a2cd0017b2eaa430fe"
    },
    {
      "rule": "REDOS-001",
      "path": "rulepacks/javascript/REDOS-001/tests/safe/redos-effective-length.js",
      "label": "safe",
      "detected": false,
      "sha256": "b89100f7da1bf4dfa4174bf118757b4b16b7606a71a190dc9df4d803726aa9e0"
    },
    {
      "rule": "CODE-002",
      "path": "rulepacks/javascript/CODE-002/tests/vulnerable/eval_export.js",
      "label": "vulnerable",
      "detected": true,
      "sha256": "ae60852aa9bc8760e4d3701940685ae52258960802d7f7826562dd28b710e310"
    },
    {
      "rule": "CODE-002",
      "path": "rulepacks/javascript/CODE-002/tests/safe/allowlist_table_export.js",
      "label": "safe",
      "detected": false,
      "sha256": "85869a3b0814860009545f5da55fe63518b9c17b8cbf59d819beecea904fa706"
    },
    {
      "rule": "PROTO-001",
      "path": "rulepacks/javascript/PROTO-001/tests/vulnerable/deep_merge.js",
      "label": "vulnerable",
      "detected": true,
      "sha256": "97b4a460cc326981a23344127f06023cce4c7195e91e33188fcc416376ab4db4"
    },
    {
      "rule": "PROTO-001",
      "path": "rulepacks/javascript/PROTO-001/tests/safe/picked_fields.js",
      "label": "safe",
      "detected": false,
      "sha256": "8d915a5bcf94d0a9ce002f204cedd8debee71a799ec8b4ab3a0ab413144adf27"
    },
    {
      "rule": "XSS-002",
      "path": "rulepacks/javascript/XSS-002/tests/vulnerable/html-discarded-escape.js",
      "label": "vulnerable",
      "detected": true,
      "sha256": "78e0100d92680afb5c379c10568f32a5513e66a0cf1e23b9f647c1959b41b3bf"
    },
    {
      "rule": "XSS-002",
      "path": "rulepacks/javascript/XSS-002/tests/vulnerable/html-overwritten-escape.js",
      "label": "vulnerable",
      "detected": true,
      "sha256": "06b413b915b10c22e187b39f8c7ffd40ce94538df84eaf26ec0239e801bc4c6b"
    },
    {
      "rule": "XSS-002",
      "path": "rulepacks/javascript/XSS-002/tests/vulnerable/html-partial-escape.js",
      "label": "vulnerable",
      "detected": true,
      "sha256": "d6b1b267de5f4630775d7f2545fea52433910233517c33d05a7748ab8cc174c7"
    },
    {
      "rule": "XSS-002",
      "path": "rulepacks/javascript/XSS-002/tests/vulnerable/stored_profile_html.js",
      "label": "vulnerable",
      "detected": true,
      "sha256": "dd0e8a86c73974539e46b0acc340e7f19bd08778c7fc174de236a4df296e4673"
    },
    {
      "rule": "XSS-002",
      "path": "rulepacks/javascript/XSS-002/tests/safe/html-whole-escape.js",
      "label": "safe",
      "detected": false,
      "sha256": "2ba3ca2673b1e9cee7fc2b825cfc350951c5dc400fcd4530da274d47e5b1a91e"
    },
    {
      "rule": "XSS-002",
      "path": "rulepacks/javascript/XSS-002/tests/safe/stored_profile_text.js",
      "label": "safe",
      "detected": false,
      "sha256": "00b74d4ae94fc2c7af691afd78ca4834c85bf7cbb789d6c4bc42d86b0f1a9ee3"
    },
    {
      "rule": "REDOS-003",
      "path": "rulepacks/javascript/REDOS-003/tests/vulnerable/string_built_nesting.js",
      "label": "vulnerable",
      "detected": true,
      "sha256": "57c1f8d65d22e1e73219e296dc6a3261f86faa2e4564bb592e1c0f66471ad01d"
    },
    {
      "rule": "REDOS-003",
      "path": "rulepacks/javascript/REDOS-003/tests/safe/string_built_linear.js",
      "label": "safe",
      "detected": false,
      "sha256": "507ffc34c8b0de6fe2836dc76727272b795be938a762a27b9d8e3d5aa230c362"
    },
    {
      "rule": "REDOS-004",
      "path": "rulepacks/javascript/REDOS-004/tests/vulnerable/header_regex_split.js",
      "label": "vulnerable",
      "detected": true,
      "sha256": "299f3862184b888dd6db84b50f1b94131b39df2189c0a7897d71fa3a01cd6498"
    },
    {
      "rule": "REDOS-004",
      "path": "rulepacks/javascript/REDOS-004/tests/safe/header_literal_split.js",
      "label": "safe",
      "detected": false,
      "sha256": "2d05c9372eae684a32a51fa3608c62f1b3a262d62660bfa40e778a9fe8652d2e"
    },
    {
      "rule": "CMDI-002",
      "path": "rulepacks/javascript/CMDI-002/tests/vulnerable/exec_concat_comment_claiming_safety.js",
      "label": "vulnerable",
      "detected": true,
      "sha256": "7ac5b4dfbe1bc3ea61f2b256bd34b310ca2d0690aee8a1f7339d94ad27fec847"
    },
    {
      "rule": "CMDI-002",
      "path": "rulepacks/javascript/CMDI-002/tests/vulnerable/exec_concat_export.js",
      "label": "vulnerable",
      "detected": true,
      "sha256": "275d8bc62de5103c813fc75d1d03bb03a637cfcd4ff57e03681b272f50696cf2"
    },
    {
      "rule": "CMDI-002",
      "path": "rulepacks/javascript/CMDI-002/tests/vulnerable/shell-interpreter-argv.js",
      "label": "vulnerable",
      "detected": true,
      "sha256": "dba75bb9609c263b03773c8f3ace4dcb1c0702f9d380d754a986ba6e917d8dea"
    },
    {
      "rule": "CMDI-002",
      "path": "rulepacks/javascript/CMDI-002/tests/vulnerable/spawn_shell_true_export.js",
      "label": "vulnerable",
      "detected": true,
      "sha256": "2399e875e0801f760ef923db719dd4b2d51ba785e13fba5d7207191a8470f77e"
    },
    {
      "rule": "CMDI-002",
      "path": "rulepacks/javascript/CMDI-002/tests/safe/execfile_argv_export.js",
      "label": "safe",
      "detected": false,
      "sha256": "c36f60fc7cb772ae724f024550104463cb7715914ff021a3a1b8f70dcd66d190"
    },
    {
      "rule": "CMDI-002",
      "path": "rulepacks/javascript/CMDI-002/tests/safe/shell-no-shell-data.js",
      "label": "safe",
      "detected": false,
      "sha256": "2795e97e1692e600623f2011a4e88f7db6d5be3c31668b7f4c95cc938ac5ebdd"
    },
    {
      "rule": "CMDI-002",
      "path": "rulepacks/javascript/CMDI-002/tests/safe/spawn_argv_export.js",
      "label": "safe",
      "detected": false,
      "sha256": "79a4e7b621e9f7c9e73bd2eb2904a4eef151ea45f7fe05dabffc6a8609926ee4"
    },
    {
      "rule": "CMDI-002",
      "path": "rulepacks/javascript/CMDI-002/tests/safe/spawn_shell_false_export.js",
      "label": "safe",
      "detected": false,
      "sha256": "9a28aec735bb33aea479da9f8fbcdea3ea340e4fdfb5d1b8ea60d57a00db4b0a"
    },
    {
      "rule": "REDOS-002",
      "path": "rulepacks/javascript/REDOS-002/tests/vulnerable/bounded_nesting.js",
      "label": "vulnerable",
      "detected": true,
      "sha256": "704567ef1e945b22e884a421d91cdebafc56a32057c66d64d5adf6500229fb99"
    },
    {
      "rule": "REDOS-002",
      "path": "rulepacks/javascript/REDOS-002/tests/safe/anchored_repetition.js",
      "label": "safe",
      "detected": false,
      "sha256": "8fa107f69e124073c70a243d4ba8cf42e3baf6ff1a85728c4e90aaaca3f9de7c"
    },
    {
      "rule": "REDOS-002",
      "path": "rulepacks/javascript/REDOS-002/tests/safe/exact_count.js",
      "label": "safe",
      "detected": false,
      "sha256": "85f3770d53e3c837a9893af66608801071e279a7fd40e524718b3e92f713c009"
    },
    {
      "rule": "PROTO-002",
      "path": "rulepacks/javascript/PROTO-002/tests/vulnerable/unflatten_export.js",
      "label": "vulnerable",
      "detected": true,
      "sha256": "5397ad7af5a07d9101fcaedc754d6fcefd64b14ecfe03e47886b1de7f2d03d2e"
    },
    {
      "rule": "PROTO-002",
      "path": "rulepacks/javascript/PROTO-002/tests/safe/unflatten_guarded_export.js",
      "label": "safe",
      "detected": false,
      "sha256": "a8f82389db43a60343ee060f87e4a22fc806541bb9930b27133798a4f8ea1c1b"
    }
  ],
  "unmeasured": [
    "Independent held-out accuracy",
    "Production repository accuracy",
    "Model-assisted finding accuracy",
    "Patch correctness and regression rate",
    "Hosted scan latency and model cost",
    "Comparison with other scanners"
  ]
}