truemend™
Technical Audit Report
Code Quality — Acme Corp / TrueMend

Your codebase
has issues.
Most of them
cost nothing to fix.

TrueMend analyzed 488 files and 9,131 functions across your codebase. We found 848 quality issues — 66% of which can be fixed automatically at zero cost.

Live Analysis — deep_nesting.dart
3void deeplyNested(List<Map<String, dynamic>> data) {
4 for (var item in data) {
5 if (item.containsKey('users')) {
6 for (var user in item['users']) {
7 if (user['active'] == true) {
8 try {
9 if (user['role'] == 'admin') {
10 switch (user['level']) {
11 case 1:
12 print('Level 1 admin');
13 break;
14 case 2:
Health Score — 488 files
6.8 / 10
Logic Clarity
9.0
Error Handling
9.7
Type Safety
9.5
Test Strategy
9.0
Naming Quality
8.5
94.2/100
Health Score
66%
of fixes cost $0
848
issues found
9131
functions analyzed
03/24/2026
Report Date
truemend
Confidential — Proprietary &amp; Restricted
INTELLECTUAL PROPERTY NOTICE
This document and the technology
described within are the exclusive
intellectual property of TrueMend.
Trademark & Brand
The TrueMend name, wordmark, logo, and associated branding are trademarked. Unauthorized use of any TrueMend marks in any medium — digital, print, or otherwise — is strictly prohibited and will be pursued.
Proprietary Technology
The three-tier fix classification system, deterministic AST transform engine, anti-pattern detection library, and AI authorship confidence scoring methodology are proprietary trade secrets protected under applicable intellectual property law.
Confidentiality & Reproduction
This document is provided in confidence to the named recipient only. Reproduction, distribution, reverse engineering, or derivation of any product, service, or methodology substantially similar to those described herein will be treated as misappropriation of trade secrets and pursued accordingly.
Any attempt to replicate, circumvent, or commercially exploit the methods, systems, or tooling described in this document without express written authorization from TrueMend constitutes a violation of trade secret law and will result in legal action seeking injunctive relief and damages.
© 2026 TrueMend™. All rights reserved. TrueMend™ is a trademark. Unauthorized use is prohibited.
© 2026 truemend
2
truemend
Executive Overview
Executive Overview

Code Quality Assessment: TrueMend

TrueMend performed an automated code quality audit of 488 source files containing 9,131 functions across 135,419 lines of code. This report summarizes the findings and quantifies the engineering effort required to address them.

94/100
Health Score
Excellent — Top 10%
848
Issues Found
3 critical, 45 high
66%
Auto-Fixable
558 of 848 issues
95%
Time Savings
vs manual remediation

Issue Severity Distribution

Critical0%
High5%
Medium89%
Low5%

Industry Benchmark Comparison

Health Score vs Industry
+32 vs average
94
│ Industry Avg: 62
┆ Top Quartile: 78
● Project: 94
Excellent — Top 10%
Pattern Density
6.3 / 1K LOC
-6.2 vs industry avg (12.5)
Codebase Size
135,419 LOC
488 files, 9131 functions
© 2026 truemend
3
truemend
Financial Impact
Financial Impact

Cost of Inaction vs Remediation

Technical debt compounds. Industry research shows unaddressed code quality issues grow at approximately 23% annually as surrounding code adapts to work around problems, making them progressively harder to resolve.

Current Remediation Cost
$25,309
At blended rate of $185/hr + 1.5x overhead
6-Month Projected Cost
$28,220
+$2,911 compound growth
12-Month Projected Cost
$31,131
+$5,821 compound growth

Remediation Cost Trajectory

Fix Now
25,309
In 6 Months
28,220
In 12 Months
31,131

Engineering Time: Manual vs TrueMend

Manual
672
With TrueMend
32
Manual Effort
16.8 weeks
672 engineering hours
With TrueMend
0.8 weeks
32 engineering hours

Remediation by Fix Type

Deterministic
558
Cataloged
288
Structural
2
558 deterministic fixes are automated AST transforms applied instantly at zero cost. No developer time, no risk of regression, no code review needed.

288 cataloged refactors use constrained LLM-guided procedures — 5 minutes each vs 90 minutes manually.

2 structural rewrites require human architectural judgment and are flagged for team review.
© 2026 truemend
4
truemend
Return on Investment
Return on Investment

TrueMend ROI Analysis

The following breakdown compares the engineering cost of manual remediation against TrueMend-assisted remediation for each fix category.

Fix TypeCountManual (per fix)TrueMend (per fix)Manual TotalTrueMend TotalSavings
Deterministic55825 min0 min232 hrs0 hrs232 hrs
Cataloged Refactor28890 min5 min432 hrs24 hrs408 hrs
Structural Rewrite24 hrs4 hrs8 hrs8 hrs0 hrs
Total848672 hrs32 hrs640 hrs
$16,429
Estimated Cost Savings
Manual: $25,309 → TrueMend: $8,880
640
Engineering Hours Saved
16.8 weeks → 0.8 weeks
66%
Issues Auto-Fixed
558 instant, zero-cost fixes
Bottom Line: TrueMend reduces remediation time from 16.8 developer-weeks to 0.8 weeks — a 95% reduction. The 558 deterministic fixes alone eliminate 232 hours of manual work at zero cost and zero risk. Deferring action increases the total cost by $5,821 within 12 months.
© 2026 truemend
5
truemend
Methodology
Appendix

Assessment methodology

Every TrueMend audit follows a standardized, reproducible process. Findings are generated by deterministic AST analysis, regex line-scan, and semantic Python analysis — not opinion.

Analysis Engine

Detection

309 anti-patterns across 17 spec files using ast-grep (Rust AST), regex line-scan, and semantic Python analysis. 14 language grammars, 2 framework-specific pattern sets (Flutter, React/Next.js).

Scoring

Mechanical health score (0-100) computed from anti-pattern density, severity weights, and function-level metrics. Optional LLM-powered subjective review across 40 dimensions with blind review mode.

Classification

Three-tier fix classification ensures every finding has a clear, cost-appropriate remediation path.

Structural Analysis

8 project-level detectors: naming consistency, flat directories, orphaned files, dead code blocks, single-use abstractions, signature variance, passthrough files, duplicate clusters.

Production Readiness

13-check assessment with PASS/FAIL/WARN verdicts and blocker identification.

Team Quality

Per-author attribution from git history: commits, debt introduced/fixed, test discipline, commit message quality.

Cost Model

Technical debt in CAD at $125/hr blended consulting rate with empirical calibration from actual fix times.

Quality Dimensions

Readability (0–10)
How easy the code is to read and follow.
Simplicity (0–10)
Whether the code avoids unnecessary complexity.
Design Coherence (0–10)
How well components fit together.
Convention Adherence (0–10)
Consistency with project conventions.
Error Handling (0–10)
Robustness of error detection and recovery.
Naming Quality (0–10)
Clarity and descriptiveness of identifiers.
Type Safety (0–10)
Strength and correctness of type annotations.
API Surface (0–10)
Clarity and minimality of public interfaces.
Test Strategy (0–10)
Coverage, isolation, and quality of tests.
Abstraction Fitness (0–10)
Whether abstractions match the domain.
Logic Clarity (0–10)
How straightforward the control flow is.
Security (0–10)
Resistance to common vulnerability patterns.
40 mechanical + subjective dimensions available. Subjective dimensions scored via LLM review handoff (prepare → score → ingest).

Fix Classification

deterministicAutomatic AST transforms applied without human input. Free — no LLM cost.
cataloged refactorA known refactoring procedure with bounded scope and predictable cost.
structural rewriteA design-level decision that requires discussion before implementation.
Confidentiality Notice

This report was prepared exclusively for Acme Corp in connection with the TrueMend engagement. It contains proprietary analysis and recommendations. Distribution, reproduction, or disclosure to third parties without written authorization is prohibited.

© 2026 TrueMend™. All rights reserved.
© 2026 truemend
6
truemend
Security Assessment
Security Assessment

Security Posture

Security posture aggregates findings from anti-pattern detection, semantic boundary analysis, configuration scanning, and subjective dimension scoring. Findings include hardcoded secrets, XSS vectors, CSRF vulnerabilities, unvalidated input, and authorization gaps.

58
FAIL
Security Score
5
Total Security Findings
4 critical
1 medium
Recommendation: Immediate action required — critical security vulnerabilities detected.
SeveritySourcePatternDescriptionLocation
CRITICALsemantic_detectoreval-usageeval() executes arbitrary code.known_bad.py:9
CRITICALsemantic_detectorexec-usageexec() executes arbitrary code.known_bad.py:10
CRITICALsemantic_detectoreval-usageeval() executes arbitrary code.python_directives.py:9
CRITICALsemantic_detectoreval-usageeval() executes arbitrary code.python_directives.py:12
MEDIUMsemantic_detectorenviron-no-defaultos.environ["X"] raises KeyError if the variable is missing.truemend_mcp.py:91
© 2026 truemend
7
truemend
Production Readiness
Production Readiness

Production Readiness Verdict

Assesses whether the codebase is ready for production deployment across 13 checks spanning security, testing, code quality, and structural health.

NOT READY
Verdict
4
Blockers
5
Warnings
3
Passing
343h
$42,850 CAD
Est. Remediation
StatusCheckDetailsBlocker
FAILCritical findings3 critical-severity anti-patterns detectedYes
FAILHigh-severity findings45 high-severity findings (threshold: 10)Yes
FAILEmpty catch blocks8 empty catch blocks (threshold: 5)Yes
FAILSecurity issues4 critical, 0 high security findingsYes
WARNUnused imports504 unused imports (threshold: 100)No
WARNOrphaned files68 orphaned files (27,200 lines)No
WARNDuplicate clusters531 duplicate clusters (1269 functions)No
WARNFunction length violations91 functions exceed 50 linesNo
WARNDebug artifacts3 debug print statementsNo
PASSHealth scoreHealth score 94.2 (above 80 threshold)No
PASSDead code blocks2 dead code blocksNo
PASSHardcoded secretsNo hardcoded secrets detectedYes
SKIPTest coverageTest gap data not availableYes
© 2026 truemend
8
truemend
Dead Exports
Dead Code

130 Unused Exports Detected

Dead exports are symbols (functions, classes, constants) that are defined and exported but never imported or called within the codebase. Removing them reduces bundle size, decreases cognitive load, and eliminates potential attack surface.

FileSymbolLineSeverityDescription
K:\TrueMend\cli.pyconfigure_logging60MEDIUMPublic symbol 'configure_logging' is defined but never imported by any other file in the p
K:\TrueMend\src\analysis_pipeline.pyscan_files_for_duplicates151MEDIUMPublic symbol 'scan_files_for_duplicates' is defined but never imported by any other file
K:\TrueMend\src\languages\swift.pyget_function_range216MEDIUMPublic symbol 'get_function_range' is defined but never imported by any other file in the
K:\TrueMend\src\languages\swift.pycount_lines222MEDIUMPublic symbol 'count_lines' is defined but never imported by any other file in the project
K:\TrueMend\src\triage.pyTriageResult21MEDIUMPublic symbol 'TriageResult' is defined but never imported by any other file in the projec
K:\TrueMend\src\anti_patterns.pycount_suppressions215MEDIUMPublic symbol 'count_suppressions' is defined but never imported by any other file in the
K:\TrueMend\src\fixes\patch_engine.pyPatchResult46MEDIUMPublic symbol 'PatchResult' is defined but never imported by any other file in the project
K:\TrueMend\src\fixes\patch_engine.pyPatchReport58MEDIUMPublic symbol 'PatchReport' is defined but never imported by any other file in the project
K:\TrueMend\src\fixes\patch_engine.pyTransform75MEDIUMPublic symbol 'Transform' is defined but never imported by any other file in the project
K:\TrueMend\src\fixes\patch_engine.pyregister_transform86MEDIUMPublic symbol 'register_transform' is defined but never imported by any other file in the
K:\TrueMend\src\fixes\patch_engine.pytransform_remove_unused_imports675MEDIUMPublic symbol 'transform_remove_unused_imports' is defined but never imported by any other
K:\TrueMend\src\fixes\patch_engine.pyapply_and_write710MEDIUMPublic symbol 'apply_and_write' is defined but never imported by any other file in the pro
K:\TrueMend\src\reporting\html_ux_report.pygenerate_ux_html_report48MEDIUMPublic symbol 'generate_ux_html_report' is defined but never imported by any other file in
K:\TrueMend\src\reporting\reporter.pyQualityReport23MEDIUMPublic symbol 'QualityReport' is defined but never imported by any other file in the proje
K:\TrueMend\src\reporting\reporter.pygenerate_roi_report90MEDIUMPublic symbol 'generate_roi_report' is defined but never imported by any other file in the
K:\TrueMend\src\types.pyproject_root52MEDIUMPublic symbol 'project_root' is defined but never imported by any other file in the projec
K:\TrueMend\src\types.pyMetricsData212MEDIUMPublic symbol 'MetricsData' is defined but never imported by any other file in the project
K:\TrueMend\src\types.pyAntiPatternData238MEDIUMPublic symbol 'AntiPatternData' is defined but never imported by any other file in the pro
K:\TrueMend\src\types.pyFunctionData249MEDIUMPublic symbol 'FunctionData' is defined but never imported by any other file in the projec
K:\TrueMend\src\types.pyFileMetricsData264MEDIUMPublic symbol 'FileMetricsData' is defined but never imported by any other file in the pro
K:\TrueMend\src\types.pyHealthScoreWeightsData286MEDIUMPublic symbol 'HealthScoreWeightsData' is defined but never imported by any other file in
K:\TrueMend\src\types.pyHealthScoreData293MEDIUMPublic symbol 'HealthScoreData' is defined but never imported by any other file in the pro
K:\TrueMend\src\types.pyUxFindingData302MEDIUMPublic symbol 'UxFindingData' is defined but never imported by any other file in the proje
K:\TrueMend\src\types.pyUxQualityData317MEDIUMPublic symbol 'UxQualityData' is defined but never imported by any other file in the proje
K:\TrueMend\src\types.pySummaryData345MEDIUMPublic symbol 'SummaryData' is defined but never imported by any other file in the project
K:\TrueMend\src\types.pyAnalysisConfig361MEDIUMPublic symbol 'AnalysisConfig' is defined but never imported by any other file in the proj
K:\TrueMend\src\types.pyFeatureRiskData429MEDIUMPublic symbol 'FeatureRiskData' is defined but never imported by any other file in the pro
K:\TrueMend\src\types.pyComplexityForecastData439MEDIUMPublic symbol 'ComplexityForecastData' is defined but never imported by any other file in
K:\TrueMend\src\types.pyRecommendedDecompositionData449MEDIUMPublic symbol 'RecommendedDecompositionData' is defined but never imported by any other fi
K:\TrueMend\src\types.pyPredictionOutputData458MEDIUMPublic symbol 'PredictionOutputData' is defined but never imported by any other file in th
+ 100 additional dead exports
© 2026 truemend
9
truemend
Structural Analysis
Structural Analysis

Structural Health

Structural analysis detects naming inconsistencies, flat directory sprawl, orphaned files, dead code, passthrough functions, and signature issues across the codebase. Scan completed in 442ms.

89
Total Structural Issues

By Category

Naming Issues
5
Flat Directories
9
Single-Use Modules
4
Orphaned Files
68
Passthrough Functions
1
Dead Code
2
CategoryFindingFile
Naming Issues7 files violate PascalCase.
Naming Issues2 files violate SCREAMING_SNAKEdocs/reports
Naming Issues3 files violate snake_case./prompts
Flat Directories208 files (threshold: 20)./tests
Flat Directories88 files (threshold: 20)./specs
Flat Directories38 files (threshold: 20)./docs
Single-Use ModulesOnly imported by server\api\license\activate.tslib/license-signer.ts
Single-Use ModulesOnly imported by server\api\license\activate.tslib/types.ts
Single-Use ModulesOnly imported by src\cli_commands.pytruemend_mcp.py
Orphaned Fileszero importers, not an entry pointauth/login.ts
Orphaned Fileszero importers, not an entry pointauth/signup.ts
Orphaned Fileszero importers, not an entry pointlicense/activate.ts
© 2026 truemend
10
truemend
Duplicates
Code Duplication

Duplicate Function Clusters

Duplicate detection identifies functions with identical or near-identical logic across multiple files. Consolidating duplicates reduces maintenance burden and prevents divergent bug fixes.

Duplicate Clusters
531
Duplicate Functions
1269
FunctionCopiesSimilarityFound In
compute_comment_what_ratio1092%java.py, swift.py, kotlin.py, typescript.py +6
count_comment_lines9100%java.py, swift.py, kotlin.py, typescript.py +5
_try_semantic_runtime5100%subjective_review.py, subjective_review.py, subjective_review.py, subjective_review.py +1
run_next_batch498%engine.py, engine.py, workflow.py, workflow.py
_extract_raw_imports3100%single_use_detector.py, coupling_detector.py, structural_base.py
_extract_dart_imports3100%single_use_detector.py, coupling_detector.py, structural_base.py
_is_external_dart_import3100%single_use_detector.py, coupling_detector.py, structural_base.py
_serialize_profile393%learning.py, rule_inheritance.py, dashboard.py
get_function_name3100%java.py, ruby.py, go.py
scan_files_for_structure2100%analysis_pipeline.py, mcp_tools.py
_resolve_call_name298%comment_checker.py, concurrency_detector.py
detect_single_use_files2100%single_use_detector.py, single_use_detector.py
_detect_dart_package2100%single_use_detector.py, structural_base.py
_resolve_dart_package_import2100%single_use_detector.py, structural_base.py
_try_extensions297%single_use_detector.py, coupling_detector.py
© 2026 truemend
11
truemend
Subjective Review
Subjective Review

Subjective Quality Dimensions

Each dimension is scored 0-100 via semantic analysis of code style, naming, error handling, design coherence, and other qualitative attributes that complement the quantitative anti-pattern detection.

68
Overall Score / 100
Package Organization
100
Dependency Health
100
Abstraction Fitness
100
Authorization Consistency
100
Mid Level Elegance
98
Contract Coherence
97
Error Consistency
97
High Level Elegance
96
Cross Module Architecture
95
Api Surface Coherence
95
Type Safety
95
Test Strategy
90
Logic Clarity
90
Low Level Elegance
85
Naming Quality
85
Convention Drift
85
Ai Generated Debt
85
Initialization Coupling
82
Design Coherence
74
Incomplete Migration
60
Runtime Resilience
50
Null Safety
50
Resource Lifecycle
50
Timeout Discipline
50
Memory Pressure
50
Thread Safety
50
Transaction Boundary
50
Error Transparency
50
Logging Quality
50
Graceful Degradation
50
Feature Completeness
50
Dead Code Risk
50
Api Contract Drift
50
Config Consistency
50
Serialization Fidelity
50
Test Quality
50
Assertion Density
50
Boundary Validation
50
Import Health
50
Dependency Fragility
50
© 2026 truemend
12
truemend
Executive Summary
Executive Summary

848 anti-patterns across 488 files,
558 fixable at zero cost.

TrueMend analyzed 488 source files containing 9131 functions. The majority of findings are deterministic fixes that can be applied automatically with no risk.

488
Files analyzed
9131
Functions analyzed
848
Anti-patterns found
558
Deterministic fixes

Severity Distribution

Critical — 3
High — 45
Medium — 757
Low — 43

Fix Type Distribution

558
Deterministic — automatic, zero-cost AST transforms
288
Cataloged refactor — constrained LLM-guided fixes
2
Structural rewrite — flagged for human decision

Worst Files by Anti-Pattern Density

1
src/reporting/pdf.py
53 findings
2
src/cli_commands.py
40 findings
3
src/mcp_tools.py
31 findings
4
src/reporting/html_report.py
26 findings
5
src/reporting/traceability.py
25 findings
6
tests/fixtures/known_bad.ts
22 findings
7
tools/benchmark.py
14 findings
8
src/intelligence/subjective_review.py
12 findings
9
src/detection/duplicate_detector_text.py
12 findings
10
src/detection/semantic/quality_detector.py
11 findings
66% of identified issues can be fixed automatically at zero cost. Applying all deterministic fixes immediately removes 558 anti-patterns with no human intervention required.
© 2026 truemend
13
truemend
Detailed Findings
Findings by File

File-level analysis

Detailed breakdown of files with detected anti-patterns.

src/reporting/pdf.py
Health: 94.2  ·  192 lines
PatternSeverityFix TypeLines
python_unused_import (53)MEDIUMDETERMINISTICLines: 18, 24, 84, 91, 105
src/cli_commands.py
Health: 82.8  ·  3079 lines
PatternSeverityFix TypeLines
cmd_log: deep-nesting (1)HIGHCATALOGEDLine: 1073
_print_audit_text: deep-nesting (1)HIGHCATALOGEDLine: 2568
cmd_audit: python-broad-except (14)MEDIUMCATALOGEDLines: 2034, 2044, 2064, 2125, 2150, 2168, 2186, 2204, 2232, 2250 ... +4 more
python_unused_import (10)MEDIUMDETERMINISTICLines: 21, 1348, 1370, 1539, 1758, 1828, 2100
dispatch_subcommand: function-too-long (1)MEDIUMCATALOGEDLine: 53
cmd_resolve: function-too-long (1)MEDIUMCATALOGEDLine: 469
cmd_zone: function-too-long (1)MEDIUMCATALOGEDLine: 1028
cmd_log: function-too-long (1)MEDIUMCATALOGEDLine: 1073
cmd_move: function-too-long (1)MEDIUMCATALOGEDLine: 1146
_definitions_status: function-too-long (1)MEDIUMCATALOGEDLine: 1637
_definitions_subscribe: function-too-long (1)MEDIUMCATALOGEDLine: 1681
_license_activate: function-too-long (1)MEDIUMCATALOGEDLine: 1756
_license_remove: function-too-long (1)MEDIUMCATALOGEDLine: 1897
cmd_audit: function-too-long (1)MEDIUMCATALOGEDLine: 1974
_build_pdf_data: function-too-long (1)MEDIUMCATALOGEDLine: 2448
_print_audit_text: function-too-long (1)MEDIUMCATALOGEDLine: 2568
_print_readiness_section: function-too-long (1)MEDIUMCATALOGEDLine: 2699
_triage_status_or_start: function-too-long (1)MEDIUMCATALOGEDLine: 2990
© 2026 truemend
14
truemend
Detailed Findings
src/mcp_tools.py
Health: 84.5  ·  2601 lines
PatternSeverityFix TypeLines
_run_full_audit: deep-nesting (1)HIGHCATALOGEDLine: 1213
_run_full_audit: python-broad-except (9)MEDIUMCATALOGEDLines: 1248, 1265, 1298, 1315, 1333, 1342, 1382, 1486, 1701
_infer_src_test_dirs: python-broad-except (1)MEDIUMCATALOGEDLine: 224
_infer_src_test_dirs: function-too-long (1)MEDIUMCATALOGEDLine: 204
_build_summary_review: function-too-long (1)MEDIUMCATALOGEDLine: 320
_register_analyze_tool: function-too-long (1)MEDIUMCATALOGEDLine: 563
_register_review_tool: function-too-long (1)MEDIUMCATALOGEDLine: 631
_run_improve_pipeline: python-broad-except (1)MEDIUMCATALOGEDLine: 772
_run_improve_pipeline: function-too-long (1)MEDIUMCATALOGEDLine: 743
_build_status_response: python-broad-except (1)MEDIUMCATALOGEDLine: 888
_run_dashboard_with_timeout: function-too-long (1)MEDIUMCATALOGEDLine: 1098
_register_audit_tool: function-too-long (1)MEDIUMCATALOGEDLine: 1156
_run_full_audit: function-too-long (1)MEDIUMCATALOGEDLine: 1213
_compute_security_posture: python-broad-except (1)MEDIUMCATALOGEDLine: 1868
_compute_security_posture: function-too-long (1)MEDIUMCATALOGEDLine: 1798
_run_next: function-too-long (1)MEDIUMCATALOGEDLine: 2032
_register_loop_tool: function-too-long (1)MEDIUMCATALOGEDLine: 2118
_register_clusters_tool: function-too-long (1)MEDIUMCATALOGEDLine: 2158
_run_triage: function-too-long (1)MEDIUMCATALOGEDLine: 2301
_register_review_prepare_tool: function-too-long (1)MEDIUMCATALOGEDLine: 2434
_register_review_ingest_tool: function-too-long (1)MEDIUMCATALOGEDLine: 2476
_register_team_tool: function-too-long (1)MEDIUMCATALOGEDLine: 2521
python_unused_import (1)MEDIUMDETERMINISTICLine: 2136
© 2026 truemend
15
truemend
Detailed Findings
src/reporting/html_report.py
Health: 79.9  ·  2625 lines
PatternSeverityFix TypeLines
generate_html_report: function-too-long (1)MEDIUMCATALOGEDLine: 41
_industry_comparison: function-too-long (1)MEDIUMCATALOGEDLine: 167
_svg_pie_segments: function-too-long (1)MEDIUMCATALOGEDLine: 324
_stakeholder_overview: function-too-long (1)MEDIUMCATALOGEDLine: 370
_legal_page: function-too-long (1)MEDIUMCATALOGEDLine: 661
_scoring_mode_badge: function-too-long (1)MEDIUMCATALOGEDLine: 773
_cover: function-too-long (1)MEDIUMCATALOGEDLine: 817
_worst_code_sample: python-broad-except (1)MEDIUMCATALOGEDLine: 909
_worst_code_sample: function-too-long (1)MEDIUMCATALOGEDLine: 879
_dim_bars: function-too-long (1)MEDIUMCATALOGEDLine: 940
_exec_summary: function-too-long (1)MEDIUMCATALOGEDLine: 986
_roadmap: function-too-long (1)MEDIUMCATALOGEDLine: 1223
_security_posture_page: function-too-long (1)MEDIUMCATALOGEDLine: 1307
_production_readiness_page: function-too-long (1)MEDIUMCATALOGEDLine: 1423
_dead_exports_page: function-too-long (1)MEDIUMCATALOGEDLine: 1536
_test_health_page: function-too-long (1)MEDIUMCATALOGEDLine: 1591
_migration_page: function-too-long (1)MEDIUMCATALOGEDLine: 1665
_traceability_page: function-too-long (1)MEDIUMCATALOGEDLine: 1772
_team_section_page: function-too-long (1)MEDIUMCATALOGEDLine: 1911
_structural_analysis_page: function-too-long (1)MEDIUMCATALOGEDLine: 2119
_structural_detail_rows: function-too-long (1)MEDIUMCATALOGEDLine: 2188
_structural_finding_fields: function-too-long (1)MEDIUMCATALOGEDLine: 2227
_duplicate_clusters_page: function-too-long (1)MEDIUMCATALOGEDLine: 2275
_ux_supplement: function-too-long (1)MEDIUMCATALOGEDLine: 2449
_methodology: function-too-long (1)MEDIUMCATALOGEDLine: 2563
python_unused_import (1)MEDIUMDETERMINISTICLine: 14
© 2026 truemend
16
truemend
Detailed Findings
src/reporting/traceability.py
Health: 76.1  ·  1951 lines
PatternSeverityFix TypeLines
_collect_file_sources: deep-nesting (2)HIGHCATALOGEDLines: 1190, 1301
_compute_design_trace: deep-nesting (1)HIGHCATALOGEDLine: 898
_collect_file_sources: function-too-long (2)MEDIUMCATALOGEDLines: 1190, 1301
_parse_blame_porcelain: function-too-long (1)MEDIUMCATALOGEDLine: 341
_compute_bus_factor: function-too-long (1)MEDIUMCATALOGEDLine: 417
_compute_test_trace: function-too-long (1)MEDIUMCATALOGEDLine: 586
_search_test_files: function-too-long (1)MEDIUMCATALOGEDLine: 628
_compute_ai_trace: function-too-long (1)MEDIUMCATALOGEDLine: 701
_compute_blast_radius: function-too-long (1)MEDIUMCATALOGEDLine: 778
_count_transitive_importers: function-too-long (1)MEDIUMCATALOGEDLine: 827
_compute_design_trace: function-too-long (1)MEDIUMCATALOGEDLine: 898
_compute_review_trace: function-too-long (1)MEDIUMCATALOGEDLine: 1019
_score_finding: function-too-long (1)MEDIUMCATALOGEDLine: 1104
trace_findings: function-too-long (1)MEDIUMCATALOGEDLine: 1236
_run_analysis: function-too-long (1)MEDIUMCATALOGEDLine: 1356
_trace_single_finding: function-too-long (1)MEDIUMCATALOGEDLine: 1396
_build_report: function-too-long (1)MEDIUMCATALOGEDLine: 1569
_compute_layer_coverage: function-too-long (1)MEDIUMCATALOGEDLine: 1612
_compute_red_flags: function-too-long (1)MEDIUMCATALOGEDLine: 1671
format_trace_report: function-too-long (1)MEDIUMCATALOGEDLine: 1744
_trace_detail_line: function-too-long (1)MEDIUMCATALOGEDLine: 1806
_serialize_finding: function-too-long (1)MEDIUMCATALOGEDLine: 1871
python_unused_import (1)MEDIUMDETERMINISTICLine: 9
© 2026 truemend
17
truemend
Detailed Findings
tests/fixtures/known_bad.ts
Health: 56.7  ·  120 lines
PatternSeverityFix TypeLines
calculateDiscount: debugger-statement (1)HIGHDETERMINISTICLine: 36
handleRequest: deep-nesting (1)HIGHCATALOGEDLine: 52
syncAllData: try-catch-rethrow (3)MEDIUMDETERMINISTICLines: 95, 103, 111
syncAllData: any-type-usage (3)MEDIUMCATALOGEDLines: 85, 86, 87
typescript_unused_import (2)MEDIUMDETERMINISTICLines: 7, 9
fetchUserData: try-catch-rethrow (1)MEDIUMDETERMINISTICLine: 13
isAuthenticated: any-type-usage (1)MEDIUMCATALOGEDLine: 42
handleRequest: try-catch-rethrow (1)MEDIUMDETERMINISTICLine: 62
handleRequest: function-too-long (1)MEDIUMCATALOGEDLine: 52
processPayment: console-log-production (3)LOWDETERMINISTICLines: 24, 26, 28
syncAllData: console-log-production (2)LOWDETERMINISTICLines: 89, 118
isAuthenticated: double-negation (1)LOWDETERMINISTICLine: 43
getConfig: redundant-return-await (1)LOWDETERMINISTICLine: 48
handleRequest: console-log-production (1)LOWDETERMINISTICLine: 64
tools/benchmark.py
Health: 50.2  ·  346 lines
PatternSeverityFix TypeLines
run_benchmark: function-too-long (1)MEDIUMCATALOGEDLine: 238
python_unused_import (1)MEDIUMDETERMINISTICLine: 21
run_benchmark: python-print-production (12)LOWDETERMINISTICLines: 265, 266, 273, 278, 279, 280, 290, 296, 298, 305 ... +2 more
© 2026 truemend
18
truemend
Detailed Findings
src/intelligence/subjective_review.py
Health: 87.1  ·  1706 lines
PatternSeverityFix TypeLines
_try_type_safety: deep-nesting (1)HIGHCATALOGEDLine: 1145
_try_except_patterns: deep-nesting (1)HIGHCATALOGEDLine: 1318
_try_semantic_runtime: python-broad-except (1)MEDIUMCATALOGEDLine: 580
_try_semantic_concurrency: python-broad-except (1)MEDIUMCATALOGEDLine: 590
_try_semantic_error: python-broad-except (1)MEDIUMCATALOGEDLine: 600
_try_semantic_completeness: python-broad-except (1)MEDIUMCATALOGEDLine: 610
_try_semantic_quality: python-broad-except (1)MEDIUMCATALOGEDLine: 620
_score_from_mechanical: function-too-long (1)MEDIUMCATALOGEDLine: 702
run_subjective_review: function-too-long (1)MEDIUMCATALOGEDLine: 988
_score_all_dimensions: function-too-long (1)MEDIUMCATALOGEDLine: 1421
check_scoring_integrity: function-too-long (1)MEDIUMCATALOGEDLine: 1610
python_unused_import (1)MEDIUMDETERMINISTICLine: 18
src/detection/duplicate_detector_text.py
Health: 79.5  ·  1160 lines
PatternSeverityFix TypeLines
_find_block_duplicates: deep-nesting (1)HIGHCATALOGEDLine: 627
_extract_python_body: function-too-long (1)MEDIUMCATALOGEDLine: 258
_extract_bodies_with_regex: function-too-long (1)MEDIUMCATALOGEDLine: 333
_find_candidates_lsh: function-too-long (1)MEDIUMCATALOGEDLine: 445
_legacy_pairwise: function-too-long (1)MEDIUMCATALOGEDLine: 511
_find_block_duplicates: function-too-long (1)MEDIUMCATALOGEDLine: 627
_merge_overlapping_blocks: function-too-long (1)MEDIUMCATALOGEDLine: 693
_cluster_verified: function-too-long (1)MEDIUMCATALOGEDLine: 852
_cluster_blocks: function-too-long (1)MEDIUMCATALOGEDLine: 908
detect_duplicates_text: function-too-long (1)MEDIUMCATALOGEDLine: 969
text_fingerprints_for_file: function-too-long (1)MEDIUMCATALOGEDLine: 1120
python_unused_import (1)MEDIUMDETERMINISTICLine: 18
© 2026 truemend
19
truemend
Detailed Findings
src/detection/semantic/quality_detector.py
Health: 68.0  ·  626 lines
PatternSeverityFix TypeLines
detect_test_quality: deep-nesting (1)HIGHCATALOGEDLine: 49
_get_try_import_info: deep-nesting (1)HIGHCATALOGEDLine: 407
_handler_sets_none: deep-nesting (1)HIGHCATALOGEDLine: 437
_get_toplevel_imports: deep-nesting (1)HIGHCATALOGEDLine: 527
detect_dependency_fragility: deep-nesting (1)HIGHCATALOGEDLine: 551
detect_test_quality: function-too-long (1)MEDIUMCATALOGEDLine: 49
detect_assertion_density: function-too-long (1)MEDIUMCATALOGEDLine: 222
detect_boundary_validation: function-too-long (1)MEDIUMCATALOGEDLine: 310
detect_import_health: function-too-long (1)MEDIUMCATALOGEDLine: 461
detect_dependency_fragility: function-too-long (1)MEDIUMCATALOGEDLine: 551
python_unused_import (1)MEDIUMDETERMINISTICLine: 6
tests/test_cmd_next.py
Health: 96.8  ·  589 lines
PatternSeverityFix TypeLines
python_unused_import (8)MEDIUMDETERMINISTICLines: 7, 8, 9, 11, 13
_make_file: function-too-long (1)MEDIUMCATALOGEDLine: 26
© 2026 truemend
20
truemend
Detailed Findings
tests/fixtures/python/known_bad.py
Health: 68.3  ·  20 lines
PatternSeverityFix TypeLines
mutable_default: python-eval (1)CRITICALSTRUCTURALLine: 9
mutable_default: python-exec (1)CRITICALSTRUCTURALLine: 10
mutable_default: python-breakpoint (1)HIGHDETERMINISTICLine: 8
mutable_default: python-mutable-default (1)HIGHDETERMINISTICLine: 6
mutable_default: python-bare-except (1)HIGHCATALOGEDLine: 13
mutable_default: python-broad-except (1)MEDIUMCATALOGEDLine: 17
mutable_default: python-type-ignore-bare (1)MEDIUMCATALOGEDLine: 19
python_unused_import (1)MEDIUMDETERMINISTICLine: 2
mutable_default: python-print-production (1)LOWDETERMINISTICLine: 7
src/detection/semantic/error_detector.py
Health: 66.5  ·  527 lines
PatternSeverityFix TypeLines
_handler_has_error_not_exception: deep-nesting (1)HIGHCATALOGEDLine: 83
detect_error_transparency: deep-nesting (1)HIGHCATALOGEDLine: 152
detect_graceful_degradation: deep-nesting (1)HIGHCATALOGEDLine: 350
_is_guarded_use: deep-nesting (1)HIGHCATALOGEDLine: 497
detect_error_transparency: function-too-long (1)MEDIUMCATALOGEDLine: 152
detect_logging_quality: function-too-long (1)MEDIUMCATALOGEDLine: 262
detect_graceful_degradation: function-too-long (1)MEDIUMCATALOGEDLine: 350
_is_guarded_use: function-too-long (1)MEDIUMCATALOGEDLine: 497
python_unused_import (1)MEDIUMDETERMINISTICLine: 6
© 2026 truemend
21
truemend
Detailed Findings
tests/fixtures/patch_before.ts
Health: 66.9  ·  57 lines
PatternSeverityFix TypeLines
calculateTax: debugger-statement (1)HIGHDETERMINISTICLine: 26
getData: try-catch-rethrow (1)MEDIUMDETERMINISTICLine: 7
rethrowLoad: try-catch-rethrow (1)MEDIUMDETERMINISTICLine: 51
typescript_unused_import (1)MEDIUMDETERMINISTICLine: 3
processOrder: console-log-production (2)LOWDETERMINISTICLines: 18, 20
isActive: double-negation (1)LOWDETERMINISTICLine: 32
loadConfig: redundant-return-await (1)LOWDETERMINISTICLine: 37
rethrowLoad: redundant-return-await (1)LOWDETERMINISTICLine: 52
src/workflow/__init__.py
Health: 100.0  ·  14 lines
PatternSeverityFix TypeLines
python_unused_import (8)MEDIUMDETERMINISTICLines: 4, 12, 13
src/detection/structural_pipeline.py
Health: 88.0  ·  430 lines
PatternSeverityFix TypeLines
run_structural_analysis: function-too-long (1)MEDIUMCATALOGEDLine: 55
_run_naming: python-broad-except (1)MEDIUMCATALOGEDLine: 206
_run_flat_dirs: python-broad-except (1)MEDIUMCATALOGEDLine: 220
_run_single_use: python-broad-except (1)MEDIUMCATALOGEDLine: 231
_run_orphaned: python-broad-except (1)MEDIUMCATALOGEDLine: 242
_run_signatures: python-broad-except (1)MEDIUMCATALOGEDLine: 257
_run_passthroughs: python-broad-except (1)MEDIUMCATALOGEDLine: 267
_run_dead_code: python-broad-except (1)MEDIUMCATALOGEDLine: 282
tests/test_python_integration.py
Health: 98.7  ·  309 lines
PatternSeverityFix TypeLines
python_unused_import (8)MEDIUMDETERMINISTICLines: 264, 265, 266, 267, 268, 269, 270, 271
© 2026 truemend
22
truemend
Detailed Findings
tests/fixtures/dart/empty_catch_multiline.dart
Health: 69.8  ·  62 lines
PatternSeverityFix TypeLines
badEmptyCommentOnly: dart_empty_catch_multiline (1)HIGHCATALOGEDLine: 14
badBlankBody: dart_empty_catch_multiline (1)HIGHCATALOGEDLine: 22
badMultipleComments: dart_empty_catch_multiline (1)HIGHCATALOGEDLine: 30
singleLineEmpty: dart_empty_catch (1)HIGHCATALOGEDLine: 38
onTypeCatch: dart_empty_catch_multiline (1)HIGHCATALOGEDLine: 44
onTypeOnly: dart_empty_catch_multiline (1)HIGHCATALOGEDLine: 52
closingBraceCatch: dart_empty_catch (1)HIGHCATALOGEDLine: 60
tests/test_traceability_phases.py
Health: 96.4  ·  548 lines
PatternSeverityFix TypeLines
python_unused_import (4)MEDIUMDETERMINISTICLines: 9, 13, 15
_make_trace: function-too-long (1)MEDIUMCATALOGEDLine: 46
test_page_renders_with_data: function-too-long (1)MEDIUMCATALOGEDLine: 425
test_serialize_includes_design_and_review: function-too-long (1)MEDIUMCATALOGEDLine: 480
src/intelligence/review_handoff.py
Health: 86.7  ·  703 lines
PatternSeverityFix TypeLines
_detect_project_name: deep-nesting (1)HIGHCATALOGEDLine: 318
python_unused_import (2)MEDIUMDETERMINISTICLines: 14, 15
_safe_run_detectors: python-broad-except (1)MEDIUMCATALOGEDLine: 263
prepare_review_packet: function-too-long (1)MEDIUMCATALOGEDLine: 273
validate_ingest_input: function-too-long (1)MEDIUMCATALOGEDLine: 377
ingest_review_results: function-too-long (1)MEDIUMCATALOGEDLine: 497
© 2026 truemend
23
truemend
Detailed Findings
src/truemend_metrics.py
Health: 91.9  ·  1449 lines
PatternSeverityFix TypeLines
python_unused_import (5)MEDIUMDETERMINISTICLines: 14, 17, 30, 1442
_parse_and_find_functions: function-too-long (1)MEDIUMCATALOGEDLine: 550
_find_source_files_in_dir: function-too-long (1)MEDIUMCATALOGEDLine: 867
tests/fixtures/dart/deep_nesting.dart
Health: 42.6  ·  35 lines
PatternSeverityFix TypeLines
deeplyNested: deep-nesting (1)HIGHCATALOGEDLine: 3
deeplyNested: dart_avoid_dynamic (1)MEDIUMCATALOGEDLine: 3
deeplyNested: dart_print_call (4)LOWDETERMINISTICLines: 12, 15, 18, 22
shallowFunction: dart_print_call (1)LOWDETERMINISTICLine: 32
tests/test_react_patterns.py
Health: 98.4  ·  598 lines
PatternSeverityFix TypeLines
_find_function_node: deep-nesting (1)HIGHCATALOGEDLine: 53
python_unused_import (6)MEDIUMDETERMINISTICLines: 9, 10, 12, 14, 17
src/detection/semantic/completeness_detector.py
Health: 78.5  ·  712 lines
PatternSeverityFix TypeLines
detect_feature_completeness: function-too-long (1)MEDIUMCATALOGEDLine: 103
detect_api_contract_drift: function-too-long (1)MEDIUMCATALOGEDLine: 367
detect_config_consistency: function-too-long (1)MEDIUMCATALOGEDLine: 426
detect_serialization_fidelity: function-too-long (1)MEDIUMCATALOGEDLine: 517
detect_dead_exports: function-too-long (1)MEDIUMCATALOGEDLine: 605
python_unused_import (1)MEDIUMDETERMINISTICLine: 14
© 2026 truemend
24
truemend
Detailed Findings
tests/fixtures/dart/known_bad.dart
Health: 65.8  ·  21 lines
PatternSeverityFix TypeLines
processData: dart_empty_catch_multiline (1)HIGHCATALOGEDLine: 12
processData: dart_avoid_dynamic (1)MEDIUMCATALOGEDLine: 6
dart_unused_import (1)MEDIUMDETERMINISTICLine: 1
processData: dart_print_call (1)LOWDETERMINISTICLine: 7
processData: dart_debugPrint_call (1)LOWDETERMINISTICLine: 8
processData: dart_string_concat (1)LOWDETERMINISTICLine: 17
src/detection/semantic/concurrency_detector.py
Health: 69.2  ·  556 lines
PatternSeverityFix TypeLines
_function_has_list_dict_mutation_outside_with: deep-nesting (1)HIGHCATALOGEDLine: 77
detect_thread_safety: deep-nesting (1)HIGHCATALOGEDLine: 140
_function_has_begin_or_begin_nested: deep-nesting (1)HIGHCATALOGEDLine: 359
_function_has_list_dict_mutation_outside_with: function-too-long (1)MEDIUMCATALOGEDLine: 77
detect_thread_safety: function-too-long (1)MEDIUMCATALOGEDLine: 140
detect_transaction_boundary: function-too-long (1)MEDIUMCATALOGEDLine: 374
tests/test_definitions_updater.py
Health: 99.2  ·  433 lines
PatternSeverityFix TypeLines
python_unused_import (6)MEDIUMDETERMINISTICLines: 9, 10, 11, 17, 27
© 2026 truemend
25
truemend
Detailed Findings
src/detection/semantic/runtime_detector.py
Health: 66.0  ·  541 lines
PatternSeverityFix TypeLines
detect_runtime_resilience: function-too-long (1)MEDIUMCATALOGEDLine: 56
detect_null_safety: function-too-long (1)MEDIUMCATALOGEDLine: 160
detect_resource_lifecycle: function-too-long (1)MEDIUMCATALOGEDLine: 256
detect_timeout_discipline: function-too-long (1)MEDIUMCATALOGEDLine: 352
detect_memory_pressure: function-too-long (1)MEDIUMCATALOGEDLine: 440
python_unused_import (1)MEDIUMDETERMINISTICLine: 10
tests/test_mcp_tools_ext.py
Health: 98.8  ·  149 lines
PatternSeverityFix TypeLines
python_unused_import (6)MEDIUMDETERMINISTICLines: 4, 5, 10
src/detection/semantic/__init__.py
Health: 100.0  ·  43 lines
PatternSeverityFix TypeLines
python_unused_import (5)MEDIUMDETERMINISTICLines: 29, 30, 31, 32, 33
250 additional files with findings not shown. Run truemend analyze --detail for the complete list.
© 2026 truemend
26
truemend
Finding Details
Top Findings

Most critical findings in detail

Each finding includes function metrics, evidence, and recommended remediation.

#1   __file_level__  ·  tests/fixtures/nextjs_project/components/bad_component.tsx:3
CRITICAL
cataloged refactor
dangerouslySetInnerHTML without sanitization — XSS risk
1
Complexity
0
Nesting
0
Lines
1
Patterns
Recommended:
Review and address nextjs-dangerouslysetinnerhtml-user-input
#2   mutable_default  ·  tests/fixtures/python/known_bad.py:9
CRITICAL
structural rewrite
eval() — arbitrary code execution risk. Replace with ast.literal_eval(), json.loads(), or a proper parser
1
Complexity
1
Nesting
14
Lines
8
Patterns
Recommended:
Use ast.literal_eval for safe evaluation or refactor to avoid eval entirely
#3   mutable_default  ·  tests/fixtures/python/known_bad.py:10
CRITICAL
structural rewrite
exec() — arbitrary code execution risk
1
Complexity
1
Nesting
14
Lines
8
Patterns
Recommended:
Refactor to avoid exec(); use structured alternatives
© 2026 truemend
27
truemend
Finding Details
#4   _try_type_safety  ·  src/intelligence/subjective_review.py:1145
HIGH
cataloged refactor
Nesting depth 5 > 4
6
Complexity
5
Nesting
23
Lines
1
Patterns
Recommended:
Extract nested blocks into helper functions or use early returns to flatten
#5   _try_except_patterns  ·  src/intelligence/subjective_review.py:1318
HIGH
cataloged refactor
Nesting depth 5 > 4
6
Complexity
5
Nesting
24
Lines
1
Patterns
Recommended:
Extract nested blocks into helper functions or use early returns to flatten
#6   badEmptyCommentOnly  ·  tests/fixtures/dart/empty_catch_multiline.dart:14
HIGH
cataloged refactor
Empty catch block — silently swallows exceptions, hiding errors
2
Complexity
1
Nesting
7
Lines
1
Patterns
Recommended:
Review and address dart_empty_catch_multiline
© 2026 truemend
28
truemend
Finding Details
#7   badBlankBody  ·  tests/fixtures/dart/empty_catch_multiline.dart:22
HIGH
cataloged refactor
Empty catch block — silently swallows exceptions, hiding errors
2
Complexity
1
Nesting
7
Lines
1
Patterns
Recommended:
Review and address dart_empty_catch_multiline
#8   badMultipleComments  ·  tests/fixtures/dart/empty_catch_multiline.dart:30
HIGH
cataloged refactor
Empty catch block — silently swallows exceptions, hiding errors
2
Complexity
1
Nesting
8
Lines
1
Patterns
Recommended:
Review and address dart_empty_catch_multiline
#9   singleLineEmpty  ·  tests/fixtures/dart/empty_catch_multiline.dart:38
HIGH
cataloged refactor
Empty catch block — silently swallows exceptions, hiding errors
2
Complexity
1
Nesting
4
Lines
1
Patterns
Recommended:
Review and address dart_empty_catch
+ 839 additional findings in full report
© 2026 truemend
29
truemend
Improvement Roadmap
Recommended Action Plan

Three-phase improvement roadmap

Fixes are classified into three tiers by execution method. Phase 1 is immediate and automated. Phase 2 requires constrained LLM assistance. Phase 3 requires human architectural judgment. The Quick Wins summary at the top shows where to start.

Start Here — Quick Wins
558 fixes · Highest ROI

Start here. These 558 deterministic fixes can be applied immediately with truemend fix at zero cost and zero risk.

python_unused_import479 fixes
python-print-production14 fixes
console-log-production12 fixes
dart_print_call10 fixes
Phase 1 — Deterministic Fixes
558 fixes · Automated · $0 cost
python_unused_import (×479)
Unused import: from src.cli_commands import dispatch_subcommand, determine_mode
219 files
python-print-production (×14)
print() call left in production code
3 files
console-log-production (×12)
console.log left in production code
6 files
dart_print_call (×10)
Remove print() call before production
3 files
tsx_unused_import (×9)
Unused import: import React from "react";
8 files
typescript_unused_import (×9)
Unused import: import { fetchData, processResult } from "./api";
5 files
try-catch-rethrow (×7)
Try-catch that catches and immediately re-throws
2 files
csharp_unused_import (×5)
Unused import: using System;
2 files
redundant-return-await (×3)
return await where await is unnecessary
2 files
debugger-statement (×2)
Debugger statement left in code
2 files
double-negation (×2)
!! to convert to boolean — Boolean() is clearer
2 files
dart_debugPrint_call
Remove debugPrint() call before production
1 file
dart_string_concat
String concatenation with + instead of interpolation — prefer ${} or $variable
1 file
dart_unused_import
Unused import: import 'dart:io';
1 file
python-breakpoint
breakpoint() call left in code
1 file
python-mutable-default
Mutable default argument — shared across calls
1 file
go_unused_import
Unused import: "sync"
1 file
Phase 2 — Cataloged Refactors
288 fixes · LLM-guided
function-too-long (×189)
Function is 126 lines (> 15 dynamic threshold)
64 files
python-broad-except (×44)
Catching bare Exception — too broad
9 files
deep-nesting (×29)
Nesting depth 5 > 4
16 files
any-type-usage (×7)
Explicit 'any' type — defeats type safety
3 files
dart_empty_catch_multiline (×6)
Empty catch block — silently swallows exceptions, hiding errors
2 files
dart_avoid_dynamic (×3)
dynamic type annotation — prefer explicit types for safety and tooling support
3 files
dart_empty_catch (×2)
Empty catch block — silently swallows exceptions, hiding errors
1 file
nextjs-passing-non-serializable-props
Passing functions, classes, Date objects, or other non-serializable values from Server Component to Client Component — will cause runtime serialization error
1 file
react-object-literal-jsx-prop
Object/array literal in JSX prop — creates new reference every render, breaks React.memo and causes unnecessary child re-renders
1 file
nextjs-dangerouslysetinnerhtml-user-input
dangerouslySetInnerHTML without sanitization — XSS risk
1 file
bash_cd_no_check
cd without error checking can cause commands to run in the wrong directory
1 file
python-bare-except
Bare except — catches all exceptions including SystemExit
1 file
python-type-ignore-bare
Bare # type: ignore without error code
1 file
excessive-usestate
8 useState hooks (> 5)
1 file
nextjs-no-revalidation-strategy
fetch() call in Server Component without revalidation options — uses default cache behavior which may serve stale data indefinitely or never cache
1 file
Phase 3 — Structural Review
2 findings · Human decision required
python-eval
eval() — arbitrary code execution risk. Replace with ast.literal_eval(), json.loads(), or a proper parser
1 file
python-exec
exec() — arbitrary code execution risk
1 file
Applying all Phase 1 fixes immediately removes 558 anti-patterns — with zero risk and zero cost.
© 2026 truemend
30