PramanaSutra AI · QA & Release Audit · Markdown, HTML, JSON and SARIF are the same audit

unsafe-names

Generated 2026-11-06T00:00:00.000Z · schema 1.0.0 · tool 0.3.4

5files inspected

2test files

1CI workflows

1findings

1critical + high

Tests executed by PramanaSutra: NO (static scan only). Executed-test results count only when supplied as evidence.

Supplied test evidence

No evidence file was supplied. Counts on this page are not test results. The release gate cannot treat the suite as passed.

Evidence binding: none. No evidence file was supplied.

Findings at a glance

Severity	Rule	Where	Fix
high	`FOCUSED_TEST`	`tests/a & b (x) $y 'q'.test.js:2`	Remove .only / fit / fdescribe, then execute the full suite.

Findings

high Focused test found

Rule FOCUSED_TEST · confidence medium · observed · tests/a & b (x) $y 'q'.test.js:2

Why it matters: A focused test declaration may silently omit other tests.

Fix: Remove .only / fit / fdescribe, then execute the full suite.

Test files seen

tests/a & b (x) $y 'q'.test.js
tests/ünïcode 测试.test.js

CI workflows seen

.github/workflows/ci.yml

Release gate reasons

Found 1 blocking static finding(s) under policy "recommended".

Capabilities

Capability	State	What that means
staticAudit	`executed`	Source text was inspected with heuristic rules.
testExecution	`not-run`	not-run means this tool did not execute tests. evidence-supplied means an evidence file was attached.
browser	`not-supported`	No browser was launched.
securityScan	`not-run`	This is not a vulnerability scanner.
performanceTest	`not-run`	No load or timing test was run.
aiInference	`not-run`	The CLI did not call a model.

Limitations

Heuristic checks do not prove the absence of bugs or release readiness.
No target tests, security scanners, browser, load tests or deploy checks were run by this tool.
This report is decision support, not a compliance certification or legal advice.

Created by Vatsal Shah. Generated locally; nothing was sent over the network. Not a compliance certification, a security test, or a release authorization. Open report.md for the same audit in Markdown.