security: 166 Critical/High panic-attack findings need human triage (Track C)

[hyperpolymath]

panic-attack estate sweep — Track C tracking issue

panic-attack assail flagged the findings below in this repo on 2026-05-26. They are aggregated here for human triage rather than as individual PRs because each requires judgement (supply-chain pin choice, schema-design call, mutation-test gap, etc.).

PA001/PA007 UnsafeCode/UnsafeFFI findings are NOT in this list. Findings already suppressed in audits/assail-classifications.a2ml are also excluded.

Estate tracker: hyperpolymath/panic-attack#32.

AtomExhaustion (1 findings)

file:line list

### `CommandInjection` (5 findings)

file:line list

Critical asdf-augmenters/asdf-security-plugin/lib/utils.bash:? eval usage in asdf-augmenters/asdf-security-plugin/lib/utils.bash
Critical asdf-augmenters/asdf-plugin-collection/plugins/security/lib/utils.bash:? eval usage in asdf-augmenters/asdf-plugin-collection/plugins/security/lib/utils.bash
Critical rescript-ecosystem/rescript-string-power/tests/validate_structure.sh:? eval usage in rescript-ecosystem/rescript-string-power/tests/validate_structure.sh
Critical rescript-ecosystem/packages/core/compiler-source/.devcontainer/postCreate.sh:? eval usage in rescript-ecosystem/packages/core/compiler-source/.devcontainer/postCreate.sh

### `CryptoMisuse` (2 findings)

file:line list

High rescript-ecosystem/packages/core/compiler-source/cli/common/minisocket.js:? crypto.createHash('sha1') in rescript-ecosystem/packages/core/compiler-source/cli/common/minisocket.js — use 'sha256' or stronger

### `DynamicCodeExecution` (14 findings)

file:line list

Critical rescript-ecosystem/rescript/tests/tests/src/bdd.mjs:? eval() usage in rescript-ecosystem/rescript/tests/tests/src/bdd.mjs
Critical rescript-ecosystem/rescript/analysis/examples/larger-project/src/res_core.js:? eval() usage in rescript-ecosystem/rescript/analysis/examples/larger-project/src/res_core.js
Critical rescript-ecosystem/rescript/analysis/examples/larger-project/src/res_js_ffi.js:? eval() usage in rescript-ecosystem/rescript/analysis/examples/larger-project/src/res_js_ffi.js
Critical rescript-ecosystem/rescript/.yarn/releases/yarn-4.12.0.cjs:? eval() usage in rescript-ecosystem/rescript/.yarn/releases/yarn-4.12.0.cjs
High rescript-ecosystem/rescript/.yarn/releases/yarn-4.12.0.cjs:? DOM manipulation (innerHTML/document.write) in rescript-ecosystem/rescript/.yarn/releases/yarn-4.12.0.cjs
High rescript-ecosystem/rescript-tea/src/tea/Tea_Render.res.js:? DOM manipulation (innerHTML/document.write) in rescript-ecosystem/rescript-tea/src/tea/Tea_Render.res.js
High rescript-ecosystem/rescript-tea/lib/bs/src/tea/Tea_Render.res.js:? DOM manipulation (innerHTML/document.write) in rescript-ecosystem/rescript-tea/lib/bs/src/tea/Tea_Render.res.js
Critical rescript-ecosystem/packages/core/compiler-source/tests/tests/src/bdd.mjs:? eval() usage in rescript-ecosystem/packages/core/compiler-source/tests/tests/src/bdd.mjs
Critical rescript-ecosystem/packages/core/compiler-source/analysis/examples/larger-project/src/res_core.js:? eval() usage in rescript-ecosystem/packages/core/compiler-source/analysis/examples/larger-project/src/res_core.js
Critical rescript-ecosystem/packages/core/compiler-source/analysis/examples/larger-project/src/res_js_ffi.js:? eval() usage in rescript-ecosystem/packages/core/compiler-source/analysis/examples/larger-project/src/res_js_ffi.js
Critical rescript-ecosystem/packages/core/compiler-source/.yarn/releases/yarn-4.12.0.cjs:? eval() usage in rescript-ecosystem/packages/core/compiler-source/.yarn/releases/yarn-4.12.0.cjs
High rescript-ecosystem/packages/core/compiler-source/.yarn/releases/yarn-4.12.0.cjs:? DOM manipulation (innerHTML/document.write) in rescript-ecosystem/packages/core/compiler-source/.yarn/releases/yarn-4.12.0.cjs
High rescript-ecosystem/packages/bindings/tauri/examples/opsm-shell/app.js:? DOM manipulation (innerHTML/document.write) in rescript-ecosystem/packages/bindings/tauri/examples/opsm-shell/app.js

### `HardcodedSecret` (11 findings)

file:line list

Critical v-ecosystem/v-api-interfaces/v-vpn/src/vpn.v:? Possible hardcoded secret in v-ecosystem/v-api-interfaces/v-vpn/src/vpn.v
Critical rescript-ecosystem/idaptik-rescript13-staging/src/app/tools/PasswordCracker.res:? Possible hardcoded secret in rescript-ecosystem/idaptik-rescript13-staging/src/app/tools/PasswordCracker.res
Critical rescript-ecosystem/idaptik-rescript13-staging/src/app/devices/GlobalNetworkData.res:? Possible hardcoded secret in rescript-ecosystem/idaptik-rescript13-staging/src/app/devices/GlobalNetworkData.res
Critical rescript-ecosystem/rescript/tests/syntax_tests/data/idempotency/wildcards-world-ui/Config.res:? Possible hardcoded secret in rescript-ecosystem/rescript/tests/syntax_tests/data/idempotency/wildcards-world-ui/Config.res
Critical rescript-ecosystem/rescript/.yarn/releases/yarn-4.12.0.cjs:? Possible hardcoded secret in rescript-ecosystem/rescript/.yarn/releases/yarn-4.12.0.cjs
Critical rescript-ecosystem/packages/core/compiler-source/tests/syntax_tests/data/idempotency/wildcards-world-ui/Config.res:? Possible hardcoded secret in rescript-ecosystem/packages/core/compiler-source/tests/syntax_tests/data/idempotency/wildcards-world-
Critical rescript-ecosystem/packages/core/compiler-source/scripts/npmRelease.js:? Possible hardcoded secret in rescript-ecosystem/packages/core/compiler-source/scripts/npmRelease.js
Critical rescript-ecosystem/packages/core/compiler-source/.yarn/releases/yarn-4.12.0.cjs:? Possible hardcoded secret in rescript-ecosystem/packages/core/compiler-source/.yarn/releases/yarn-4.12.0.cjs
Critical rescript-ecosystem/packages/bindings/openapi/src/codegen/client.rs:? Possible hardcoded secret in rescript-ecosystem/packages/bindings/openapi/src/codegen/client.rs
Critical scaffoldia/registry/elixir/phoenix-service.ncl:? Possible hardcoded secret in scaffoldia/registry/elixir/phoenix-service.ncl

### `SupplyChain` (45 findings)

file:line list

High v-ecosystem/v-grpc/flake.nix:? flake.nix declares inputs without narHash, rev pinning, or sibling flake.lock — dependency revision is unpinned in v-ecosystem/v-g
High v-ecosystem/v_api_interfaces/v_rest/flake.nix:? flake.nix declares inputs without narHash, rev pinning, or sibling flake.lock — dependency revision is unpinned in v-ecosystem/v_a
High v-ecosystem/v_api_interfaces/v_grpc/flake.nix:? flake.nix declares inputs without narHash, rev pinning, or sibling flake.lock — dependency revision is unpinned in v-ecosystem/v_a
High v-ecosystem/v_api_interfaces/v_graphql/flake.nix:? flake.nix declares inputs without narHash, rev pinning, or sibling flake.lock — dependency revision is unpinned in v-ecosystem/v_a
High v-ecosystem/v-validator/flake.nix:? flake.nix declares inputs without narHash, rev pinning, or sibling flake.lock — dependency revision is unpinned in v-ecosystem/v-v
High v-ecosystem/v-middleware/flake.nix:? flake.nix declares inputs without narHash, rev pinning, or sibling flake.lock — dependency revision is unpinned in v-ecosystem/v-m
High v-ecosystem/v-telemetry/flake.nix:? flake.nix declares inputs without narHash, rev pinning, or sibling flake.lock — dependency revision is unpinned in v-ecosystem/v-t
High v-ecosystem/v-rest/flake.nix:? flake.nix declares inputs without narHash, rev pinning, or sibling flake.lock — dependency revision is unpinned in v-ecosystem/v-r
High v-ecosystem/v-benchmarks/flake.nix:? flake.nix declares inputs without narHash, rev pinning, or sibling flake.lock — dependency revision is unpinned in v-ecosystem/v-b
High v-ecosystem/v-graphql/flake.nix:? flake.nix declares inputs without narHash, rev pinning, or sibling flake.lock — dependency revision is unpinned in v-ecosystem/v-g
High v-ecosystem/v-idris-abi/flake.nix:? flake.nix declares inputs without narHash, rev pinning, or sibling flake.lock — dependency revision is unpinned in v-ecosystem/v-i
High v-ecosystem/v-zig-ffi/flake.nix:? flake.nix declares inputs without narHash, rev pinning, or sibling flake.lock — dependency revision is unpinned in v-ecosystem/v-z
High affinescript-ecosystem/rattlescript/flake.nix:? flake.nix declares inputs without narHash, rev pinning, or sibling flake.lock — dependency revision is unpinned in affinescript-ec
High affinescript-ecosystem/affinescript-vite/flake.nix:? flake.nix declares inputs without narHash, rev pinning, or sibling flake.lock — dependency revision is unpinned in affinescript-ec
High affinescript-ecosystem/affinescriptiser/flake.nix:? flake.nix declares inputs without narHash, rev pinning, or sibling flake.lock — dependency revision is unpinned in affinescript-ec
High aggregate-library/flake.nix:? flake.nix declares inputs without narHash, rev pinning, or sibling flake.lock — dependency revision is unpinned in aggregate-libra
High rescript-ecosystem/idaptik-rescript13-staging/flake.nix:? flake.nix declares inputs without narHash, rev pinning, or sibling flake.lock — dependency revision is unpinned in rescript-ecosys
High rescript-ecosystem/rescript-evangeliser/flake.nix:? flake.nix declares inputs without narHash, rev pinning, or sibling flake.lock — dependency revision is unpinned in rescript-ecosys
High rescript-ecosystem/rescript-vite/flake.nix:? flake.nix declares inputs without narHash, rev pinning, or sibling flake.lock — dependency revision is unpinned in rescript-ecosys
High rescript-ecosystem/rescript-tea/flake.nix:? flake.nix declares inputs without narHash, rev pinning, or sibling flake.lock — dependency revision is unpinned in rescript-ecosys
High czech-file-knife/flake.nix:? flake.nix declares inputs without narHash, rev pinning, or sibling flake.lock — dependency revision is unpinned in czech-file-knif
High iser-tools/idrisiser/flake.nix:? flake.nix declares inputs without narHash, rev pinning, or sibling flake.lock — dependency revision is unpinned in iser-tools/idri
High iser-tools/lustreiser/flake.nix:? flake.nix declares inputs without narHash, rev pinning, or sibling flake.lock — dependency revision is unpinned in iser-tools/lust
High iser-tools/otpiser/flake.nix:? flake.nix declares inputs without narHash, rev pinning, or sibling flake.lock — dependency revision is unpinned in iser-tools/otpi
High iser-tools/anvomidaviser/flake.nix:? flake.nix declares inputs without narHash, rev pinning, or sibling flake.lock — dependency revision is unpinned in iser-tools/anvo
High iser-tools/halideiser/flake.nix:? flake.nix declares inputs without narHash, rev pinning, or sibling flake.lock — dependency revision is unpinned in iser-tools/hali
High iser-tools/wokelangiser/flake.nix:? flake.nix declares inputs without narHash, rev pinning, or sibling flake.lock — dependency revision is unpinned in iser-tools/woke
High iser-tools/bqniser/flake.nix:? flake.nix declares inputs without narHash, rev pinning, or sibling flake.lock — dependency revision is unpinned in iser-tools/bqni
High iser-tools/oblibeniser/flake.nix:? flake.nix declares inputs without narHash, rev pinning, or sibling flake.lock — dependency revision is unpinned in iser-tools/obli
High iser-tools/betlangiser/flake.nix:? flake.nix declares inputs without narHash, rev pinning, or sibling flake.lock — dependency revision is unpinned in iser-tools/betl
High iser-tools/mylangiser/flake.nix:? flake.nix declares inputs without narHash, rev pinning, or sibling flake.lock — dependency revision is unpinned in iser-tools/myla
High iser-tools/atsiser/flake.nix:? flake.nix declares inputs without narHash, rev pinning, or sibling flake.lock — dependency revision is unpinned in iser-tools/atsi
High iser-tools/ponyiser/flake.nix:? flake.nix declares inputs without narHash, rev pinning, or sibling flake.lock — dependency revision is unpinned in iser-tools/pony
High iser-tools/phronesiser/flake.nix:? flake.nix declares inputs without narHash, rev pinning, or sibling flake.lock — dependency revision is unpinned in iser-tools/phro
High iser-tools/ephapaxiser/flake.nix:? flake.nix declares inputs without narHash, rev pinning, or sibling flake.lock — dependency revision is unpinned in iser-tools/epha
High iser-tools/dafniser/flake.nix:? flake.nix declares inputs without narHash, rev pinning, or sibling flake.lock — dependency revision is unpinned in iser-tools/dafn
High iser-tools/futharkiser/flake.nix:? flake.nix declares inputs without narHash, rev pinning, or sibling flake.lock — dependency revision is unpinned in iser-tools/futh
High iser-tools/julianiser/flake.nix:? flake.nix declares inputs without narHash, rev pinning, or sibling flake.lock — dependency revision is unpinned in iser-tools/juli
High iser-tools/nimiser/flake.nix:? flake.nix declares inputs without narHash, rev pinning, or sibling flake.lock — dependency revision is unpinned in iser-tools/nimi
High iser-tools/iseriser/flake.nix:? flake.nix declares inputs without narHash, rev pinning, or sibling flake.lock — dependency revision is unpinned in iser-tools/iser
High iser-tools/tlaiser/flake.nix:? flake.nix declares inputs without narHash, rev pinning, or sibling flake.lock — dependency revision is unpinned in iser-tools/tlai
High iser-tools/alloyiser/flake.nix:? flake.nix declares inputs without narHash, rev pinning, or sibling flake.lock — dependency revision is unpinned in iser-tools/allo
High iser-tools/eclexiaiser/flake.nix:? flake.nix declares inputs without narHash, rev pinning, or sibling flake.lock — dependency revision is unpinned in iser-tools/ecle
High iser-tools/chapeliser/flake.nix:? flake.nix declares inputs without narHash, rev pinning, or sibling flake.lock — dependency revision is unpinned in iser-tools/chap

### `UnboundedAllocation` (52 findings)

file:line list

Critical affinescript-ecosystem/rattlescript/affinescript/tools/affine-pkg/src/lockfile.rs:? Potential unbounded allocation pattern detected in affinescript-ecosystem/rattlescript/affinescript/tools/affine-pkg/src/lockfile.
Critical affinescript-ecosystem/rattlescript/affinescript/tools/affine-pkg/src/manifest.rs:? Potential unbounded allocation pattern detected in affinescript-ecosystem/rattlescript/affinescript/tools/affine-pkg/src/manifest.
Critical affinescript-ecosystem/rattlescript/affinescript/tools/affine-pkg/src/config.rs:? Potential unbounded allocation pattern detected in affinescript-ecosystem/rattlescript/affinescript/tools/affine-pkg/src/config.rs
Critical affinescript-ecosystem/affinescriptiser/src/codegen/parser.rs:? Potential unbounded allocation pattern detected in affinescript-ecosystem/affinescriptiser/src/codegen/parser.rs
Critical asdf-augmenters/asdf-plugin-configurator/src/config.rs:? Potential unbounded allocation pattern detected in asdf-augmenters/asdf-plugin-configurator/src/config.rs
Critical rescript-ecosystem/idaptik-rescript13-staging/idaptik-ums/src-gossamer/main.rs:? Potential unbounded allocation pattern detected in rescript-ecosystem/idaptik-rescript13-staging/idaptik-ums/src-gossamer/main.rs
Critical rescript-ecosystem/rescript-string-power/tools/string-union-gen/src/main.rs:? Potential unbounded allocation pattern detected in rescript-ecosystem/rescript-string-power/tools/string-union-gen/src/main.rs
Critical rescript-ecosystem/rescript/rewatch/src/helpers.rs:? Potential unbounded allocation pattern detected in rescript-ecosystem/rescript/rewatch/src/helpers.rs
Critical rescript-ecosystem/rescript/rewatch/src/format.rs:? Potential unbounded allocation pattern detected in rescript-ecosystem/rescript/rewatch/src/format.rs
Critical rescript-ecosystem/rescript/rewatch/src/config.rs:? Potential unbounded allocation pattern detected in rescript-ecosystem/rescript/rewatch/src/config.rs
Critical rescript-ecosystem/rescript/rewatch/src/lock.rs:? Potential unbounded allocation pattern detected in rescript-ecosystem/rescript/rewatch/src/lock.rs
Critical rescript-ecosystem/packages/core/compiler-source/rewatch/src/helpers.rs:? Potential unbounded allocation pattern detected in rescript-ecosystem/packages/core/compiler-source/rewatch/src/helpers.rs
Critical rescript-ecosystem/packages/core/compiler-source/rewatch/src/format.rs:? Potential unbounded allocation pattern detected in rescript-ecosystem/packages/core/compiler-source/rewatch/src/format.rs
Critical rescript-ecosystem/packages/core/compiler-source/rewatch/src/config.rs:? Potential unbounded allocation pattern detected in rescript-ecosystem/packages/core/compiler-source/rewatch/src/config.rs
Critical rescript-ecosystem/packages/core/compiler-source/rewatch/src/lock.rs:? Potential unbounded allocation pattern detected in rescript-ecosystem/packages/core/compiler-source/rewatch/src/lock.rs
Critical rescript-ecosystem/packages/bindings/openapi/src/parser.rs:? Potential unbounded allocation pattern detected in rescript-ecosystem/packages/bindings/openapi/src/parser.rs
Critical rescript-ecosystem/packages/bindings/openapi/src/codegen/mod.rs:? Potential unbounded allocation pattern detected in rescript-ecosystem/packages/bindings/openapi/src/codegen/mod.rs
Critical rescript-ecosystem/packages/bindings/grpc/protoc-gen-rescript/src/main.rs:? Potential unbounded allocation pattern detected in rescript-ecosystem/packages/bindings/grpc/protoc-gen-rescript/src/main.rs
Critical czech-file-knife/cfk-providers/src/local.rs:? Potential unbounded allocation pattern detected in czech-file-knife/cfk-providers/src/local.rs
Critical czech-file-knife/cfk-ios/src/domain.rs:? Potential unbounded allocation pattern detected in czech-file-knife/cfk-ios/src/domain.rs
Critical iser-tools/idrisiser/src/codegen/parser.rs:? Potential unbounded allocation pattern detected in iser-tools/idrisiser/src/codegen/parser.rs
Critical iser-tools/idrisiser/src/manifest/mod.rs:? Potential unbounded allocation pattern detected in iser-tools/idrisiser/src/manifest/mod.rs
Critical iser-tools/lustreiser/src/manifest/mod.rs:? Potential unbounded allocation pattern detected in iser-tools/lustreiser/src/manifest/mod.rs
Critical iser-tools/otpiser/src/manifest/mod.rs:? Potential unbounded allocation pattern detected in iser-tools/otpiser/src/manifest/mod.rs
Critical iser-tools/anvomidaviser/src/manifest/mod.rs:? Potential unbounded allocation pattern detected in iser-tools/anvomidaviser/src/manifest/mod.rs
Critical iser-tools/halideiser/src/manifest/mod.rs:? Potential unbounded allocation pattern detected in iser-tools/halideiser/src/manifest/mod.rs
Critical iser-tools/wokelangiser/src/codegen/parser.rs:? Potential unbounded allocation pattern detected in iser-tools/wokelangiser/src/codegen/parser.rs
Critical iser-tools/wokelangiser/src/manifest/mod.rs:? Potential unbounded allocation pattern detected in iser-tools/wokelangiser/src/manifest/mod.rs
Critical iser-tools/bqniser/src/manifest/mod.rs:? Potential unbounded allocation pattern detected in iser-tools/bqniser/src/manifest/mod.rs
Critical iser-tools/oblibeniser/src/manifest/mod.rs:? Potential unbounded allocation pattern detected in iser-tools/oblibeniser/src/manifest/mod.rs
Critical iser-tools/betlangiser/src/manifest/mod.rs:? Potential unbounded allocation pattern detected in iser-tools/betlangiser/src/manifest/mod.rs
Critical iser-tools/mylangiser/src/manifest/mod.rs:? Potential unbounded allocation pattern detected in iser-tools/mylangiser/src/manifest/mod.rs
Critical iser-tools/atsiser/src/codegen/parser.rs:? Potential unbounded allocation pattern detected in iser-tools/atsiser/src/codegen/parser.rs
Critical iser-tools/atsiser/src/manifest/mod.rs:? Potential unbounded allocation pattern detected in iser-tools/atsiser/src/manifest/mod.rs
Critical iser-tools/ponyiser/src/manifest/mod.rs:? Potential unbounded allocation pattern detected in iser-tools/ponyiser/src/manifest/mod.rs
Critical iser-tools/phronesiser/src/manifest/mod.rs:? Potential unbounded allocation pattern detected in iser-tools/phronesiser/src/manifest/mod.rs
Critical iser-tools/ephapaxiser/src/codegen/mod.rs:? Potential unbounded allocation pattern detected in iser-tools/ephapaxiser/src/codegen/mod.rs
Critical iser-tools/ephapaxiser/src/manifest/mod.rs:? Potential unbounded allocation pattern detected in iser-tools/ephapaxiser/src/manifest/mod.rs
Critical iser-tools/dafniser/src/manifest/mod.rs:? Potential unbounded allocation pattern detected in iser-tools/dafniser/src/manifest/mod.rs
Critical iser-tools/futharkiser/src/manifest/mod.rs:? Potential unbounded allocation pattern detected in iser-tools/futharkiser/src/manifest/mod.rs
Critical iser-tools/julianiser/src/codegen/mod.rs:? Potential unbounded allocation pattern detected in iser-tools/julianiser/src/codegen/mod.rs
Critical iser-tools/julianiser/src/manifest/mod.rs:? Potential unbounded allocation pattern detected in iser-tools/julianiser/src/manifest/mod.rs
Critical iser-tools/nimiser/src/manifest/mod.rs:? Potential unbounded allocation pattern detected in iser-tools/nimiser/src/manifest/mod.rs
Critical iser-tools/iseriser/src/manifest/mod.rs:? Potential unbounded allocation pattern detected in iser-tools/iseriser/src/manifest/mod.rs
Critical iser-tools/iseriser/src/scan/mod.rs:? Potential unbounded allocation pattern detected in iser-tools/iseriser/src/scan/mod.rs
Critical iser-tools/tlaiser/src/manifest/mod.rs:? Potential unbounded allocation pattern detected in iser-tools/tlaiser/src/manifest/mod.rs
Critical iser-tools/alloyiser/src/codegen/parser.rs:? Potential unbounded allocation pattern detected in iser-tools/alloyiser/src/codegen/parser.rs
Critical iser-tools/alloyiser/src/manifest/mod.rs:? Potential unbounded allocation pattern detected in iser-tools/alloyiser/src/manifest/mod.rs
Critical iser-tools/eclexiaiser/src/manifest/mod.rs:? Potential unbounded allocation pattern detected in iser-tools/eclexiaiser/src/manifest/mod.rs
Critical iser-tools/chapeliser/src/codegen/mod.rs:? Potential unbounded allocation pattern detected in iser-tools/chapeliser/src/codegen/mod.rs
Critical iser-tools/chapeliser/src/manifest/mod.rs:? Potential unbounded allocation pattern detected in iser-tools/chapeliser/src/manifest/mod.rs

### `UncheckedAllocation` (1 findings)

file:line list

### `UnsafeDeserialization` (21 findings)

file:line list

High rescript-ecosystem/idaptik-rescript13-staging/src/engine/utils/Storage.res:? 1 JSON.parseExn calls in rescript-ecosystem/idaptik-rescript13-staging/src/engine/utils/Storage.res (use JSON.parse for safe Resul
High rescript-ecosystem/idaptik-rescript13-staging/src/shared/DLCLoader.res:? 1 JSON.parseExn calls in rescript-ecosystem/idaptik-rescript13-staging/src/shared/DLCLoader.res (use JSON.parse for safe Result)
High rescript-ecosystem/idaptik-rescript13-staging/src/shared/UmsLevelLoader.res:? 1 JSON.parseExn calls in rescript-ecosystem/idaptik-rescript13-staging/src/shared/UmsLevelLoader.res (use JSON.parse for safe Resu
Critical rescript-ecosystem/rescript/analysis/src/Cache.ml:? Unsafe Marshal deserialization in rescript-ecosystem/rescript/analysis/src/Cache.ml
Critical rescript-ecosystem/rescript/analysis/reanalyze/src/ReanalyzeServer.ml:? Unsafe Marshal deserialization in rescript-ecosystem/rescript/analysis/reanalyze/src/ReanalyzeServer.ml
Critical rescript-ecosystem/rescript/compiler/ext/ext_marshal.ml:? Unsafe Marshal deserialization in rescript-ecosystem/rescript/compiler/ext/ext_marshal.ml
Critical rescript-ecosystem/rescript/compiler/core/js_cmj_format.ml:? Unsafe Marshal deserialization in rescript-ecosystem/rescript/compiler/core/js_cmj_format.ml
High rescript-ecosystem/rescript-tea/src/tea/Tea_Json.res:? 1 JSON.parseExn calls in rescript-ecosystem/rescript-tea/src/tea/Tea_Json.res (use JSON.parse for safe Result)
High rescript-ecosystem/rescript-tea/lib/bs/src/tea/Tea_Json.res:? 1 JSON.parseExn calls in rescript-ecosystem/rescript-tea/lib/bs/src/tea/Tea_Json.res (use JSON.parse for safe Result)
High rescript-ecosystem/rescript-tea/lib/ocaml/Tea_Json.res:? 1 JSON.parseExn calls in rescript-ecosystem/rescript-tea/lib/ocaml/Tea_Json.res (use JSON.parse for safe Result)
High rescript-ecosystem/packages/web/tea/src/Tea_Json.res:? 1 JSON.parseExn calls in rescript-ecosystem/packages/web/tea/src/Tea_Json.res (use JSON.parse for safe Result)
Critical rescript-ecosystem/packages/core/compiler-source/analysis/src/Cache.ml:? Unsafe Marshal deserialization in rescript-ecosystem/packages/core/compiler-source/analysis/src/Cache.ml
Critical rescript-ecosystem/packages/core/compiler-source/analysis/reanalyze/src/ReanalyzeServer.ml:? Unsafe Marshal deserialization in rescript-ecosystem/packages/core/compiler-source/analysis/reanalyze/src/ReanalyzeServer.ml
Critical rescript-ecosystem/packages/core/compiler-source/compiler/ext/ext_marshal.ml:? Unsafe Marshal deserialization in rescript-ecosystem/packages/core/compiler-source/compiler/ext/ext_marshal.ml
Critical rescript-ecosystem/packages/core/compiler-source/compiler/core/js_cmj_format.ml:? Unsafe Marshal deserialization in rescript-ecosystem/packages/core/compiler-source/compiler/core/js_cmj_format.ml
High rescript-ecosystem/packages/bindings/redis/src/Redis.res:? 1 JSON.parseExn calls in rescript-ecosystem/packages/bindings/redis/src/Redis.res (use JSON.parse for safe Result)
High rescript-ecosystem/packages/bindings/redis/examples/basic_usage.res:? 1 JSON.parseExn calls in rescript-ecosystem/packages/bindings/redis/examples/basic_usage.res (use JSON.parse for safe Result)
High rescript-ecosystem/packages/bindings/gossamer/src/bindings/Gossamer_Fs.res:? 1 JSON.parseExn calls in rescript-ecosystem/packages/bindings/gossamer/src/bindings/Gossamer_Fs.res (use JSON.parse for safe Resul
High rescript-ecosystem/packages/bindings/tauri/src/bindings/Tauri_Fs.res:? 1 JSON.parseExn calls in rescript-ecosystem/packages/bindings/tauri/src/bindings/Tauri_Fs.res (use JSON.parse for safe Result)
High deno-ecosystem/projects/deno-bunbridge/src/BunFile.res:? 1 JSON.parseExn calls in deno-ecosystem/projects/deno-bunbridge/src/BunFile.res (use JSON.parse for safe Result)

### `UnsafeTypeCoercion` (14 findings)

file:line list

Critical rescript-ecosystem/rescript/compiler/frontend/external_ffi_types.ml:? Obj.magic (unsafe type coercion) in rescript-ecosystem/rescript/compiler/frontend/external_ffi_types.ml
Critical rescript-ecosystem/rescript/compiler/ml/typedecl.ml:? Obj.magic (unsafe type coercion) in rescript-ecosystem/rescript/compiler/ml/typedecl.ml
Critical rescript-ecosystem/rescript/compiler/ml/ast_untagged_variants.ml:? Obj.magic (unsafe type coercion) in rescript-ecosystem/rescript/compiler/ml/ast_untagged_variants.ml
Critical rescript-ecosystem/rescript/compiler/ml/ctype.ml:? Obj.magic (unsafe type coercion) in rescript-ecosystem/rescript/compiler/ml/ctype.ml
Critical rescript-ecosystem/rescript/compiler/core/lam_compile.ml:? Obj.magic (unsafe type coercion) in rescript-ecosystem/rescript/compiler/core/lam_compile.ml
Critical rescript-ecosystem/rescript/compiler/core/lam.ml:? Obj.magic (unsafe type coercion) in rescript-ecosystem/rescript/compiler/core/lam.ml
Critical rescript-ecosystem/packages/core/compiler-source/compiler/ext/ext_obj.ml:? Obj.magic (unsafe type coercion) in rescript-ecosystem/packages/core/compiler-source/compiler/ext/ext_obj.ml
Critical rescript-ecosystem/packages/core/compiler-source/compiler/frontend/external_ffi_types.ml:? Obj.magic (unsafe type coercion) in rescript-ecosystem/packages/core/compiler-source/compiler/frontend/external_ffi_types.ml
Critical rescript-ecosystem/packages/core/compiler-source/compiler/ml/typedecl.ml:? Obj.magic (unsafe type coercion) in rescript-ecosystem/packages/core/compiler-source/compiler/ml/typedecl.ml
Critical rescript-ecosystem/packages/core/compiler-source/compiler/ml/ast_untagged_variants.ml:? Obj.magic (unsafe type coercion) in rescript-ecosystem/packages/core/compiler-source/compiler/ml/ast_untagged_variants.ml
Critical rescript-ecosystem/packages/core/compiler-source/compiler/ml/ctype.ml:? Obj.magic (unsafe type coercion) in rescript-ecosystem/packages/core/compiler-source/compiler/ml/ctype.ml
Critical rescript-ecosystem/packages/core/compiler-source/compiler/core/lam_compile.ml:? Obj.magic (unsafe type coercion) in rescript-ecosystem/packages/core/compiler-source/compiler/core/lam_compile.ml
Critical rescript-ecosystem/packages/core/compiler-source/compiler/core/lam.ml:? Obj.magic (unsafe type coercion) in rescript-ecosystem/packages/core/compiler-source/compiler/core/lam.ml

---

🤖 Discovered during the panic-attack estate sweep (2026-05-26). See hyperpolymath/panic-attack#32 for campaign tracker.