Qodo AntiSlop scan found 34 issues across 10 recent PRs

Hey team,

A user recently scanned this repo using Qodo's AntiSlop Scanner. The analysis reviewed 10 recent PRs and found 34 issues, all confirmed to still exist on main.

Here's one example:

Token leaks via global axios interceptor

Severity: action_required | Category: security

The new global axios request interceptor attaches the stored auth token to every axios request without restricting to same-origin or /api paths, so any future absolute/external axios call would receive the user's auth token.

How to validate: Make an axios request to any external URL and inspect the outgoing headers for the auth token.

Agent prompt to fix:

In the global axios request interceptor, restrict token attachment to same-origin requests or requests matching a /api path prefix. Do not attach auth tokens to absolute URLs pointing to external domains.

---

Other confirmed issues

#	Title	Category	PR
1	SQL logout does not rotate token (updates password field instead)	correctness	#1079
2	Nondeterministic route-file selection (temperature=0.5)	reliability	#1054
3	Negative created_lines counter corrupts line tracking	correctness	#576

30 additional findings (including suspected issues) are available in the full report.

Enjoy!

P.S. Qodo offers free tooling for open-source maintainers: https://www.qodo.ai/solutions/open-source/

cc @LeonOstrez