test: add multiple bad code files to trigger Quality Gate failure

src/utils/bugs.js

@@ -0,0 +1,55 @@
+// Bugs and potential runtime errors
+
+// Bug: Potential null pointer exception
+export function processUser(user) {
+  return user.name.toUpperCase() // No null check
+}
+
+// Bug: Array access without bounds check
+export function getFirstItem(items) {
+  return items[0].value // Could be undefined
+}
+
+// Bug: Division by zero
+export function calculateAverage(numbers) {
+  const sum = numbers.reduce((a, b) => a + b, 0)
+  return sum / numbers.length // Could divide by zero if array is empty
+}
+
+// Bug: Infinite loop potential
+export function processItems(items) {
+  let index = 0
+  while (index < items.length) {
+    // Missing index increment - infinite loop!
+    console.log(items[index])
+  }
+}
+
+// Bug: Type coercion issue
+export function compareValues(a, b) {
+  return a == b // Should use === for strict comparison
+}
+
+// Bug: Missing return statement
+export function getResult(data) {
+  if (data) {
+    return "success"
+  }
+  // No return for else case
+}
+
+// Bug: Uninitialized variable usage
+export function calculateTotal(items) {
+  let total
+  items.forEach(item => {
+    total += item.price // total is undefined initially
+  })
+  return total
+}
+
+// Bug: Async/await without error handling
+export async function fetchUserData(userId) {
+  const response = await fetch(`/api/users/${userId}`)
+  return response.json() // No error handling
+}
+

src/utils/codeSmells.js

@@ -0,0 +1,87 @@
+// Code smells and maintainability issues
+
+// Code Smell: Unused variables
+const unusedVar1 = "never used"
+const unusedVar2 = 42
+const unusedVar3 = { key: "value" }
+
+// Code Smell: Too many parameters (should be max 7)
+export function processUserData(
+  firstName,
+  lastName,
+  email,
+  phone,
+  address,
+  city,
+  state,
+  zipCode,
+  country,
+  dateOfBirth,
+  gender,
+  occupation
+) {
+  return `${firstName} ${lastName}`
+}
+
+// Code Smell: Too complex function (high cyclomatic complexity)
+export function complexLogic(a, b, c, d, e) {
+  if (a > 0) {
+    if (b < 10) {
+      if (c === "test") {
+        if (d !== null) {
+          if (e.length > 5) {
+            if (a + b > 15) {
+              if (c.includes("x")) {
+                if (d.value > 100) {
+                  if (e[0] === "a") {
+                    return "too nested"
+                  } else {
+                    return "else branch"
+                  }
+                } else {
+                  return "another else"
+                }
+              }
+            }
+          }
+        }
+      }
+    }
+  }
+  return "default"
+}
+
+// Code Smell: Empty catch block
+export function riskyOperation() {
+  try {
+    dangerousFunction()
+  } catch (error) {
+    // Silently ignore errors - bad practice
+  }
+}
+
+// Code Smell: Magic numbers
+export function calculatePrice(quantity) {
+  return quantity * 19.99 // What is 19.99?
+}
+
+// Code Smell: Long function (should be < 50 lines)
+export function veryLongFunction() {
+  const step1 = "do something"
+  const step2 = "do something else"
+  const step3 = "do another thing"
+  const step4 = "continue processing"
+  const step5 = "more processing"
+  const step6 = "even more"
+  const step7 = "keep going"
+  const step8 = "almost done"
+  const step9 = "final step"
+  const step10 = "one more"
+  const step11 = "another one"
+  const step12 = "last step"
+  const step13 = "really last"
+  const step14 = "final"
+  const step15 = "done"
+  return step1 + step2 + step3 + step4 + step5 + step6 + step7 + step8 + step9 + step10 + step11 + step12 + step13 + step14 + step15
+}
+

src/utils/duplication.js

@@ -0,0 +1,54 @@
+// Code duplication issues
+
+// Duplicate code block 1
+export function formatName1(first, last) {
+  const trimmedFirst = first.trim()
+  const trimmedLast = last.trim()
+  const capitalizedFirst = trimmedFirst.charAt(0).toUpperCase() + trimmedFirst.slice(1)
+  const capitalizedLast = trimmedLast.charAt(0).toUpperCase() + trimmedLast.slice(1)
+  return `${capitalizedFirst} ${capitalizedLast}`
+}
+
+// Duplicate code block 2 (same logic as formatName1)
+export function formatName2(first, last) {
+  const trimmedFirst = first.trim()
+  const trimmedLast = last.trim()
+  const capitalizedFirst = trimmedFirst.charAt(0).toUpperCase() + trimmedFirst.slice(1)
+  const capitalizedLast = trimmedLast.charAt(0).toUpperCase() + trimmedLast.slice(1)
+  return `${capitalizedFirst} ${capitalizedLast}`
+}
+
+// Duplicate code block 3 (same logic again)
+export function formatName3(first, last) {
+  const trimmedFirst = first.trim()
+  const trimmedLast = last.trim()
+  const capitalizedFirst = trimmedFirst.charAt(0).toUpperCase() + trimmedFirst.slice(1)
+  const capitalizedLast = trimmedLast.charAt(0).toUpperCase() + trimmedLast.slice(1)
+  return `${capitalizedFirst} ${capitalizedLast}`
+}
+
+// Another duplicate pattern
+export function validateEmail1(email) {
+  if (!email) return false
+  if (email.length < 5) return false
+  if (!email.includes("@")) return false
+  if (!email.includes(".")) return false
+  return true
+}
+
+export function validateEmail2(email) {
+  if (!email) return false
+  if (email.length < 5) return false
+  if (!email.includes("@")) return false
+  if (!email.includes(".")) return false
+  return true
+}
+
+export function validateEmail3(email) {
+  if (!email) return false
+  if (email.length < 5) return false
+  if (!email.includes("@")) return false
+  if (!email.includes(".")) return false
+  return true
+}
+

src/utils/securityIssues.js

@@ -0,0 +1,32 @@
+// Security vulnerabilities to trigger Quality Gate failure
+
+// CRITICAL: Using eval() - Code injection vulnerability
+export function executeUserCode(userInput) {
+  return eval(userInput) // CRITICAL SECURITY ISSUE
+}
+
+// CRITICAL: Hardcoded secrets
+export const DATABASE_PASSWORD = "SuperSecret123!"
+export const API_SECRET_KEY = "FAKE_SECRET_KEY_FOR_TESTING_ONLY_12345"
+export const JWT_SECRET = "my-secret-key-12345"
+
+// CRITICAL: SQL Injection pattern
+export function getUserData(userId) {
+  const query = `SELECT * FROM users WHERE id = ${userId}` // SQL injection risk
+  return query
+}
+
+// CRITICAL: XSS vulnerability pattern
+export function renderUserContent(content) {
+  return `<div>${content}</div>` // XSS risk - no sanitization
+}
+
+// HIGH: Weak cryptography
+export function hashPassword(password) {
+  return btoa(password) // Base64 is not encryption!
+}
+
+// HIGH: Insecure random number generation
+export function generateToken() {
+  return Math.random().toString() // Not cryptographically secure
+}