defaults▌

Detects fail-open security vulnerabilities where applications run insecurely with missing or weak default configuration. \n \n Identifies hardcoded secrets, weak authentication defaults, permissive access controls, and weak cryptography that allow apps to start and operate without proper configuration \n Distinguishes between fail-open vulnerabilities (app runs insecurely with defaults) and fail-secure patterns (app crashes if config is missing) \n Focuses on production-reachable code; automatic