vercel/commerce

Canonical Vercel Next.js storefront demo (App Router + Server Components).

Upstream: nextjs_commerce
Pinned commit: 1df2cf6f6c935f4782eed27351fa18f276917a4d
Reference: main HEAD 2026-05-17
Scan run: 2026-05-18T14:49:23Z (brass commit 59486a28)

Headline metrics

Total findings: 0
Critical issues (top-N AI output): 0
Scan wall time (aggregate scanner-seconds): 3.6 s
Pysa cache size: 0.0 MB

Severity breakdown

Severity	Count
no severity data

Scanner contribution

Scanner	Findings	Share
no scanner data

Reproduce locally

git clone https://github.com/<owner>/nextjs_commerce.git
cd nextjs_commerce && git checkout 1df2cf6f6c935f4782eed27351fa18f276917a4d
brasscoders --offline scan .

Numbers from your local run may differ slightly (Python version, scanner version pins) — published baselines are recorded from the canonical CI environment (Ubuntu, Python 3.12, dev-pinned scanner versions). The ±20% findings tolerance and ≤50% wall-time tolerance are wide enough to absorb normal environment drift.