SOW Attachment A10- EHBs SonarQube Baseline.pdf

Metrics Definition Industry Standard Bugs Number of bug issues About 15 - 50 bugs per 1,000 lines of code is acceptable (defects per KLOC).

Code Smells Total count of Code Smell issues (any characteristic in the source code of a program that possibly indicates a deeper problem)

N/A

Comment Lines Number of lines containing either comment or commented-out code

10-15%

Complexity The Cyclomatic complexity (a software metric used to indicate the complexity of a program) calculated based on the number of paths through the code.

1-10 A simple function without much risk 11-20 More complex, moderate risk 21-50 Complex high risk 51+ Unstable, very high risk

Coverage A mixture of Line coverage and Condition coverage. N/A Duplicated Blocks Number of duplicated blocks of lines N/A Duplicated Files Number of files involved in duplications N/A Duplicated Lines Number of lines involved in duplications N/A Duplicated Lines Density Higher than 10% introduces risk False Positive Issues Total count of issues marked False Positive N/A Lines Number of physical lines N/A Functions The number of functions in the code. N/A

Ncloc - Lines of code Number of physical lines that contain at least one character which is neither a whitespace nor a tabulation nor part of a comment

N/A

New Bugs Number of new bug issues N/A

New Code Smells Total count of Code Smell issues raised for the first time in the New Code period N/A

New Violations Total number of issues raised for the first time in the New Code period N/A

New Vulnerabilities Number of new vulnerabilities found in the code. N/A

Reliability Rating Measures the reliability of your code

A = 0 Bugs B = at least 1 Minor Bug C = at least 1 Major Bug D = at least 1 Critical Bug E = at least 1 Blocker Bug

Security Rating Code security rating

A = 0 Vulnerabilities B = at least 1 Minor Vulnerability C = at least 1 Major Vulnerability D = at least 1 Critical Vulnerability E = at least 1 Blocker Vulnerability

Sqale Rating (Maintainability Rating) Rating given to your project related to the value of your Technical Debt Ratio

<=5% of the time that has already gone into the application, the rating is A 6 to 10% the rating is a B 11 to 20% the rating is a C 21 to 50% the rating is a D > 50% is an E

Violations (Issues ) Total count of issues in all states N/A Vulnerabilities Number of vulnerabilities found in the code. N/A bugs 274 code smells 593 comment lines 5294 complexity 4202 duplicated blocks 67 duplicated files 15 duplicated lines 1764 duplicated lines density 6.1 false positive issues 0 functions 2053 lines 28900 ncloc 16900 new bugs new code smells new violations new vulnerabilities reliability rating 3 security rating 1 sqale rating 1 violations 867 vulnerabilities 0 bugs 372 code smells 784 comment lines 30248 complexity 9936 coverage 0.6 duplicated blocks 106 duplicated files 54 duplicated lines 7010 duplicated lines density 9.5 false positive issues 0 functions 6212 lines 73725 ncloc 37508 new bugs new code smells new violations new vulnerabilities reliability rating 3

SonareQube Project Key: gov.hrsa.BPHC-BHCMIS-PRS Product Name: BPHC-BHCMIS-PRS

SonareQube Project Key: gov.hrsa.BPHC-CIS2010 Product Name: BPHC-CIS2010 security rating 1 sqale rating 1 violations 1156 vulnerabilities 0 bugs 223 code smells 749 comment lines 5856 complexity 3759 duplicated blocks 95 duplicated files 35 duplicated lines 2503 duplicated lines density 9.8 false positive issues 0 functions 1605 lines 25434 ncloc 16423 new bugs new code smells new violations new vulnerabilities reliability rating 3 security rating 1 sqale rating 1 violations 972 vulnerabilities 0 bugs 62 code smells 351 comment lines 645 complexity 2793 duplicated blocks 72 duplicated files 18 duplicated lines 3211 duplicated lines density 22.5 false positive issues 0 functions 1397 lines 14279 ncloc 11701 new bugs new code smells new violations

Product Name: BPHC-CRS

SonareQube Project Key: gov.hrsa.BPHC-CSF Product Name: CSF

SonareQube Project Key: gov.hrsa.BPHC-CRS new vulnerabilities reliability rating 3 security rating 2 sqale rating 1 violations 414 vulnerabilities 1 bugs 156 code smells 523 comment lines 21408 complexity 4438 duplicated blocks 103 duplicated files 37 duplicated lines 14127 duplicated lines density 31.6 false positive issues 0 functions 2661 lines 44731 ncloc 19528 new bugs new code smells new violations new vulnerabilities reliability rating 3 security rating 1 sqale rating 1 violations 679 vulnerabilities 0 bugs 943 code smells 5018 comment lines 67504 complexity 29459 duplicated blocks 1581 duplicated files 371 duplicated lines 57218 duplicated lines density 27.2 false positive issues 0 functions 21866 lines 210254 ncloc 121568

SonareQube Project Key: gov.hrsa.BPHC-FAM Product Name: BPHC-FAM

SonareQube Project Key: gov.hrsa.BPHC-FTCA2010 Product Name: BPHC-FTCA2010 new bugs new code smells new violations new vulnerabilities reliability rating 5 security rating 1 sqale rating 1 violations 5961 vulnerabilities 0 bugs 890 code smells 1809 comment lines 10789 complexity 29031 coverage 2.5 duplicated blocks 439 duplicated files 176 duplicated lines 10034 duplicated lines density 6.8 false positive issues 0 functions 19787 lines 148023 ncloc 95024 new bugs new code smells new violations new vulnerabilities reliability rating 5 security rating 4 sqale rating 1 violations 2701 vulnerabilities 2 bugs 194 code smells 342 comment lines 13204 complexity 4047 coverage 6.5 duplicated blocks 154 duplicated files 33 duplicated lines 5526

SonareQube Project Key: gov.hrsa.BPHC-GAM2010 Product Name: BPHC-GAM2010

SonareQube Project Key: gov.hrsa.BPHC-POM Product Name: BPHC-POM duplicated lines density 19.1 false positive issues 0 functions 2787 lines 28926 ncloc 13221 new bugs new code smells new violations reliability rating 3 security rating 1 sqale rating 1 violations 536 vulnerabilities 0 bugs 742 code smells 1513 comment lines 3063 complexity 13179 coverage 0 duplicated blocks 610 duplicated files 123 duplicated lines 8322 duplicated lines density 13.9 false positive issues 0 functions 8400 lines 59685 ncloc 47582 new bugs new code smells new violations new vulnerabilities reliability rating 3 security rating 1 sqale rating 1 violations 2255 vulnerabilities 0 bugs 9 code smells 35 comment lines 173 complexity 112

SonareQube Project Key: gov.hrsa.BPHC-SCPEIS Product Name: SCPEIS

SonareQube Project Key: gov.hrsa.BPHC-SCP Product Name: BPHC-SCP duplicated blocks 18 duplicated files 3 duplicated lines 639 duplicated lines density 54.1 false positive issues 0 functions 9 lines 1181 ncloc 823 new bugs new code smells new violations new vulnerabilities reliability rating 3 security rating 1 sqale rating 1 violations 44 vulnerabilities 0 bugs 457 code smells 1408 comment lines 12777 complexity 6307 coverage 2.8 duplicated blocks 195 duplicated files 27 duplicated lines 5905 duplicated lines density 12 false positive issues 0 functions 2866 lines 49332 ncloc 31754 new bugs new code smells new violations new vulnerabilities reliability rating 5 security rating 1 sqale rating 1 violations 1865 vulnerabilities 0 bugs 0 Product Name: UDSOLAP

SonareQube Project Key: gov.hrsa.BPHC-UDS2010 Product Name: BPHC-UDS2010

SonareQube Project Key: gov.hrsa.BPHC-UDSOLAP code smells 0 duplicated blocks 0 duplicated files 0 duplicated lines 0 false positive issues 0 new bugs new code smells new violations new vulnerabilities reliability rating 1 security rating 1 sqale rating 1 violations 0 vulnerabilities 0 bugs 36 code smells 96 comment lines 111 complexity 194 duplicated blocks 9 duplicated files 5 duplicated lines 146 duplicated lines density 5.5 false positive issues 0 functions 154 lines 2668 ncloc 2026 new bugs new code smells new violations new vulnerabilities reliability rating 3 security rating 1 sqale rating 1 violations 132 vulnerabilities 0 bugs 3 code smells 8 comment lines 7

SonareQube Project Key: gov.hrsa.Enterprise-EDBD Product Name: Enterprise-EDBD

SonareQube Project Key: gov.hrsa.Enterprise-EHBEPS Product Name: EHBEPS complexity 34 duplicated blocks 0 duplicated files 0 duplicated lines 0 duplicated lines density 0 false positive issues 0 functions 9 lines 172 ncloc 140 new bugs new code smells new violations new vulnerabilities reliability rating 3 security rating 1 sqale rating 1 violations 11 vulnerabilities 0 bugs 595 code smells 2458 comment lines 6120 complexity 9998 coverage 0 duplicated blocks 869 duplicated files 104 duplicated lines 15189 duplicated lines density 18.3 false positive issues 0 functions 4559 lines 82818 ncloc 37959 new bugs new code smells new violations new vulnerabilities reliability rating 5 security rating 2 sqale rating 1 violations 3079 vulnerabilities 26

Product Name: Enterprise-LayoutService

SonareQube Project Key: gov.hrsa.Enterprise-PlatformServices

SonareQube Project Key: gov.hrsa.Enterprise-LayoutService bugs 24 code smells 131 comment lines 1325 complexity 909 duplicated blocks 0 duplicated files 0 duplicated lines 0 duplicated lines density 0 false positive issues 0 functions 607 lines 5573 ncloc 3548 new bugs new code smells new violations new vulnerabilities reliability rating 3 security rating 2 sqale rating 1 violations 173 vulnerabilities 18 bugs 22 code smells 240 comment lines 6588 complexity 2254 coverage 0 duplicated blocks 21 duplicated files 12 duplicated lines 762 duplicated lines density 4.3 false positive issues 0 functions 1524 lines 17654 ncloc 8940 new bugs new code smells new violations new vulnerabilities reliability rating 3 security rating 2 sqale rating 1 violations 273

Product Name: Enterprise-PlatformServices

SonareQube Project Key: gov.hrsa.Enterprise-STAR Product Name: Enterprise-STAR vulnerabilities 11 bugs 3453 code smells 7488 comment lines 20788 complexity 38937 coverage 1.5 duplicated blocks 3349 duplicated files 179 duplicated lines 45122 duplicated lines density 20 false positive issues 0 functions 11947 lines 225790 ncloc 150883 new bugs new code smells new violations new vulnerabilities reliability rating 5 security rating 5 sqale rating 1 violations 11248 vulnerabilities 307 bugs 1368 code smells 3097 comment lines 9106 complexity 16137 coverage 0 duplicated blocks 129 duplicated files 34 duplicated lines 3272 duplicated lines density 5.5 false positive issues 0 functions 5062 lines 59338 ncloc 40064 new bugs new code smells new violations

SonareQube Project Key: gov.hrsa.FORHP-PIMS Product Name: FORHP-PIMS

SonareQube Project Key: gov.hrsa.HAB-HAT Product Name: HAB-HAT reliability rating 5 security rating 4 sqale rating 1 violations 4569 vulnerabilities 104 bugs 1589 comment lines 13330 complexity 24749 coverage 0 duplicated blocks 214 duplicated files 88 duplicated lines 6014 duplicated lines density 5.5 false positive issues 0 functions 8629 lines 108956 ncloc 74503 new bugs new code smells new violations new vulnerabilities reliability rating 5 security rating 4 sqale rating 1 violations 5943 vulnerabilities 105 code smells 4249 bugs 1637 code smells 3908 comment lines 13940 complexity 24053 coverage 0 duplicated blocks 410 duplicated files 56 duplicated lines 19615 duplicated lines density 19 false positive issues 0 functions 8374

Product Name: HAB-PTR

SonareQube Project Key: gov.hrsa.HAB-HIVQM Product Name: HAB-HIVQM

SonareQube Project Key: gov.hrsa.HAB-PTR lines 103383 ncloc 66150 new bugs new code smells new violations new vulnerabilities reliability rating 5 security rating 4 sqale rating 1 violations 5651 vulnerabilities 106 bugs 2484 code smells 4875 comment lines 13788 complexity 30663 coverage 1.9 duplicated blocks 391 duplicated files 110 duplicated lines 9742 duplicated lines density 7.1 false positive issues 0 functions 10281 lines 138069 ncloc 97726 new bugs new code smells new violations new vulnerabilities reliability rating 5 security rating 4 sqale rating 1 violations 7515 vulnerabilities 156 bugs 0 code smells 38 comment lines 101 complexity 147 duplicated blocks 14 duplicated files 6

SonareQube Project Key: gov.hrsa.HAB-RSR Product Name: HAB-RSR

SonareQube Project Key: gov.hrsa.HAB-WindowsServices Product Name: HAB-WindowsServices duplicated lines 588 duplicated lines density 28 false positive issues 0 functions 72 lines 2103 ncloc 1381 new bugs new code smells new violations new vulnerabilities reliability rating 1 security rating 1 sqale rating 1 violations 38 vulnerabilities 0 bugs 1668 code smells 15428 comment lines 89527 complexity 52830 coverage 0 duplicated blocks 2357 duplicated files 165 duplicated lines 184745 duplicated lines density 62.5 false positive issues 0 functions 28160 lines 295808 ncloc 152992 new bugs new code smells new violations new vulnerabilities reliability rating 5 security rating 4 sqale rating 1 violations 17156 vulnerabilities 60 bugs 5571 code smells 11323

SonareQube Project Key: gov.hrsa.MCHB-TVISDataEntry Product Name: MCHB-TVISDataEntry

SonareQube Project Key:DataCollection Product Name: DataCollection comment lines 21872 complexity 49342 coverage 0 duplicated blocks 1498 duplicated files 177 duplicated lines 120784 duplicated lines density 62.2 false positive issues 0 functions 13527 lines 194315 ncloc 158690 new bugs new code smells new violations new vulnerabilities reliability rating 5 security rating 4 sqale rating 1 violations 17283 vulnerabilities 389 bugs 5571 code smells 11323 comment lines 21872 complexity 49342 coverage 0 duplicated blocks 1498 duplicated files 177 duplicated lines 120784 duplicated lines density 62.2 false positive issues 0 functions 13527 lines 194315 ncloc 158690 new bugs new code smells new violations new vulnerabilities reliability rating 5 security rating 4 sqale rating 1 violations 17283 vulnerabilities 389

Product Name: DataCollection SonareQube Project Key:DataCollection bugs 72 code smells 82 comment lines 1830 complexity 633 duplicated blocks 4 duplicated files 4 duplicated lines 130 duplicated lines density 2.4 false positive issues 0 functions 332 lines 5397 ncloc 3094 reliability rating 3.0}" security rating 2 sqale rating 1 violations 171 vulnerabilities 17 bugs 2836 code smells 10580 comment lines 26759 complexity 41413 coverage 0 duplicated blocks 7163 duplicated files 622 duplicated lines 166158 duplicated lines density 56.4 false positive issues 0 functions 12526 lines 294542 ncloc 218092 new bugs new code smells new violations new vulnerabilities reliability rating 3 security rating 1 sqale rating 1 violations 13416 vulnerabilities 0

Product Name: BHPr

SonareQube Project Key: DbAutomation Product Name: DbAutomation

SonareQube Project Key: gov.hrsa.BHW-BHPr bugs 962 code smells 2511 comment lines 20818 complexity 24785 coverage 0 duplicated blocks 1497 duplicated files 291 duplicated lines 29032 duplicated lines density 19.8 false positive issues 0 functions 14413 lines 146600 ncloc 106797 new bugs new code smells new violations new vulnerabilities reliability rating 3 security rating 1 sqale rating 1 violations 3473 vulnerabilities 0 bugs 24 code smells 29 comment lines 222 complexity 142 duplicated blocks 5 duplicated files 3 duplicated lines 165 duplicated lines density 11 false positive issues 0 functions 53 lines 1494 ncloc 1079 new bugs new code smells new violations new vulnerabilities reliability rating 3 security rating 1

SonareQube Project Key: gov.hrsa.BHW-BHPr2010 Product Name: BHPr2010

SonareQube Project Key: gov.hrsa.BHW-BHPrEIS Product Name: BHPrEIS violations 53 vulnerabilities 0 bugs 923 code smells 1774 comment lines 11993 complexity 10594 coverage 0.7 duplicated blocks 431 duplicated files 76 duplicated lines 8717 duplicated lines density 13.1 false positive issues 0 functions 4367 lines 66679 ncloc 44414 new bugs new code smells new violations new vulnerabilities reliability rating 5 security rating 1 sqale rating 1 violations 2697 vulnerabilities 0 bugs 16 code smells 80 comment lines 1504 complexity 547 duplicated blocks 17 duplicated files 3 duplicated lines 426 duplicated lines density 11.9 false positive issues 0 functions 426 lines 3592 ncloc 1838 new bugs new code smells

SonareQube Project Key: gov.hrsa.BHW-BPMH Product Name: BHW-BPMH

SonareQube Project Key: gov.hrsa.BHW-BPMHModern Product Name: BPMHModern new violations reliability rating 3 security rating 1 sqale rating 1 violations 96 vulnerabilities 0 bugs 0 code smells 6 comment lines 21 complexity 23 duplicated blocks 0 duplicated files 0 duplicated lines 0 duplicated lines density 0 false positive issues 0 functions 6 lines 252 ncloc 194 new bugs new code smells new violations new vulnerabilities reliability rating 1 security rating 1 sqale rating 1 violations 6 vulnerabilities 0 bugs 1828 code smells 5613 comment lines 11207 complexity 23487 duplicated blocks 4088 duplicated files 413 duplicated lines 122056 duplicated lines density 73.2 false positive issues 0 functions 5923 lines 166836

Product Name: BPMSEIS

SonareQube Project Key: gov.hrsa.BHW-DSLSSubmissions Product Name: DSLSSubmissions

SonareQube Project Key: gov.hrsa.BHW-BPMSEIS ncloc 130037 new bugs new code smells new violations new vulnerabilities reliability rating 3 security rating 1 sqale rating 1 violations 7441 vulnerabilities 0 bugs 37 code smells 153 comment lines 296 complexity 604 duplicated blocks 31 duplicated files 3 duplicated lines 497 duplicated lines density 8.8 false positive issues 0 functions 175 lines 5624 ncloc 4637 new bugs new code smells new violations new vulnerabilities reliability rating 3 security rating 1 sqale rating 1 violations 190 vulnerabilities 0 bugs 0 code smells 3 comment lines 91 complexity 9 duplicated blocks 0 duplicated files 0 duplicated lines 0 duplicated lines density 0

SonareQube Project Key: gov.hrsa.BPHC-BHCMISCrosscut Product Name: BPHC-BHCMISCrosscut

SonareQube Project Key: gov.hrsa.BPHC-AQR Product Name: AQR false positive issues 0 functions 9 lines 299 ncloc 151 new bugs new code smells new violations new vulnerabilities reliability rating 1 security rating 1 sqale rating 1 violations 3 vulnerabilities 0 bugs 151 code smells 637 comment lines 1384 complexity 4187 duplicated blocks 188 duplicated files 61 duplicated lines 8384 duplicated lines density 34.5 false positive issues 0 functions 2194 lines 24306 ncloc 19987 new bugs new code smells new violations new vulnerabilities reliability rating 3 security rating 1 sqale rating 1 violations 788 vulnerabilities 0 bugs 1 code smells 28 comment lines 69 complexity 94 duplicated blocks 0

Product Name: CSFEIS

SonareQube Project Key: gov.hrsa.BPHC-CIS Product Name: CIS

SonareQube Project Key: gov.hrsa.BPHC-CSFEIS duplicated files 0 duplicated lines 0 duplicated lines density 0 false positive issues 0 functions 5 lines 714 ncloc 551 new bugs new code smells new violations new vulnerabilities reliability rating 3 security rating 1 sqale rating 1 violations 29 vulnerabilities 0 bugs 15 code smells 67 comment lines 2493 complexity 1421 duplicated blocks 9 duplicated files 4 duplicated lines 101 duplicated lines density 1.1 false positive issues 0 functions 1104 lines 9429 ncloc 5297 new bugs new code smells new violations new vulnerabilities reliability rating 3 security rating 1 sqale rating 1 violations 82 vulnerabilities 0 bugs 30 code smells 201

SonareQube Project Key: gov.hrsa.BPHC-EC Product Name: EC

SonareQube Project Key: gov.hrsa.BPHC-LGP Product Name: BPHC-LGP comment lines 5992 complexity 3000 coverage 72.7 duplicated blocks 78 duplicated files 31 duplicated lines 1915 duplicated lines density 5.7 false positive issues 0 functions 2849 lines 33549 ncloc 23176 new bugs new code smells new violations new vulnerabilities reliability rating 3 security rating 1 sqale rating 1 violations 231 vulnerabilities 0 bugs 9 code smells 35 comment lines 173 complexity 112 duplicated blocks 18 duplicated files 3 duplicated lines 639 duplicated lines density 54.1 false positive issues 0 functions 9 lines 1181 ncloc 823 new bugs new code smells new violations new vulnerabilities reliability rating 3 security rating 1 sqale rating 1 violations 44 vulnerabilities 0

SonareQube Project Key: gov.hrsa.BPHC-SCPEIS Product Name: SCPEIS bugs 239 code smells 804 comment lines 1937 complexity 2353 duplicated blocks 77 duplicated files 5 duplicated lines 2143 duplicated lines density 12.7 false positive issues 0 functions 725 lines 16855 ncloc 12820 new bugs new code smells new violations new vulnerabilities reliability rating 5 security rating 1 sqale rating 1 violations 1043 vulnerabilities 0 bugs 0 code smells 0 duplicated blocks 0 duplicated files 0 duplicated lines 0 false positive issues 0 new bugs new code smells new violations new vulnerabilities reliability rating 1 security rating 1 sqale rating 1 violations 0 vulnerabilities 0 bugs 395

Product Name: UDSOLAP

SonareQube Project Key: gov.hrsa.BPHC-UDSSubmission Product Name: BPHC-UDSSubmission

SonareQube Project Key: gov.hrsa.BPHC-UDS Product Name: BPHC-UDS

SonareQube Project Key: gov.hrsa.BPHC-UDSOLAP code smells 849 comment lines 7178 complexity 4428 coverage 0 duplicated blocks 142 duplicated files 36 duplicated lines 3449 duplicated lines density 7.8 false positive issues 0 functions 2490 lines 44282 ncloc 33564 new bugs new code smells new violations new vulnerabilities reliability rating 3 security rating 2 sqale rating 1 violations 1261 vulnerabilities 17 bugs 182 code smells 641 comment lines 5674 complexity 19469 coverage 0 duplicated blocks 1227 duplicated files 50 duplicated lines 69298 duplicated lines density 62.7 false positive issues 0 functions 12311 lines 110476 ncloc 86850 new bugs new code smells new violations new vulnerabilities reliability rating 3 security rating 4 sqale rating 1 violations 825 vulnerabilities 2

SonareQube Project Key: gov.hrsa.CAT-EHBGateway Product Name: CAT-EHBGateway bugs 13 code smells 139 comment lines 943 complexity 791 duplicated blocks 6 duplicated files 5 duplicated lines 150 duplicated lines density 2.7 false positive issues 0 functions 341 lines 5647 ncloc 3631 new bugs new code smells new violations new vulnerabilities reliability rating 3 security rating 1 sqale rating 1 violations 152 vulnerabilities 0 bugs 122 code smells 474 comment lines 3161 complexity 5695 coverage 0 duplicated blocks 949 duplicated files 8 duplicated lines 10252 duplicated lines density 22.7 false positive issues 0 functions 2199 lines 45226 ncloc 30934 new bugs new code smells new violations new vulnerabilities reliability rating 5

SonareQube Project Key: gov.hrsa.CAT-Infrastructure Product Name: CAT-Infrastructure

SonareQube Project Key: gov.hrsa.CAT-Reglogin Product Name: CAT-Reglogin security rating 4 violations 598 vulnerabilities 2 bugs 36 code smells 96 comment lines 111 complexity 194 duplicated blocks 9 duplicated files 5 duplicated lines 146 duplicated lines density 5.5 false positive issues 0 functions 154 lines 2668 ncloc 2026 new bugs new code smells new violations new vulnerabilities reliability rating 3 security rating 1 sqale rating 1 violations 132 vulnerabilities 0

Product Name: Enterprise-EDBD SonareQube Project Key: gov.hrsa.Enterprise-EDBD