{
  "tool": {
    "name": "api-audit",
    "version": "0.1.0"
  },
  "timestamp": "2026-07-18T17:22:54.932Z",
  "baseUrl": "https://api.lughonline.com",
  "evidence": [
    {
      "endpoint": "GET /healthz",
      "method": "GET",
      "path": "/healthz",
      "samples": [
        100.45036800000003,
        99.98553399999992,
        99.11626500000011,
        100.92040499999985,
        100.07953399999997,
        100.49026700000013,
        100.07040000000006,
        99.49821099999963,
        100.04550400000016,
        99.86703899999975,
        99.88115299999981,
        99.31851200000028,
        97.93725500000028,
        98.17275099999961,
        99.94580899999983,
        99.41705200000024,
        99.40658600000006,
        99.35877300000038,
        99.3910719999999,
        99.9736240000002,
        99.05567400000018,
        99.361269,
        100.0715610000002,
        100.09976600000027,
        99.38873000000058,
        99.8263079999997,
        99.78243500000008,
        99.6727520000004,
        100.2512200000001,
        98.18482899999981
      ],
      "ttfb": [
        100.11953599999993,
        99.668363,
        98.91794000000004,
        100.49464199999989,
        99.75799600000028,
        100.33877100000018,
        99.92715700000008,
        99.34505300000001,
        99.81455000000005,
        99.68559899999991,
        99.727214,
        99.17354700000033,
        97.79801399999997,
        98.03161799999998,
        99.79668399999991,
        99.27818200000002,
        99.26555300000018,
        99.21325300000035,
        99.2477359999998,
        99.83019800000011,
        98.91893699999991,
        99.16875200000004,
        99.9275560000001,
        99.94979300000023,
        99.21934800000054,
        99.68546900000001,
        99.64233700000023,
        99.51702000000023,
        100.1038010000002,
        98.04072499999984
      ],
      "status": 200,
      "bytes": 15
    }
  ],
  "audits": [
    {
      "endpoint": "GET /healthz",
      "id": "latency-p95",
      "category": "performance",
      "score": 0.9979536019933082,
      "weight": 3
    },
    {
      "endpoint": "GET /healthz",
      "id": "ttfb-p95",
      "category": "performance",
      "score": 0.7200919177551522,
      "weight": 1,
      "advice": "GET /healthz: reduce p95 time to first byte (100ms) toward 50ms."
    },
    {
      "endpoint": "GET /healthz",
      "id": "burst-error-rate",
      "category": "reliability",
      "score": null,
      "weight": 3
    },
    {
      "endpoint": "GET /healthz",
      "id": "burst-degradation",
      "category": "reliability",
      "score": null,
      "weight": 1
    },
    {
      "endpoint": "GET /healthz",
      "id": "rate-limit-grace",
      "category": "reliability",
      "score": null,
      "weight": 1
    },
    {
      "endpoint": "GET /healthz",
      "id": "compression",
      "category": "efficiency",
      "score": null,
      "weight": 1
    },
    {
      "endpoint": "GET /healthz",
      "id": "cache-headers",
      "category": "efficiency",
      "score": 1,
      "weight": 1
    },
    {
      "endpoint": "GET /healthz",
      "id": "payload-size",
      "category": "efficiency",
      "score": 1,
      "weight": 1
    },
    {
      "endpoint": "GET /healthz",
      "id": "openapi-valid",
      "category": "contract",
      "score": null,
      "weight": 3
    },
    {
      "endpoint": "GET /healthz",
      "id": "no-stack-traces",
      "category": "contract",
      "score": 1,
      "weight": 2
    },
    {
      "endpoint": "GET /healthz",
      "id": "error-envelope",
      "category": "contract",
      "score": null,
      "weight": 1
    },
    {
      "endpoint": "GET /healthz",
      "id": "https",
      "category": "security",
      "score": 1,
      "weight": 1
    },
    {
      "endpoint": "GET /healthz",
      "id": "auth-required",
      "category": "security",
      "score": null,
      "weight": 2
    },
    {
      "endpoint": "GET /healthz",
      "id": "security-headers",
      "category": "security",
      "score": 0.5,
      "weight": 1,
      "advice": "GET /healthz: add X-Content-Type-Options: nosniff and Strict-Transport-Security."
    },
    {
      "endpoint": "GET /healthz",
      "id": "no-powered-by",
      "category": "security",
      "score": 1,
      "weight": 0.5
    }
  ],
  "scores": {
    "overall": 93.56830678501635,
    "categories": {
      "performance": 92.84881809337692,
      "reliability": null,
      "efficiency": 100,
      "contract": 100,
      "security": 80
    },
    "endpoints": [
      {
        "endpoint": "GET /healthz",
        "p50": 99.80437149999989,
        "p95": 100.47231245000009,
        "p99": 100.79566497999993,
        "errorRate": 0,
        "bytes": 15,
        "score": 92.51383546414358
      }
    ]
  }
}