{
  "tool": {
    "name": "api-audit",
    "version": "0.1.0"
  },
  "timestamp": "2026-07-18T17:24:33.956Z",
  "baseUrl": "https://api.lughonline.com",
  "evidence": [
    {
      "endpoint": "GET /healthz",
      "method": "GET",
      "path": "/healthz",
      "samples": [
        126.452632,
        125.82397199999991,
        127.08118100000002,
        128.9959230000004,
        126.56987299999992,
        127.13031000000001,
        125.932186,
        125.9427270000001,
        126.32869900000014,
        126.65529400000014,
        124.20616299999983,
        126.48150200000009,
        125.49969400000009,
        126.64455599999974,
        125.84458899999981,
        127.43212399999993,
        126.41606299999967,
        127.40257699999984,
        125.451368,
        127.29983900000025,
        125.07968899999923,
        126.92140299999937,
        125.8782970000002,
        126.2947320000003,
        125.56909999999971,
        125.7749619999995,
        125.76605300000028,
        127.3216480000001,
        126.1315340000001,
        126.65112900000076
      ],
      "ttfb": [
        126.15171699999996,
        125.51597599999991,
        126.90405899999996,
        128.6407250000002,
        126.36301300000014,
        127.01321300000018,
        125.79670900000019,
        125.78513500000008,
        126.10009500000024,
        126.47875700000031,
        124.07470299999977,
        126.34324000000015,
        125.36600799999997,
        126.51022199999989,
        125.7054079999998,
        127.29775500000005,
        126.26659100000006,
        127.26730099999986,
        125.32207699999981,
        127.16157400000066,
        124.94687799999974,
        126.76675399999931,
        125.74531200000001,
        126.08031200000005,
        125.43355799999972,
        125.63812299999972,
        125.63234400000056,
        127.19285900000068,
        125.99203000000034,
        126.51895500000046
      ],
      "status": 200,
      "bytes": 15
    }
  ],
  "audits": [
    {
      "endpoint": "GET /healthz",
      "id": "latency-p95",
      "category": "performance",
      "score": 0.8947663943930333,
      "weight": 3,
      "advice": "GET /healthz: reduce p95 latency (127ms) toward 100ms."
    },
    {
      "endpoint": "GET /healthz",
      "id": "ttfb-p95",
      "category": "performance",
      "score": 0.6239705007491172,
      "weight": 1,
      "advice": "GET /healthz: reduce p95 time to first byte (127ms) toward 50ms."
    },
    {
      "endpoint": "GET /healthz",
      "id": "burst-error-rate",
      "category": "reliability",
      "score": null,
      "weight": 3
    },
    {
      "endpoint": "GET /healthz",
      "id": "burst-degradation",
      "category": "reliability",
      "score": null,
      "weight": 1
    },
    {
      "endpoint": "GET /healthz",
      "id": "rate-limit-grace",
      "category": "reliability",
      "score": null,
      "weight": 1
    },
    {
      "endpoint": "GET /healthz",
      "id": "compression",
      "category": "efficiency",
      "score": null,
      "weight": 1
    },
    {
      "endpoint": "GET /healthz",
      "id": "cache-headers",
      "category": "efficiency",
      "score": 1,
      "weight": 1
    },
    {
      "endpoint": "GET /healthz",
      "id": "payload-size",
      "category": "efficiency",
      "score": 1,
      "weight": 1
    },
    {
      "endpoint": "GET /healthz",
      "id": "openapi-valid",
      "category": "contract",
      "score": null,
      "weight": 3
    },
    {
      "endpoint": "GET /healthz",
      "id": "no-stack-traces",
      "category": "contract",
      "score": 1,
      "weight": 2
    },
    {
      "endpoint": "GET /healthz",
      "id": "error-envelope",
      "category": "contract",
      "score": null,
      "weight": 1
    },
    {
      "endpoint": "GET /healthz",
      "id": "https",
      "category": "security",
      "score": 1,
      "weight": 1
    },
    {
      "endpoint": "GET /healthz",
      "id": "auth-required",
      "category": "security",
      "score": null,
      "weight": 2
    },
    {
      "endpoint": "GET /healthz",
      "id": "security-headers",
      "category": "security",
      "score": 0.5,
      "weight": 1,
      "advice": "GET /healthz: add X-Content-Type-Options: nosniff and Strict-Transport-Security."
    },
    {
      "endpoint": "GET /healthz",
      "id": "no-powered-by",
      "category": "security",
      "score": 1,
      "weight": 0.5
    }
  ],
  "scores": {
    "overall": 89.76502828682703,
    "categories": {
      "performance": 82.70674209820542,
      "reliability": null,
      "efficiency": 100,
      "contract": 100,
      "security": 80
    },
    "endpoints": [
      {
        "endpoint": "GET /healthz",
        "p50": 126.3723809999999,
        "p95": 127.41882784999989,
        "p99": 128.54242129000028,
        "errorRate": 0,
        "bytes": 15,
        "score": 88.65018746598301
      }
    ]
  }
}