{
  "tool": {
    "name": "api-audit",
    "version": "0.1.0"
  },
  "timestamp": "2026-07-18T17:29:55.760Z",
  "baseUrl": "https://api.lughonline.com",
  "evidence": [
    {
      "endpoint": "GET /healthz",
      "method": "GET",
      "path": "/healthz",
      "samples": [
        97.71626100000003,
        101.84303399999999,
        97.40522299999998,
        102.84687799999983,
        97.84640200000013,
        101.0474879999997,
        96.96870799999988,
        100.27066699999978,
        97.15198899999996,
        99.58432700000003,
        96.81924900000013,
        100.9376699999998,
        97.83231699999988,
        101.87581799999998,
        97.64501399999972,
        100.05496300000004,
        98.04542199999969,
        100.37666200000012,
        96.63261899999998,
        100.57433899999978,
        97.69368600000007,
        100.58146499999975,
        96.72367799999984,
        100.43064200000026,
        97.1761260000003,
        101.803766,
        97.35290400000031,
        100.94699700000001,
        96.9247749999995,
        100.80661800000053
      ],
      "ttfb": [
        97.39732800000002,
        101.50977499999999,
        97.18181200000004,
        102.43091099999992,
        97.50397100000009,
        100.81653499999993,
        96.76520699999992,
        100.12829099999999,
        96.89598899999964,
        99.41528000000017,
        96.60615899999993,
        100.60353399999985,
        97.6388549999997,
        101.71491700000024,
        97.50385899999992,
        99.90687500000013,
        97.90026999999964,
        100.24006699999973,
        96.49101399999972,
        100.43342500000017,
        97.54312400000026,
        100.43528199999992,
        96.57978899999989,
        100.2837370000002,
        97.03315800000018,
        101.65928499999973,
        97.15547400000014,
        100.71494199999961,
        96.78088599999955,
        100.66472200000044
      ],
      "status": 200,
      "bytes": 15
    }
  ],
  "audits": [
    {
      "endpoint": "GET /healthz",
      "id": "latency-p95",
      "category": "performance",
      "score": 0.9919917865530936,
      "weight": 3
    },
    {
      "endpoint": "GET /healthz",
      "id": "ttfb-p95",
      "category": "performance",
      "score": 0.7143132882091706,
      "weight": 1,
      "advice": "GET /healthz: reduce p95 time to first byte (102ms) toward 50ms."
    },
    {
      "endpoint": "GET /healthz",
      "id": "burst-error-rate",
      "category": "reliability",
      "score": null,
      "weight": 3
    },
    {
      "endpoint": "GET /healthz",
      "id": "burst-degradation",
      "category": "reliability",
      "score": null,
      "weight": 1
    },
    {
      "endpoint": "GET /healthz",
      "id": "rate-limit-grace",
      "category": "reliability",
      "score": null,
      "weight": 1
    },
    {
      "endpoint": "GET /healthz",
      "id": "compression",
      "category": "efficiency",
      "score": null,
      "weight": 1
    },
    {
      "endpoint": "GET /healthz",
      "id": "cache-headers",
      "category": "efficiency",
      "score": 1,
      "weight": 1
    },
    {
      "endpoint": "GET /healthz",
      "id": "payload-size",
      "category": "efficiency",
      "score": 1,
      "weight": 1
    },
    {
      "endpoint": "GET /healthz",
      "id": "openapi-valid",
      "category": "contract",
      "score": null,
      "weight": 3
    },
    {
      "endpoint": "GET /healthz",
      "id": "no-stack-traces",
      "category": "contract",
      "score": 1,
      "weight": 2
    },
    {
      "endpoint": "GET /healthz",
      "id": "error-envelope",
      "category": "contract",
      "score": null,
      "weight": 1
    },
    {
      "endpoint": "GET /healthz",
      "id": "https",
      "category": "security",
      "score": 1,
      "weight": 1
    },
    {
      "endpoint": "GET /healthz",
      "id": "auth-required",
      "category": "security",
      "score": null,
      "weight": 2
    },
    {
      "endpoint": "GET /healthz",
      "id": "security-headers",
      "category": "security",
      "score": 0.5,
      "weight": 1,
      "advice": "GET /healthz: add X-Content-Type-Options: nosniff and Strict-Transport-Security."
    },
    {
      "endpoint": "GET /healthz",
      "id": "no-powered-by",
      "category": "security",
      "score": 1,
      "weight": 0.5
    }
  ],
  "scores": {
    "overall": 93.34645607376673,
    "categories": {
      "performance": 92.25721619671128,
      "reliability": null,
      "efficiency": 100,
      "contract": 100,
      "security": 80
    },
    "endpoints": [
      {
        "endpoint": "GET /healthz",
        "p50": 98.81487449999986,
        "p95": 101.86106519999998,
        "p99": 102.56527059999988,
        "errorRate": 0,
        "bytes": 15,
        "score": 92.28846331303286
      }
    ]
  }
}