{
  "uses": [
    {
      "algorithm": "SHA-256",
      "kind": "hash",
      "assessment": "acceptable",
      "note": "Sound today. Grover's algorithm halves the work of finding a collision, which leaves SHA-256 adequate but makes SHA-384 the choice where a signature must hold for decades.",
      "path": "app.py",
      "line": 26,
      "evidence": "return jsonify({\"receipt\": hashlib.sha256(order_id.encode()).hexdigest()})"
    }
  ],
  "coverage": {
    "files_scanned": 2,
    "files_skipped": 0,
    "test_files": 1,
    "algorithms": 65
  }
}