Review request of static analysis results

[cureapp-kim]

I forked sp2 into my git and executed static analysis by using two types of tools: SonarCloud and DeepScan. The results between them are different because the analysis policies and the rules used by each other are different.

I'm sure your review will be helpful to others.
Click the badge below to see results.

1. results analyzed by DeepScan:

2. results analyzed by SonarCloud:

FYI
SonarCloud ( https://sonarcloud.io/ )

• analysis on 20+ different languages (including Javascript)
• possible to analyze source from various perspectives:
  Reliability,
  Security (Hotspot, OWASPs Top 10, SNAS Top 25, CWE),
  Maintainability,
  Coverage,
  Duplications,
  Complexity
• A total of 226 rules are applied to Javascript and 172 to TypeScript

DeepScan ( https://deepscan.io/ )

• specialized in Javascript ( JavaScript, TypeScript, React and Vue.js )
• semantic analysis (enables finding issues that syntax-based linters can't)
• analyzed by using ESLint and 201 rules (As of June 5, 2020)