Bug: Dynamic icon lookup in Home.jsx has no fallback (render crash risk)
Security: CORS defaults to allow all origins in development
Security: Database file created with world-writable permissions (0o666/0o777)
Security: Production build generates sourcemaps (exposes source code)
Bug: Docker healthcheck always reports healthy (process.exit never called)
Bug: db.js is dead code with conflicting schema (no UNIQUE on leads.email)
Security: No form spam protection (honeypot, captcha, or turnstile)
Performance: logo.svg is 348KB (SVG logos should be <10KB)
SEO: og:image uses SVG which is unsupported by most social platforms
Cleanup: zustand dependency is unused (never imported)
Cleanup: Dialog.jsx is unused (no component imports it)
Cleanup: CardDescription.jsx is a duplicate of Card.jsx export
Cleanup: MobileNav.jsx is dead code (Header has its own mobile menu)
Bug: Support page secondary CTA bg-secondary-bg is undefined in Tailwind config
Bug: Footer address field is not an address (contains marketing copy)
Bug: 25+ years claim is unverified (not on original site)
Bug: Header desktop nav has no Services/Industries dropdown
Bug: Certification number #25432 appears fabricated
Bug: ServiceDetail and IndustryDetail have multiple h1 tags
Bug: Support page phone numbers and email are not clickable