Everything below is read from the syntax tree - the call graph, per-function measurements and your service globs. There is no type inference, no data flow and no runtime profile behind it, so treat the findings as advisory, not proofs.