{"version": "2.1.0", "$schema": "https://json.schemastore.org/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "Repobility", "informationUri": "https://repobility.com", "rules": [{"id": "SEC011", "name": "[SEC011] Unsafe PyTorch Model Loading: torch.load() uses pickle internally and can execute arbitrary code from untrusted", "shortDescription": {"text": "[SEC011] Unsafe PyTorch Model Loading: torch.load() uses pickle internally and can execute arbitrary code from untrusted model files."}, "fullDescription": {"text": "Use torch.load(..., weights_only=True) or use safetensors format."}, "properties": {"scanner": "repobility-threat-engine", "category": "deserialization", "severity": "medium", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "ERR001", "name": "[ERR001] Silent Exception Swallowing: Silently swallowing all exceptions hides bugs. Even in cleanup code, log at DEBUG ", "shortDescription": {"text": "[ERR001] Silent Exception Swallowing: Silently swallowing all exceptions hides bugs. Even in cleanup code, log at DEBUG level."}, "fullDescription": {"text": "Log the error: `except Exception: logger.debug('cleanup failed', exc_info=True)`. Or handle specific exception types."}, "properties": {"scanner": "repobility-threat-engine", "category": "error_handling", "severity": "medium", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "SEC007", "name": "[SEC007] Unsafe Deserialization: Unsafe deserialization can execute arbitrary code.", "shortDescription": {"text": "[SEC007] Unsafe Deserialization: Unsafe deserialization can execute arbitrary code."}, "fullDescription": {"text": "Use yaml.safe_load() instead of yaml.load(). Avoid pickle for untrusted data."}, "properties": {"scanner": "repobility-threat-engine", "category": "deserialization", "severity": "medium", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "SEC127", "name": "[SEC127] AI agent stub \u2014 TODO: implement / pass placeholder body: Function body left as TODO/pass/raise NotImplementedEr", "shortDescription": {"text": "[SEC127] AI agent stub \u2014 TODO: implement / pass placeholder body: Function body left as TODO/pass/raise NotImplementedError after an AI scaffolding pass. The route appears to exist (and may even pass shallow CI), but invoking it crashes or "}, "fullDescription": {"text": "Either implement the body, or fail closed at module-load time so the deploy can't ship a half-built route. A CI gate that fails build on `raise NotImplementedError` in non-abstract code catches this cleanly."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "medium", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "COMP001", "name": "[COMP001] High cognitive complexity: Function `VGG16` has cognitive complexity 15 (SonarSource scale). Cognitive complex", "shortDescription": {"text": "[COMP001] High cognitive complexity: Function `VGG16` has cognitive complexity 15 (SonarSource scale). Cognitive complexity measures how hard the function is for a human to understand \u2014 nested branches, boolean chains, and recursion all wei"}, "fullDescription": {"text": "Extract nested branches into named helper functions; flatten early-return / guard clauses; replace long if/elif chains with dispatch dicts or polymorphism. SonarQube's threshold for 'should refactor' is 15 \u2014 yours is 15."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "medium", "confidence": 0.95, "cwe": "", "owasp": ""}}, {"id": "MINED124", "name": "requirements.txt: `jax2onnx` has no version pin", "shortDescription": {"text": "requirements.txt: `jax2onnx` has no version pin"}, "fullDescription": {"text": "Unpinned pip requirement means every fresh install may resolve a different version. Newer releases can introduce malicious code (typosquats, account compromises). Reproducible installs need exact pins."}, "properties": {"scanner": "repobility-supply-chain", "category": "dependency", "severity": "medium", "confidence": 0.9, "cwe": "", "owasp": ""}}, {"id": "MINED111", "name": "Bare except continues silently", "shortDescription": {"text": "Bare except continues silently"}, "fullDescription": {"text": "Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose."}, "properties": {"scanner": "repobility-ast-engine", "category": "quality", "severity": "medium", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "MINED109", "name": "Mutable default argument in `test_sparse` (dict)", "shortDescription": {"text": "Mutable default argument in `test_sparse` (dict)"}, "fullDescription": {"text": "`def test_sparse(... = []/{}/set())` \u2014 Python's default value is constructed ONCE at function definition time and shared across all calls. Mutating it in one call mutates it for every future call too."}, "properties": {"scanner": "repobility-ast-engine", "category": "quality", "severity": "medium", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "DEPCUR-GHA", "name": "GitHub Action `actions/setup-python@v6` is minor version(s) behind (latest v6.2.0)", "shortDescription": {"text": "GitHub Action `actions/setup-python@v6` is minor version(s) behind (latest v6.2.0)"}, "fullDescription": {"text": "`uses: actions/setup-python@v6` is minor version(s) behind the latest published release v6.2.0. Old action majors run on deprecated runner images / Node versions and miss upstream fixes. This is the exact 'outdated GitHub Action' class Dependabot raises \u2014 and which Repobility had no coverage for."}, "properties": {"scanner": "repobility-dependency-currency", "category": "dependency", "severity": "low", "confidence": 0.9, "cwe": "", "owasp": ""}}, {"id": "DEPCUR-PY", "name": "Python package `tensorflow-tpu` is minor version(s) behind (2.19.1 -> 2.20.0)", "shortDescription": {"text": "Python package `tensorflow-tpu` is minor version(s) behind (2.19.1 -> 2.20.0)"}, "fullDescription": {"text": "`tensorflow-tpu==2.19.1` is minor version(s) behind the latest stable release on PyPI (2.20.0). Pinned-but-stale Python dependencies drift away from upstream security and bugfix releases. This is the version-currency signal Dependabot raises."}, "properties": {"scanner": "repobility-dependency-currency", "category": "dependency", "severity": "low", "confidence": 0.9, "cwe": "", "owasp": ""}}, {"id": "AIC003", "name": "Duplicated implementation block across source files", "shortDescription": {"text": "Duplicated implementation block across source files"}, "fullDescription": {"text": "Duplicated blocks are a common artifact when generated code is pasted or recreated instead of reused. They increase maintenance cost because every future bug fix must be found in multiple locations."}, "properties": {"scanner": "repobility-ai-code-hygiene", "category": "quality", "severity": "low", "confidence": 0.86, "cwe": "", "owasp": ""}}, {"id": "SEC020", "name": "[SEC020] Secret Printed to Logs: Debug or diagnostic code appears to print a credential-bearing value. This is a frequen", "shortDescription": {"text": "[SEC020] Secret Printed to Logs: Debug or diagnostic code appears to print a credential-bearing value. This is a frequent AI-assisted coding failure: the helper exposes the exact value needed for troubleshooting."}, "fullDescription": {"text": "Log only redacted, hashed, or last-four-style metadata. Rotate any secret that may have reached logs."}, "properties": {"scanner": "repobility-threat-engine", "category": "credential_exposure", "severity": "info", "confidence": 0.1, "cwe": "", "owasp": ""}}, {"id": "SEC045", "name": "[SEC045] eval()/exec() on stored or user-supplied data: eval() and exec() on data \u2014 even admin-stored data \u2014 is a latera", "shortDescription": {"text": "[SEC045] eval()/exec() on stored or user-supplied data: eval() and exec() on data \u2014 even admin-stored data \u2014 is a lateral-movement vector after any one credential compromise. Sandboxes (__builtins__ cleared) are escapable: attackers use obj"}, "fullDescription": {"text": "For literal data structures: use ast.literal_eval(text) \u2014 only parses literals, raises on code.\nFor formula evaluation: use asteval or simpleeval (purpose-built sandboxes with allow-lists).\nFor Odoo: use odoo.tools.safe_eval(expr, locals_dict, mode='exec').\nIf you genuinely need to execute admin-stored code: require explicit super-admin permission AND log every execution with a stack trace."}, "properties": {"scanner": "repobility-threat-engine", "category": "injection", "severity": "info", "confidence": 0.1, "cwe": "", "owasp": ""}}, {"id": "MINED067", "name": "[MINED067] Python Requests No Timeout: requests.get/post/etc. without timeout= can hang forever.", "shortDescription": {"text": "[MINED067] Python Requests No Timeout: requests.get/post/etc. without timeout= can hang forever."}, "fullDescription": {"text": "Review and fix per the pattern semantics. See CWE-400 /  for context."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "info", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "MINED077", "name": "[MINED077] Python Open No Context: fp = open(path) outside with-block leaks file handles.", "shortDescription": {"text": "[MINED077] Python Open No Context: fp = open(path) outside with-block leaks file handles."}, "fullDescription": {"text": "Review and fix per the pattern semantics. See CWE-772 /  for context."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "info", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "MINED001", "name": "[MINED001] Bare Except Pass (and 4 more): Same pattern found in 4 additional files. Review if needed.", "shortDescription": {"text": "[MINED001] Bare Except Pass (and 4 more): Same pattern found in 4 additional files. Review if needed."}, "fullDescription": {"text": "Review and fix per the pattern semantics. See CWE-755 /  for context."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "info", "confidence": 0.2, "cwe": "", "owasp": ""}}, {"id": "SEC128", "name": "[SEC128] Async function without await \u2014 fire-and-forget Promise (AI mistake) (and 38 more): Same pattern found in 38 add", "shortDescription": {"text": "[SEC128] Async function without await \u2014 fire-and-forget Promise (AI mistake) (and 38 more): Same pattern found in 38 additional files. Review if needed."}, "fullDescription": {"text": "Add `await` before each async call, or chain with `.then`. If you intentionally want fire-and-forget, prefix with `void` (TS) or assign to `_` (Python with `asyncio.create_task`) to make the intent explicit and survive lint."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "info", "confidence": 0.2, "cwe": "", "owasp": ""}}, {"id": "MINED072", "name": "[MINED072] Python Pass Only Class (and 5 more): Same pattern found in 5 additional files. Review if needed.", "shortDescription": {"text": "[MINED072] Python Pass Only Class (and 5 more): Same pattern found in 5 additional files. Review if needed."}, "fullDescription": {"text": "Review and fix per the pattern semantics. See CWE-1188 /  for context."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "info", "confidence": 0.2, "cwe": "", "owasp": ""}}, {"id": "MINED050", "name": "[MINED050] Stub Only Function (and 39 more): Same pattern found in 39 additional files. Review if needed.", "shortDescription": {"text": "[MINED050] Stub Only Function (and 39 more): Same pattern found in 39 additional files. Review if needed."}, "fullDescription": {"text": "Review and fix per the pattern semantics. See CWE-1188 /  for context."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "info", "confidence": 0.2, "cwe": "", "owasp": ""}}, {"id": "MINED064", "name": "[MINED064] Python Input Call (and 39 more): Same pattern found in 39 additional files. Review if needed.", "shortDescription": {"text": "[MINED064] Python Input Call (and 39 more): Same pattern found in 39 additional files. Review if needed."}, "fullDescription": {"text": "Review and fix per the pattern semantics."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "info", "confidence": 0.2, "cwe": "", "owasp": ""}}, {"id": "MINED063", "name": "[MINED063] Toctou Os Path Exists: if os.path.exists(p): open(p) \u2014 file can be replaced/deleted between check and use.", "shortDescription": {"text": "[MINED063] Toctou Os Path Exists: if os.path.exists(p): open(p) \u2014 file can be replaced/deleted between check and use."}, "fullDescription": {"text": "Review and fix per the pattern semantics. See CWE-367 /  for context."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "info", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "MINED043", "name": "[MINED043] Http Not Https (and 12 more): Same pattern found in 12 additional files. Review if needed.", "shortDescription": {"text": "[MINED043] Http Not Https (and 12 more): Same pattern found in 12 additional files. Review if needed."}, "fullDescription": {"text": "Review and fix per the pattern semantics. See CWE-319 / A02:2021 for context."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "info", "confidence": 0.2, "cwe": "", "owasp": ""}}, {"id": "MINED044", "name": "[MINED044] Js Console Log Prod: console.log left in code. Should be replaced with logger or removed.", "shortDescription": {"text": "[MINED044] Js Console Log Prod: console.log left in code. Should be replaced with logger or removed."}, "fullDescription": {"text": "Review and fix per the pattern semantics. See CWE-532 /  for context."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "info", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "MINED036", "name": "[MINED036] Python Os System Call: os.system() invokes shell with no escaping.", "shortDescription": {"text": "[MINED036] Python Os System Call: os.system() invokes shell with no escaping."}, "fullDescription": {"text": "Review and fix per the pattern semantics. See CWE-78 /  for context."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "high", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "MINED004", "name": "[MINED004] Weak Crypto: MD5/SHA1/DES/RC4 used for security context (not just checksums).", "shortDescription": {"text": "[MINED004] Weak Crypto: MD5/SHA1/DES/RC4 used for security context (not just checksums)."}, "fullDescription": {"text": "Review and fix per the pattern semantics. See CWE-327 / A02:2021 for context."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "high", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "SEC078", "name": "[SEC078] Python: requests without timeout: requests.get/post without a timeout will hang indefinitely on a non-responsiv", "shortDescription": {"text": "[SEC078] Python: requests without timeout: requests.get/post without a timeout will hang indefinitely on a non-responsive server, causing thread exhaustion and ReDoS. Ported from bandit B113 (Apache-2.0). NOTE: this regex is heuristic; a re"}, "fullDescription": {"text": "Add `timeout=10` (or appropriate value) to every requests call."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "high", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "MINED126", "name": "Workflow container/services image `python:3.11-slim` unpinned", "shortDescription": {"text": "Workflow container/services image `python:3.11-slim` unpinned"}, "fullDescription": {"text": "`container/services image: python:3.11-slim` without `@sha256:...` pulls a mutable tag at workflow-run time. Treat workflow container references with the same supply-chain discipline as Dockerfile FROM lines."}, "properties": {"scanner": "repobility-supply-chain", "category": "dependency", "severity": "high", "confidence": 0.9, "cwe": "", "owasp": ""}}, {"id": "MINED115", "name": "Action `actions/checkout` pinned to mutable ref `@v6`", "shortDescription": {"text": "Action `actions/checkout` pinned to mutable ref `@v6`"}, "fullDescription": {"text": "`uses: actions/checkout@v6` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the tj-actions/changed-files compromise (2025) instantly affect ~23K repos. Pin to a 40-char commit SHA + lock with Dependabot or renovate."}, "properties": {"scanner": "repobility-supply-chain", "category": "dependency", "severity": "high", "confidence": 0.9, "cwe": "", "owasp": ""}}, {"id": "MINED131", "name": "pre-commit hook `https://github.com/astral-sh/ruff-pre-commit` pinned to mutable rev `v0.9.2`", "shortDescription": {"text": "pre-commit hook `https://github.com/astral-sh/ruff-pre-commit` pinned to mutable rev `v0.9.2`"}, "fullDescription": {"text": "`.pre-commit-config.yaml` references `https://github.com/astral-sh/ruff-pre-commit` at `rev: v0.9.2`. If `{rev}` is a branch or version tag, the repo owner can push new code there and `pre-commit install --install-hooks` will fetch it on every developer's machine."}, "properties": {"scanner": "repobility-supply-chain", "category": "dependency", "severity": "high", "confidence": 0.9, "cwe": "", "owasp": ""}}, {"id": "MINED106", "name": "Phantom test coverage: test_conv_model", "shortDescription": {"text": "Phantom test coverage: test_conv_model"}, "fullDescription": {"text": "Test function `test_conv_model` runs code but contains no assert / expect / should call \u2014 it passes regardless of behaviour. Adds line coverage without verifying anything."}, "properties": {"scanner": "repobility-ast-engine", "category": "quality", "severity": "high", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "MINED108", "name": "`self.w` used but never assigned in __init__", "shortDescription": {"text": "`self.w` used but never assigned in __init__"}, "fullDescription": {"text": "Method `build` of class `CustomDense` reads `self.w`, but no assignment to it exists in __init__ (and no class-level fallback). This raises AttributeError the first time the method runs against an instance."}, "properties": {"scanner": "repobility-ast-engine", "category": "quality", "severity": "high", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "generic-api-key", "name": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations.", "shortDescription": {"text": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."}, "fullDescription": {"text": "Gitleaks detected a committed secret or credential pattern."}, "properties": {"scanner": "gitleaks", "category": "credential_exposure", "severity": "critical", "confidence": 0.95, "cwe": "", "owasp": ""}}, {"id": "MINED018", "name": "[MINED018] Unsafe Deserialization Pickle: pickle.loads / yaml.load (without Loader=SafeLoader) / unmarshal of network/fi", "shortDescription": {"text": "[MINED018] Unsafe Deserialization Pickle: pickle.loads / yaml.load (without Loader=SafeLoader) / unmarshal of network/file data \u2014 RCE."}, "fullDescription": {"text": "Review and fix per the pattern semantics. See CWE-502 / A08:2021 for context."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "critical", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "SEC081", "name": "[SEC081] Python: pickle.loads / marshal.loads on untrusted data: pickle.load(s) and marshal.load(s) execute arbitrary co", "shortDescription": {"text": "[SEC081] Python: pickle.loads / marshal.loads on untrusted data: pickle.load(s) and marshal.load(s) execute arbitrary code on untrusted input. Ported from dlint DUO103 / DUO120 (BSD-3)."}, "fullDescription": {"text": "Use json, msgpack, or protobuf for untrusted data. If pickle is required, sign the payload with HMAC."}, "properties": {"scanner": "repobility-threat-engine", "category": "quality", "severity": "critical", "confidence": 1.0, "cwe": "", "owasp": ""}}, {"id": "MINED116", "name": "Workflow uses `secrets.CODECOV_TOKEN` on a `pull_request` trigger", "shortDescription": {"text": "Workflow uses `secrets.CODECOV_TOKEN` on a `pull_request` trigger"}, "fullDescription": {"text": "This workflow triggers on `pull_request`, which checks out the FORK's code. Referencing `${ secrets.CODECOV_TOKEN }` lets a PR from any fork exfiltrate the secret (modify a script, log the value, etc.). Use `pull_request_target` ONLY with strict checkout discipline (no fork code in the trusted context)."}, "properties": {"scanner": "repobility-supply-chain", "category": "dependency", "severity": "critical", "confidence": 0.9, "cwe": "", "owasp": ""}}, {"id": "MINED107", "name": "Missing import: `array` used but not imported", "shortDescription": {"text": "Missing import: `array` used but not imported"}, "fullDescription": {"text": "The file uses `array.something(...)` but never imports `array`. This raises NameError at runtime the first time the line executes."}, "properties": {"scanner": "repobility-ast-engine", "category": "quality", "severity": "critical", "confidence": 1.0, "cwe": "", "owasp": ""}}]}}, "automationDetails": {"id": "repobility/860"}, "properties": {"repository": "keras-team/keras", "repoUrl": "https://github.com/keras-team/keras", "branch": "master"}, "results": [{"ruleId": "SEC011", "level": "warning", "message": {"text": "[SEC011] Unsafe PyTorch Model Loading: torch.load() uses pickle internally and can execute arbitrary code from untrusted model files."}, "properties": {"repobilityId": 77729, "scanner": "repobility-threat-engine", "fingerprint": "bf122b9fe17cbe54b68e75c405a995001d8ba201a15c0bbc2b21b83108beea0d", "category": "deserialization", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": "torch.load(", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC011", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "code|deserialization|token|173|sec011"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/src/utils/torch_utils.py"}, "region": {"startLine": 173}}}]}, {"ruleId": "ERR001", "level": "warning", "message": {"text": "[ERR001] Silent Exception Swallowing: Silently swallowing all exceptions hides bugs. Even in cleanup code, log at DEBUG level."}, "properties": {"repobilityId": 77724, "scanner": "repobility-threat-engine", "fingerprint": "cb00336257f5e9bc12f9117c35cd3355bcf2384d08928ca94771057a4068e61f", "category": "error_handling", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": "except:\n                pass", "reason": "Pattern matched with no mitigating context found", "rule_id": "ERR001", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "fp|cb00336257f5e9bc12f9117c35cd3355bcf2384d08928ca94771057a4068e61f"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/src/utils/python_utils.py"}, "region": {"startLine": 191}}}]}, {"ruleId": "ERR001", "level": "warning", "message": {"text": "[ERR001] Silent Exception Swallowing: Silently swallowing all exceptions hides bugs. Even in cleanup code, log at DEBUG level."}, "properties": {"repobilityId": 77723, "scanner": "repobility-threat-engine", "fingerprint": "841d6e69211adc1bfdaa7de26f4bf0f42891e0875011cbccccdac296c5059a49", "category": "error_handling", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": "except Exception:\n            pass", "reason": "Pattern matched with no mitigating context found", "rule_id": "ERR001", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "fp|841d6e69211adc1bfdaa7de26f4bf0f42891e0875011cbccccdac296c5059a49"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/src/layers/normalization/group_normalization.py"}, "region": {"startLine": 119}}}]}, {"ruleId": "SEC007", "level": "warning", "message": {"text": "[SEC007] Unsafe Deserialization: Unsafe deserialization can execute arbitrary code."}, "properties": {"repobilityId": 77720, "scanner": "repobility-threat-engine", "fingerprint": "7ceb745958ab99fcc86a7774da4c7470a797be16c612428f34663c2e62475a74", "category": "deserialization", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": "marshal.loads(", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC007", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "code|deserialization|token|95|sec007"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/src/utils/python_utils.py"}, "region": {"startLine": 95}}}]}, {"ruleId": "SEC007", "level": "warning", "message": {"text": "[SEC007] Unsafe Deserialization: Unsafe deserialization can execute arbitrary code."}, "properties": {"repobilityId": 77719, "scanner": "repobility-threat-engine", "fingerprint": "28569ee4b29af35ae191ac4016f15eee2525877c29162a276e79071bea8ae82c", "category": "deserialization", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": "Pickle.load(", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC007", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "code|deserialization|keras/src/datasets/cifar.py|18|sec007"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/src/datasets/cifar.py"}, "region": {"startLine": 18}}}]}, {"ruleId": "SEC127", "level": "warning", "message": {"text": "[SEC127] AI agent stub \u2014 TODO: implement / pass placeholder body: Function body left as TODO/pass/raise NotImplementedError after an AI scaffolding pass. The route appears to exist (and may even pass shallow CI), but invoking it crashes or silently no-ops. AI agents consistently emit these when their context window runs out mid-implementation. Production callers hitting these stubs is a classic AI-generated-incident."}, "properties": {"repobilityId": 77706, "scanner": "repobility-threat-engine", "fingerprint": "6184b01ea3c68910d568da72da458497c6b53bd11f13c1058660c6cbbd2e80d6", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": "def lstm(*args, **kwargs):\n    raise NotImplementedError", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC127", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "fp|6184b01ea3c68910d568da72da458497c6b53bd11f13c1058660c6cbbd2e80d6"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/src/backend/numpy/rnn.py"}, "region": {"startLine": 203}}}]}, {"ruleId": "SEC127", "level": "warning", "message": {"text": "[SEC127] AI agent stub \u2014 TODO: implement / pass placeholder body: Function body left as TODO/pass/raise NotImplementedError after an AI scaffolding pass. The route appears to exist (and may even pass shallow CI), but invoking it crashes or silently no-ops. AI agents consistently emit these when their context window runs out mid-implementation. Production callers hitting these stubs is a classic AI-generated-incident."}, "properties": {"repobilityId": 77705, "scanner": "repobility-threat-engine", "fingerprint": "88f7cba4cf775f61e566a4cca28af8202849636420e8dc848f252a195a20c7b6", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": "def jvp(fun, primals, tangents, has_aux=False):\n    raise NotImplementedError", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC127", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "fp|88f7cba4cf775f61e566a4cca28af8202849636420e8dc848f252a195a20c7b6"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/src/backend/numpy/linalg.py"}, "region": {"startLine": 116}}}]}, {"ruleId": "SEC127", "level": "warning", "message": {"text": "[SEC127] AI agent stub \u2014 TODO: implement / pass placeholder body: Function body left as TODO/pass/raise NotImplementedError after an AI scaffolding pass. The route appears to exist (and may even pass shallow CI), but invoking it crashes or silently no-ops. AI agents consistently emit these when their context window runs out mid-implementation. Production callers hitting these stubs is a classic AI-generated-incident."}, "properties": {"repobilityId": 77704, "scanner": "repobility-threat-engine", "fingerprint": "3d96744ff246e56ac142a01f35f4da58b12b48ab8d11568e5b372b2bdb6f0838", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": "def track(self, resource):\n        raise NotImplementedError", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC127", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "fp|3d96744ff246e56ac142a01f35f4da58b12b48ab8d11568e5b372b2bdb6f0838"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/src/backend/numpy/export.py"}, "region": {"startLine": 2}}}]}, {"ruleId": "COMP001", "level": "warning", "message": {"text": "[COMP001] High cognitive complexity: Function `VGG16` has cognitive complexity 15 (SonarSource scale). Cognitive complexity measures how hard the function is for a human to understand \u2014 nested branches, boolean chains, and recursion all weigh in. Breakdown: elif=4, else=3, if=7, nested_bonus=1."}, "properties": {"repobilityId": 77690, "scanner": "repobility-threat-engine", "fingerprint": "957e840fbc3d8fb6b2562e75132b34d671bf0d59500564d29f39148991ec4031", "category": "quality", "severity": "medium", "confidence": 0.95, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "AST-derived cognitive complexity score = 15 (severity threshold for medium: 15+).", "evidence": {"scanner": "repobility-threat-engine", "function": "VGG16", "breakdown": {"if": 7, "elif": 4, "else": 3, "nested_bonus": 1}, "complexity": 15, "correlation_key": "fp|957e840fbc3d8fb6b2562e75132b34d671bf0d59500564d29f39148991ec4031"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/src/applications/vgg16.py"}, "region": {"startLine": 21}}}]}, {"ruleId": "MINED124", "level": "warning", "message": {"text": "requirements.txt: `jax2onnx` has no version pin"}, "properties": {"repobilityId": 77638, "scanner": "repobility-supply-chain", "fingerprint": "73f461a578b46d0e55e15235f20b5f4d08ecd9b247f52d85cc85d81c033b4062", "category": "dependency", "severity": "medium", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "unpinned-pip-requirement", "owasp": null, "cwe_ids": ["CWE-1357"], "languages": ["python"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|73f461a578b46d0e55e15235f20b5f4d08ecd9b247f52d85cc85d81c033b4062"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "requirements-common.txt"}, "region": {"startLine": 31}}}]}, {"ruleId": "MINED124", "level": "warning", "message": {"text": "requirements.txt: `onnxruntime` has no version pin"}, "properties": {"repobilityId": 77637, "scanner": "repobility-supply-chain", "fingerprint": "e1bf739632631468b901aa72cf3bb1cacd9e152b9fe89aa74412f51375a6e284", "category": "dependency", "severity": "medium", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "unpinned-pip-requirement", "owasp": null, "cwe_ids": ["CWE-1357"], "languages": ["python"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|e1bf739632631468b901aa72cf3bb1cacd9e152b9fe89aa74412f51375a6e284"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "requirements-common.txt"}, "region": {"startLine": 27}}}]}, {"ruleId": "MINED124", "level": "warning", "message": {"text": "requirements.txt: `coverage` has no version pin"}, "properties": {"repobilityId": 77636, "scanner": "repobility-supply-chain", "fingerprint": "378b82f0e166e56bba972b5e560a9503706dd646c4c11476bb6f9e079be99f0e", "category": "dependency", "severity": "medium", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "unpinned-pip-requirement", "owasp": null, "cwe_ids": ["CWE-1357"], "languages": ["python"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|378b82f0e166e56bba972b5e560a9503706dd646c4c11476bb6f9e079be99f0e"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "requirements-common.txt"}, "region": {"startLine": 25}}}]}, {"ruleId": "MINED124", "level": "warning", "message": {"text": "requirements.txt: `dm_tree` has no version pin"}, "properties": {"repobilityId": 77635, "scanner": "repobility-supply-chain", "fingerprint": "74133912412b2b166f1bb9e840b76d44a58ec8c50995005312b00ad9f4b2eaa4", "category": "dependency", "severity": "medium", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "unpinned-pip-requirement", "owasp": null, "cwe_ids": ["CWE-1357"], "languages": ["python"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|74133912412b2b166f1bb9e840b76d44a58ec8c50995005312b00ad9f4b2eaa4"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "requirements-common.txt"}, "region": {"startLine": 24}}}]}, {"ruleId": "MINED124", "level": "warning", "message": {"text": "requirements.txt: `packaging` has no version pin"}, "properties": {"repobilityId": 77634, "scanner": "repobility-supply-chain", "fingerprint": "87243aeb117a6814554947d448fefc3a2e2b92d056ab1e53b055281e9854b957", "category": "dependency", "severity": "medium", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "unpinned-pip-requirement", "owasp": null, "cwe_ids": ["CWE-1357"], "languages": ["python"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|87243aeb117a6814554947d448fefc3a2e2b92d056ab1e53b055281e9854b957"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "requirements-common.txt"}, "region": {"startLine": 22}}}]}, {"ruleId": "MINED124", "level": "warning", "message": {"text": "requirements.txt: `pytest-xdist` has no version pin"}, "properties": {"repobilityId": 77633, "scanner": "repobility-supply-chain", "fingerprint": "61f169c8a9524fc1fb1bd068fbb6a51833e9e17c0ae47335dffb6bd6f0b3ebaf", "category": "dependency", "severity": "medium", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "unpinned-pip-requirement", "owasp": null, "cwe_ids": ["CWE-1357"], "languages": ["python"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|61f169c8a9524fc1fb1bd068fbb6a51833e9e17c0ae47335dffb6bd6f0b3ebaf"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "requirements-common.txt"}, "region": {"startLine": 21}}}]}, {"ruleId": "MINED124", "level": "warning", "message": {"text": "requirements.txt: `pytest-cov` has no version pin"}, "properties": {"repobilityId": 77632, "scanner": "repobility-supply-chain", "fingerprint": "b9864d83a656c2b3aae2cce8893b57e81301f60b53f6284d122c2c7f0e00eb90", "category": "dependency", "severity": "medium", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "unpinned-pip-requirement", "owasp": null, "cwe_ids": ["CWE-1357"], "languages": ["python"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|b9864d83a656c2b3aae2cce8893b57e81301f60b53f6284d122c2c7f0e00eb90"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "requirements-common.txt"}, "region": {"startLine": 20}}}]}, {"ruleId": "MINED124", "level": "warning", "message": {"text": "requirements.txt: `pytest` has no version pin"}, "properties": {"repobilityId": 77631, "scanner": "repobility-supply-chain", "fingerprint": "4ea0fe265970330d27decc9cdd6861677ecef2e90d1c4bff985c7f35f13742f6", "category": "dependency", "severity": "medium", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "unpinned-pip-requirement", "owasp": null, "cwe_ids": ["CWE-1357"], "languages": ["python"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|4ea0fe265970330d27decc9cdd6861677ecef2e90d1c4bff985c7f35f13742f6"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "requirements-common.txt"}, "region": {"startLine": 19}}}]}, {"ruleId": "MINED124", "level": "warning", "message": {"text": "requirements.txt: `optree` has no version pin"}, "properties": {"repobilityId": 77630, "scanner": "repobility-supply-chain", "fingerprint": "e1fac99baaa926af13bba485944600935504b2d1171f5806acbc9fdcb724e059", "category": "dependency", "severity": "medium", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "unpinned-pip-requirement", "owasp": null, "cwe_ids": ["CWE-1357"], "languages": ["python"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|e1fac99baaa926af13bba485944600935504b2d1171f5806acbc9fdcb724e059"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "requirements-common.txt"}, "region": {"startLine": 18}}}]}, {"ruleId": "MINED124", "level": "warning", "message": {"text": "requirements.txt: `build` has no version pin"}, "properties": {"repobilityId": 77629, "scanner": "repobility-supply-chain", "fingerprint": "5b4e57953dea2e9a8122e43e9405b6d1015e92339a3a2424e2da4d3ee44488ed", "category": "dependency", "severity": "medium", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "unpinned-pip-requirement", "owasp": null, "cwe_ids": ["CWE-1357"], "languages": ["python"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|5b4e57953dea2e9a8122e43e9405b6d1015e92339a3a2424e2da4d3ee44488ed"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "requirements-common.txt"}, "region": {"startLine": 17}}}]}, {"ruleId": "MINED124", "level": "warning", "message": {"text": "requirements.txt: `rich` has no version pin"}, "properties": {"repobilityId": 77628, "scanner": "repobility-supply-chain", "fingerprint": "092448ed4e189b5299b640869729bc1479a62f9316e1ba5cd05b79b408e84e61", "category": "dependency", "severity": "medium", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "unpinned-pip-requirement", "owasp": null, "cwe_ids": ["CWE-1357"], "languages": ["python"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|092448ed4e189b5299b640869729bc1479a62f9316e1ba5cd05b79b408e84e61"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "requirements-common.txt"}, "region": {"startLine": 16}}}]}, {"ruleId": "MINED124", "level": "warning", "message": {"text": "requirements.txt: `tensorboard-plugin-profile` has no version pin"}, "properties": {"repobilityId": 77627, "scanner": "repobility-supply-chain", "fingerprint": "874d63e00ea935394beb06b76e9a4b91349ed8146b9a7157688d9e980633a9ec", "category": "dependency", "severity": "medium", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "unpinned-pip-requirement", "owasp": null, "cwe_ids": ["CWE-1357"], "languages": ["python"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|874d63e00ea935394beb06b76e9a4b91349ed8146b9a7157688d9e980633a9ec"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "requirements-common.txt"}, "region": {"startLine": 15}}}]}, {"ruleId": "MINED124", "level": "warning", "message": {"text": "requirements.txt: `tensorboard` has no version pin"}, "properties": {"repobilityId": 77626, "scanner": "repobility-supply-chain", "fingerprint": "95ef93cfb8b8bfdd3ec46c60bdf8f265cb131a130878d2d0f9d0862e97eb3883", "category": "dependency", "severity": "medium", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "unpinned-pip-requirement", "owasp": null, "cwe_ids": ["CWE-1357"], "languages": ["python"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|95ef93cfb8b8bfdd3ec46c60bdf8f265cb131a130878d2d0f9d0862e97eb3883"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "requirements-common.txt"}, "region": {"startLine": 14}}}]}, {"ruleId": "MINED124", "level": "warning", "message": {"text": "requirements.txt: `protobuf` has no version pin"}, "properties": {"repobilityId": 77625, "scanner": "repobility-supply-chain", "fingerprint": "3a4999202c4960425ed1c69369cd283ecf281f4e29f0a046af194a8d3fcb4cc7", "category": "dependency", "severity": "medium", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "unpinned-pip-requirement", "owasp": null, "cwe_ids": ["CWE-1357"], "languages": ["python"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|3a4999202c4960425ed1c69369cd283ecf281f4e29f0a046af194a8d3fcb4cc7"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "requirements-common.txt"}, "region": {"startLine": 13}}}]}, {"ruleId": "MINED124", "level": "warning", "message": {"text": "requirements.txt: `ml-dtypes` has no version pin"}, "properties": {"repobilityId": 77624, "scanner": "repobility-supply-chain", "fingerprint": "9454860313c10e6fc687ebbe979b22c909cdc69a8d44dd4132603210023f627a", "category": "dependency", "severity": "medium", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "unpinned-pip-requirement", "owasp": null, "cwe_ids": ["CWE-1357"], "languages": ["python"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|9454860313c10e6fc687ebbe979b22c909cdc69a8d44dd4132603210023f627a"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "requirements-common.txt"}, "region": {"startLine": 12}}}]}, {"ruleId": "MINED124", "level": "warning", "message": {"text": "requirements.txt: `h5py` has no version pin"}, "properties": {"repobilityId": 77623, "scanner": "repobility-supply-chain", "fingerprint": "996eb2bc8b9caf16ea596400b615fc0b8fd55234868ce50bc763674db16277e0", "category": "dependency", "severity": "medium", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "unpinned-pip-requirement", "owasp": null, "cwe_ids": ["CWE-1357"], "languages": ["python"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|996eb2bc8b9caf16ea596400b615fc0b8fd55234868ce50bc763674db16277e0"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "requirements-common.txt"}, "region": {"startLine": 11}}}]}, {"ruleId": "MINED124", "level": "warning", "message": {"text": "requirements.txt: `requests` has no version pin"}, "properties": {"repobilityId": 77622, "scanner": "repobility-supply-chain", "fingerprint": "ab2e9349665e3b7216227c81bfe7b87dcef5fbb640625cbc46ab0d8eb6f889c7", "category": "dependency", "severity": "medium", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "unpinned-pip-requirement", "owasp": null, "cwe_ids": ["CWE-1357"], "languages": ["python"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|ab2e9349665e3b7216227c81bfe7b87dcef5fbb640625cbc46ab0d8eb6f889c7"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "requirements-common.txt"}, "region": {"startLine": 10}}}]}, {"ruleId": "MINED124", "level": "warning", "message": {"text": "requirements.txt: `absl-py` has no version pin"}, "properties": {"repobilityId": 77621, "scanner": "repobility-supply-chain", "fingerprint": "02ddcf129e2741b6786dcb0503c2d4538b6e3fb43a149ec1b988ce1d7ddf8bcc", "category": "dependency", "severity": "medium", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "unpinned-pip-requirement", "owasp": null, "cwe_ids": ["CWE-1357"], "languages": ["python"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|02ddcf129e2741b6786dcb0503c2d4538b6e3fb43a149ec1b988ce1d7ddf8bcc"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "requirements-common.txt"}, "region": {"startLine": 9}}}]}, {"ruleId": "MINED124", "level": "warning", "message": {"text": "requirements.txt: `pandas` has no version pin"}, "properties": {"repobilityId": 77620, "scanner": "repobility-supply-chain", "fingerprint": "7edd08a6a8a5b69d1db657c080e15ef4e0de56e9810ccb6181e32aa515129df6", "category": "dependency", "severity": "medium", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "unpinned-pip-requirement", "owasp": null, "cwe_ids": ["CWE-1357"], "languages": ["python"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|7edd08a6a8a5b69d1db657c080e15ef4e0de56e9810ccb6181e32aa515129df6"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "requirements-common.txt"}, "region": {"startLine": 8}}}]}, {"ruleId": "MINED124", "level": "warning", "message": {"text": "requirements.txt: `pillow` has no version pin"}, "properties": {"repobilityId": 77619, "scanner": "repobility-supply-chain", "fingerprint": "96517cbb93c880a2d312406dd51d3a1959ce394219f636caed6a407de303516e", "category": "dependency", "severity": "medium", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "unpinned-pip-requirement", "owasp": null, "cwe_ids": ["CWE-1357"], "languages": ["python"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|96517cbb93c880a2d312406dd51d3a1959ce394219f636caed6a407de303516e"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "requirements-common.txt"}, "region": {"startLine": 7}}}]}, {"ruleId": "MINED124", "level": "warning", "message": {"text": "requirements.txt: `scikit-learn` has no version pin"}, "properties": {"repobilityId": 77618, "scanner": "repobility-supply-chain", "fingerprint": "722e8a8e6422feef0503e8a44c193daa18bd244b21dbdb7cda08fdfd13015a45", "category": "dependency", "severity": "medium", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "unpinned-pip-requirement", "owasp": null, "cwe_ids": ["CWE-1357"], "languages": ["python"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|722e8a8e6422feef0503e8a44c193daa18bd244b21dbdb7cda08fdfd13015a45"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "requirements-common.txt"}, "region": {"startLine": 6}}}]}, {"ruleId": "MINED124", "level": "warning", "message": {"text": "requirements.txt: `scipy` has no version pin"}, "properties": {"repobilityId": 77617, "scanner": "repobility-supply-chain", "fingerprint": "b355d38eaae881d91df449ca10f2a406a504f28c356ca1f5197e82dcd81d8fe3", "category": "dependency", "severity": "medium", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "unpinned-pip-requirement", "owasp": null, "cwe_ids": ["CWE-1357"], "languages": ["python"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|b355d38eaae881d91df449ca10f2a406a504f28c356ca1f5197e82dcd81d8fe3"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "requirements-common.txt"}, "region": {"startLine": 5}}}]}, {"ruleId": "MINED124", "level": "warning", "message": {"text": "requirements.txt: `numpy` has no version pin"}, "properties": {"repobilityId": 77616, "scanner": "repobility-supply-chain", "fingerprint": "9c5fbd07ef4cba0d9692b15e0abc9e93119a2b13efb9912235cfd54e5d3fb5d9", "category": "dependency", "severity": "medium", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "unpinned-pip-requirement", "owasp": null, "cwe_ids": ["CWE-1357"], "languages": ["python"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|9c5fbd07ef4cba0d9692b15e0abc9e93119a2b13efb9912235cfd54e5d3fb5d9"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "requirements-common.txt"}, "region": {"startLine": 4}}}]}, {"ruleId": "MINED124", "level": "warning", "message": {"text": "requirements.txt: `ruff` has no version pin"}, "properties": {"repobilityId": 77615, "scanner": "repobility-supply-chain", "fingerprint": "4555a52352101f3ca0692a8b4fc06232948eb08b14e3b5969f3ba6be95c1199d", "category": "dependency", "severity": "medium", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "unpinned-pip-requirement", "owasp": null, "cwe_ids": ["CWE-1357"], "languages": ["python"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|4555a52352101f3ca0692a8b4fc06232948eb08b14e3b5969f3ba6be95c1199d"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "requirements-common.txt"}, "region": {"startLine": 3}}}]}, {"ruleId": "MINED124", "level": "warning", "message": {"text": "requirements.txt: `pre-commit` has no version pin"}, "properties": {"repobilityId": 77614, "scanner": "repobility-supply-chain", "fingerprint": "13fc8c14577b3f2edf0b256c4516cf2e3c2d09a12bc3d987359010f421861378", "category": "dependency", "severity": "medium", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "unpinned-pip-requirement", "owasp": null, "cwe_ids": ["CWE-1357"], "languages": ["python"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|13fc8c14577b3f2edf0b256c4516cf2e3c2d09a12bc3d987359010f421861378"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "requirements-common.txt"}, "region": {"startLine": 1}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "Bare except continues silently"}, "properties": {"repobilityId": 77613, "scanner": "repobility-ast-engine", "fingerprint": "222a4c0f830388fb0526bfdf2e2be3b5e2518361982305212629ffe175ce166f", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|222a4c0f830388fb0526bfdf2e2be3b5e2518361982305212629ffe175ce166f"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/src/legacy/saving/legacy_h5_format_test.py"}, "region": {"startLine": 21}}}]}, {"ruleId": "MINED109", "level": "warning", "message": {"text": "Mutable default argument in `test_sparse` (dict)"}, "properties": {"repobilityId": 77612, "scanner": "repobility-ast-engine", "fingerprint": "f21f9563c4ddb38f7a26f5ad900e3dfc5b65cd695edbaedeb12327ea35e1e11c", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "mutable-default-arg", "owasp": null, "cwe_ids": ["CWE-1023"], "languages": ["python"], "observations_count": 64867}, "scanner": "repobility-ast-engine", "correlation_key": "fp|f21f9563c4ddb38f7a26f5ad900e3dfc5b65cd695edbaedeb12327ea35e1e11c"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/src/layers/merging/merging_test.py"}, "region": {"startLine": 391}}}]}, {"ruleId": "MINED109", "level": "warning", "message": {"text": "Mutable default argument in `test_errors` (dict)"}, "properties": {"repobilityId": 77611, "scanner": "repobility-ast-engine", "fingerprint": "7cab37f19dc607c0c6009069744117090d3ca0ba713d836af13d68b98c0640d2", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "mutable-default-arg", "owasp": null, "cwe_ids": ["CWE-1023"], "languages": ["python"], "observations_count": 64867}, "scanner": "repobility-ast-engine", "correlation_key": "fp|7cab37f19dc607c0c6009069744117090d3ca0ba713d836af13d68b98c0640d2"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/src/layers/merging/merging_test.py"}, "region": {"startLine": 179}}}]}, {"ruleId": "MINED109", "level": "warning", "message": {"text": "Mutable default argument in `test_correctness_dynamic` (dict)"}, "properties": {"repobilityId": 77610, "scanner": "repobility-ast-engine", "fingerprint": "72ac0ad45dd00c321f1c6273a951c990276cfcb7555906e9ff02fe822eae6adf", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "mutable-default-arg", "owasp": null, "cwe_ids": ["CWE-1023"], "languages": ["python"], "observations_count": 64867}, "scanner": "repobility-ast-engine", "correlation_key": "fp|72ac0ad45dd00c321f1c6273a951c990276cfcb7555906e9ff02fe822eae6adf"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/src/layers/merging/merging_test.py"}, "region": {"startLine": 142}}}]}, {"ruleId": "MINED109", "level": "warning", "message": {"text": "Mutable default argument in `test_correctness_static` (dict)"}, "properties": {"repobilityId": 77609, "scanner": "repobility-ast-engine", "fingerprint": "516ae23f316096ca2740922ef8d0b92053c1eed93769e91fbaac133a0b6ec272", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "mutable-default-arg", "owasp": null, "cwe_ids": ["CWE-1023"], "languages": ["python"], "observations_count": 64867}, "scanner": "repobility-ast-engine", "correlation_key": "fp|516ae23f316096ca2740922ef8d0b92053c1eed93769e91fbaac133a0b6ec272"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/src/layers/merging/merging_test.py"}, "region": {"startLine": 104}}}]}, {"ruleId": "MINED109", "level": "warning", "message": {"text": "Mutable default argument in `test_basic` (dict)"}, "properties": {"repobilityId": 77608, "scanner": "repobility-ast-engine", "fingerprint": "293a0340ef1d8066e9dedcdd6dc60b77f3e2f84df0f60b309ef3ff043a4457cc", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "mutable-default-arg", "owasp": null, "cwe_ids": ["CWE-1023"], "languages": ["python"], "observations_count": 64867}, "scanner": "repobility-ast-engine", "correlation_key": "fp|293a0340ef1d8066e9dedcdd6dc60b77f3e2f84df0f60b309ef3ff043a4457cc"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/src/layers/merging/merging_test.py"}, "region": {"startLine": 83}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "Bare except continues silently"}, "properties": {"repobilityId": 77606, "scanner": "repobility-ast-engine", "fingerprint": "08d6327916f39859329daf59865cff61ba5d7221d8e71f9a73096f00db711778", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|08d6327916f39859329daf59865cff61ba5d7221d8e71f9a73096f00db711778"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/src/trainers/data_adapters/py_dataset_adapter.py"}, "region": {"startLine": 639}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "Bare except continues silently"}, "properties": {"repobilityId": 77605, "scanner": "repobility-ast-engine", "fingerprint": "742f24583a476d5f73b24e7ec3ac62ae70c1dc1f854d48e808992e6a07b3d4e2", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|742f24583a476d5f73b24e7ec3ac62ae70c1dc1f854d48e808992e6a07b3d4e2"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/src/models/functional.py"}, "region": {"startLine": 242}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "Bare except continues silently"}, "properties": {"repobilityId": 77604, "scanner": "repobility-ast-engine", "fingerprint": "fe40a7f4f599099266ec0b54db5ae1fa79104025cb6d4b73efee4b6c1cbd2f1d", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|fe40a7f4f599099266ec0b54db5ae1fa79104025cb6d4b73efee4b6c1cbd2f1d"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/src/models/sequential.py"}, "region": {"startLine": 167}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "Bare except continues silently"}, "properties": {"repobilityId": 77603, "scanner": "repobility-ast-engine", "fingerprint": "5e57a325a4d0b0db931fb620666ad329c173e64461ab3ad051fd6cb6e1b2d846", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|5e57a325a4d0b0db931fb620666ad329c173e64461ab3ad051fd6cb6e1b2d846"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/src/trainers/compile_utils.py"}, "region": {"startLine": 764}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "Bare except continues silently"}, "properties": {"repobilityId": 77602, "scanner": "repobility-ast-engine", "fingerprint": "d5ec09bdf71f1d85c08a1d58d58a1b26e6013ff9d3f61fbf79f09f6feadf709c", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|d5ec09bdf71f1d85c08a1d58d58a1b26e6013ff9d3f61fbf79f09f6feadf709c"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/src/trainers/compile_utils.py"}, "region": {"startLine": 757}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "Bare except continues silently"}, "properties": {"repobilityId": 77601, "scanner": "repobility-ast-engine", "fingerprint": "c4d53a06ca7421d1906e6e7c7562d281cccd11d77f2759dd4fb68ba9adda9b66", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|c4d53a06ca7421d1906e6e7c7562d281cccd11d77f2759dd4fb68ba9adda9b66"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/src/trainers/compile_utils.py"}, "region": {"startLine": 665}}}]}, {"ruleId": "MINED109", "level": "warning", "message": {"text": "Mutable default argument in `test_fit_with_data_adapter` (dict)"}, "properties": {"repobilityId": 77600, "scanner": "repobility-ast-engine", "fingerprint": "e8c73a511f727555de9acdc008e8a694b92409b7b17de98f833da06a91f1b27a", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "mutable-default-arg", "owasp": null, "cwe_ids": ["CWE-1023"], "languages": ["python"], "observations_count": 64867}, "scanner": "repobility-ast-engine", "correlation_key": "fp|e8c73a511f727555de9acdc008e8a694b92409b7b17de98f833da06a91f1b27a"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/src/trainers/trainer_test.py"}, "region": {"startLine": 662}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "Bare except continues silently"}, "properties": {"repobilityId": 77599, "scanner": "repobility-ast-engine", "fingerprint": "26e82a7c1b547b2d030e6efdccd82ea6882c35e821b43ad57d644dfa49cdac85", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|26e82a7c1b547b2d030e6efdccd82ea6882c35e821b43ad57d644dfa49cdac85"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/src/wrappers/sklearn_test.py"}, "region": {"startLine": 211}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "Bare except continues silently"}, "properties": {"repobilityId": 77598, "scanner": "repobility-ast-engine", "fingerprint": "8cf76d94fce8c107b0487a4aa8fd1ec75d6a95c8d0d9654739252f9f3c712a2a", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|8cf76d94fce8c107b0487a4aa8fd1ec75d6a95c8d0d9654739252f9f3c712a2a"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/src/wrappers/sklearn_test.py"}, "region": {"startLine": 157}}}]}, {"ruleId": "MINED109", "level": "warning", "message": {"text": "Mutable default argument in `dynamic_model` (list)"}, "properties": {"repobilityId": 77597, "scanner": "repobility-ast-engine", "fingerprint": "c0e3e35c7a128d93997488c37dec62ad132acdcc2f8d9bb0d97d0d61dde4bd3c", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "mutable-default-arg", "owasp": null, "cwe_ids": ["CWE-1023"], "languages": ["python"], "observations_count": 64867}, "scanner": "repobility-ast-engine", "correlation_key": "fp|c0e3e35c7a128d93997488c37dec62ad132acdcc2f8d9bb0d97d0d61dde4bd3c"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/src/wrappers/sklearn_test.py"}, "region": {"startLine": 61}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "Bare except continues silently"}, "properties": {"repobilityId": 77596, "scanner": "repobility-ast-engine", "fingerprint": "ec047d92c2b0c37f4a1668b3832c37fd3ecef99a126d97ffbdb44ae5722ca485", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|ec047d92c2b0c37f4a1668b3832c37fd3ecef99a126d97ffbdb44ae5722ca485"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/src/ops/core.py"}, "region": {"startLine": 1106}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "Bare except continues silently"}, "properties": {"repobilityId": 77595, "scanner": "repobility-ast-engine", "fingerprint": "9e5a805debd8304ee2bb478c29493a5847088e9c8cf8235ea418631086f3115a", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|9e5a805debd8304ee2bb478c29493a5847088e9c8cf8235ea418631086f3115a"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/src/ops/numpy.py"}, "region": {"startLine": 7152}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "Bare except continues silently"}, "properties": {"repobilityId": 77594, "scanner": "repobility-ast-engine", "fingerprint": "f44241bd27c8d460c47cf75b7927fc5714c110221b2ad833a511d613b407c005", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|f44241bd27c8d460c47cf75b7927fc5714c110221b2ad833a511d613b407c005"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/src/layers/layer.py"}, "region": {"startLine": 1612}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "Bare except continues silently"}, "properties": {"repobilityId": 77593, "scanner": "repobility-ast-engine", "fingerprint": "689065c1621c7b9a6d792449ccaa4f67cc5ddbcde19a2d02d34d257dd0657cb6", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|689065c1621c7b9a6d792449ccaa4f67cc5ddbcde19a2d02d34d257dd0657cb6"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/src/layers/layer.py"}, "region": {"startLine": 1568}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "Bare except continues silently"}, "properties": {"repobilityId": 77592, "scanner": "repobility-ast-engine", "fingerprint": "6ed1d609ea34b8da137f7eebf627e26828fe1537a349b65616384e021e31aeaf", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|6ed1d609ea34b8da137f7eebf627e26828fe1537a349b65616384e021e31aeaf"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/src/layers/layer.py"}, "region": {"startLine": 1597}}}]}, {"ruleId": "MINED109", "level": "warning", "message": {"text": "Mutable default argument in `test_sparse_correctness` (dict)"}, "properties": {"repobilityId": 77591, "scanner": "repobility-ast-engine", "fingerprint": "0d8423edcff7d18f4666c2a8df5eb198e6d0647276b3a2b0b177eac7703f1797", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "mutable-default-arg", "owasp": null, "cwe_ids": ["CWE-1023"], "languages": ["python"], "observations_count": 64867}, "scanner": "repobility-ast-engine", "correlation_key": "fp|0d8423edcff7d18f4666c2a8df5eb198e6d0647276b3a2b0b177eac7703f1797"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/src/optimizers/optimizer_sparse_test.py"}, "region": {"startLine": 250}}}]}, {"ruleId": "MINED109", "level": "warning", "message": {"text": "Mutable default argument in `test_sparse_gradients` (dict)"}, "properties": {"repobilityId": 77590, "scanner": "repobility-ast-engine", "fingerprint": "04ae75d85e21067ddbfef3c28beb0492bc12032a34dde9733707cb37dd0e78a1", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "mutable-default-arg", "owasp": null, "cwe_ids": ["CWE-1023"], "languages": ["python"], "observations_count": 64867}, "scanner": "repobility-ast-engine", "correlation_key": "fp|04ae75d85e21067ddbfef3c28beb0492bc12032a34dde9733707cb37dd0e78a1"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/src/optimizers/optimizer_sparse_test.py"}, "region": {"startLine": 135}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "Bare except continues silently"}, "properties": {"repobilityId": 77588, "scanner": "repobility-ast-engine", "fingerprint": "1c0e2fb1d27ba338f46f557cb17d041d56471f60314919b7a77d2ce7ea6a289c", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|1c0e2fb1d27ba338f46f557cb17d041d56471f60314919b7a77d2ce7ea6a289c"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/src/callbacks/tensorboard.py"}, "region": {"startLine": 688}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "Bare except continues silently"}, "properties": {"repobilityId": 77587, "scanner": "repobility-ast-engine", "fingerprint": "decde601084070bb500cd1654c296b59926860e46d825b2542b1e3e481c52302", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|decde601084070bb500cd1654c296b59926860e46d825b2542b1e3e481c52302"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/src/saving/saving_lib.py"}, "region": {"startLine": 514}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "Bare except continues silently"}, "properties": {"repobilityId": 77586, "scanner": "repobility-ast-engine", "fingerprint": "81cfa33aa5d329e7c3a27e8f4f007280b1429b109fb64cbe3034d35afff2facf", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|81cfa33aa5d329e7c3a27e8f4f007280b1429b109fb64cbe3034d35afff2facf"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/src/saving/saving_lib.py"}, "region": {"startLine": 229}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "Bare except continues silently"}, "properties": {"repobilityId": 77585, "scanner": "repobility-ast-engine", "fingerprint": "f37aa62a8cf6533631829d8af1c09e884b364f2c9db35101f88163f0d390b12d", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|f37aa62a8cf6533631829d8af1c09e884b364f2c9db35101f88163f0d390b12d"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/src/saving/saving_lib.py"}, "region": {"startLine": 856}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "Bare except continues silently"}, "properties": {"repobilityId": 77584, "scanner": "repobility-ast-engine", "fingerprint": "7ed3e2ccd4f3c506208b18e62867b4265de775d17da88b2b8a11caaca865db4f", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|7ed3e2ccd4f3c506208b18e62867b4265de775d17da88b2b8a11caaca865db4f"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/src/saving/saving_lib.py"}, "region": {"startLine": 844}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "Bare except continues silently"}, "properties": {"repobilityId": 77583, "scanner": "repobility-ast-engine", "fingerprint": "505e646971d902967468d588553d45f9979b79b0d0c9955d27ecff32d819e8c9", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|505e646971d902967468d588553d45f9979b79b0d0c9955d27ecff32d819e8c9"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/src/saving/saving_lib.py"}, "region": {"startLine": 737}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "Bare except continues silently"}, "properties": {"repobilityId": 77564, "scanner": "repobility-ast-engine", "fingerprint": "cc9cadf487bb5b1f835401be4104a9c95566d66ebfc5d19f5f1720ef89a005e8", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|cc9cadf487bb5b1f835401be4104a9c95566d66ebfc5d19f5f1720ef89a005e8"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "integration_tests/pytorch_export_test.py"}, "region": {"startLine": 179}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "Bare except continues silently"}, "properties": {"repobilityId": 77563, "scanner": "repobility-ast-engine", "fingerprint": "1a87f5b09e5b102c0a39ead095eac57c0e0aaf2fc66c6fcfc635bcbe1c597075", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|1a87f5b09e5b102c0a39ead095eac57c0e0aaf2fc66c6fcfc635bcbe1c597075"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "integration_tests/pytorch_export_test.py"}, "region": {"startLine": 163}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "Bare except continues silently"}, "properties": {"repobilityId": 77562, "scanner": "repobility-ast-engine", "fingerprint": "592ba83559529da1c5f80f43a5ac128bd6819580f554ce38572f9b165e84ca49", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|592ba83559529da1c5f80f43a5ac128bd6819580f554ce38572f9b165e84ca49"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "integration_tests/pytorch_export_test.py"}, "region": {"startLine": 102}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "Bare except continues silently"}, "properties": {"repobilityId": 77561, "scanner": "repobility-ast-engine", "fingerprint": "1a6e2a56e084dcda456ffa2ee6e9fa544e74f954f4a104c623a7119cbc10748f", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|1a6e2a56e084dcda456ffa2ee6e9fa544e74f954f4a104c623a7119cbc10748f"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "integration_tests/pytorch_export_test.py"}, "region": {"startLine": 297}}}]}, {"ruleId": "MINED111", "level": "warning", "message": {"text": "Bare except continues silently"}, "properties": {"repobilityId": 77560, "scanner": "repobility-ast-engine", "fingerprint": "5788c3a296c0da380c9e9760d58a50b220583dd2ed96ac12f7c803cb421d12d9", "category": "quality", "severity": "medium", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "bare-except-without-pass", "owasp": null, "cwe_ids": [], "languages": ["python"], "observations_count": 21610}, "scanner": "repobility-ast-engine", "correlation_key": "fp|5788c3a296c0da380c9e9760d58a50b220583dd2ed96ac12f7c803cb421d12d9"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "integration_tests/pytorch_export_test.py"}, "region": {"startLine": 246}}}]}, {"ruleId": "COMP001", "level": "note", "message": {"text": "[COMP001] High cognitive complexity: Function `benchmark_train` has cognitive complexity 11 (SonarSource scale). Cognitive complexity measures how hard the function is for a human to understand \u2014 nested branches, boolean chains, and recursion all weigh in. Breakdown: else=2, for=1, if=4, nested_bonus=4."}, "properties": {"repobilityId": 77689, "scanner": "repobility-threat-engine", "fingerprint": "2582054463a67a33e2e1aa3601c254213e5506de014b93f1a3f762703ea7a340", "category": "quality", "severity": "low", "confidence": 0.95, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "AST-derived cognitive complexity score = 11 (severity threshold for low: 8+).", "evidence": {"scanner": "repobility-threat-engine", "function": "benchmark_train", "breakdown": {"if": 4, "for": 1, "else": 2, "nested_bonus": 4}, "complexity": 11, "correlation_key": "fp|2582054463a67a33e2e1aa3601c254213e5506de014b93f1a3f762703ea7a340"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "benchmarks/layer_benchmark/base_benchmark.py"}, "region": {"startLine": 223}}}]}, {"ruleId": "DEPCUR-GHA", "level": "note", "message": {"text": "GitHub Action `actions/setup-python@v6` is minor version(s) behind (latest v6.2.0)"}, "properties": {"repobilityId": 77678, "scanner": "repobility-dependency-currency", "fingerprint": "7a61a79c57bc5a4559a63103e927ca318f625dab3ad01c1dba132fa2a413fc3c", "category": "dependency", "severity": "low", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"gap": "minor version(s) behind", "signal": "currency", "cwe_ids": ["CWE-1104"], "package": "actions/setup-python", "scanner": "repobility-dependency-currency", "ecosystem": "github-actions", "languages": ["yaml"], "latest_version": "v6.2.0", "correlation_key": "fp|7a61a79c57bc5a4559a63103e927ca318f625dab3ad01c1dba132fa2a413fc3c", "current_version": "v6"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/nightly.yml"}, "region": {"startLine": 26}}}]}, {"ruleId": "DEPCUR-GHA", "level": "note", "message": {"text": "GitHub Action `actions/setup-python@v6` is minor version(s) behind (latest v6.2.0)"}, "properties": {"repobilityId": 77674, "scanner": "repobility-dependency-currency", "fingerprint": "4ed303bacce0816cef0e09d86a0f32a2aada6b67dbc5c45af8c84464e544d3e9", "category": "dependency", "severity": "low", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"gap": "minor version(s) behind", "signal": "currency", "cwe_ids": ["CWE-1104"], "package": "actions/setup-python", "scanner": "repobility-dependency-currency", "ecosystem": "github-actions", "languages": ["yaml"], "latest_version": "v6.2.0", "correlation_key": "fp|4ed303bacce0816cef0e09d86a0f32a2aada6b67dbc5c45af8c84464e544d3e9", "current_version": "v6"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/actions.yml"}, "region": {"startLine": 166}}}]}, {"ruleId": "DEPCUR-GHA", "level": "note", "message": {"text": "GitHub Action `actions/stale@v10` is minor version(s) behind (latest v10.3.0)"}, "properties": {"repobilityId": 77670, "scanner": "repobility-dependency-currency", "fingerprint": "63952ed2066160d5e278a62dda129b05109fd8a2968f2c242b923f9cc429fdfb", "category": "dependency", "severity": "low", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"gap": "minor version(s) behind", "signal": "currency", "cwe_ids": ["CWE-1104"], "package": "actions/stale", "scanner": "repobility-dependency-currency", "ecosystem": "github-actions", "languages": ["yaml"], "latest_version": "v10.3.0", "correlation_key": "fp|63952ed2066160d5e278a62dda129b05109fd8a2968f2c242b923f9cc429fdfb", "current_version": "v10"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/stale-issue-pr.yaml"}, "region": {"startLine": 16}}}]}, {"ruleId": "DEPCUR-PY", "level": "note", "message": {"text": "Python package `tensorflow-tpu` is minor version(s) behind (2.19.1 -> 2.20.0)"}, "properties": {"repobilityId": 77669, "scanner": "repobility-dependency-currency", "fingerprint": "7e9ecf2cb26f8a850f8bee3bb63b4e158ab789a8f188fa4c0711f27d25301f91", "category": "dependency", "severity": "low", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"gap": "minor version(s) behind", "signal": "currency", "cwe_ids": [], "package": "tensorflow-tpu", "scanner": "repobility-dependency-currency", "ecosystem": "pypi", "languages": ["python"], "latest_version": "2.20.0", "correlation_key": "fp|7e9ecf2cb26f8a850f8bee3bb63b4e158ab789a8f188fa4c0711f27d25301f91", "current_version": "2.19.1"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "requirements-tensorflow-tpu.txt"}, "region": {"startLine": 3}}}]}, {"ruleId": "DEPCUR-PY", "level": "note", "message": {"text": "Python package `tensorflow` is minor version(s) behind (2.20.0 -> 2.21.0)"}, "properties": {"repobilityId": 77668, "scanner": "repobility-dependency-currency", "fingerprint": "d650c884ff298121096889a1081b6a7f583f69ce2e060de26aea6874bb2deafa", "category": "dependency", "severity": "low", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"gap": "minor version(s) behind", "signal": "currency", "cwe_ids": [], "package": "tensorflow", "scanner": "repobility-dependency-currency", "ecosystem": "pypi", "languages": ["python"], "latest_version": "2.21.0", "correlation_key": "fp|d650c884ff298121096889a1081b6a7f583f69ce2e060de26aea6874bb2deafa", "current_version": "2.20.0"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "requirements-tensorflow-cuda.txt"}, "region": {"startLine": 2}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 77527, "scanner": "repobility-ai-code-hygiene", "fingerprint": "1fc56bc98257febd3c9f8c695119271eb8e8354c2c85691b6787c8550245a96e", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "keras/api/_tf_keras/keras/saving/__init__.py", "duplicate_line": 6, "correlation_key": "fp|1fc56bc98257febd3c9f8c695119271eb8e8354c2c85691b6787c8550245a96e"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/api/utils/__init__.py"}, "region": {"startLine": 16}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 77526, "scanner": "repobility-ai-code-hygiene", "fingerprint": "3c2d4d9b33b0320113356d2055c47d0156444b6d9e0cd5260ab88c425302bfc1", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "keras/api/_tf_keras/keras/utils/__init__.py", "duplicate_line": 1, "correlation_key": "fp|3c2d4d9b33b0320113356d2055c47d0156444b6d9e0cd5260ab88c425302bfc1"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/api/utils/__init__.py"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 77525, "scanner": "repobility-ai-code-hygiene", "fingerprint": "e52a1c7dc45d86cc15bdde248cef70fabe66e39c028e4bca97be2bbf32fc7024", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "keras/api/_tf_keras/keras/saving/__init__.py", "duplicate_line": 1, "correlation_key": "fp|e52a1c7dc45d86cc15bdde248cef70fabe66e39c028e4bca97be2bbf32fc7024"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/api/saving/__init__.py"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 77524, "scanner": "repobility-ai-code-hygiene", "fingerprint": "b8eb950cd042dbc7bf64c641ac89d5583ccf4d6906d2b4a27462643ab4ad0be4", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "keras/api/_tf_keras/keras/quantizers/__init__.py", "duplicate_line": 9, "correlation_key": "fp|b8eb950cd042dbc7bf64c641ac89d5583ccf4d6906d2b4a27462643ab4ad0be4"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/api/quantizers/__init__.py"}, "region": {"startLine": 9}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 77523, "scanner": "repobility-ai-code-hygiene", "fingerprint": "57c9aaba1336a012730f2ed64ee1c39668babc17ec54845032afa24a92ef4aae", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "keras/api/_tf_keras/keras/optimizers/schedules/__init__.py", "duplicate_line": 1, "correlation_key": "fp|57c9aaba1336a012730f2ed64ee1c39668babc17ec54845032afa24a92ef4aae"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/api/optimizers/schedules/__init__.py"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 77522, "scanner": "repobility-ai-code-hygiene", "fingerprint": "5f4f01f36880cc088fb85254b74ec09d7c702bf587356d85a3f285c4922e571d", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "keras/api/_tf_keras/keras/metrics/__init__.py", "duplicate_line": 1, "correlation_key": "fp|5f4f01f36880cc088fb85254b74ec09d7c702bf587356d85a3f285c4922e571d"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/api/metrics/__init__.py"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 77521, "scanner": "repobility-ai-code-hygiene", "fingerprint": "5724ca2fcd3ae36bda728c6d2d6bc25192a60e8ab2a487e8a8ee767724aef50a", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "keras/api/_tf_keras/keras/losses/__init__.py", "duplicate_line": 11, "correlation_key": "fp|5724ca2fcd3ae36bda728c6d2d6bc25192a60e8ab2a487e8a8ee767724aef50a"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/api/losses/__init__.py"}, "region": {"startLine": 10}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 77520, "scanner": "repobility-ai-code-hygiene", "fingerprint": "75f90340ead6e5fb0244512a5862beada90ffe75e780347dca7b1c5aff54edd1", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "keras/api/_tf_keras/keras/layers/__init__.py", "duplicate_line": 19, "correlation_key": "fp|75f90340ead6e5fb0244512a5862beada90ffe75e780347dca7b1c5aff54edd1"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/api/layers/__init__.py"}, "region": {"startLine": 19}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 77519, "scanner": "repobility-ai-code-hygiene", "fingerprint": "6ba487079d173b5ada05bc7ed11ab05ccb6c0a7dd650c9ef08ad487eff1f605c", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "keras/api/_tf_keras/keras/initializers/__init__.py", "duplicate_line": 22, "correlation_key": "fp|6ba487079d173b5ada05bc7ed11ab05ccb6c0a7dd650c9ef08ad487eff1f605c"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/api/initializers/__init__.py"}, "region": {"startLine": 22}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 77518, "scanner": "repobility-ai-code-hygiene", "fingerprint": "9b2ded19cd9c277f1ad241c783fc2bbe4365017386e7354d63a84f145e4fca8a", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "keras/api/_tf_keras/keras/dtype_policies/__init__.py", "duplicate_line": 8, "correlation_key": "fp|9b2ded19cd9c277f1ad241c783fc2bbe4365017386e7354d63a84f145e4fca8a"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/api/dtype_policies/__init__.py"}, "region": {"startLine": 8}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 77517, "scanner": "repobility-ai-code-hygiene", "fingerprint": "f0b41b15f6f283b96df2df59db68d7a873b69ea8d00c02e3c283e6d84c7a5edb", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "keras/api/_tf_keras/keras/distillation/__init__.py", "duplicate_line": 1, "correlation_key": "fp|f0b41b15f6f283b96df2df59db68d7a873b69ea8d00c02e3c283e6d84c7a5edb"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/api/distillation/__init__.py"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 77516, "scanner": "repobility-ai-code-hygiene", "fingerprint": "6999c1ee2ecb01c919f797c5fa60bc2ac47131a8a08e8fba407ed49c2159bc36", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "keras/api/_tf_keras/keras/config/__init__.py", "duplicate_line": 1, "correlation_key": "fp|6999c1ee2ecb01c919f797c5fa60bc2ac47131a8a08e8fba407ed49c2159bc36"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/api/config/__init__.py"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 77515, "scanner": "repobility-ai-code-hygiene", "fingerprint": "722461b58ec8099fbd9bf7c2b58fcffea3eaeb70eb26145ddea208534f739157", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "keras/api/_tf_keras/keras/callbacks/__init__.py", "duplicate_line": 14, "correlation_key": "fp|722461b58ec8099fbd9bf7c2b58fcffea3eaeb70eb26145ddea208534f739157"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/api/callbacks/__init__.py"}, "region": {"startLine": 14}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 77514, "scanner": "repobility-ai-code-hygiene", "fingerprint": "cbde15e1c2d8df603c710b3d8af827b3e953d112a2ea28d1351b1dd413bc64b1", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "keras/api/_tf_keras/keras/applications/resnet_v2/__init__.py", "duplicate_line": 1, "correlation_key": "fp|cbde15e1c2d8df603c710b3d8af827b3e953d112a2ea28d1351b1dd413bc64b1"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/api/applications/resnet_v2/__init__.py"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 77513, "scanner": "repobility-ai-code-hygiene", "fingerprint": "652e3cf9ff8fa48b3c61e0b94a2d36d996dc31dd6825ac487489e3ecde478293", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "keras/api/_tf_keras/keras/applications/inception_resnet_v2/__init__.py", "duplicate_line": 1, "correlation_key": "fp|652e3cf9ff8fa48b3c61e0b94a2d36d996dc31dd6825ac487489e3ecde478293"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/api/applications/inception_resnet_v2/__init__.py"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 77512, "scanner": "repobility-ai-code-hygiene", "fingerprint": "4b461e561ee4fd0f9aa8b3d17e5427fcc3068d982b976b47990a7cca529ca486", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "keras/api/_tf_keras/keras/applications/__init__.py", "duplicate_line": 38, "correlation_key": "fp|4b461e561ee4fd0f9aa8b3d17e5427fcc3068d982b976b47990a7cca529ca486"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/api/applications/efficientnet_v2/__init__.py"}, "region": {"startLine": 5}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 77511, "scanner": "repobility-ai-code-hygiene", "fingerprint": "ff828b473bb7f32242b6974aa7a3c81d5e7cb7b84f4f9084b2ec09708d3f2431", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "keras/api/_tf_keras/keras/applications/efficientnet_v2/__init__.py", "duplicate_line": 1, "correlation_key": "fp|ff828b473bb7f32242b6974aa7a3c81d5e7cb7b84f4f9084b2ec09708d3f2431"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/api/applications/efficientnet_v2/__init__.py"}, "region": {"startLine": 1}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 77510, "scanner": "repobility-ai-code-hygiene", "fingerprint": "87581133bc27eebf0c97cc34198621fe80544aab7c665d472276c2c255bf01fc", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "keras/api/_tf_keras/keras/applications/__init__.py", "duplicate_line": 37, "correlation_key": "fp|87581133bc27eebf0c97cc34198621fe80544aab7c665d472276c2c255bf01fc"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/api/applications/__init__.py"}, "region": {"startLine": 37}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 77509, "scanner": "repobility-ai-code-hygiene", "fingerprint": "5bb94d8c07122ef4ce730f4b53abf17d8b1f636c0cdfa6103cc041f59c54c909", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "keras/api/_tf_keras/keras/saving/__init__.py", "duplicate_line": 6, "correlation_key": "fp|5bb94d8c07122ef4ce730f4b53abf17d8b1f636c0cdfa6103cc041f59c54c909"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/api/_tf_keras/keras/utils/__init__.py"}, "region": {"startLine": 16}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 77508, "scanner": "repobility-ai-code-hygiene", "fingerprint": "a47b285ddf38e61017d931fc3ce087fe35513aed6ccb95565aed18b439a31813", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "keras/api/_tf_keras/keras/applications/__init__.py", "duplicate_line": 38, "correlation_key": "fp|a47b285ddf38e61017d931fc3ce087fe35513aed6ccb95565aed18b439a31813"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/api/_tf_keras/keras/applications/efficientnet_v2/__init__.py"}, "region": {"startLine": 5}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 77507, "scanner": "repobility-ai-code-hygiene", "fingerprint": "09d766525b68117c247aa56c25b2683562f2b5b283f9d9f460d5ea5bd806e67b", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "guides/writing_a_custom_training_loop_in_jax.py", "duplicate_line": 15, "correlation_key": "fp|09d766525b68117c247aa56c25b2683562f2b5b283f9d9f460d5ea5bd806e67b"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "guides/writing_a_custom_training_loop_in_torch.py"}, "region": {"startLine": 14}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 77506, "scanner": "repobility-ai-code-hygiene", "fingerprint": "cdfbac4d14816014b35d3666411b7544af6f4913e227bf9d31f481ae48d7902c", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "guides/writing_a_custom_training_loop_in_jax.py", "duplicate_line": 14, "correlation_key": "fp|cdfbac4d14816014b35d3666411b7544af6f4913e227bf9d31f481ae48d7902c"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "guides/writing_a_custom_training_loop_in_tensorflow.py"}, "region": {"startLine": 14}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 77505, "scanner": "repobility-ai-code-hygiene", "fingerprint": "5d38fe8f68d2665aa2f886ff592148e3459000fefb14c82891d3d06f10df6a2b", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "guides/distributed_training_with_tensorflow.py", "duplicate_line": 120, "correlation_key": "fp|5d38fe8f68d2665aa2f886ff592148e3459000fefb14c82891d3d06f10df6a2b"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "guides/training_with_built_in_methods.py"}, "region": {"startLine": 792}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 77504, "scanner": "repobility-ai-code-hygiene", "fingerprint": "7980077570dde8d4cf1fbd4f995974d359998f4b5b2fe1460b1ba26dd5396f3b", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "guides/functional_api.py", "duplicate_line": 428, "correlation_key": "fp|7980077570dde8d4cf1fbd4f995974d359998f4b5b2fe1460b1ba26dd5396f3b"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "guides/making_new_layers_and_models_via_subclassing.py"}, "region": {"startLine": 114}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 77503, "scanner": "repobility-ai-code-hygiene", "fingerprint": "30f3c5d0956cbf5d08b9755619e710ec0c762a8aa7c2e8b7142d75b1a482f3c6", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "guides/distributed_training_with_tensorflow.py", "duplicate_line": 33, "correlation_key": "fp|30f3c5d0956cbf5d08b9755619e710ec0c762a8aa7c2e8b7142d75b1a482f3c6"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "guides/distributed_training_with_torch.py"}, "region": {"startLine": 100}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 77502, "scanner": "repobility-ai-code-hygiene", "fingerprint": "466fee488e76d7a1e06e6e761d8f4852e4a49648891693f5f8ef4a56cb7cb0d8", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "guides/distributed_training_with_jax.py", "duplicate_line": 7, "correlation_key": "fp|466fee488e76d7a1e06e6e761d8f4852e4a49648891693f5f8ef4a56cb7cb0d8"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "guides/distributed_training_with_torch.py"}, "region": {"startLine": 7}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 77501, "scanner": "repobility-ai-code-hygiene", "fingerprint": "d802532b8750679cefb501a6d9d13610c43e7746d3336b34ba282bcddc9422da", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "guides/distributed_training_with_jax.py", "duplicate_line": 7, "correlation_key": "fp|d802532b8750679cefb501a6d9d13610c43e7746d3336b34ba282bcddc9422da"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "guides/distributed_training_with_tensorflow.py"}, "region": {"startLine": 7}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 77500, "scanner": "repobility-ai-code-hygiene", "fingerprint": "1a707dea64e71de39654a757a318e5f31d21103e359092bdb21112d5418a06ab", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "guides/custom_train_step_in_tensorflow.py", "duplicate_line": 36, "correlation_key": "fp|1a707dea64e71de39654a757a318e5f31d21103e359092bdb21112d5418a06ab"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "guides/custom_train_step_in_torch.py"}, "region": {"startLine": 36}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 77499, "scanner": "repobility-ai-code-hygiene", "fingerprint": "4be5510cc749b8980a6c1b9aae9139658924a524c8d8b4f1b499a12f60e52297", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "guides/custom_train_step_in_jax.py", "duplicate_line": 7, "correlation_key": "fp|4be5510cc749b8980a6c1b9aae9139658924a524c8d8b4f1b499a12f60e52297"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "guides/custom_train_step_in_torch.py"}, "region": {"startLine": 7}}}]}, {"ruleId": "AIC003", "level": "note", "message": {"text": "Duplicated implementation block across source files"}, "properties": {"repobilityId": 77498, "scanner": "repobility-ai-code-hygiene", "fingerprint": "62cbb7619852e07f3c4971c2060441442f16f22c2f0ae84bb6b37e1c604e38b2", "category": "quality", "severity": "low", "confidence": 0.86, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "A normalized source-code window appears in two different non-test files.", "evidence": {"lines": 12, "rule_id": "AIC003", "scanner": "repobility-ai-code-hygiene", "references": ["https://jscpd.dev/"], "duplicate_file": "guides/custom_train_step_in_jax.py", "duplicate_line": 7, "correlation_key": "fp|62cbb7619852e07f3c4971c2060441442f16f22c2f0ae84bb6b37e1c604e38b2"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "guides/custom_train_step_in_tensorflow.py"}, "region": {"startLine": 7}}}]}, {"ruleId": "SEC020", "level": "none", "message": {"text": "[SEC020] Secret Printed to Logs: Debug or diagnostic code appears to print a credential-bearing value. This is a frequent AI-assisted coding failure: the helper exposes the exact value needed for troubleshooting."}, "properties": {"repobilityId": 77726, "scanner": "repobility-threat-engine", "fingerprint": "c3f050fd8a050cf5f5d95dd8c57d982ef550538838af15e0cf6bed096aed4a4a", "category": "credential_exposure", "severity": "info", "confidence": 0.1, "triageState": "false_positive", "verdict": "likely_fp", "isResolved": true, "reason": "Safe context pattern detected", "evidence": {"match": "print(f\"keys: {list(config.keys()", "reason": "Safe context pattern detected", "rule_id": "SEC020", "scanner": "repobility-threat-engine", "confidence": 0.1, "correlation_key": "secret|keras/src/utils/config.py|4|print f keys: list config.keys"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/src/utils/config.py"}, "region": {"startLine": 49}}}]}, {"ruleId": "SEC045", "level": "none", "message": {"text": "[SEC045] eval()/exec() on stored or user-supplied data: eval() and exec() on data \u2014 even admin-stored data \u2014 is a lateral-movement vector after any one credential compromise. Sandboxes (__builtins__ cleared) are escapable: attackers use object introspection (().__class__.__mro__[-1].__subclasses__()) to reach os.system. CWE-95 (eval injection)."}, "properties": {"repobilityId": 77722, "scanner": "repobility-threat-engine", "fingerprint": "114d13e93da126b00ceac05ef2dbc327556e346a71bf9af2a50c3fb8c5973779", "category": "injection", "severity": "info", "confidence": 0.1, "triageState": "false_positive", "verdict": "likely_fp", "isResolved": true, "reason": "Safe pattern '\\.eval\\(' detected on same line", "evidence": {"match": ".eval(", "reason": "Safe pattern '\\.eval\\(' detected on same line", "rule_id": "SEC045", "scanner": "repobility-threat-engine", "confidence": 0.1, "correlation_key": "code|injection|token|122|sec045"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/src/utils/torch_utils.py"}, "region": {"startLine": 122}}}]}, {"ruleId": "SEC045", "level": "none", "message": {"text": "[SEC045] eval()/exec() on stored or user-supplied data: eval() and exec() on data \u2014 even admin-stored data \u2014 is a lateral-movement vector after any one credential compromise. Sandboxes (__builtins__ cleared) are escapable: attackers use object introspection (().__class__.__mro__[-1].__subclasses__()) to reach os.system. CWE-95 (eval injection)."}, "properties": {"repobilityId": 77721, "scanner": "repobility-threat-engine", "fingerprint": "faff59dda4f37fe9ddef58704304d18b8aaef20fdbfdec0397fb5f9e0f83273b", "category": "injection", "severity": "info", "confidence": 0.1, "triageState": "false_positive", "verdict": "likely_fp", "isResolved": true, "reason": "Safe pattern '\\.eval\\(' detected on same line", "evidence": {"match": ".eval(", "reason": "Safe pattern '\\.eval\\(' detected on same line", "rule_id": "SEC045", "scanner": "repobility-threat-engine", "confidence": 0.1, "correlation_key": "code|injection|token|128|sec045"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/src/export/openvino.py"}, "region": {"startLine": 128}}}]}, {"ruleId": "MINED067", "level": "none", "message": {"text": "[MINED067] Python Requests No Timeout: requests.get/post/etc. without timeout= can hang forever."}, "properties": {"repobilityId": 77718, "scanner": "repobility-threat-engine", "fingerprint": "ee51d8052d5602e8edd3fcc29573bc6c9acea904bc5b9422d0185ee6acc887c8", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "python-requests-no-timeout", "owasp": null, "cwe_ids": ["CWE-400"], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348058+00:00", "triaged_in_corpus": 12, "observations_count": 45429, "ai_coder_pattern_id": 122}, "scanner": "repobility-threat-engine", "correlation_key": "fp|ee51d8052d5602e8edd3fcc29573bc6c9acea904bc5b9422d0185ee6acc887c8"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/src/callbacks/remote_monitor.py"}, "region": {"startLine": 70}}}]}, {"ruleId": "MINED077", "level": "none", "message": {"text": "[MINED077] Python Open No Context: fp = open(path) outside with-block leaks file handles."}, "properties": {"repobilityId": 77716, "scanner": "repobility-threat-engine", "fingerprint": "eee0b7be1b153350a90c6af5dde3398d053442b3febd6a04d3e1e63b2aa4982e", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "python-open-no-context", "owasp": null, "cwe_ids": ["CWE-772"], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348081+00:00", "triaged_in_corpus": 12, "observations_count": 7864, "ai_coder_pattern_id": 123}, "scanner": "repobility-threat-engine", "correlation_key": "fp|eee0b7be1b153350a90c6af5dde3398d053442b3febd6a04d3e1e63b2aa4982e"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/src/callbacks/lambda_callback.py"}, "region": {"startLine": 44}}}]}, {"ruleId": "MINED001", "level": "none", "message": {"text": "[MINED001] Bare Except Pass (and 4 more): Same pattern found in 4 additional files. Review if needed."}, "properties": {"repobilityId": 77715, "scanner": "repobility-threat-engine", "fingerprint": "c0243c95a960df79d347d546f02c8d708977edbd4a97478c529e24c680ef3789", "category": "quality", "severity": "info", "confidence": 0.2, "triageState": "false_positive", "verdict": "likely_fp", "isResolved": true, "reason": "Deduplicated summary only: 4 additional occurrences found. The top occurrences remain visible as actionable findings.", "evidence": {"mined": true, "mining": {"slug": "bare-except-pass", "owasp": null, "cwe_ids": ["CWE-755"], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.347744+00:00", "triaged_in_corpus": 15, "observations_count": 1550824, "ai_coder_pattern_id": 6}, "scanner": "repobility-threat-engine", "aggregated": true, "correlation_key": "fp|c0243c95a960df79d347d546f02c8d708977edbd4a97478c529e24c680ef3789", "aggregated_count": 4}}}, {"ruleId": "SEC128", "level": "none", "message": {"text": "[SEC128] Async function without await \u2014 fire-and-forget Promise (AI mistake) (and 38 more): Same pattern found in 38 additional files. Review if needed."}, "properties": {"repobilityId": 77711, "scanner": "repobility-threat-engine", "fingerprint": "627907eaffea66f024e4219e19a79ac27a6dc4100784b2eb06fc4901d3f3cc8c", "category": "quality", "severity": "info", "confidence": 0.2, "triageState": "false_positive", "verdict": "likely_fp", "isResolved": true, "reason": "Deduplicated summary only: 38 additional occurrences found. The top occurrences remain visible as actionable findings.", "evidence": {"reason": "Deduplicated summary only: 38 additional occurrences found. The top occurrences remain visible as actionable findings.", "rule_id": "SEC128", "scanner": "repobility-threat-engine", "confidence": 0.2, "correlation_key": "fp|627907eaffea66f024e4219e19a79ac27a6dc4100784b2eb06fc4901d3f3cc8c"}}}, {"ruleId": "SEC127", "level": "none", "message": {"text": "[SEC127] AI agent stub \u2014 TODO: implement / pass placeholder body (and 10 more): Same pattern found in 10 additional files. Review if needed."}, "properties": {"repobilityId": 77707, "scanner": "repobility-threat-engine", "fingerprint": "4325b02b6a7275c95101236e6839f88386e6df68c83990c52e265eb959c3ea12", "category": "quality", "severity": "info", "confidence": 0.2, "triageState": "false_positive", "verdict": "likely_fp", "isResolved": true, "reason": "Deduplicated summary only: 10 additional occurrences found. The top occurrences remain visible as actionable findings.", "evidence": {"reason": "Deduplicated summary only: 10 additional occurrences found. The top occurrences remain visible as actionable findings.", "rule_id": "SEC127", "scanner": "repobility-threat-engine", "confidence": 0.2, "correlation_key": "fp|4325b02b6a7275c95101236e6839f88386e6df68c83990c52e265eb959c3ea12"}}}, {"ruleId": "MINED072", "level": "none", "message": {"text": "[MINED072] Python Pass Only Class (and 5 more): Same pattern found in 5 additional files. Review if needed."}, "properties": {"repobilityId": 77703, "scanner": "repobility-threat-engine", "fingerprint": "60d7a967589ada85a8f90bdffdc921455ffd03cd63344433da4c765149b88c10", "category": "quality", "severity": "info", "confidence": 0.2, "triageState": "false_positive", "verdict": "likely_fp", "isResolved": true, "reason": "Deduplicated summary only: 5 additional occurrences found. The top occurrences remain visible as actionable findings.", "evidence": {"mined": true, "mining": {"slug": "python-pass-only-class", "owasp": null, "cwe_ids": ["CWE-1188"], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348069+00:00", "triaged_in_corpus": 10, "observations_count": 14245, "ai_coder_pattern_id": 143}, "scanner": "repobility-threat-engine", "aggregated": true, "correlation_key": "fp|60d7a967589ada85a8f90bdffdc921455ffd03cd63344433da4c765149b88c10", "aggregated_count": 5}}}, {"ruleId": "MINED072", "level": "none", "message": {"text": "[MINED072] Python Pass Only Class: class Foo: pass \u2014 stub waiting to be filled in."}, "properties": {"repobilityId": 77702, "scanner": "repobility-threat-engine", "fingerprint": "e0bb31bcdb985d05437730483288917347562747f87565983a6268133bdbe3d5", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "python-pass-only-class", "owasp": null, "cwe_ids": ["CWE-1188"], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348069+00:00", "triaged_in_corpus": 10, "observations_count": 14245, "ai_coder_pattern_id": 143}, "scanner": "repobility-threat-engine", "correlation_key": "fp|e0bb31bcdb985d05437730483288917347562747f87565983a6268133bdbe3d5"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/src/backend/numpy/layer.py"}, "region": {"startLine": 1}}}]}, {"ruleId": "MINED072", "level": "none", "message": {"text": "[MINED072] Python Pass Only Class: class Foo: pass \u2014 stub waiting to be filled in."}, "properties": {"repobilityId": 77701, "scanner": "repobility-threat-engine", "fingerprint": "f273d49faca860d0c58f6f6835eced323205a4b3c2d00ec528275413f99ce547", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "python-pass-only-class", "owasp": null, "cwe_ids": ["CWE-1188"], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348069+00:00", "triaged_in_corpus": 10, "observations_count": 14245, "ai_coder_pattern_id": 143}, "scanner": "repobility-threat-engine", "correlation_key": "fp|f273d49faca860d0c58f6f6835eced323205a4b3c2d00ec528275413f99ce547"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/src/backend/jax/layer.py"}, "region": {"startLine": 13}}}]}, {"ruleId": "MINED072", "level": "none", "message": {"text": "[MINED072] Python Pass Only Class: class Foo: pass \u2014 stub waiting to be filled in."}, "properties": {"repobilityId": 77700, "scanner": "repobility-threat-engine", "fingerprint": "4a6fd533ccfe94a8243f7622e89dc1bb3b38ab2e49fb695582fbe8a14efd295c", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "python-pass-only-class", "owasp": null, "cwe_ids": ["CWE-1188"], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348069+00:00", "triaged_in_corpus": 10, "observations_count": 14245, "ai_coder_pattern_id": 143}, "scanner": "repobility-threat-engine", "correlation_key": "fp|4a6fd533ccfe94a8243f7622e89dc1bb3b38ab2e49fb695582fbe8a14efd295c"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/src/backend/__init__.py"}, "region": {"startLine": 71}}}]}, {"ruleId": "MINED050", "level": "none", "message": {"text": "[MINED050] Stub Only Function (and 39 more): Same pattern found in 39 additional files. Review if needed."}, "properties": {"repobilityId": 77699, "scanner": "repobility-threat-engine", "fingerprint": "e1d0824fd87a4396316ec857cbfc9b07175283dae9e3104aec33525e95fcb439", "category": "quality", "severity": "info", "confidence": 0.2, "triageState": "false_positive", "verdict": "likely_fp", "isResolved": true, "reason": "Deduplicated summary only: 39 additional occurrences found. The top occurrences remain visible as actionable findings.", "evidence": {"mined": true, "mining": {"slug": "stub-only-function", "owasp": null, "cwe_ids": ["CWE-1188"], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348017+00:00", "triaged_in_corpus": 12, "observations_count": 633513, "ai_coder_pattern_id": 2}, "scanner": "repobility-threat-engine", "aggregated": true, "correlation_key": "fp|e1d0824fd87a4396316ec857cbfc9b07175283dae9e3104aec33525e95fcb439", "aggregated_count": 39}}}, {"ruleId": "MINED050", "level": "none", "message": {"text": "[MINED050] Stub Only Function: Function declared but body is just pass, return None, raise NotImplementedError, or TODO comment."}, "properties": {"repobilityId": 77698, "scanner": "repobility-threat-engine", "fingerprint": "12493a01052667ccba1a7b69806def122ddec79dac1b3f1a524b1f3afb0cf673", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "stub-only-function", "owasp": null, "cwe_ids": ["CWE-1188"], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348017+00:00", "triaged_in_corpus": 12, "observations_count": 633513, "ai_coder_pattern_id": 2}, "scanner": "repobility-threat-engine", "correlation_key": "fp|12493a01052667ccba1a7b69806def122ddec79dac1b3f1a524b1f3afb0cf673"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/src/backend/jax/linalg.py"}, "region": {"startLine": 25}}}]}, {"ruleId": "MINED050", "level": "none", "message": {"text": "[MINED050] Stub Only Function: Function declared but body is just pass, return None, raise NotImplementedError, or TODO comment."}, "properties": {"repobilityId": 77697, "scanner": "repobility-threat-engine", "fingerprint": "6ed632c36b1093c0ced4aec5bcec631582f16e982622a86f996d20f9a038358c", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "stub-only-function", "owasp": null, "cwe_ids": ["CWE-1188"], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348017+00:00", "triaged_in_corpus": 12, "observations_count": 633513, "ai_coder_pattern_id": 2}, "scanner": "repobility-threat-engine", "correlation_key": "fp|6ed632c36b1093c0ced4aec5bcec631582f16e982622a86f996d20f9a038358c"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/src/backend/jax/layer.py"}, "region": {"startLine": 14}}}]}, {"ruleId": "MINED050", "level": "none", "message": {"text": "[MINED050] Stub Only Function: Function declared but body is just pass, return None, raise NotImplementedError, or TODO comment."}, "properties": {"repobilityId": 77696, "scanner": "repobility-threat-engine", "fingerprint": "55dc81161a53d25df709f6835bc558e0c9fd0241b1c4dc12860845152a1a2817", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "stub-only-function", "owasp": null, "cwe_ids": ["CWE-1188"], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348017+00:00", "triaged_in_corpus": 12, "observations_count": 633513, "ai_coder_pattern_id": 2}, "scanner": "repobility-threat-engine", "correlation_key": "fp|55dc81161a53d25df709f6835bc558e0c9fd0241b1c4dc12860845152a1a2817"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/src/backend/__init__.py"}, "region": {"startLine": 64}}}]}, {"ruleId": "MINED064", "level": "none", "message": {"text": "[MINED064] Python Input Call (and 39 more): Same pattern found in 39 additional files. Review if needed."}, "properties": {"repobilityId": 77695, "scanner": "repobility-threat-engine", "fingerprint": "d50073254bc4cc4f062a3c678d64ed822ac094ecdd0ef49417de8850aa174bd1", "category": "quality", "severity": "info", "confidence": 0.2, "triageState": "false_positive", "verdict": "likely_fp", "isResolved": true, "reason": "Deduplicated summary only: 39 additional occurrences found. The top occurrences remain visible as actionable findings.", "evidence": {"mined": true, "mining": {"slug": "python-input-call", "owasp": null, "cwe_ids": [], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348050+00:00", "triaged_in_corpus": 12, "observations_count": 66378, "ai_coder_pattern_id": 124}, "scanner": "repobility-threat-engine", "aggregated": true, "correlation_key": "fp|d50073254bc4cc4f062a3c678d64ed822ac094ecdd0ef49417de8850aa174bd1", "aggregated_count": 39}}}, {"ruleId": "MINED064", "level": "none", "message": {"text": "[MINED064] Python Input Call: input() blocks for stdin. Inappropriate in services."}, "properties": {"repobilityId": 77694, "scanner": "repobility-threat-engine", "fingerprint": "bac82a53250085e6083826abfeb89d07fb6251f2d3c5e4b8accdc256fea62064", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "python-input-call", "owasp": null, "cwe_ids": [], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348050+00:00", "triaged_in_corpus": 12, "observations_count": 66378, "ai_coder_pattern_id": 124}, "scanner": "repobility-threat-engine", "correlation_key": "fp|bac82a53250085e6083826abfeb89d07fb6251f2d3c5e4b8accdc256fea62064"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "benchmarks/torch_ctl_benchmark/conv_model_benchmark.py"}, "region": {"startLine": 62}}}]}, {"ruleId": "MINED064", "level": "none", "message": {"text": "[MINED064] Python Input Call: input() blocks for stdin. Inappropriate in services."}, "properties": {"repobilityId": 77693, "scanner": "repobility-threat-engine", "fingerprint": "e2d0e33d8ee38af0e97554e8ba1da4153cdbb0fff973a24a9b4939222c5cb154", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "python-input-call", "owasp": null, "cwe_ids": [], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348050+00:00", "triaged_in_corpus": 12, "observations_count": 66378, "ai_coder_pattern_id": 124}, "scanner": "repobility-threat-engine", "correlation_key": "fp|e2d0e33d8ee38af0e97554e8ba1da4153cdbb0fff973a24a9b4939222c5cb154"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "benchmarks/model_benchmark/image_classification_benchmark.py"}, "region": {"startLine": 90}}}]}, {"ruleId": "MINED064", "level": "none", "message": {"text": "[MINED064] Python Input Call: input() blocks for stdin. Inappropriate in services."}, "properties": {"repobilityId": 77692, "scanner": "repobility-threat-engine", "fingerprint": "ca8345d2dca216fc955e4fe4a769e5640019b39b37598c6a3886439de74e3a5b", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "python-input-call", "owasp": null, "cwe_ids": [], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348050+00:00", "triaged_in_corpus": 12, "observations_count": 66378, "ai_coder_pattern_id": 124}, "scanner": "repobility-threat-engine", "correlation_key": "fp|ca8345d2dca216fc955e4fe4a769e5640019b39b37598c6a3886439de74e3a5b"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "benchmarks/layer_benchmark/base_benchmark.py"}, "region": {"startLine": 157}}}]}, {"ruleId": "COMP001", "level": "none", "message": {"text": "[COMP001] High cognitive complexity (and 140 more): Same pattern found in 140 additional files. Review if needed."}, "properties": {"repobilityId": 77691, "scanner": "repobility-threat-engine", "fingerprint": "66840002d1bb09204d64d865515f3fb9377493d76651339e61c772e13df10ceb", "category": "quality", "severity": "info", "confidence": 0.2, "triageState": "false_positive", "verdict": "likely_fp", "isResolved": true, "reason": "Deduplicated summary only: 140 additional occurrences found. The top occurrences remain visible as actionable findings.", "evidence": {"scanner": "repobility-threat-engine", "function": "create_legacy_directory", "breakdown": {"if": 5, "for": 5, "nested_bonus": 20}, "aggregated": true, "complexity": 30, "correlation_key": "fp|66840002d1bb09204d64d865515f3fb9377493d76651339e61c772e13df10ceb", "aggregated_count": 140}}}, {"ruleId": "MINED063", "level": "none", "message": {"text": "[MINED063] Toctou Os Path Exists: if os.path.exists(p): open(p) \u2014 file can be replaced/deleted between check and use."}, "properties": {"repobilityId": 77687, "scanner": "repobility-threat-engine", "fingerprint": "3144acb4e5428e3393618c7bafa7b86c8e1c4432c91bb6deeead7d54a6464a2d", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "toctou-os-path-exists", "owasp": null, "cwe_ids": ["CWE-367"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348048+00:00", "triaged_in_corpus": 12, "observations_count": 90754, "ai_coder_pattern_id": 41}, "scanner": "repobility-threat-engine", "correlation_key": "fp|3144acb4e5428e3393618c7bafa7b86c8e1c4432c91bb6deeead7d54a6464a2d"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "api_gen.py"}, "region": {"startLine": 103}}}]}, {"ruleId": "MINED043", "level": "none", "message": {"text": "[MINED043] Http Not Https (and 12 more): Same pattern found in 12 additional files. Review if needed."}, "properties": {"repobilityId": 77686, "scanner": "repobility-threat-engine", "fingerprint": "9c8c139140f617f7bb042c395d886fc52cd10c560e4a83e89baca87eb4c11777", "category": "quality", "severity": "info", "confidence": 0.2, "triageState": "false_positive", "verdict": "likely_fp", "isResolved": true, "reason": "Deduplicated summary only: 12 additional occurrences found. The top occurrences remain visible as actionable findings.", "evidence": {"mined": true, "mining": {"slug": "http-not-https", "owasp": "A02:2021", "cwe_ids": ["CWE-319"], "precision": 0.917, "promoted_at": "2026-05-18T14:01:32.347999+00:00", "triaged_in_corpus": 12, "observations_count": 4113831, "ai_coder_pattern_id": 15}, "scanner": "repobility-threat-engine", "aggregated": true, "correlation_key": "fp|9c8c139140f617f7bb042c395d886fc52cd10c560e4a83e89baca87eb4c11777", "aggregated_count": 12}}}, {"ruleId": "MINED043", "level": "none", "message": {"text": "[MINED043] Http Not Https: Hardcoded http:// (not localhost) for endpoints that handle credentials or data."}, "properties": {"repobilityId": 77685, "scanner": "repobility-threat-engine", "fingerprint": "fd9ba210a4c65a5b17908c3f51e9bed66b84e8e6065517692356c6b198436a3f", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "http-not-https", "owasp": "A02:2021", "cwe_ids": ["CWE-319"], "precision": 0.917, "promoted_at": "2026-05-18T14:01:32.347999+00:00", "triaged_in_corpus": 12, "observations_count": 4113831, "ai_coder_pattern_id": 15}, "scanner": "repobility-threat-engine", "correlation_key": "fp|fd9ba210a4c65a5b17908c3f51e9bed66b84e8e6065517692356c6b198436a3f"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/src/datasets/mnist.py"}, "region": {"startLine": 16}}}]}, {"ruleId": "MINED043", "level": "none", "message": {"text": "[MINED043] Http Not Https: Hardcoded http:// (not localhost) for endpoints that handle credentials or data."}, "properties": {"repobilityId": 77684, "scanner": "repobility-threat-engine", "fingerprint": "ad9e085704f10af8b964b1386cc6e5d9809e7326dda225cb8e844669d5315614", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "http-not-https", "owasp": "A02:2021", "cwe_ids": ["CWE-319"], "precision": 0.917, "promoted_at": "2026-05-18T14:01:32.347999+00:00", "triaged_in_corpus": 12, "observations_count": 4113831, "ai_coder_pattern_id": 15}, "scanner": "repobility-threat-engine", "correlation_key": "fp|ad9e085704f10af8b964b1386cc6e5d9809e7326dda225cb8e844669d5315614"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/src/datasets/boston_housing.py"}, "region": {"startLine": 25}}}]}, {"ruleId": "MINED043", "level": "none", "message": {"text": "[MINED043] Http Not Https: Hardcoded http:// (not localhost) for endpoints that handle credentials or data."}, "properties": {"repobilityId": 77683, "scanner": "repobility-threat-engine", "fingerprint": "7c9178b9f32c5a9015f3043a9a74422c82df6def691a3e9039056a9412864428", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "http-not-https", "owasp": "A02:2021", "cwe_ids": ["CWE-319"], "precision": 0.917, "promoted_at": "2026-05-18T14:01:32.347999+00:00", "triaged_in_corpus": 12, "observations_count": 4113831, "ai_coder_pattern_id": 15}, "scanner": "repobility-threat-engine", "correlation_key": "fp|7c9178b9f32c5a9015f3043a9a74422c82df6def691a3e9039056a9412864428"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/scripts/labeler.js"}, "region": {"startLine": 7}}}]}, {"ruleId": "MINED044", "level": "none", "message": {"text": "[MINED044] Js Console Log Prod: console.log left in code. Should be replaced with logger or removed."}, "properties": {"repobilityId": 77682, "scanner": "repobility-threat-engine", "fingerprint": "5681839134eb435a92e8e5b369a4cfbf7ef830e46473cde1ea526414039ce9c4", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "js-console-log-prod", "owasp": null, "cwe_ids": ["CWE-532"], "languages": ["javascript", "typescript", "tsx", "jsx"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348003+00:00", "triaged_in_corpus": 10, "observations_count": 1940833, "ai_coder_pattern_id": 102}, "scanner": "repobility-threat-engine", "correlation_key": "fp|5681839134eb435a92e8e5b369a4cfbf7ef830e46473cde1ea526414039ce9c4"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/scripts/labeler.js"}, "region": {"startLine": 32}}}]}, {"ruleId": "MINED044", "level": "none", "message": {"text": "[MINED044] Js Console Log Prod: console.log left in code. Should be replaced with logger or removed."}, "properties": {"repobilityId": 77681, "scanner": "repobility-threat-engine", "fingerprint": "86901ca36630e3f61db8f49703de272d4f7a198795ba6461ca60ca31cfccefb4", "category": "quality", "severity": "info", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "js-console-log-prod", "owasp": null, "cwe_ids": ["CWE-532"], "languages": ["javascript", "typescript", "tsx", "jsx"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.348003+00:00", "triaged_in_corpus": 10, "observations_count": 1940833, "ai_coder_pattern_id": 102}, "scanner": "repobility-threat-engine", "correlation_key": "fp|86901ca36630e3f61db8f49703de272d4f7a198795ba6461ca60ca31cfccefb4"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/scripts/auto-assignment.js"}, "region": {"startLine": 39}}}]}, {"ruleId": "DEPCUR-GHA", "level": "none", "message": {"text": "GitHub Action `actions/checkout@v6` is patch version(s) behind (latest v6.0.3)"}, "properties": {"repobilityId": 77680, "scanner": "repobility-dependency-currency", "fingerprint": "4fc8ac958ccf8350e26b8f16d9955dceae3d5da6363f556424d1ef7af656eb44", "category": "dependency", "severity": "info", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"gap": "patch version(s) behind", "signal": "currency", "cwe_ids": ["CWE-1104"], "package": "actions/checkout", "scanner": "repobility-dependency-currency", "ecosystem": "github-actions", "languages": ["yaml"], "latest_version": "v6.0.3", "correlation_key": "fp|4fc8ac958ccf8350e26b8f16d9955dceae3d5da6363f556424d1ef7af656eb44", "current_version": "v6"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/gpu_tests.yml"}, "region": {"startLine": 45}}}]}, {"ruleId": "DEPCUR-GHA", "level": "none", "message": {"text": "GitHub Action `actions/cache@v5` is patch version(s) behind (latest v5.0.5)"}, "properties": {"repobilityId": 77679, "scanner": "repobility-dependency-currency", "fingerprint": "2b216d1e85471fd0d967683c9853b7124b57d8c78d5da0071b9c53e7dacf9464", "category": "dependency", "severity": "info", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"gap": "patch version(s) behind", "signal": "currency", "cwe_ids": ["CWE-1104"], "package": "actions/cache", "scanner": "repobility-dependency-currency", "ecosystem": "github-actions", "languages": ["yaml"], "latest_version": "v5.0.5", "correlation_key": "fp|2b216d1e85471fd0d967683c9853b7124b57d8c78d5da0071b9c53e7dacf9464", "current_version": "v5"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/nightly.yml"}, "region": {"startLine": 35}}}]}, {"ruleId": "DEPCUR-GHA", "level": "none", "message": {"text": "GitHub Action `actions/checkout@v6` is patch version(s) behind (latest v6.0.3)"}, "properties": {"repobilityId": 77677, "scanner": "repobility-dependency-currency", "fingerprint": "53cfcf991cc2426f4911140675ea4cac0ac5487cc8f54138a55a895d85837ec5", "category": "dependency", "severity": "info", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"gap": "patch version(s) behind", "signal": "currency", "cwe_ids": ["CWE-1104"], "package": "actions/checkout", "scanner": "repobility-dependency-currency", "ecosystem": "github-actions", "languages": ["yaml"], "latest_version": "v6.0.3", "correlation_key": "fp|53cfcf991cc2426f4911140675ea4cac0ac5487cc8f54138a55a895d85837ec5", "current_version": "v6"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/nightly.yml"}, "region": {"startLine": 24}}}]}, {"ruleId": "DEPCUR-GHA", "level": "none", "message": {"text": "GitHub Action `actions/checkout@v6` is patch version(s) behind (latest v6.0.3)"}, "properties": {"repobilityId": 77676, "scanner": "repobility-dependency-currency", "fingerprint": "89033a288076161749446cc58ff5e96a013d88cba31107614e7b6d7008b0eb2f", "category": "dependency", "severity": "info", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"gap": "patch version(s) behind", "signal": "currency", "cwe_ids": ["CWE-1104"], "package": "actions/checkout", "scanner": "repobility-dependency-currency", "ecosystem": "github-actions", "languages": ["yaml"], "latest_version": "v6.0.3", "correlation_key": "fp|89033a288076161749446cc58ff5e96a013d88cba31107614e7b6d7008b0eb2f", "current_version": "v6"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/labeler.yaml"}, "region": {"startLine": 37}}}]}, {"ruleId": "DEPCUR-GHA", "level": "none", "message": {"text": "GitHub Action `actions/cache@v5` is patch version(s) behind (latest v5.0.5)"}, "properties": {"repobilityId": 77675, "scanner": "repobility-dependency-currency", "fingerprint": "d2cca15dff3d97743ee1b282e2dcbd2f5c1a579b436b2ffe4bda0692dcfbb4f7", "category": "dependency", "severity": "info", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"gap": "patch version(s) behind", "signal": "currency", "cwe_ids": ["CWE-1104"], "package": "actions/cache", "scanner": "repobility-dependency-currency", "ecosystem": "github-actions", "languages": ["yaml"], "latest_version": "v5.0.5", "correlation_key": "fp|d2cca15dff3d97743ee1b282e2dcbd2f5c1a579b436b2ffe4bda0692dcfbb4f7", "current_version": "v5"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/actions.yml"}, "region": {"startLine": 177}}}]}, {"ruleId": "DEPCUR-GHA", "level": "none", "message": {"text": "GitHub Action `actions/checkout@v6` is patch version(s) behind (latest v6.0.3)"}, "properties": {"repobilityId": 77673, "scanner": "repobility-dependency-currency", "fingerprint": "aec6bd235ed402c397be01f2213e5488eeb43292a9a45c8b5f6faba48f23575b", "category": "dependency", "severity": "info", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"gap": "patch version(s) behind", "signal": "currency", "cwe_ids": ["CWE-1104"], "package": "actions/checkout", "scanner": "repobility-dependency-currency", "ecosystem": "github-actions", "languages": ["yaml"], "latest_version": "v6.0.3", "correlation_key": "fp|aec6bd235ed402c397be01f2213e5488eeb43292a9a45c8b5f6faba48f23575b", "current_version": "v6"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/actions.yml"}, "region": {"startLine": 55}}}]}, {"ruleId": "DEPCUR-GHA", "level": "none", "message": {"text": "GitHub Action `actions/checkout@v6` is patch version(s) behind (latest v6.0.3)"}, "properties": {"repobilityId": 77672, "scanner": "repobility-dependency-currency", "fingerprint": "5219fd0508b2219ad0460eb66e505a9f838efae6313fb6c188899fcf5870ffaf", "category": "dependency", "severity": "info", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"gap": "patch version(s) behind", "signal": "currency", "cwe_ids": ["CWE-1104"], "package": "actions/checkout", "scanner": "repobility-dependency-currency", "ecosystem": "github-actions", "languages": ["yaml"], "latest_version": "v6.0.3", "correlation_key": "fp|5219fd0508b2219ad0460eb66e505a9f838efae6313fb6c188899fcf5870ffaf", "current_version": "v6"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/auto-assignment.yaml"}, "region": {"startLine": 16}}}]}, {"ruleId": "DEPCUR-GHA", "level": "none", "message": {"text": "GitHub Action `actions/checkout@v6` is patch version(s) behind (latest v6.0.3)"}, "properties": {"repobilityId": 77671, "scanner": "repobility-dependency-currency", "fingerprint": "e01b1895a0993d2e43f9019af793e9fae2439e6daa9b7bfcadb5394e4eb69e00", "category": "dependency", "severity": "info", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"gap": "patch version(s) behind", "signal": "currency", "cwe_ids": ["CWE-1104"], "package": "actions/checkout", "scanner": "repobility-dependency-currency", "ecosystem": "github-actions", "languages": ["yaml"], "latest_version": "v6.0.3", "correlation_key": "fp|e01b1895a0993d2e43f9019af793e9fae2439e6daa9b7bfcadb5394e4eb69e00", "current_version": "v6"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/tpu_tests.yml"}, "region": {"startLine": 53}}}]}, {"ruleId": "MINED036", "level": "error", "message": {"text": "[MINED036] Python Os System Call: os.system() invokes shell with no escaping."}, "properties": {"repobilityId": 77730, "scanner": "repobility-threat-engine", "fingerprint": "f90cd34199f60cf48cc405e31d7953deb17ae252c8e10049be25bfbd9eddaf4d", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "python-os-system-call", "owasp": null, "cwe_ids": ["CWE-78"], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.347982+00:00", "triaged_in_corpus": 15, "observations_count": 2221, "ai_coder_pattern_id": 117}, "scanner": "repobility-threat-engine", "correlation_key": "fp|f90cd34199f60cf48cc405e31d7953deb17ae252c8e10049be25bfbd9eddaf4d"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "pip_build.py"}, "region": {"startLine": 100}}}]}, {"ruleId": "MINED004", "level": "error", "message": {"text": "[MINED004] Weak Crypto: MD5/SHA1/DES/RC4 used for security context (not just checksums)."}, "properties": {"repobilityId": 77725, "scanner": "repobility-threat-engine", "fingerprint": "a05012dc6df8f0200c7bc9659a50e9d6890b3bd9ad712c015119b05e79c88efe", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "weak-crypto", "owasp": "A02:2021", "cwe_ids": ["CWE-327"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.347906+00:00", "triaged_in_corpus": 15, "observations_count": 303181, "ai_coder_pattern_id": 13}, "scanner": "repobility-threat-engine", "correlation_key": "fp|a05012dc6df8f0200c7bc9659a50e9d6890b3bd9ad712c015119b05e79c88efe"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/src/legacy/preprocessing/text.py"}, "region": {"startLine": 66}}}]}, {"ruleId": "SEC078", "level": "error", "message": {"text": "[SEC078] Python: requests without timeout: requests.get/post without a timeout will hang indefinitely on a non-responsive server, causing thread exhaustion and ReDoS. Ported from bandit B113 (Apache-2.0). NOTE: this regex is heuristic; a real AST check is preferred for accuracy."}, "properties": {"repobilityId": 77717, "scanner": "repobility-threat-engine", "fingerprint": "f4f2652140506dcca77900816da46099f36083cd6a1ea8e80318402c2d810406", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": "requests.post(", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC078", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "fp|f4f2652140506dcca77900816da46099f36083cd6a1ea8e80318402c2d810406"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/src/callbacks/remote_monitor.py"}, "region": {"startLine": 70}}}]}, {"ruleId": "MINED001", "level": "error", "message": {"text": "[MINED001] Bare Except Pass: except: pass or except Exception: pass \u2014 silently swallows everything including KeyboardInterrupt and bugs."}, "properties": {"repobilityId": 77714, "scanner": "repobility-threat-engine", "fingerprint": "173d83da06e0bf2445c18d78d5d02952f2e81460a8c2f6c770fd002cb88f8ee8", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "bare-except-pass", "owasp": null, "cwe_ids": ["CWE-755"], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.347744+00:00", "triaged_in_corpus": 15, "observations_count": 1550824, "ai_coder_pattern_id": 6}, "scanner": "repobility-threat-engine", "correlation_key": "fp|173d83da06e0bf2445c18d78d5d02952f2e81460a8c2f6c770fd002cb88f8ee8"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/src/legacy/saving/json_utils.py"}, "region": {"startLine": 126}}}]}, {"ruleId": "MINED001", "level": "error", "message": {"text": "[MINED001] Bare Except Pass: except: pass or except Exception: pass \u2014 silently swallows everything including KeyboardInterrupt and bugs."}, "properties": {"repobilityId": 77713, "scanner": "repobility-threat-engine", "fingerprint": "2eca7688884e9201e1d527d6fc6ea6f2c841d8731004e3bb5162242ee3b93469", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "bare-except-pass", "owasp": null, "cwe_ids": ["CWE-755"], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.347744+00:00", "triaged_in_corpus": 15, "observations_count": 1550824, "ai_coder_pattern_id": 6}, "scanner": "repobility-threat-engine", "correlation_key": "fp|2eca7688884e9201e1d527d6fc6ea6f2c841d8731004e3bb5162242ee3b93469"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/src/layers/normalization/group_normalization.py"}, "region": {"startLine": 119}}}]}, {"ruleId": "MINED001", "level": "error", "message": {"text": "[MINED001] Bare Except Pass: except: pass or except Exception: pass \u2014 silently swallows everything including KeyboardInterrupt and bugs."}, "properties": {"repobilityId": 77712, "scanner": "repobility-threat-engine", "fingerprint": "ceb0e69282bb9da3f7cdf63edd73d72c6acc13aa229e3f115d30f5055360bdd4", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "bare-except-pass", "owasp": null, "cwe_ids": ["CWE-755"], "languages": ["python"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.347744+00:00", "triaged_in_corpus": 15, "observations_count": 1550824, "ai_coder_pattern_id": 6}, "scanner": "repobility-threat-engine", "correlation_key": "fp|ceb0e69282bb9da3f7cdf63edd73d72c6acc13aa229e3f115d30f5055360bdd4"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/src/backend/tensorflow/trackable.py"}, "region": {"startLine": 21}}}]}, {"ruleId": "SEC128", "level": "error", "message": {"text": "[SEC128] Async function without await \u2014 fire-and-forget Promise (AI mistake): Async call invoked without `await` returns an unhandled Promise. The outer function resolves before the inner work completes \u2014 DB writes lost, emails not sent, race conditions. This is one of the top-3 errors AI coders make: they understand async-shape but drop the await keyword when chaining multiple ops. Surfaces as flaky tests or silently dropped data in production."}, "properties": {"repobilityId": 77710, "scanner": "repobility-threat-engine", "fingerprint": "43fe0d5be17ba9595dbc21583a8260d9c2801572fceba5e8201489c7d695dc3c", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": "config.update({\"dtype\": dtype_policy_map})", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC128", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "fp|43fe0d5be17ba9595dbc21583a8260d9c2801572fceba5e8201489c7d695dc3c"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/src/dtype_policies/dtype_policy_map.py"}, "region": {"startLine": 29}}}]}, {"ruleId": "SEC128", "level": "error", "message": {"text": "[SEC128] Async function without await \u2014 fire-and-forget Promise (AI mistake): Async call invoked without `await` returns an unhandled Promise. The outer function resolves before the inner work completes \u2014 DB writes lost, emails not sent, race conditions. This is one of the top-3 errors AI coders make: they understand async-shape but drop the await keyword when chaining multiple ops. Surfaces as flaky tests or silently dropped data in production."}, "properties": {"repobilityId": 77709, "scanner": "repobility-threat-engine", "fingerprint": "b0b16b51dab1b16d2f5193454c0f9699f48b94009df835962a73712b46418412", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": "self.__dict__.update(kwargs)", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC128", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "fp|b0b16b51dab1b16d2f5193454c0f9699f48b94009df835962a73712b46418412"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/src/callbacks/lambda_callback.py"}, "region": {"startLine": 75}}}]}, {"ruleId": "SEC128", "level": "error", "message": {"text": "[SEC128] Async function without await \u2014 fire-and-forget Promise (AI mistake): Async call invoked without `await` returns an unhandled Promise. The outer function resolves before the inner work completes \u2014 DB writes lost, emails not sent, race conditions. This is one of the top-3 errors AI coders make: they understand async-shape but drop the await keyword when chaining multiple ops. Surfaces as flaky tests or silently dropped data in production."}, "properties": {"repobilityId": 77708, "scanner": "repobility-threat-engine", "fingerprint": "481f42efee9fa0545a69ffbe8c6602366e4999a0dba62ab7358977fdd23a4327", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": "distribution.extended.update(\n                    variable, weight_decay_fn, group=F", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC128", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "fp|481f42efee9fa0545a69ffbe8c6602366e4999a0dba62ab7358977fdd23a4327"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/src/backend/tensorflow/optimizer.py"}, "region": {"startLine": 103}}}]}, {"ruleId": "COMP001", "level": "error", "message": {"text": "[COMP001] High cognitive complexity: Function `create_legacy_directory` has cognitive complexity 30 (SonarSource scale). Cognitive complexity measures how hard the function is for a human to understand \u2014 nested branches, boolean chains, and recursion all weigh in. Breakdown: for=5, if=5, nested_bonus=20."}, "properties": {"repobilityId": 77688, "scanner": "repobility-threat-engine", "fingerprint": "dac0b038bbe9b466c1b3fefab9baf8073d6cf97ccefeaf6be600b32eb37bf521", "category": "quality", "severity": "high", "confidence": 0.95, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "AST-derived cognitive complexity score = 30 (severity threshold for high: 25+).", "evidence": {"scanner": "repobility-threat-engine", "function": "create_legacy_directory", "breakdown": {"if": 5, "for": 5, "nested_bonus": 20}, "complexity": 30, "correlation_key": "fp|dac0b038bbe9b466c1b3fefab9baf8073d6cf97ccefeaf6be600b32eb37bf521"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "api_gen.py"}, "region": {"startLine": 36}}}]}, {"ruleId": "MINED126", "level": "error", "message": {"text": "Workflow container/services image `python:3.11-slim` unpinned"}, "properties": {"repobilityId": 77667, "scanner": "repobility-supply-chain", "fingerprint": "c6a0dca6d974471d905a3dc5ebd557df414eb5c8263595c3c8248b789f1ac52f", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-container-unpinned", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|c6a0dca6d974471d905a3dc5ebd557df414eb5c8263595c3c8248b789f1ac52f"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/gpu_tests.yml"}, "region": {"startLine": 37}}}]}, {"ruleId": "MINED115", "level": "error", "message": {"text": "Action `actions/checkout` pinned to mutable ref `@v6`"}, "properties": {"repobilityId": 77665, "scanner": "repobility-supply-chain", "fingerprint": "9f85ea5f7bef0eb7f84c097bc54c2b4608a7d677a07cf2d18098df0048b97658", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-mutable-ref", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|9f85ea5f7bef0eb7f84c097bc54c2b4608a7d677a07cf2d18098df0048b97658"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/gpu_tests.yml"}, "region": {"startLine": 45}}}]}, {"ruleId": "MINED115", "level": "error", "message": {"text": "Action `actions/setup-python` pinned to mutable ref `@v6`"}, "properties": {"repobilityId": 77664, "scanner": "repobility-supply-chain", "fingerprint": "6c0d559c3de499f60901da2fd398845fd7b18a9cabeb1620f7dedadaeb5c1949", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-mutable-ref", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|6c0d559c3de499f60901da2fd398845fd7b18a9cabeb1620f7dedadaeb5c1949"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/nightly.yml"}, "region": {"startLine": 88}}}]}, {"ruleId": "MINED115", "level": "error", "message": {"text": "Action `actions/checkout` pinned to mutable ref `@v6`"}, "properties": {"repobilityId": 77663, "scanner": "repobility-supply-chain", "fingerprint": "9501eb138b12a23d123472cf821fa3511d8846f05d2e47f159484bbc2ba5e409", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-mutable-ref", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|9501eb138b12a23d123472cf821fa3511d8846f05d2e47f159484bbc2ba5e409"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/nightly.yml"}, "region": {"startLine": 86}}}]}, {"ruleId": "MINED115", "level": "error", "message": {"text": "Action `actions/cache` pinned to mutable ref `@v5`"}, "properties": {"repobilityId": 77662, "scanner": "repobility-supply-chain", "fingerprint": "3a87ee2181ca2367904e4ed642e75507c153e3b15d5aa7b33b8089e85f2db775", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-mutable-ref", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|3a87ee2181ca2367904e4ed642e75507c153e3b15d5aa7b33b8089e85f2db775"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/nightly.yml"}, "region": {"startLine": 72}}}]}, {"ruleId": "MINED115", "level": "error", "message": {"text": "Action `actions/setup-python` pinned to mutable ref `@v6`"}, "properties": {"repobilityId": 77661, "scanner": "repobility-supply-chain", "fingerprint": "4a1b2ca495adf1da91dcbf50395142fc99f25a11b0209c477fc3b15d5880b711", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-mutable-ref", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|4a1b2ca495adf1da91dcbf50395142fc99f25a11b0209c477fc3b15d5880b711"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/nightly.yml"}, "region": {"startLine": 63}}}]}, {"ruleId": "MINED115", "level": "error", "message": {"text": "Action `actions/checkout` pinned to mutable ref `@v6`"}, "properties": {"repobilityId": 77660, "scanner": "repobility-supply-chain", "fingerprint": "3bcefa03dedc03377cd4472a9c662574b8bf848024dc1b83ee1333afbcdb1dc1", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-mutable-ref", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|3bcefa03dedc03377cd4472a9c662574b8bf848024dc1b83ee1333afbcdb1dc1"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/nightly.yml"}, "region": {"startLine": 61}}}]}, {"ruleId": "MINED115", "level": "error", "message": {"text": "Action `actions/cache` pinned to mutable ref `@v5`"}, "properties": {"repobilityId": 77659, "scanner": "repobility-supply-chain", "fingerprint": "fdebcad997bd571efbe133dd63fffaec9ddbf6a2c3901b0efd6cf8b1bb50684c", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-mutable-ref", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|fdebcad997bd571efbe133dd63fffaec9ddbf6a2c3901b0efd6cf8b1bb50684c"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/nightly.yml"}, "region": {"startLine": 35}}}]}, {"ruleId": "MINED115", "level": "error", "message": {"text": "Action `actions/setup-python` pinned to mutable ref `@v6`"}, "properties": {"repobilityId": 77658, "scanner": "repobility-supply-chain", "fingerprint": "c44e94e0c51bbaa5616df891faf21698be1f170efbb0bf8d65894a6de62f4e31", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-mutable-ref", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|c44e94e0c51bbaa5616df891faf21698be1f170efbb0bf8d65894a6de62f4e31"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/nightly.yml"}, "region": {"startLine": 26}}}]}, {"ruleId": "MINED115", "level": "error", "message": {"text": "Action `actions/checkout` pinned to mutable ref `@v6`"}, "properties": {"repobilityId": 77657, "scanner": "repobility-supply-chain", "fingerprint": "94620cbd78905303987d0b92b7074ffd3073103a0b782c3d4b63ed309332a776", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-mutable-ref", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|94620cbd78905303987d0b92b7074ffd3073103a0b782c3d4b63ed309332a776"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/nightly.yml"}, "region": {"startLine": 24}}}]}, {"ruleId": "MINED115", "level": "error", "message": {"text": "Action `actions/github-script` pinned to mutable ref `@v9`"}, "properties": {"repobilityId": 77656, "scanner": "repobility-supply-chain", "fingerprint": "1dc5619b888ef273c189ab58578a947d787ff199f3d1e9318eba0bd2d766070c", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-mutable-ref", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|1dc5619b888ef273c189ab58578a947d787ff199f3d1e9318eba0bd2d766070c"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/labeler.yaml"}, "region": {"startLine": 38}}}]}, {"ruleId": "MINED115", "level": "error", "message": {"text": "Action `actions/checkout` pinned to mutable ref `@v6`"}, "properties": {"repobilityId": 77655, "scanner": "repobility-supply-chain", "fingerprint": "df3560beef517f08f4fda2f78a81d92d592e8efb153e72e69fcdb46e65e34b07", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-mutable-ref", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|df3560beef517f08f4fda2f78a81d92d592e8efb153e72e69fcdb46e65e34b07"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/labeler.yaml"}, "region": {"startLine": 37}}}]}, {"ruleId": "MINED126", "level": "error", "message": {"text": "Workflow container/services image `python:3.11-slim` unpinned"}, "properties": {"repobilityId": 77654, "scanner": "repobility-supply-chain", "fingerprint": "0dc154d4cb424d011c65dd7e63808965149a2cc3358aa9ced088f4a0dd672db3", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-container-unpinned", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|0dc154d4cb424d011c65dd7e63808965149a2cc3358aa9ced088f4a0dd672db3"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/actions.yml"}, "region": {"startLine": 32}}}]}, {"ruleId": "MINED115", "level": "error", "message": {"text": "Action `actions/cache` pinned to mutable ref `@v5`"}, "properties": {"repobilityId": 77650, "scanner": "repobility-supply-chain", "fingerprint": "bb150b47ab6333ca51ac269231a306223c1bfeaca02a207f125fc8007731fe05", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-mutable-ref", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|bb150b47ab6333ca51ac269231a306223c1bfeaca02a207f125fc8007731fe05"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/actions.yml"}, "region": {"startLine": 177}}}]}, {"ruleId": "MINED115", "level": "error", "message": {"text": "Action `actions/setup-python` pinned to mutable ref `@v6`"}, "properties": {"repobilityId": 77649, "scanner": "repobility-supply-chain", "fingerprint": "cfc4d2dde9df2298fdfc2ac8529348ce55944c8c7f07568abf1463deb4ad7a57", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-mutable-ref", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|cfc4d2dde9df2298fdfc2ac8529348ce55944c8c7f07568abf1463deb4ad7a57"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/actions.yml"}, "region": {"startLine": 166}}}]}, {"ruleId": "MINED115", "level": "error", "message": {"text": "Action `actions/checkout` pinned to mutable ref `@v6`"}, "properties": {"repobilityId": 77648, "scanner": "repobility-supply-chain", "fingerprint": "fb235d0686f420437e9e5a2e39a6190a3dc8ef1ffdb7f33ad3636ef421c94690", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-mutable-ref", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|fb235d0686f420437e9e5a2e39a6190a3dc8ef1ffdb7f33ad3636ef421c94690"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/actions.yml"}, "region": {"startLine": 163}}}]}, {"ruleId": "MINED115", "level": "error", "message": {"text": "Action `actions/checkout` pinned to mutable ref `@v6`"}, "properties": {"repobilityId": 77647, "scanner": "repobility-supply-chain", "fingerprint": "3253d4b942dd6ec3f74d5dc267d9a50754d0d2570157730c7cb79688b6997f45", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-mutable-ref", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|3253d4b942dd6ec3f74d5dc267d9a50754d0d2570157730c7cb79688b6997f45"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/actions.yml"}, "region": {"startLine": 55}}}]}, {"ruleId": "MINED115", "level": "error", "message": {"text": "Action `actions/github-script` pinned to mutable ref `@v9`"}, "properties": {"repobilityId": 77646, "scanner": "repobility-supply-chain", "fingerprint": "63081e6fc0839f7d741bfe2b3a28c7db4754a49ea58fea13d7a2a027ff6b595a", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-mutable-ref", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|63081e6fc0839f7d741bfe2b3a28c7db4754a49ea58fea13d7a2a027ff6b595a"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/auto-assignment.yaml"}, "region": {"startLine": 17}}}]}, {"ruleId": "MINED115", "level": "error", "message": {"text": "Action `actions/checkout` pinned to mutable ref `@v6`"}, "properties": {"repobilityId": 77645, "scanner": "repobility-supply-chain", "fingerprint": "980c6655cf8afbe9f1b6976f9529eaccc4c58f46f33e877222a023fc0b0ce371", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-mutable-ref", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|980c6655cf8afbe9f1b6976f9529eaccc4c58f46f33e877222a023fc0b0ce371"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/auto-assignment.yaml"}, "region": {"startLine": 16}}}]}, {"ruleId": "MINED126", "level": "error", "message": {"text": "Workflow container/services image `python:3.11-slim` unpinned"}, "properties": {"repobilityId": 77644, "scanner": "repobility-supply-chain", "fingerprint": "188b516bbb9f51cd84605943fe8fbcee4fffffc9e8016af85cf5306966ce480f", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-container-unpinned", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|188b516bbb9f51cd84605943fe8fbcee4fffffc9e8016af85cf5306966ce480f"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/tpu_tests.yml"}, "region": {"startLine": 41}}}]}, {"ruleId": "MINED115", "level": "error", "message": {"text": "Action `actions/checkout` pinned to mutable ref `@v6`"}, "properties": {"repobilityId": 77642, "scanner": "repobility-supply-chain", "fingerprint": "5eadeab7c56daf70c9993b881a5bd658522776d1c5a5d218732f3a8bfbaa631b", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-mutable-ref", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|5eadeab7c56daf70c9993b881a5bd658522776d1c5a5d218732f3a8bfbaa631b"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/tpu_tests.yml"}, "region": {"startLine": 53}}}]}, {"ruleId": "MINED115", "level": "error", "message": {"text": "Action `actions/stale` pinned to mutable ref `@v10`"}, "properties": {"repobilityId": 77641, "scanner": "repobility-supply-chain", "fingerprint": "1c3953670c685f24c57ed0093d49ab603c4df83c477de5864204eb6a33a37b27", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-mutable-ref", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|1c3953670c685f24c57ed0093d49ab603c4df83c477de5864204eb6a33a37b27"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/stale-issue-pr.yaml"}, "region": {"startLine": 39}}}]}, {"ruleId": "MINED115", "level": "error", "message": {"text": "Action `actions/stale` pinned to mutable ref `@v10`"}, "properties": {"repobilityId": 77640, "scanner": "repobility-supply-chain", "fingerprint": "b6cd4333ae096f771ac825e270fe815fbe5766f5c6604aaf593b6571b651767e", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-mutable-ref", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|b6cd4333ae096f771ac825e270fe815fbe5766f5c6604aaf593b6571b651767e"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/stale-issue-pr.yaml"}, "region": {"startLine": 16}}}]}, {"ruleId": "MINED131", "level": "error", "message": {"text": "pre-commit hook `https://github.com/astral-sh/ruff-pre-commit` pinned to mutable rev `v0.9.2`"}, "properties": {"repobilityId": 77639, "scanner": "repobility-supply-chain", "fingerprint": "c703d2a0a03725c8cfd410beaa1eedaf46f113437ab56f29fb4d116b69b87158", "category": "dependency", "severity": "high", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "precommit-untrusted-repo", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|c703d2a0a03725c8cfd410beaa1eedaf46f113437ab56f29fb4d116b69b87158"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".pre-commit-config.yaml"}, "region": {"startLine": 17}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "Phantom test coverage: test_conv_model"}, "properties": {"repobilityId": 77582, "scanner": "repobility-ast-engine", "fingerprint": "4b8ce81331a9de12ca435306072b24602df5e50d2a1dba57af908ca71fba346a", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|4b8ce81331a9de12ca435306072b24602df5e50d2a1dba57af908ca71fba346a"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/src/export/litert_torch_test.py"}, "region": {"startLine": 124}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "Phantom test coverage: test_subclass_model"}, "properties": {"repobilityId": 77581, "scanner": "repobility-ast-engine", "fingerprint": "d3cac7aa8e49009020d2592ab2ab7dabebfa8cb67ae4102e875bcc1bbb71a06a", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|d3cac7aa8e49009020d2592ab2ab7dabebfa8cb67ae4102e875bcc1bbb71a06a"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/src/export/litert_torch_test.py"}, "region": {"startLine": 108}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "Phantom test coverage: test_functional_model"}, "properties": {"repobilityId": 77580, "scanner": "repobility-ast-engine", "fingerprint": "883f3a21b83b944c6623a3dabca81f51848ecdcb696bb715125692d4fd6a6e2a", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|883f3a21b83b944c6623a3dabca81f51848ecdcb696bb715125692d4fd6a6e2a"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/src/export/litert_torch_test.py"}, "region": {"startLine": 99}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "Phantom test coverage: test_sequential_model"}, "properties": {"repobilityId": 77579, "scanner": "repobility-ast-engine", "fingerprint": "d4d3d91a25512421e27099349b68aa89abb21ca73d68364a4e25d3b3fd1edea2", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|d4d3d91a25512421e27099349b68aa89abb21ca73d68364a4e25d3b3fd1edea2"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/src/export/litert_torch_test.py"}, "region": {"startLine": 88}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "Phantom test coverage: test_errors"}, "properties": {"repobilityId": 77578, "scanner": "repobility-ast-engine", "fingerprint": "141e03570a74df97d93e7b3ecb874883a67665314f3f22bf7f23f7785603ac4a", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|141e03570a74df97d93e7b3ecb874883a67665314f3f22bf7f23f7785603ac4a"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/src/export/tfsm_layer_test.py"}, "region": {"startLine": 159}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "Phantom test coverage: test_safe_mode_blocks_model_loading"}, "properties": {"repobilityId": 77577, "scanner": "repobility-ast-engine", "fingerprint": "55b31bd149ff2f3fb8a6e9183821e378d6bbb2673598c6f1bcbf3841a959afbf", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|55b31bd149ff2f3fb8a6e9183821e378d6bbb2673598c6f1bcbf3841a959afbf"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/src/export/tfsm_layer_test.py"}, "region": {"startLine": 131}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "Phantom test coverage: test_serialization"}, "properties": {"repobilityId": 77576, "scanner": "repobility-ast-engine", "fingerprint": "895f799dc06d26813b82d5df56837e6872664702558bc813b9d5e0f6663d26e3", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|895f799dc06d26813b82d5df56837e6872664702558bc813b9d5e0f6663d26e3"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/src/export/tfsm_layer_test.py"}, "region": {"startLine": 106}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "Phantom test coverage: test_call_training"}, "properties": {"repobilityId": 77575, "scanner": "repobility-ast-engine", "fingerprint": "eaf9ce38d124a8615c2c7711b0f1229fee5f9b2ab20ce17765535dce25cee395", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|eaf9ce38d124a8615c2c7711b0f1229fee5f9b2ab20ce17765535dce25cee395"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/src/export/tfsm_layer_test.py"}, "region": {"startLine": 69}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "Phantom test coverage: test_reloading_default_saved_model"}, "properties": {"repobilityId": 77574, "scanner": "repobility-ast-engine", "fingerprint": "a3653f5903aa1e2c536b520fee39f275bda25fce8003224c9034542c4389648e", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|a3653f5903aa1e2c536b520fee39f275bda25fce8003224c9034542c4389648e"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/src/export/tfsm_layer_test.py"}, "region": {"startLine": 41}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "Phantom test coverage: test_reloading_export_archive"}, "properties": {"repobilityId": 77573, "scanner": "repobility-ast-engine", "fingerprint": "d38815796fe20f6c19facd01e9229a3af793031a25a5b8bf681b22b5ebea0b6a", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|d38815796fe20f6c19facd01e9229a3af793031a25a5b8bf681b22b5ebea0b6a"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/src/export/tfsm_layer_test.py"}, "region": {"startLine": 23}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "Phantom test coverage: test_dict_input_preserves_variable_sharing"}, "properties": {"repobilityId": 77572, "scanner": "repobility-ast-engine", "fingerprint": "7f39a2ca50c24142388d63da0170a032919ba8e8786d2c9e60e2c3c65c53ef2f", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|7f39a2ca50c24142388d63da0170a032919ba8e8786d2c9e60e2c3c65c53ef2f"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/src/export/litert_test.py"}, "region": {"startLine": 1197}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "Phantom test coverage: test_dict_input_numerical_accuracy"}, "properties": {"repobilityId": 77571, "scanner": "repobility-ast-engine", "fingerprint": "2580efe52dcaa07cc0a4e167a6b7ab431e7345dfd6971287b79d2b9ea089d1f1", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|2580efe52dcaa07cc0a4e167a6b7ab431e7345dfd6971287b79d2b9ea089d1f1"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/src/export/litert_test.py"}, "region": {"startLine": 1147}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "Phantom test coverage: test_model_with_multiple_inputs"}, "properties": {"repobilityId": 77570, "scanner": "repobility-ast-engine", "fingerprint": "a8093db0f51968a867f37f74ac501f73092534dab3cb2ec7eb3e89547c74f6ef", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|a8093db0f51968a867f37f74ac501f73092534dab3cb2ec7eb3e89547c74f6ef"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/src/export/litert_test.py"}, "region": {"startLine": 294}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "Phantom test coverage: test_model_with_input_structure"}, "properties": {"repobilityId": 77569, "scanner": "repobility-ast-engine", "fingerprint": "f214eac10d66667cdcefebf42d6c090356579b75925740c0eff2a5b09675ac94", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|f214eac10d66667cdcefebf42d6c090356579b75925740c0eff2a5b09675ac94"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/src/export/litert_test.py"}, "region": {"startLine": 234}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "Phantom test coverage: test_seed_reproducibility"}, "properties": {"repobilityId": 77568, "scanner": "repobility-ast-engine", "fingerprint": "a361aaf351b28dd222350b8445f289bf27de1cd3aaefdeb56ee88abfedc5a9bf", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|a361aaf351b28dd222350b8445f289bf27de1cd3aaefdeb56ee88abfedc5a9bf"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "integration_tests/dataset_tests/california_housing_test.py"}, "region": {"startLine": 26}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "Phantom test coverage: test_seed_reproducibility"}, "properties": {"repobilityId": 77567, "scanner": "repobility-ast-engine", "fingerprint": "d01be7c2b5dbe97467bd1b22a7c0ef843e24295efd8980e35183fff9612a1195", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|d01be7c2b5dbe97467bd1b22a7c0ef843e24295efd8980e35183fff9612a1195"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "integration_tests/dataset_tests/boston_housing_test.py"}, "region": {"startLine": 11}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "Phantom test coverage: test_basic_fit_no_training"}, "properties": {"repobilityId": 77566, "scanner": "repobility-ast-engine", "fingerprint": "de6d5be9899374180aa2f770d42a08c804ce94818c5087a043532777fd3ded46", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|de6d5be9899374180aa2f770d42a08c804ce94818c5087a043532777fd3ded46"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "integration_tests/basic_full_flow.py"}, "region": {"startLine": 50}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "Phantom test coverage: test_basic_fit"}, "properties": {"repobilityId": 77565, "scanner": "repobility-ast-engine", "fingerprint": "e5f36204879029f554291012ddc4ece39e48f1846c5fa4d14f54e290f7a38c56", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|e5f36204879029f554291012ddc4ece39e48f1846c5fa4d14f54e290f7a38c56"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "integration_tests/basic_full_flow.py"}, "region": {"startLine": 29}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "Phantom test coverage: test_keras_imports"}, "properties": {"repobilityId": 77559, "scanner": "repobility-ast-engine", "fingerprint": "4d42dfc94952195c988ead09d27a2ae7308da5893193f7a1b5b7240a951eb4dc", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|4d42dfc94952195c988ead09d27a2ae7308da5893193f7a1b5b7240a951eb4dc"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "integration_tests/import_test.py"}, "region": {"startLine": 123}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "Phantom test coverage: test_plot_subclassed_model"}, "properties": {"repobilityId": 77558, "scanner": "repobility-ast-engine", "fingerprint": "9235395e35290f3efc49ba3c4c2b5113c76451506648d9bbe948d6ea051eca7d", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|9235395e35290f3efc49ba3c4c2b5113c76451506648d9bbe948d6ea051eca7d"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "integration_tests/model_visualization_test.py"}, "region": {"startLine": 196}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "Phantom test coverage: test_model_fit"}, "properties": {"repobilityId": 77557, "scanner": "repobility-ast-engine", "fingerprint": "72c8c1dd3eee8964cbb490144c5a7dbef145668d84d21f9a24471cf745c15135", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|72c8c1dd3eee8964cbb490144c5a7dbef145668d84d21f9a24471cf745c15135"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "integration_tests/tf_distribute_training_test.py"}, "region": {"startLine": 13}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "Phantom test coverage: test_step"}, "properties": {"repobilityId": 77556, "scanner": "repobility-ast-engine", "fingerprint": "1d6a40768cbd2f506171dde46c2b0d80e48d788d574f242be8ad027ffebf7d5a", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|1d6a40768cbd2f506171dde46c2b0d80e48d788d574f242be8ad027ffebf7d5a"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "guides/custom_train_step_in_torch.py"}, "region": {"startLine": 296}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "Phantom test coverage: test_step"}, "properties": {"repobilityId": 77555, "scanner": "repobility-ast-engine", "fingerprint": "1b02be6b00a2125aa784e83d68d43e198553586df6bdc46d05605856bf7eb43d", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|1b02be6b00a2125aa784e83d68d43e198553586df6bdc46d05605856bf7eb43d"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "guides/custom_train_step_in_tensorflow.py"}, "region": {"startLine": 276}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "Phantom test coverage: test_step"}, "properties": {"repobilityId": 77554, "scanner": "repobility-ast-engine", "fingerprint": "62abdb027620682984af2f93b74aba1dad2d1ab917a86db81a79272196f025ff", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|62abdb027620682984af2f93b74aba1dad2d1ab917a86db81a79272196f025ff"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "guides/writing_a_custom_training_loop_in_tensorflow.py"}, "region": {"startLine": 251}}}]}, {"ruleId": "MINED106", "level": "error", "message": {"text": "Phantom test coverage: test_step"}, "properties": {"repobilityId": 77553, "scanner": "repobility-ast-engine", "fingerprint": "5841585147b3c26b7288b0221827b6e4cb5fc71251e210348b720d5c5c928ef9", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "phantom-test-coverage", "owasp": null, "cwe_ids": ["CWE-1126"], "languages": ["python"], "observations_count": 982154}, "scanner": "repobility-ast-engine", "correlation_key": "fp|5841585147b3c26b7288b0221827b6e4cb5fc71251e210348b720d5c5c928ef9"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "guides/custom_train_step_in_jax.py"}, "region": {"startLine": 298}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self.w` used but never assigned in __init__"}, "properties": {"repobilityId": 77552, "scanner": "repobility-ast-engine", "fingerprint": "081653e5166591ddf1965e3bb7377a8b12cdb303ebb6d1408e4568c775ec4b0c", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|081653e5166591ddf1965e3bb7377a8b12cdb303ebb6d1408e4568c775ec4b0c"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "guides/functional_api.py"}, "region": {"startLine": 632}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self.w` used but never assigned in __init__"}, "properties": {"repobilityId": 77551, "scanner": "repobility-ast-engine", "fingerprint": "12db6bf1575f59e1a04d7105258f33474ce9b7a3eeea64851c600967fd7315c7", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|12db6bf1575f59e1a04d7105258f33474ce9b7a3eeea64851c600967fd7315c7"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "guides/functional_api.py"}, "region": {"startLine": 612}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self.b` used but never assigned in __init__"}, "properties": {"repobilityId": 77550, "scanner": "repobility-ast-engine", "fingerprint": "c616289962cf46fd55ea0ef17610bec872f4a5e48748815bf6df5ee852694b44", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|c616289962cf46fd55ea0ef17610bec872f4a5e48748815bf6df5ee852694b44"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "guides/functional_api.py"}, "region": {"startLine": 612}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self.add_weight` used but never assigned in __init__"}, "properties": {"repobilityId": 77549, "scanner": "repobility-ast-engine", "fingerprint": "e9b2e7ed37c2575ce6fdfebd8d72349c5f8d4316fc5bcda542ffc13ceb1fae3f", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|e9b2e7ed37c2575ce6fdfebd8d72349c5f8d4316fc5bcda542ffc13ceb1fae3f"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "guides/functional_api.py"}, "region": {"startLine": 607}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self.add_weight` used but never assigned in __init__"}, "properties": {"repobilityId": 77548, "scanner": "repobility-ast-engine", "fingerprint": "4fc1c60f7b79736d672f30ff5e1cfe31e06fd07dac3bd432dc986ed27548c4a1", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|4fc1c60f7b79736d672f30ff5e1cfe31e06fd07dac3bd432dc986ed27548c4a1"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "guides/functional_api.py"}, "region": {"startLine": 602}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self.b` used but never assigned in __init__"}, "properties": {"repobilityId": 77547, "scanner": "repobility-ast-engine", "fingerprint": "80725345f6d9e39f0d5d2d98a9f63256030503c6c047a5c55d2b53bbf6e63953", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|80725345f6d9e39f0d5d2d98a9f63256030503c6c047a5c55d2b53bbf6e63953"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "guides/functional_api.py"}, "region": {"startLine": 607}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self.w` used but never assigned in __init__"}, "properties": {"repobilityId": 77546, "scanner": "repobility-ast-engine", "fingerprint": "133bb6a742a5205d3dd354ad517163b14a369dbcf40824391feaa2eeba16ad1e", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|133bb6a742a5205d3dd354ad517163b14a369dbcf40824391feaa2eeba16ad1e"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "guides/functional_api.py"}, "region": {"startLine": 602}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self.add_loss` used but never assigned in __init__"}, "properties": {"repobilityId": 77545, "scanner": "repobility-ast-engine", "fingerprint": "229440adb2fb9b3f1d94072a662031f1a89e855a2b2d6b670226b4b64b7c9094", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|229440adb2fb9b3f1d94072a662031f1a89e855a2b2d6b670226b4b64b7c9094"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "guides/writing_a_custom_training_loop_in_jax.py"}, "region": {"startLine": 486}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self.model` used but never assigned in __init__"}, "properties": {"repobilityId": 77544, "scanner": "repobility-ast-engine", "fingerprint": "ac554bf6c457e9ca4b7e5648dfffdc7e8a0f59ae7bb2bd03f6a304018884efbf", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|ac554bf6c457e9ca4b7e5648dfffdc7e8a0f59ae7bb2bd03f6a304018884efbf"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "guides/writing_your_own_callbacks.py"}, "region": {"startLine": 392}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self.model` used but never assigned in __init__"}, "properties": {"repobilityId": 77543, "scanner": "repobility-ast-engine", "fingerprint": "a5d606228da7d7b269642718a6721b3ebf891da108fe94b8ba75f240704cf082", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|a5d606228da7d7b269642718a6721b3ebf891da108fe94b8ba75f240704cf082"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "guides/writing_your_own_callbacks.py"}, "region": {"startLine": 399}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self.model` used but never assigned in __init__"}, "properties": {"repobilityId": 77542, "scanner": "repobility-ast-engine", "fingerprint": "862b2c2f46f6f1a43d679fb22a7a6552554b27cc3e4fab722a7c6d567507edc5", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|862b2c2f46f6f1a43d679fb22a7a6552554b27cc3e4fab722a7c6d567507edc5"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "guides/writing_your_own_callbacks.py"}, "region": {"startLine": 395}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self.stopped_epoch` used but never assigned in __init__"}, "properties": {"repobilityId": 77541, "scanner": "repobility-ast-engine", "fingerprint": "52291b88d63881d6f7077e40bce27dbf8ae557118c930c0eab75babedef59941", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|52291b88d63881d6f7077e40bce27dbf8ae557118c930c0eab75babedef59941"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "guides/writing_your_own_callbacks.py"}, "region": {"startLine": 355}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self.stopped_epoch` used but never assigned in __init__"}, "properties": {"repobilityId": 77540, "scanner": "repobility-ast-engine", "fingerprint": "035bdfbdb9fb9e6a4d389478a885f6230d81c337b42c76c83f588de5e3ac69f2", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|035bdfbdb9fb9e6a4d389478a885f6230d81c337b42c76c83f588de5e3ac69f2"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "guides/writing_your_own_callbacks.py"}, "region": {"startLine": 354}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self.model` used but never assigned in __init__"}, "properties": {"repobilityId": 77539, "scanner": "repobility-ast-engine", "fingerprint": "6d9e8a1897529bf5aebf3d28be649afbbf6cb6da569740e7724d0ae70a84727d", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|6d9e8a1897529bf5aebf3d28be649afbbf6cb6da569740e7724d0ae70a84727d"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "guides/writing_your_own_callbacks.py"}, "region": {"startLine": 351}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self.model` used but never assigned in __init__"}, "properties": {"repobilityId": 77538, "scanner": "repobility-ast-engine", "fingerprint": "a43e92e617e594d27d6888312a709e55bad25c0621ed98ac9f2fde6de5266ab2", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|a43e92e617e594d27d6888312a709e55bad25c0621ed98ac9f2fde6de5266ab2"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "guides/writing_your_own_callbacks.py"}, "region": {"startLine": 349}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self.model` used but never assigned in __init__"}, "properties": {"repobilityId": 77537, "scanner": "repobility-ast-engine", "fingerprint": "10e92a69b3b598d838e78d775e91fb87d9cdf23a005c4d7400bb1bd519ca8989", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|10e92a69b3b598d838e78d775e91fb87d9cdf23a005c4d7400bb1bd519ca8989"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "guides/writing_your_own_callbacks.py"}, "region": {"startLine": 344}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self.stopped_epoch` used but never assigned in __init__"}, "properties": {"repobilityId": 77536, "scanner": "repobility-ast-engine", "fingerprint": "56bfec72a9b17ff679cb1a704317eb11a095f236295618a1cd50707e61fbc79d", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|56bfec72a9b17ff679cb1a704317eb11a095f236295618a1cd50707e61fbc79d"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "guides/writing_your_own_callbacks.py"}, "region": {"startLine": 348}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self.wait` used but never assigned in __init__"}, "properties": {"repobilityId": 77535, "scanner": "repobility-ast-engine", "fingerprint": "13c8b28a283c67bfd342dbc8ee49b430c5f685bfc0090a86caf95551517695e3", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|13c8b28a283c67bfd342dbc8ee49b430c5f685bfc0090a86caf95551517695e3"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "guides/writing_your_own_callbacks.py"}, "region": {"startLine": 347}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self.wait` used but never assigned in __init__"}, "properties": {"repobilityId": 77534, "scanner": "repobility-ast-engine", "fingerprint": "6f10e4321de41a5bf9bc6390216b99a4e6a3e7c41dd2f3a4abdc31535efe8aa1", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|6f10e4321de41a5bf9bc6390216b99a4e6a3e7c41dd2f3a4abdc31535efe8aa1"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "guides/writing_your_own_callbacks.py"}, "region": {"startLine": 346}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self.wait` used but never assigned in __init__"}, "properties": {"repobilityId": 77533, "scanner": "repobility-ast-engine", "fingerprint": "c945af08a00272050f915fa0584c205c20c2a425c9af91f4c24da9f8f4707aab", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|c945af08a00272050f915fa0584c205c20c2a425c9af91f4c24da9f8f4707aab"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "guides/writing_your_own_callbacks.py"}, "region": {"startLine": 342}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self.best` used but never assigned in __init__"}, "properties": {"repobilityId": 77532, "scanner": "repobility-ast-engine", "fingerprint": "48e6f16f04266803d26b80c7cb1527e30af1d8f5d5bb24185156aa0806863556", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|48e6f16f04266803d26b80c7cb1527e30af1d8f5d5bb24185156aa0806863556"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "guides/writing_your_own_callbacks.py"}, "region": {"startLine": 341}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self.best` used but never assigned in __init__"}, "properties": {"repobilityId": 77531, "scanner": "repobility-ast-engine", "fingerprint": "52bac228c114063324a18d9ba6f712a7e0a29cdc5a0a3faf7eed0032a9993e16", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|52bac228c114063324a18d9ba6f712a7e0a29cdc5a0a3faf7eed0032a9993e16"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "guides/writing_your_own_callbacks.py"}, "region": {"startLine": 340}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self.best` used but never assigned in __init__"}, "properties": {"repobilityId": 77530, "scanner": "repobility-ast-engine", "fingerprint": "e3ab28aece2f1cb0ad38f7e0d95a7a7d3e1d7049cb728aa3fd4f3f51b245026f", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|e3ab28aece2f1cb0ad38f7e0d95a7a7d3e1d7049cb728aa3fd4f3f51b245026f"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "guides/writing_your_own_callbacks.py"}, "region": {"startLine": 336}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self.stopped_epoch` used but never assigned in __init__"}, "properties": {"repobilityId": 77529, "scanner": "repobility-ast-engine", "fingerprint": "45cfd1db154a082a55f21bc1e71efba5f4529c1330a6c0da9febe72d044eb0b5", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|45cfd1db154a082a55f21bc1e71efba5f4529c1330a6c0da9febe72d044eb0b5"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "guides/writing_your_own_callbacks.py"}, "region": {"startLine": 334}}}]}, {"ruleId": "MINED108", "level": "error", "message": {"text": "`self.wait` used but never assigned in __init__"}, "properties": {"repobilityId": 77528, "scanner": "repobility-ast-engine", "fingerprint": "f6efe0b363043006589c444b9ea4e1ed7ce6d4e2e171dfc715b25844ae09361d", "category": "quality", "severity": "high", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "self-attr-never-set", "owasp": null, "cwe_ids": ["CWE-476"], "languages": ["python"], "observations_count": 25998}, "scanner": "repobility-ast-engine", "correlation_key": "fp|f6efe0b363043006589c444b9ea4e1ed7ce6d4e2e171dfc715b25844ae09361d"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "guides/writing_your_own_callbacks.py"}, "region": {"startLine": 332}}}]}, {"ruleId": "generic-api-key", "level": "error", "message": {"text": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."}, "properties": {"repobilityId": 77732, "scanner": "gitleaks", "fingerprint": "9acb86da463137b0bbac81a81081d78958c76aeb4b66382c6be973f021ffcc9d", "category": "credential_exposure", "severity": "critical", "confidence": 0.95, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "key_labels, REDACTED", "rule_id": "generic-api-key", "scanner": "gitleaks", "detector": "generic-api-key", "correlation_key": "secret|token|14|key_labels redacted"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/src/utils/numerical_utils_test.py"}, "region": {"startLine": 142}}}]}, {"ruleId": "generic-api-key", "level": "error", "message": {"text": "Detected a Generic API Key, potentially exposing access to various services and sensitive operations."}, "properties": {"repobilityId": 77731, "scanner": "gitleaks", "fingerprint": "f7fc07fe214e3b328f712aba840699cab37c7c31479b215728784b8aeee9e696", "category": "credential_exposure", "severity": "critical", "confidence": 0.95, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"match": "key_labels, REDACTED", "rule_id": "generic-api-key", "scanner": "gitleaks", "detector": "generic-api-key", "correlation_key": "secret|token|11|key_labels redacted"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/src/utils/numerical_utils_test.py"}, "region": {"startLine": 114}}}]}, {"ruleId": "MINED018", "level": "error", "message": {"text": "[MINED018] Unsafe Deserialization Pickle: pickle.loads / yaml.load (without Loader=SafeLoader) / unmarshal of network/file data \u2014 RCE."}, "properties": {"repobilityId": 77728, "scanner": "repobility-threat-engine", "fingerprint": "48b541399854cafd2edea972a899e48fb87e81feaf5f21dc883454551eef7c55", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"mined": true, "mining": {"slug": "unsafe-deserialization-pickle", "owasp": "A08:2021", "cwe_ids": ["CWE-502"], "precision": 1.0, "promoted_at": "2026-05-18T14:01:32.347940+00:00", "triaged_in_corpus": 20, "observations_count": 58759, "ai_coder_pattern_id": 32}, "scanner": "repobility-threat-engine", "correlation_key": "fp|48b541399854cafd2edea972a899e48fb87e81feaf5f21dc883454551eef7c55"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/src/utils/python_utils.py"}, "region": {"startLine": 95}}}]}, {"ruleId": "SEC081", "level": "error", "message": {"text": "[SEC081] Python: pickle.loads / marshal.loads on untrusted data: pickle.load(s) and marshal.load(s) execute arbitrary code on untrusted input. Ported from dlint DUO103 / DUO120 (BSD-3)."}, "properties": {"repobilityId": 77727, "scanner": "repobility-threat-engine", "fingerprint": "8fe5d1f47335b687bfe7f9bdf8df9a3711b0ab75ced82cd478f8726498ef0d7d", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "confirmed", "isResolved": false, "reason": "Pattern matched with no mitigating context found", "evidence": {"match": "marshal.loads(", "reason": "Pattern matched with no mitigating context found", "rule_id": "SEC081", "scanner": "repobility-threat-engine", "confidence": 1.0, "correlation_key": "fp|8fe5d1f47335b687bfe7f9bdf8df9a3711b0ab75ced82cd478f8726498ef0d7d"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/src/utils/python_utils.py"}, "region": {"startLine": 95}}}]}, {"ruleId": "MINED116", "level": "error", "message": {"text": "Workflow uses `secrets.CODECOV_TOKEN` on a `pull_request` trigger"}, "properties": {"repobilityId": 77666, "scanner": "repobility-supply-chain", "fingerprint": "791ce3c28b493c2620ec86582baaef9a487b3ed81c1f4f931426f87ef5017836", "category": "dependency", "severity": "critical", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-pull-request-secrets", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|791ce3c28b493c2620ec86582baaef9a487b3ed81c1f4f931426f87ef5017836"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/gpu_tests.yml"}, "region": {"startLine": 87}}}]}, {"ruleId": "MINED116", "level": "error", "message": {"text": "Workflow uses `secrets.CODECOV_TOKEN` on a `pull_request` trigger"}, "properties": {"repobilityId": 77653, "scanner": "repobility-supply-chain", "fingerprint": "5c4bd29358d19df60a2857248f8c25d20aafcecb92edc53ecb73bb302bb80264", "category": "dependency", "severity": "critical", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-pull-request-secrets", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|5c4bd29358d19df60a2857248f8c25d20aafcecb92edc53ecb73bb302bb80264"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/actions.yml"}, "region": {"startLine": 154}}}]}, {"ruleId": "MINED116", "level": "error", "message": {"text": "Workflow uses `secrets.CODECOV_TOKEN` on a `pull_request` trigger"}, "properties": {"repobilityId": 77652, "scanner": "repobility-supply-chain", "fingerprint": "5fc81d843cfa243bf183aff2932281566da425cf33b83bd0e290067171e6ceb6", "category": "dependency", "severity": "critical", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-pull-request-secrets", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|5fc81d843cfa243bf183aff2932281566da425cf33b83bd0e290067171e6ceb6"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/actions.yml"}, "region": {"startLine": 101}}}]}, {"ruleId": "MINED116", "level": "error", "message": {"text": "Workflow uses `secrets.CODECOV_TOKEN` on a `pull_request` trigger"}, "properties": {"repobilityId": 77651, "scanner": "repobility-supply-chain", "fingerprint": "e2e17774b37935e5a2b867f620ae74591caf72eb7b221a5764f4674646ffd9d3", "category": "dependency", "severity": "critical", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-pull-request-secrets", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|e2e17774b37935e5a2b867f620ae74591caf72eb7b221a5764f4674646ffd9d3"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/actions.yml"}, "region": {"startLine": 85}}}]}, {"ruleId": "MINED116", "level": "error", "message": {"text": "Workflow uses `secrets.CODECOV_TOKEN` on a `pull_request` trigger"}, "properties": {"repobilityId": 77643, "scanner": "repobility-supply-chain", "fingerprint": "529ac615ebf3b7a56e2328dcf2e0d3ae27b501a907af65ad646a5d20b964c0a4", "category": "dependency", "severity": "critical", "confidence": 0.9, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "gha-pull-request-secrets", "owasp": "A08:2021", "cwe_ids": ["CWE-829"], "languages": ["yaml"], "observations_count": 0}, "scanner": "repobility-supply-chain", "correlation_key": "fp|529ac615ebf3b7a56e2328dcf2e0d3ae27b501a907af65ad646a5d20b964c0a4"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": ".github/workflows/tpu_tests.yml"}, "region": {"startLine": 86}}}]}, {"ruleId": "MINED107", "level": "error", "message": {"text": "Missing import: `array` used but not imported"}, "properties": {"repobilityId": 77607, "scanner": "repobility-ast-engine", "fingerprint": "c436bd205781803f32eb01c2d2acea3f6ce98340e8a67fc2c9e5c27758f5f046", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "missing-import-python", "owasp": "A06:2021", "cwe_ids": ["CWE-1075"], "languages": ["python"], "observations_count": 2192}, "scanner": "repobility-ast-engine", "correlation_key": "fp|c436bd205781803f32eb01c2d2acea3f6ce98340e8a67fc2c9e5c27758f5f046"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/src/trainers/data_adapters/array_slicing.py"}, "region": {"startLine": 253}}}]}, {"ruleId": "MINED107", "level": "error", "message": {"text": "Missing import: `array` used but not imported"}, "properties": {"repobilityId": 77589, "scanner": "repobility-ast-engine", "fingerprint": "9f5403da7a9f54b5d2f641ed95f33de91bfb3c35bac20e78412ebeedaa60d54d", "category": "quality", "severity": "critical", "confidence": 1.0, "triageState": "open", "verdict": "", "isResolved": false, "reason": "", "evidence": {"mined": true, "mining": {"slug": "missing-import-python", "owasp": "A06:2021", "cwe_ids": ["CWE-1075"], "languages": ["python"], "observations_count": 2192}, "scanner": "repobility-ast-engine", "correlation_key": "fp|9f5403da7a9f54b5d2f641ed95f33de91bfb3c35bac20e78412ebeedaa60d54d"}}, "locations": [{"physicalLocation": {"artifactLocation": {"uri": "keras/src/initializers/random_initializers_test.py"}, "region": {"startLine": 143}}}]}]}]}