← Back to scan
File as GitHub Issue repo: pathwaycom/pathway

Push this scan report to pathwaycom/pathway

Click the green button below to open GitHub’s new-issue form, pre-filled with the report title, summary table, top findings, and an embedded score-card image. No authentication needed — you review on GitHub before submitting. Repobility is credited as the scanner.

Embedded score card image

This image will render at the top of the issue body. Hosted on Repobility, refreshes automatically after re-scans.

Repobility score card

Issue title

Mutable default argument in `send_post_request` (dict)

Curate findings to include

Pick exactly which findings appear in the issue body. By default the top 5 are included. Uncheck noise, check what matters.

Top 5 (default)
Severity Rule Title File:line
MED MINED109 [MINED109] Mutable default argument in `__call__` (dict): `def __call__(... = []/{}/set()… python/pathway/xpacks/llm/parsers.py:297
MED MINED109 [MINED109] Mutable default argument in `__wrapped__` (dict): `def __wrapped__(... = []/{}… python/pathway/xpacks/llm/parsers.py:239
MED MINED109 [MINED109] Mutable default argument in `__init__` (dict): `def __init__(... = []/{}/set()… python/pathway/xpacks/llm/parsers.py:112
MED MINED109 [MINED109] Mutable default argument in `list_documents` (list): `def list_documents(... =… python/pathway/xpacks/llm/question_answ…:1214
MED MINED109 [MINED109] Mutable default argument in `send_post_request` (dict): `def send_post_request… python/pathway/xpacks/llm/question_answ…:1061
MED MINED109 [MINED109] Mutable default argument in `parse_image_details` (dict): `def parse_image_det… python/pathway/xpacks/llm/_parser_utils…:227
MED MINED109 [MINED109] Mutable default argument in `chunk` (dict): `def chunk(... = []/{}/set())` — P… python/pathway/xpacks/llm/splitters.py:229
MED MINED109 [MINED109] Mutable default argument in `chunk` (dict): `def chunk(... = []/{}/set())` — P… python/pathway/xpacks/llm/splitters.py:173
MED MINED109 [MINED109] Mutable default argument in `chunk` (dict): `def chunk(... = []/{}/set())` — P… python/pathway/xpacks/llm/splitters.py:156
MED MINED109 [MINED109] Mutable default argument in `chunk` (dict): `def chunk(... = []/{}/set())` — P… python/pathway/xpacks/llm/splitters.py:80
MED MINED109 [MINED109] Mutable default argument in `_eval_args_kwargs` (dict): `def _eval_args_kwargs… python/pathway/internals/expression_pri…:136
MED MINED109 [MINED109] Mutable default argument in `geolocate_external` (list): `def geolocate_extern… examples/projects/twitter/services/path…:49
MED MINED109 [MINED109] Mutable default argument in `add_distance_and_buckets` (list): `def add_distan… examples/projects/twitter/services/path…:65
MED MINED109 [MINED109] Mutable default argument in `run_sql` (list): `def run_sql(... = []/{}/set())`… examples/projects/twitter/services/api/…:25
MED MINED109 [MINED109] Mutable default argument in `run_with_querying` (dict): `def run_with_querying… examples/projects/option-greeks/queryin…:68
MED MINED109 [MINED109] Mutable default argument in `a_list_documents` (list): `def a_list_documents(.… integration_tests/rag_evals/connector.py:69
MED MINED109 [MINED109] Mutable default argument in `list_documents` (list): `def list_documents(... =… integration_tests/rag_evals/connector.py:55
MED MINED109 [MINED109] Mutable default argument in `a_send_post_request` (dict): `def a_send_post_req… integration_tests/rag_evals/connector.py:7
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… integration_tests/rag_evals/experiment.…:34
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… integration_tests/db_connectors/utils.py:631
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… integration_tests/db_connectors/utils.py:1307
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… integration_tests/db_connectors/utils.py:858
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… integration_tests/s3/base.py:58
MED SEC015 [SEC015] Insecure Randomness for Security: Weak PRNG used in security-sensitive context. … python/pathway/internals/udfs/caches.py:60
MED SEC127 [SEC127] AI agent stub — TODO: implement / pass placeholder body: Function body left as T… python/pathway/stdlib/ml/hmm.py:211
MED SEC127 [SEC127] AI agent stub — TODO: implement / pass placeholder body: Function body left as T… python/pathway/internals/thisclass.py:126
MED SEC127 [SEC127] AI agent stub — TODO: implement / pass placeholder body: Function body left as T… python/pathway/internals/interactive.py:174
MED SEC134 [SEC134] AI scaffold leftover — Lorem ipsum / example.com / John Doe in code: Lorem ipsum… python/pathway/internals/config.py:184
MED SEC045 [SEC045] eval()/exec() on stored or user-supplied data: eval() and exec() on data — even … python/pathway/web_dashboard/db.py:65
MED SEC045 [SEC045] eval()/exec() on stored or user-supplied data: eval() and exec() on data — even … python/pathway/internals/column_propert…:24
MED SEC007 [SEC007] Unsafe Deserialization: Unsafe deserialization can execute arbitrary code. python/pathway/stdlib/ml/hmm.py:200
MED SEC007 [SEC007] Unsafe Deserialization: Unsafe deserialization can execute arbitrary code. python/pathway/internals/yaml_loader.py:151
MED SEC007 [SEC007] Unsafe Deserialization: Unsafe deserialization can execute arbitrary code. examples/projects/twitter/services/path…:69
MED SEC123 [SEC123] Production stack trace / debug output exposed: Debug mode left on in production … docs/2.developers/4.user-guide/30.data-…:95
MED DKR003 Dockerfile base image uses the latest tag examples/projects/web-scraping/Dockerfi…:1
MED DKR003 Dockerfile base image uses the latest tag examples/projects/twitter/services/fron…:1
MED AUC001 [AUC001] No Repobility access matrix policy found: The repository uses web/API frameworks… —
MED MINED124 [MINED124] requirements.txt: `pathway` has no version pin: Unpinned pip requirement means… examples/projects/spark-data-preparatio…:1
MED MINED124 [MINED124] requirements.txt: `pandas` has no version pin: Unpinned pip requirement means … examples/projects/aws-fargate-deploy/re…:3
MED MINED124 [MINED124] requirements.txt: `deltalake` has no version pin: Unpinned pip requirement mea… examples/projects/aws-fargate-deploy/re…:2
MED MINED124 [MINED124] requirements.txt: `boto3` has no version pin: Unpinned pip requirement means e… examples/projects/aws-fargate-deploy/re…:1
MED MINED124 [MINED124] requirements.txt: `uvicorn` has no version pin: Unpinned pip requirement means… examples/projects/option-greeks/require…:9
MED MINED124 [MINED124] requirements.txt: `streamlit` has no version pin: Unpinned pip requirement mea… examples/projects/option-greeks/require…:8
MED MINED124 [MINED124] requirements.txt: `pydantic` has no version pin: Unpinned pip requirement mean… examples/projects/option-greeks/require…:7
MED MINED124 [MINED124] requirements.txt: `fastapi` has no version pin: Unpinned pip requirement means… examples/projects/option-greeks/require…:6
MED MINED124 [MINED124] requirements.txt: `python-dotenv` has no version pin: Unpinned pip requirement… examples/projects/option-greeks/require…:5
MED MINED124 [MINED124] requirements.txt: `pathway` has no version pin: Unpinned pip requirement means… examples/projects/option-greeks/require…:4
MED MINED124 [MINED124] requirements.txt: `scipy` has no version pin: Unpinned pip requirement means e… examples/projects/option-greeks/require…:3
MED MINED124 [MINED124] requirements.txt: `pandas` has no version pin: Unpinned pip requirement means … examples/projects/option-greeks/require…:2
MED MINED124 [MINED124] requirements.txt: `databento` has no version pin: Unpinned pip requirement mea… examples/projects/option-greeks/require…:1
MED MINED124 [MINED124] requirements.txt: `python-dotenv` has no version pin: Unpinned pip requirement… examples/projects/ag2-multiagent-rag/re…:4
MED MINED124 [MINED124] requirements.txt: `requests` has no version pin: Unpinned pip requirement mean… examples/projects/ag2-multiagent-rag/re…:3
MED MINED124 [MINED124] requirements.txt: `pathway` has no version pin: Unpinned pip requirement means… examples/projects/ag2-multiagent-rag/re…:1
MED MINED124 [MINED124] requirements.txt: `azure-mgmt-containerinstance` has no version pin: Unpinned … examples/projects/azure-aci-deploy/requ…:5
MED MINED124 [MINED124] requirements.txt: `azure-identity` has no version pin: Unpinned pip requiremen… examples/projects/azure-aci-deploy/requ…:4
MED MINED124 [MINED124] requirements.txt: `pandas` has no version pin: Unpinned pip requirement means … examples/projects/azure-aci-deploy/requ…:3
MED MINED124 [MINED124] requirements.txt: `deltalake` has no version pin: Unpinned pip requirement mea… examples/projects/azure-aci-deploy/requ…:2
MED MINED124 [MINED124] requirements.txt: `boto3` has no version pin: Unpinned pip requirement means e… examples/projects/azure-aci-deploy/requ…:1
MED MINED124 [MINED124] requirements.txt: `langchain-community` has no version pin: Unpinned pip requi… integration_tests/rag_evals/requirement…:8
MED MINED124 [MINED124] requirements.txt: `langchain-core` has no version pin: Unpinned pip requiremen… integration_tests/rag_evals/requirement…:7
MED MINED124 [MINED124] requirements.txt: `langchain-openai` has no version pin: Unpinned pip requirem… integration_tests/rag_evals/requirement…:6
MED MINED124 [MINED124] requirements.txt: `seaborn` has no version pin: Unpinned pip requirement means… integration_tests/rag_evals/requirement…:3
MED DKR002 Compose service `otel-collector` image has no explicit tag examples/projects/monitoring/docker-com…:1
MED DKR002 Compose service `mongodb` image has no explicit tag examples/projects/debezium-mongodb-exam…:2
MED DKR002 Dockerfile base image has no explicit tag examples/projects/twitter/services/geoc…:1
MED DKC015 Database service has no healthcheck examples/projects/realtime-log-monitori…:38
MED DKC015 Database service has no healthcheck examples/projects/debezium-postgres-exa…:2
MED DKC016 App service does not wait for database health examples/projects/debezium-mongodb-exam…:10
MED DKR009 Dockerfile separates apt update from install examples/projects/spark-data-preparatio…:7
MED DKR018 Database dump or local database file is included in Docker build context .dockerignore
MED DKR001 Docker final stage has no non-root USER examples/projects/web-scraping/Dockerfi…:1
MED DKR001 Docker final stage has no non-root USER examples/projects/twitter/services/twee…:1
MED DKR001 Docker final stage has no non-root USER examples/projects/twitter/services/path…:1
MED DKR001 Docker final stage has no non-root USER examples/projects/twitter/services/fron…:15
MED DKR001 Docker final stage has no non-root USER examples/projects/twitter/services/data…:1
MED DKR001 Docker final stage has no non-root USER examples/projects/twitter/services/api/…:1
MED DKR001 Docker final stage has no non-root USER examples/projects/spark-data-preparatio…:1
MED DKR001 Docker final stage has no non-root USER examples/projects/realtime-log-monitori…:1
MED DKR001 Docker final stage has no non-root USER examples/projects/realtime-log-monitori…:1
MED DKR001 Docker final stage has no non-root USER examples/projects/kafka-ETL/producer-sr…:1
MED DKR001 Docker final stage has no non-root USER examples/projects/kafka-ETL/pathway-src…:1
MED DKR001 Docker final stage has no non-root USER examples/projects/from_jupyter_to_deplo…:2
MED DKR001 Docker final stage has no non-root USER examples/projects/debezium-postgres-exa…:1
MED DKR001 Docker final stage has no non-root USER examples/projects/debezium-mongodb-exam…:1
MED DKR001 Docker final stage has no non-root USER examples/projects/debezium-mongodb-exam…:1
MED DKR001 Docker final stage has no non-root USER examples/projects/best-movies-example/r…:1
MED DKR001 Docker final stage has no non-root USER examples/projects/best-movies-example/r…:1
MED DKR001 Docker final stage has no non-root USER examples/projects/best-movies-example/k…:1
MED DKR001 Docker final stage has no non-root USER examples/projects/best-movies-example/k…:1
MED DKR001 Docker final stage has no non-root USER examples/projects/azure-aci-deploy/Dock…:1
MED DKR001 Docker final stage has no non-root USER examples/projects/aws-fargate-deploy/Do…:1
MED WEB003 Public web service has no security.txt .well-known/security.txt
MED DKR014 Dockerfile copies broad context with incomplete .dockerignore examples/projects/web-scraping/Dockerfi…:8
MED DKR014 Dockerfile copies broad context with incomplete .dockerignore examples/projects/twitter/services/fron…:12
MED DKR004 Docker build secret exposed through ARG examples/projects/twitter/services/fron…:6
MED DKR014 Dockerfile copies broad context with incomplete .dockerignore examples/projects/from_jupyter_to_deplo…:5
MED DKC013 Database service has no persistent data volume examples/projects/realtime-log-monitori…:20
MED DKC013 Database service has no persistent data volume examples/projects/realtime-log-monitori…:16
MED DKC013 Database service has no persistent data volume examples/projects/realtime-log-monitori…:10
MED DKC013 Database service has no persistent data volume examples/projects/realtime-log-monitori…:6
MED DKC013 Database service has no persistent data volume examples/projects/kafka-ETL/docker-comp…:12
MED DKC013 Database service has no persistent data volume examples/projects/kafka-ETL/docker-comp…:6
MED DKC013 Database service has no persistent data volume examples/projects/from_jupyter_to_deplo…:7
MED DKC013 Database service has no persistent data volume examples/projects/from_jupyter_to_deplo…:3
MED DKC013 Database service has no persistent data volume examples/projects/debezium-postgres-exa…:18
MED DKC013 Database service has no persistent data volume examples/projects/debezium-postgres-exa…:13
MED DKC013 Database service has no persistent data volume examples/projects/debezium-mongodb-exam…:21
MED DKC013 Database service has no persistent data volume examples/projects/debezium-mongodb-exam…:16
MED DKC013 Database service has no persistent data volume examples/projects/best-movies-example/k…:12
MED DKC013 Database service has no persistent data volume examples/projects/best-movies-example/k…:6
MED AUC012 [AUC012] FastAPI interactive docs may be exposed by framework defaults: FastAPI exposes /… —
MED DKC007 Compose service contains a literal secret environment value examples/projects/realtime-log-monitori…:38
MED DKC007 Compose service contains a literal secret environment value examples/projects/debezium-postgres-exa…:2
LOW AIC003 Duplicated implementation block across source files python/pathway/internals/__init__.py:130
LOW AIC003 Duplicated implementation block across source files external/timely-dataflow/timely/src/dat…:27
LOW AIC003 Duplicated implementation block across source files external/timely-dataflow/communication/…:126
LOW AIC003 Duplicated implementation block across source files external/differential-dataflow/tpchlike…:43
LOW AIC003 Duplicated implementation block across source files external/differential-dataflow/tpchlike…:42
LOW AIC003 Duplicated implementation block across source files external/differential-dataflow/tpchlike…:43
LOW AIC003 Duplicated implementation block across source files external/differential-dataflow/tpchlike…:50
LOW AIC003 Duplicated implementation block across source files external/differential-dataflow/tpchlike…:35
LOW AIC003 Duplicated implementation block across source files external/differential-dataflow/tpchlike…:20
LOW DKC015 Database service has no healthcheck examples/projects/realtime-log-monitori…:20
LOW DKC015 Database service has no healthcheck examples/projects/realtime-log-monitori…:16
LOW DKC015 Database service has no healthcheck examples/projects/realtime-log-monitori…:10
LOW DKC015 Database service has no healthcheck examples/projects/realtime-log-monitori…:6
LOW DKC015 Database service has no healthcheck examples/projects/kafka-ETL/docker-comp…:12
LOW DKC015 Database service has no healthcheck examples/projects/kafka-ETL/docker-comp…:6
LOW DKC015 Database service has no healthcheck examples/projects/from_jupyter_to_deplo…:7
LOW DKC015 Database service has no healthcheck examples/projects/from_jupyter_to_deplo…:3
LOW DKC015 Database service has no healthcheck examples/projects/debezium-postgres-exa…:18
LOW DKC015 Database service has no healthcheck examples/projects/debezium-postgres-exa…:13
LOW DKC015 Database service has no healthcheck examples/projects/debezium-mongodb-exam…:21
LOW DKC015 Database service has no healthcheck examples/projects/debezium-mongodb-exam…:16
LOW DKC015 Database service has no healthcheck examples/projects/best-movies-example/k…:12
LOW DKC015 Database service has no healthcheck examples/projects/best-movies-example/k…:6
LOW DKR012 Dockerfile keeps pip download cache examples/projects/spark-data-preparatio…:9
LOW DKR011 Dockerfile installs recommended OS packages examples/projects/spark-data-preparatio…:8
LOW DKR012 Dockerfile keeps pip download cache examples/projects/realtime-log-monitori…:4
LOW DKR012 Dockerfile keeps pip download cache examples/projects/realtime-log-monitori…:3
LOW DKR012 Dockerfile keeps pip download cache examples/projects/realtime-log-monitori…:5
LOW DKR012 Dockerfile keeps pip download cache examples/projects/realtime-log-monitori…:4
LOW DKR012 Dockerfile keeps pip download cache examples/projects/realtime-log-monitori…:3
LOW DKR012 Dockerfile keeps pip download cache examples/projects/kafka-ETL/producer-sr…:3
LOW DKR012 Dockerfile keeps pip download cache examples/projects/kafka-ETL/pathway-src…:3
LOW DKR012 Dockerfile keeps pip download cache examples/projects/from_jupyter_to_deplo…:4
LOW DKR012 Dockerfile keeps pip download cache examples/projects/debezium-postgres-exa…:3
LOW DKR012 Dockerfile keeps pip download cache examples/projects/debezium-mongodb-exam…:3
LOW DKR012 Dockerfile keeps pip download cache examples/projects/debezium-mongodb-exam…:4
LOW DKR012 Dockerfile keeps pip download cache examples/projects/debezium-mongodb-exam…:3
LOW DKR012 Dockerfile keeps pip download cache examples/projects/best-movies-example/r…:3
LOW DKR012 Dockerfile keeps pip download cache examples/projects/best-movies-example/r…:3
LOW DKR012 Dockerfile keeps pip download cache examples/projects/best-movies-example/k…:3
LOW DKR012 Dockerfile keeps pip download cache examples/projects/best-movies-example/k…:3
LOW DKR012 Dockerfile keeps pip download cache examples/projects/azure-aci-deploy/Dock…:6
LOW DKR008 .dockerignore misses sensitive defaults .dockerignore
LOW DKR012 Dockerfile keeps pip download cache examples/projects/aws-fargate-deploy/Do…:6
LOW DKC016 App service does not wait for database health examples/projects/realtime-log-monitori…:32
LOW DKC016 App service does not wait for database health examples/projects/kafka-ETL/docker-comp…:38
LOW DKC016 App service does not wait for database health examples/projects/kafka-ETL/docker-comp…:31
LOW DKC016 App service does not wait for database health examples/projects/from_jupyter_to_deplo…:33
LOW DKC016 App service does not wait for database health examples/projects/from_jupyter_to_deplo…:24
LOW DKC016 App service does not wait for database health examples/projects/debezium-postgres-exa…:39
LOW DKC016 App service does not wait for database health examples/projects/debezium-mongodb-exam…:42
LOW DKC016 App service does not wait for database health examples/projects/best-movies-example/k…:38
LOW DKC016 App service does not wait for database health examples/projects/best-movies-example/k…:31
LOW DKC010 Compose service lacks no-new-privileges hardening examples/projects/realtime-log-monitori…:32
LOW DKC010 Compose service lacks no-new-privileges hardening examples/projects/realtime-log-monitori…:10
LOW DKC010 Compose service lacks no-new-privileges hardening examples/projects/realtime-log-monitori…:2
LOW DKC010 Compose service lacks no-new-privileges hardening examples/projects/realtime-log-monitori…:22
LOW DKC010 Compose service lacks no-new-privileges hardening examples/projects/realtime-log-monitori…:2
LOW DKC010 Compose service lacks no-new-privileges hardening examples/projects/monitoring/docker-com…:1
LOW DKC010 Compose service lacks no-new-privileges hardening examples/projects/kafka-ETL/docker-comp…:38
LOW DKC010 Compose service lacks no-new-privileges hardening examples/projects/kafka-ETL/docker-comp…:31
LOW DKC010 Compose service lacks no-new-privileges hardening examples/projects/from_jupyter_to_deplo…:33
LOW DKC010 Compose service lacks no-new-privileges hardening examples/projects/from_jupyter_to_deplo…:24
LOW DKC010 Compose service lacks no-new-privileges hardening examples/projects/debezium-postgres-exa…:39
LOW DKC010 Compose service lacks no-new-privileges hardening examples/projects/debezium-mongodb-exam…:42
LOW DKC010 Compose service lacks no-new-privileges hardening examples/projects/debezium-mongodb-exam…:10
LOW DKC010 Compose service lacks no-new-privileges hardening examples/projects/best-movies-example/r…:40
LOW DKC010 Compose service lacks no-new-privileges hardening examples/projects/best-movies-example/r…:32
LOW DKC010 Compose service lacks no-new-privileges hardening examples/projects/best-movies-example/k…:38
LOW DKC010 Compose service lacks no-new-privileges hardening examples/projects/best-movies-example/k…:31
LOW DKC006 Compose service does not declare a runtime user examples/projects/realtime-log-monitori…:32
LOW DKC006 Compose service does not declare a runtime user examples/projects/realtime-log-monitori…:10
LOW DKC006 Compose service does not declare a runtime user examples/projects/realtime-log-monitori…:2
LOW DKC006 Compose service does not declare a runtime user examples/projects/realtime-log-monitori…:22
LOW DKC006 Compose service does not declare a runtime user examples/projects/realtime-log-monitori…:2
LOW DKC006 Compose service does not declare a runtime user examples/projects/monitoring/docker-com…:1
LOW DKC006 Compose service does not declare a runtime user examples/projects/kafka-ETL/docker-comp…:38
LOW DKC006 Compose service does not declare a runtime user examples/projects/kafka-ETL/docker-comp…:31
LOW DKC006 Compose service does not declare a runtime user examples/projects/from_jupyter_to_deplo…:33
LOW DKC006 Compose service does not declare a runtime user examples/projects/from_jupyter_to_deplo…:24
LOW DKC006 Compose service does not declare a runtime user examples/projects/debezium-postgres-exa…:39
LOW DKC006 Compose service does not declare a runtime user examples/projects/debezium-mongodb-exam…:42
LOW DKC006 Compose service does not declare a runtime user examples/projects/debezium-mongodb-exam…:10
LOW DKC006 Compose service does not declare a runtime user examples/projects/best-movies-example/r…:40
LOW DKC006 Compose service does not declare a runtime user examples/projects/best-movies-example/r…:32
LOW DKC006 Compose service does not declare a runtime user examples/projects/best-movies-example/k…:38
LOW DKC006 Compose service does not declare a runtime user examples/projects/best-movies-example/k…:31
Reset to top 5 200 findings available (after auto-suppression of test files + won't-fix)

Issue body (markdown)

## Code-quality scan: `pathwaycom/pathway`

**Score: 75/100 (A-)**  ·  431 findings  ·  scanned 2026-06-05 09:09 UTC  ·  291,912 LOC

| Severity | Count |
|---|---|
| CRITICAL | 18 |
| HIGH | 104 |
| MEDIUM | 113 |
| LOW | 111 |

📊 [Full filterable report](https://repobility.com/scan/49132254-95b6-49b4-a4d1-8a5245f14672/)  ·  ![scorecard](https://repobility.com/scan/49132254-95b6-49b4-a4d1-8a5245f14672/report.png?v=1780650545-s2)

### Top findings

1. **MEDIUM** `MINED109` — Mutable default argument in `__call__` (dict)
   `python/pathway/xpacks/llm/parsers.py:297` · ✓ Repobility
2. **MEDIUM** `MINED109` — Mutable default argument in `__wrapped__` (dict)
   `python/pathway/xpacks/llm/parsers.py:239` · ✓ Repobility
3. **MEDIUM** `MINED109` — Mutable default argument in `__init__` (dict)
   `python/pathway/xpacks/llm/parsers.py:112` · ✓ Repobility
4. **MEDIUM** `MINED109` — Mutable default argument in `list_documents` (list)
   `python/pathway/xpacks/llm/question_answering.py:1214` · ✓ Repobility
5. **MEDIUM** `MINED109` — Mutable default argument in `send_post_request` (dict)
   `python/pathway/xpacks/llm/question_answering.py:1061` · ✓ Repobility

---

_Filed automatically. Close this issue if not useful — we won't refile. Full report: https://repobility.com/scan/49132254-95b6-49b4-a4d1-8a5245f14672/_
Megaproject â high spam risk
Could not determine 'pathwaycom/pathway' star count (GitHub API rate-limited or unreachable). When in doubt about repo size, prefer opening a focused PR or a discussion rather than an issue.
Already filed
304/444 findings (68%) on this scan are already flagged as test-file, won't-fix, or suppressed. The scan is too noisy to file as a single issue. Curate down to specific actionable findings, or address the FP source first.
I read the warnings â override Cancel

The button opens GitHubâs new-issue page in a new tab. You will see the title + body pre-filled â review, edit if you want, then click GitHubâs "Submit new issue" button. Repobility never posts anything on your behalf.

For real security findings on big repos: use the project's SECURITY.md or private advisory flow instead of a public issue.